{"report_id":"90fe00ca-f65c-4c8d-95ed-97ea1893eb8a","version":6,"status":"done","tags":[],"date":"2026-01-05T20:52:39Z","url":{"schema":"http","addr":"xuploads.com","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":0,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"xuploads.com/","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"title":"XXX Uploads Free Porn","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xuploads.com","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":0,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-09T20:52:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"usrpubtrk.com","ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-16","domain_rank":6824,"first_seen":"2025-06-17T13:34:00.105327Z","last_seen":"2026-01-01T07:24:01.334994Z","alert_count":5,"request_count":1,"received_data":534,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"use.fontawesome.com","ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-01-04T23:43:53.267493Z","alert_count":0,"request_count":1,"received_data":55806,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":3,"received_data":15821,"sent_data":1384,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"emoji-css.afeld.me","ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-09-29","domain_rank":1354730,"first_seen":"2019-11-11T09:16:53Z","last_seen":"2025-12-27T22:18:22.57055Z","alert_count":0,"request_count":1,"received_data":554877,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":3,"received_data":104617,"sent_data":1663,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vidwestxyz.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-05","domain_rank":251388,"first_seen":"2025-04-08T22:21:41.949384Z","last_seen":"2026-01-03T03:00:20.314005Z","alert_count":0,"request_count":1,"received_data":6052688,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"xuploads.com","ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":1948579,"first_seen":"2016-06-17T10:26:11Z","last_seen":"2025-12-27T22:18:22.666766Z","alert_count":0,"request_count":85,"received_data":3686975,"sent_data":43739,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"acscdn.com","ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-05","domain_rank":18769,"first_seen":"2020-05-06T08:07:13Z","last_seen":"2025-12-31T07:12:02.732329Z","alert_count":3,"request_count":3,"received_data":576866,"sent_data":1241,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-04T22:27:18.120727Z","alert_count":0,"request_count":3,"received_data":5006,"sent_data":1431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"adexchangeclear.com","ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-27","domain_rank":24943,"first_seen":"2025-07-16T08:40:02.47428Z","last_seen":"2025-12-30T12:40:20.855851Z","alert_count":3,"request_count":3,"received_data":9764,"sent_data":1921,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48250370347c7f2d054321e03c8e394f","sha1":"dce1356dc4ee7b2b650fc3b2fa5c75e2de60c840","sha256":"e3fd6b9ca5d9b8d65c6330aa94f08f24cd2b59e1834cd7c960ea6ea3417acf52","sha512":"37527c5fc8159f26120d652f8477a70703eb6fb1f30126ceb66f9a58e05ddc365a1cb34b82b5bdcb24b694036bfe2a7c3052a50d883b956cccf2e167a7188ae7","ssdeep":"3072:ZcmbG7ee6cW7n8GrMN1HDxlfm1VeDbclbsZpyQ:y/FW78GrufmyclbsZpyQ","tlshash":"f4f395083a9455037b4b6fbb271774e5e9062c4ab894099eb254bc74e2836b3fff1136","size":171200,"data":"","first_seen":"2025-12-17T14:33:37.34138Z","last_seen":"2026-01-13T14:12:13.867658Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ffba22e34c0e97a34f6e926dc22db795","sha1":"706864c718b5295fecf42234da3e59efe3d8b911","sha256":"b29d502120fc5b0f1776c9fd51b337b660125cdc4aa4b55fe172c9f279f30f31","sha512":"decd04efe42f0da8d79b398c378316e82f606ab3c5b9f3c797824090882716d6083191b20dd9ce2314c16822d7dc132cbe0d8eaaf26a46684e229f11bab204aa","ssdeep":"","tlshash":"92a022aa32eaa03c2033200c0a8ccc38aec8020f0b00acc03acc00a00f280880022880","size":64,"data":"","first_seen":"2025-11-04T03:33:49.071697Z","last_seen":"2026-01-05T20:52:48.411367Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45b3211ad74276c2435ddb61fb414b77","sha1":"db68ac0e997de5289b7556af8c2d3e132638725b","sha256":"5a6bf5fcd14ae97f13c8299987c2bfb9a99ec9e05b87bbb93bbac9f66c05fd5d","sha512":"546e21bb8052014792d5edfeea63c6634b864a164c1d972d3e2d69b243e2a3b02452648785283c462650e76050bf486c5360d7ac683cace7f011c020faee2f4a","ssdeep":"","tlshash":"7a41dd11f1650c2d06e625a3af8362d670643003bc18752c7f56470c0fbeb5ea1faaec","size":2012,"data":"","first_seen":"2024-10-14T23:54:22.753637Z","last_seen":"2026-01-05T20:52:48.411859Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/videoSliderAlt.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7fbb643bbc125885838c6a03fe395b5","sha1":"bc319489ef9d835e527afc84f477f4597338d2b9","sha256":"a5bf9cf57e3f7a77363b4abe6aa2d88869d2b95479f7a8297705432a561c5a18","sha512":"940686792f738b51d3e0df1ab009337451f54d9694c367283cf86521b6e91683695d0a315be512f4ec0190dfc3b0cd75a2666fd25f71e3e223a00f1e5952fcd4","ssdeep":"6144:gYTG6CgGLqW+VhoQiyGxjvo6OWeMpBiFQzMbkQBLIM6B35atGM:5Bg+VhoQxR6OWeM1zqkmf6B35Ad","tlshash":"b374240577c06589139b2f27335bb0daf4852cad748e686ea7817c25904a937fde8b33","size":346635,"data":"","first_seen":"2025-12-18T15:59:57.714303Z","last_seen":"2026-01-13T14:12:13.863548Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/suv5.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a3d5aa49ebce13a6399e703a116ec9b","sha1":"a52991635eddd4f54da92d657a36af619b88ef47","sha256":"8924f212e1f3553244a9eb9e01a0cf05c585ea75ecf60002b0785b69553d0fcd","sha512":"ff21d8769d8397a2998058840da6e4e78672c7e489443077ef1341f0d50a1a9799e31d98ab2b763f3400d43da6d7fcaacfec56ea675639b1df375c92f6ed6953","ssdeep":"768:7Oa8VJZShPhDL2i1Ox0O2o1wFfLen1xje/EO6BEAi7y1qIV7qp258aeraeq0CmvK:aa89aDfO6lenZ0CmgPTueNWjk","tlshash":"d64385553e80461733098ebb3a13f8e6e858387a6489459ef608bd487287177f6fc772","size":56337,"data":"","first_seen":"2025-12-17T14:33:37.346036Z","last_seen":"2026-01-13T14:12:13.861788Z","times_seen":342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/rect.js","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8fe18c5c852abe30ac6f2902ecec207","sha1":"287e674b825d7e43ec4ecb806a5018d8604494a3","sha256":"788119f84df20b59212096973e4a09b353a3bb6aef977cac599d2e32477fae84","sha512":"bfa38adc2d743a37471370e7024a7159e5649876538c27421bbaebe923576f671a33ee789c1dd0d911a1954e70c53f2290b12f68c5a49d573bc5d0f0a5ade2f4","ssdeep":"","tlshash":"2001615d14f524745f6335785eff613c60352683a8878f227a1d4e422f7421fd595d88","size":808,"data":"","first_seen":"2025-12-27T22:18:28.812186Z","last_seen":"2026-01-05T20:52:48.311649Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/rums.js","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54002d1f815f7555da35b994d771b5cd","sha1":"ee59dc46a1cd507aa19088a668a7ed4adbab5d5d","sha256":"ffdb85dac66ec063278e386c7e1f569d0b6e127bfcd7936d1a31544d0426e055","sha512":"4338efd4bd99d3241a9807c0d2d85c1e3af5fa1e8e84c2f508c51e6eb0dbb093004cc09f27f9e624a470957aa2891552abb478c259bc2d348975a31b4b998f46","ssdeep":"","tlshash":"6351522564a5502f6237135aaf7e8b9db6327c01714bac39c22d52f13490c53db4ecba","size":2675,"data":"","first_seen":"2025-11-23T23:22:37.306537Z","last_seen":"2026-01-05T20:52:48.374687Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/496.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/496.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13543\r\nlast-modified: Wed, 08 Jan 2025 09:27:14 GMT\r\netag: \"677e44f2-34e7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13543,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 276x240, components 3","md5":"ccdcb1337283d0127a2b643446f41044","sha1":"4dc362d779f56511dd46bbe1c27d8128663216eb","sha256":"74f9eff2547f7057968f0064ed00534350f11b15db7faba861828c0333686030","sha512":"f6eb9ec7c851d1b3bf817b9257f2b1c1b67128e5083946a3b14f1ef9514c66302390eba5cb1093244354ef98f5fdd8ecdee99826d7e2325e742a3980b4fe0955","ssdeep":"384:dd/55WIws4LIkGqEuL/8yqcLOQLlV97E1bJ:vZwPIcFqgOQLiBJ","tlshash":"7952be603f338b58d95ff63c5642871a36a1b19b5c75e3ad421291f4cb800feaeeb449","first_seen":"2025-12-27T22:18:28.745255Z","last_seen":"2026-01-05T20:52:48.285567Z","times_seen":2,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":441,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/533.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/533.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45652\r\nlast-modified: Thu, 29 May 2025 07:23:08 GMT\r\netag: \"68380b5c-b254\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45652,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"33249e97cfc307d925db1d01ca7fef90","sha1":"5abf992b4d8c41423e72561a88ebea9730236dc0","sha256":"43f193e3c815fadaca5c5eab2afb0db538bc2da8a749156ca971bee94510eda4","sha512":"a947e847b85e65fecb9401138449afe153e465e11f80e307c378ce7fa64f3abb1010b909310543c209a272b11ae41a19e7ff17195eeb99478656133706761d08","ssdeep":"768:pFVKd6Q7libzNTSPNfhwaEH4b2HQstDs/fZm3qXTppt8psJGIajTMxjy:NKd3lQg1eEsrmfUaXNv8pc4vMxe","tlshash":"802302162835bbdffe3101018842caaa53df66923994f24b1391e1adfbb852d0487e75","first_seen":"2025-12-27T22:18:28.735114Z","last_seen":"2026-01-05T20:52:48.28765Z","times_seen":2,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":451,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/696.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/696.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25850\r\nlast-modified: Wed, 26 Nov 2025 20:32:05 GMT\r\netag: \"692763c5-64fa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25850,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 6960x6943, segment length 16, baseline, precision 8, 300x200, components 3","md5":"8ae1a253c0114ddc6fb2789c15247d77","sha1":"2d6034bf12a667d3a6785309cd78f1cc77a99ac7","sha256":"5f348ad6880bfa437ebd17a16e3521526fcb5bc515937f4710cb96254f3cbcd9","sha512":"92a62c6c39422e52e2a2df41a2bf873aab8c0e362ae5ff28129a79e35cbe099595d3c9d8d3140ec507255636cdf224b8e2d969f25292ca2870066fb944505737","ssdeep":"768:GdHn4QKwE9snPUMrmadlSaUHmVxV3quTsacwEjrq:GdH4Q/ioBCadlSaUHkquTsacwt","tlshash":"87c2e1e244aafe01d9c9dc697b3c8b78d02298912870b3ac518a3cfdf51e7c14353997","first_seen":"2025-12-27T22:18:28.768608Z","last_seen":"2026-01-05T20:52:48.288631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":596,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/488.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/488.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11442\r\nlast-modified: Wed, 08 Jan 2025 09:27:04 GMT\r\netag: \"677e44e8-2cb2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11442,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 194x240, components 3","md5":"a6fa95c0b16f14a7a91a4075a2bc6f15","sha1":"c998caac9beb07c65979413852b1cf967fe3ea67","sha256":"e432a9fa60412bc5efad5e8282e3117b79c388a63ee36685f3cd213fb1a7d431","sha512":"bdf1b4c764f86754152ce6906688e5c423095670eff763dd41d8e592c20c77fe444264138cc751285a2578ad0d4b69194b92c609e529a95a9e7d47fe80553cfa","ssdeep":"192:WLgM8z6eVSOjHrQzB8+Y7PwE6GFFba5HI/n/X3sghJ0mWScmLLHT79meaRZXIb9:4Ry6egCHrQzB8T7PwE6GFFbeHI/v7j0I","tlshash":"7c32c08c5b0a767ee7af59bc6a61b9064840cc538f651879032c531e142fc7138cd9ab","first_seen":"2025-12-27T22:18:28.801802Z","last_seen":"2026-01-05T20:52:48.290146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":606,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Playfair+Display\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:14.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Playfair+Display\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuploads.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 20:52:15 GMT\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1710,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"aa6d8dfe7b4e36f00069b988e7187bca","sha1":"3a30af41a8da42e6030edf3d29a119bc27b7242e","sha256":"585212db740439ec3d0adc9f0288abed6d4ec5e16bda754dd6146e0ff9ded25b","sha512":"9d30f622f4d57896ba03b02d97eefe7bf253fc9c76b5b9365514f6a13eab14c2041e6967865064c71f4a8729be90d8892c008202f44831e5d5fceed71f475377","ssdeep":"","tlshash":"f731dee1055ba21097435cc313cfbf22596e61103085d27d6ffe198cac5fd26a268f0e","first_seen":"2025-09-12T00:37:13.461031Z","last_seen":"2026-04-06T01:29:55.218297Z","times_seen":805,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":346,"dns":1,"connect":27,"send":0,"wait":33,"receive":0,"ssl":369},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/578.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/578.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30324\r\nlast-modified: Thu, 29 May 2025 07:27:05 GMT\r\netag: \"68380c49-7674\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30324,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 300x200, components 3","md5":"9060f4ec051068cc4d37c550101249ea","sha1":"001a87785245161493cb81b015e76dcf4c919d00","sha256":"965bfb7bfea64090329c084a5ede88055c39c9c859675c78be20945649ca66a4","sha512":"09bb7a558bb3f9a0dcad3ea24432fad79eada115354c6a722b335cef8416c2f2a1c2396edb48d9aa0695fc2ae4d7fa729d90af5dc89a25cc9fe743a467bb2b85","ssdeep":"768:Yry/oody5zR8an+T0F+Q1OigTxSrhdTSLdhc2yNF:YrHLBnIu+QYTxzdhc2YF","tlshash":"6ed2e18266b88ea4b946f042d07fbbcd9644ee939d0437d19695c448fa0dec1f09b558","first_seen":"2025-12-27T22:18:28.713173Z","last_seen":"2026-01-05T20:52:48.291455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/439.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/439.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3664\r\nlast-modified: Fri, 27 Sep 2024 10:58:06 GMT\r\netag: \"66f68fbe-e50\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3664,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 135x240, components 3","md5":"18da881720ac412d17b3f2c8330649c3","sha1":"7c4b8e3c569cd7ee55ad3aa33efa18d9c5bddc1b","sha256":"db1b3ed030e5d076fefe42dc3798a5e627178fb904960d1c55a895b223738ac9","sha512":"2460d355a049ff0a37eb922bc7c7ecc2d4f4d43a4f67641edfffa3c2e86432592289df7f893efdaa369e6616fbd33a99ff9d49aec06c7c4bdaa9269b48922e2d","ssdeep":"","tlshash":"6571099579820ededdbeddba5ac6800ae106d092ef83f53e2c415da4f045fcc4322361","first_seen":"2024-10-14T23:54:22.59377Z","last_seen":"2026-01-05T20:52:48.292665Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":589,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/489.gif","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/489.gif HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/gif\r\ncontent-length: 241061\r\nlast-modified: Wed, 08 Jan 2025 09:27:06 GMT\r\netag: \"677e44ea-3ada5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":241061,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 150","md5":"4a4a98fb692f2753d4491d22338d2d72","sha1":"b7efe0967e080b814fe30acbb3a1a327eb0e8bad","sha256":"32b343fa878892c1513fd1b9cd6703659a37e1a01d6d7d36b4091d82e528ca52","sha512":"1bc41a9ea85a9f69f8b8e2415608c841cc86324656213caf2d4be082e9c4aeb4b9f25b72c343187fd7c7032e920bbb78e9f247b84a17d5af06425b2ae7e4415c","ssdeep":"6144:z7dIP6KtIQU1pnBZnW5w67BrLc2Ol5KgKJ0OEA:VStTsBZTyA2ODk0U","tlshash":"ff3422e685f06d613e4ce098844fa06dcd678c3aa58e7bad3fe838509c640fa58543df","first_seen":"2025-12-27T22:18:28.779816Z","last_seen":"2026-01-05T20:52:48.293662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":767,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/493.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/493.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6492\r\nlast-modified: Wed, 08 Jan 2025 09:27:11 GMT\r\netag: \"677e44ef-195c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6492,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x212, components 3","md5":"40fb806b64933b2442d8e7a2f46ed949","sha1":"8bca2e3755fe8dbafe63ea7b930041d490df3aff","sha256":"ca1e6e1a35520f7cdf4f8ca75dff0542a7d98f3ce52effe7ee7466f575595b32","sha512":"9d16bb0719a086c332040dc5f7acc7d2bedba97d8e38cea7484a0ca0e2b8e77a4a82b778e7dd2b5d5a57bea555405a3f89fdedf5906a7d8f87dae4d1a72eb2a8","ssdeep":"192:mte80Qn34kfgMNADwtqUDhT/v3+vKw1eB8Mzm0pP:nqPfgMqDwthhP+beB8qXP","tlshash":"f8d18d4bbc1dc27abb016d3fb7ad21758e5324191a526e3ab2a569b4c7f0eb0d805313","first_seen":"2025-12-27T22:18:28.68274Z","last_seen":"2026-01-05T20:52:48.294669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":989,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":608,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/468.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/468.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10869\r\nlast-modified: Wed, 09 Oct 2024 13:25:04 GMT\r\netag: \"67068430-2a75\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10869,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 240x180, components 3","md5":"902a5c29864958036d7f9bbef40a5301","sha1":"332308f9e07c98e8edb137c388c1fb274c53c86c","sha256":"de49bb5ad2fe43a84cdcd02abe0251ef1bda3c15fe8850765937e07758243c0b","sha512":"613d506291e7dda73667bdf82eef2958e50734c92471d04388b9515332b8032b07b7f53d00654fa3acf7c5f9699369e9c4a434acac90216a310da75687e82059","ssdeep":"192:0EWg+2W5YQbdi7CnrdqFXPNcmQP44Y+NsFRYr+4wIqnjrEvbhqAHwLD1dnb9jzO1:XWg+nyQbdiKrdqFXPNcfg4YvRTN0vbVv","tlshash":"b9229f2edad94c60b48cdc7ad6ff874260f82c4ca451ab752b1b43f519d98cc418b67a","first_seen":"2025-12-27T22:18:28.849918Z","last_seen":"2026-03-15T06:41:39.452515Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":593,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/680.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/680.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38461\r\nlast-modified: Wed, 26 Nov 2025 20:25:05 GMT\r\netag: \"69276221-963d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38461,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"790c4360302a824bff085529e7cef958","sha1":"21acf90dbd86426d8df6af88e73b4bbfe81ec545","sha256":"3d6313fa741b912095f98398b4df18b7e5a43a42125fce2ed0690e516b73df14","sha512":"cfb14dae1ecffb6b675f0dbeace28f255c614c280ca67272cf7909846b46f90c5a7d1fa9cb1b9879f08344e369cbcef5364408dc7c75561f4f0f0c998af95041","ssdeep":"768:9ooHC9XiZYNMCs57Oc4cNayXkbc6styM2RSugf/nvoCmjLK9Dzq:pHChi3zicfNsc6+nJt08vq","tlshash":"d50301d74ea443968a031e641258279735d522d44f3c9d73c7f8abaaf83cce021f920e","first_seen":"2025-12-27T22:18:28.760093Z","last_seen":"2026-01-05T20:52:48.296315Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":596,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/617.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/617.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50780\r\nlast-modified: Thu, 25 Sep 2025 03:59:10 GMT\r\netag: \"68d4be0e-c65c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50780,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 300x200, components 3","md5":"f9044924877b08c6981ad59224c05660","sha1":"8393e8769da6081a50ffd856f28ce602983bd756","sha256":"1ebebd2ebb79a6ae5de0a7040d3f613b1fa80dc3d3345a0b71305969572b7624","sha512":"5f5afd7a10686506c3222a07dc187bb446b16715706abd60d1ac05c92624116e2e14cbce6ac6bd515278e4de8c6212838e7d39ffd546cdf439e0e0f22febf2fb","ssdeep":"1536:6MF6D0+O01HFuKAEhkz9ye3qnvKGiR9cvc:6MF6DzOWzpGpyuqnv1iReU","tlshash":"3d33018dfb6a210b0760d5ef9238406f9d806cc51d6caddb711525abec3a1c40b9d5e6","first_seen":"2025-12-27T22:18:28.799383Z","last_seen":"2026-01-05T20:52:48.297243Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1093,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":601,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emoji-css.afeld.me/emoji.css","fqdn":"emoji-css.afeld.me","domain":"afeld.me","tld":"me"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:14.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emoji-css.afeld.me","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 22:07:07 GMT","end":"Thu, 26 Mar 2026 22:07:06 GMT"},"fingerprint":{"sha1":"20:2D:A8:0B:3B:C4:1A:E8:3D:99:08:B2:3F:47:6D:FD:46:E0:67:9D","sha256":"BC:1B:DF:BA:A9:A0:60:90:4D:6D:97:83:60:79:0F:BC:9D:D0:06:88:65:71:AC:56:90:F6:5F:F9:E6:3D:08:5D"}}},"request":{"raw":"GET /emoji.css HTTP/1.1\r\nHost: emoji-css.afeld.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuploads.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Wed, 11 Jan 2023 00:45:12 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"63be0698-874ca\"\r\nexpires: Tue, 30 Dec 2025 02:27:12 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 468A:33CCC:8321EE5:84ED2A0:69533627\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\nvia: 1.1 varnish\r\nage: 188\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1767646335.057563,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 426308730b7403130eda7c3c6ec0f723696aed7a\r\ncontent-length: 35104\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":554186,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7bae507569848c96b73c3cc21b34ad54","sha1":"952152f0e169227d0a5e6ef3e3f52185b6dd7c70","sha256":"379e0b0f1cfa83f0e19f749e89f8db42fa5569643560adcb92123dd2f4246213","sha512":"bb515475399905d27c8e39ed972ec3cbb5cfa369c5ed693c38cc661388d704890b7e5fe188cc28f1139b7de2499c89fb2a4a4dd2198118947f5c588c93a14577","ssdeep":"1536:4jygh8n7vASLtOv64NOS2WG88dnBnWALlQK0jW3YjQ9tT:4j/QnBnWAoQ9tT","tlshash":"42c497fbc096951f390330e9347b3af8646b81d6ca918abec57f11a1d8a145c50bf6b3","first_seen":"2023-05-26T18:00:00Z","last_seen":"2026-04-04T00:23:42.468492Z","times_seen":66,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":63,"dns":71,"connect":15,"send":0,"wait":15,"receive":6,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/371.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/371.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10294\r\nlast-modified: Fri, 27 Sep 2024 06:02:03 GMT\r\netag: \"66f64a5b-2836\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10294,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"216aa15d46006754880bdcef4015117c","sha1":"810765b5861d4364713fb45888fef001f2bd5c15","sha256":"97ed2142493923f962c23a3bfe4669509ffbe945847a56a3f6a23bb42cd897a5","sha512":"29483c9639cf9a87f8826784f75473e60e1d499b2a4f5337161b56c2d79fb0d547044b2085ac0667d4c6913b6855af4d2825d6ba5b86cce6d89b04f0b7127126","ssdeep":"192:vFFUxO4pzgIcA/v/kkHNbVNmt7ewdWKNogZRe1rnEX3AqJcSWMO4sjHh5B7LMgGK:te/Lcgv/73mtBdxN9fcEX3AUcSJsbjBp","tlshash":"4c22bf7bf3ab5417c9670a3572401d8f05af873a692935f8dd84a96bc9c7002ff04129","first_seen":"2024-10-14T23:54:22.566427Z","last_seen":"2026-01-05T20:52:48.299322Z","times_seen":3,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/540.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/540.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34885\r\nlast-modified: Thu, 29 May 2025 07:23:14 GMT\r\netag: \"68380b62-8845\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34885,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"f93a2d928b62485244ef740d0963ae66","sha1":"f094f1420fbe06abee0f6f7c13bbde83c718b531","sha256":"f65d2c9ac7ac49d552331da1f1b61d2c14948b4122632013d241691ef597b4a8","sha512":"cf9d9ee3affa4c49fdf7bd5899a48123a7e1a32bb723a0e4cf3fb6e39e0c853c50a495f2a9343c3a6d2c8d7458a597e55dbf4550ccbef9688c57862fb32db778","ssdeep":"768:nQseOV+bn9gD7LiaHnZNTUcCnxO8StGuYf1WQmcXyGQA/UsTLJBWBib:nQsjV+bm7L1HZx8Sy1WQmciGVU4LYs","tlshash":"99f2f15d100d498fe575925228ff3ae6fbcaaee81d0be819ae97400ddc3278a5dc8750","first_seen":"2025-12-27T22:18:28.792169Z","last_seen":"2026-01-05T20:52:48.300295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/382.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/382.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13080\r\nlast-modified: Fri, 27 Sep 2024 06:02:05 GMT\r\netag: \"66f64a5d-3318\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13080,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"11583e2588dba90d459d08b2f6ffecbe","sha1":"ee847c31c1a5c004280e3ed23c486778c77fd5ac","sha256":"b6d595505a59002b9640faacc44ecf593ac152a2df4a0960a004f67e7648fccb","sha512":"a558488c7ed5e1c42450b6144b228c99a385dc07e97a7d38d9e8fe660b6808fc187d0eddb50488a624eb386c3e1f1cc10bbe2a0c91950b7af32fbfaae39a3ce9","ssdeep":"384:eHfDs1vhlb2qpxNXv7w2DFO7k2DzVzpWyiMWZ1AZnTj:e/DsxhrpD7xFOT5QMy1Q3","tlshash":"1342bf82c5fe40c63af196bbec340eddf9ca50b64c1152ee3ada9c1e0c648975c6a2d1","first_seen":"2024-10-14T23:54:22.582182Z","last_seen":"2026-01-05T20:52:48.30119Z","times_seen":3,"resource_available":false,"data":null}},"time_used":992,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":574,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/487.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/487.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10585\r\nlast-modified: Wed, 08 Jan 2025 09:27:03 GMT\r\netag: \"677e44e7-2959\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10585,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x240, components 3","md5":"180bc9d7afd209301e86621a5cc7ae8f","sha1":"b0aab55f50a8af1fc9f6b9680eb0d6923c915ad6","sha256":"8640a3dd84b4fd06971258a737d2de04b6dad1e7fcaf0e01725e8a4cf8d50085","sha512":"3b0522c4448484b50c01ca7e6f70b89b2f0781511fed64c9418eaef49168d34deef5b0bc95bd6126ef1a95960179504085293dbf982ca217ccf6f41b90679f55","ssdeep":"192:PhNUohFTO3/hVnNiTrI0+5Gw8BEDBMfkSVYg9D+qEbHwgvxjSkuU9A6VKxKAiju0:JNUeBO3ZjiTrI0o58eSXs7HjSkuU9jIu","tlshash":"a722bf2ff51a4157e132d571aae5b86f97298a38fdc1323ec921488826fda8335e5730","first_seen":"2025-12-27T22:18:28.789662Z","last_seen":"2026-01-05T20:52:48.302346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":595,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/images/2.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /images/2.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14761\r\nlast-modified: Wed, 04 Dec 2024 11:06:09 GMT\r\netag: \"675037a1-39a9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14761,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"JPG edited with https://ezgif.com/optijpeg\", baseline, precision 8, 300x225, components 1","md5":"6a20acab6c46146beef928b2f30c5bef","sha1":"b9b889a83767c01a856b4a6672b5bc5a490c30a9","sha256":"3b7b825973c394bda77e5914190ce09e3a0e78fadb1fd0622d5e79dd9abe9674","sha512":"d16961559f07165e2425d4a60e1aefd1667c12d61f974bb41089aa5144a57caa1fd4e93d29e055d298c775f216c29b1f75ebe5267ab0f6cb835a15398adc6530","ssdeep":"384:2PgiMtCfrNE7ugjlXLfs4UrG3enwG37hoy6XGB+pC2zprbJ2w:BnCzNEyMTs4UGgwwOXS+xhbJR","tlshash":"9762d1e928b5dfbd704794b5bc831a6df070081d69b0c3d17d74d009ab5a8b923ab734","first_seen":"2025-12-27T22:18:28.790836Z","last_seen":"2026-01-05T20:52:48.303247Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":604,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/videoSliderAlt.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 03:12:50 GMT","end":"Sun, 05 Apr 2026 04:12:43 GMT"},"fingerprint":{"sha1":"3A:1D:A3:E2:34:8B:CF:4A:E2:79:81:4F:39:B4:6A:A6:31:3D:FF:E5","sha256":"EA:50:C7:FC:EF:08:29:A0:8D:98:25:B7:58:5D:21:DC:0C:4B:87:8E:BB:AA:45:C9:FF:08:27:40:D9:87:6A:D6"}}},"request":{"raw":"GET /script/videoSliderAlt.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuploads.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-guploader-uploadid: AHVrFxPjNSmcMz7_-XrWX46ah0yJqcGe9nyfWyiO5RSPgDS8ujPdVSn89tb6Vz-pLIIe9vp7\r\nx-goog-generation: 1765976188319799\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 346635\r\nx-goog-hash: crc32c=NZ7RQQ==, md5=1/u2Q7vBJYhYOMagP+OVtQ==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nexpires: Mon, 05 Jan 2026 21:52:15 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 17 Dec 2025 12:56:28 GMT\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2548\r\netag: W/\"d7fbb643bbc125885838c6a03fe395b5\"\r\ncontent-encoding: gzip\r\ncf-ray: 9b95dbbd39b61a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":346635,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d7fbb643bbc125885838c6a03fe395b5","sha1":"bc319489ef9d835e527afc84f477f4597338d2b9","sha256":"a5bf9cf57e3f7a77363b4abe6aa2d88869d2b95479f7a8297705432a561c5a18","sha512":"940686792f738b51d3e0df1ab009337451f54d9694c367283cf86521b6e91683695d0a315be512f4ec0190dfc3b0cd75a2666fd25f71e3e223a00f1e5952fcd4","ssdeep":"6144:gYTG6CgGLqW+VhoQiyGxjvo6OWeMpBiFQzMbkQBLIM6B35atGM:5Bg+VhoQxR6OWeM1zqkmf6B35Ad","tlshash":"b374240577c06589139b2f27335bb0daf4852cad748e686ea7817c25904a937fde8b33","first_seen":"2025-12-18T15:59:57.714303Z","last_seen":"2026-01-13T14:12:13.863548Z","times_seen":60,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xuploads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 523779\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-06T10:11:42.544918Z","times_seen":718473,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":274,"dns":11,"connect":28,"send":0,"wait":24,"receive":24,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T20:52:13.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 7333\r\nset-cookie: user_var=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\nfrom=noref; expires=Tue, 06-Jan-2026 20:52:14 GMT; Max-Age=86400; path=/\nlfrom=noref; expires=Tue, 06-Jan-2026 20:52:14 GMT; Max-Age=86400; path=/\nidcheck=1767646334; expires=Tue, 06-Jan-2026 20:52:14 GMT; Max-Age=86400; path=/\nlp=%2F; expires=Tue, 06-Jan-2026 20:52:14 GMT; Max-Age=86400; path=/\nindex_page=1; expires=Tue, 06-Jan-2026 20:52:14 GMT; Max-Age=86400; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129399,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"125fe03e69cd9a134020ee1b9cc2c667","sha1":"ad36e948cd0cd8893a14cd90d40b949fb8057b37","sha256":"48fd1b0accc8926bb7bcbf46e25023a0f0fd94e1bdcd92dbbae432e8a8c00155","sha512":"6c8ff4b71c5b0abeadcbd932e0efd7c8f21f71fd53b59c958cb29605cb1cf6514f6d13f54c15a5fdb2980a115e04dba2fae095e7a0ec71a427db48d087288dc8","ssdeep":"1536:SsLjFeBABNCWvh4248+ZLH3/3187/Nzzy5RIaRzQFDdSBYmdjZlQBxkFvkpfJ/iL:SP","tlshash":"b4c3247588c1107b8573c2e169a54b9afed0414bed7b11057aee6bdb0fb7e90bc0b908","first_seen":"2026-01-05T20:52:48.305092Z","last_seen":"2026-01-05T20:52:48.305092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1203,"timings":{"blocked":494,"dns":189,"connect":145,"send":0,"wait":214,"receive":1,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/494.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/494.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20408\r\nlast-modified: Wed, 08 Jan 2025 09:27:12 GMT\r\netag: \"677e44f0-4fb8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20408,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 214x240, components 3","md5":"faa55f3489ad7a3bcc5a80a5b75bc47c","sha1":"85fc28111961bd213558be60f34339fd6bdd661f","sha256":"e0238094f9672e0a05ec7f9c66baad78fa54e028bc5789da6ce2d8e26511daa2","sha512":"923eb8f42663cad2904629c096fb8e09a1e70611af659fd9611eb1c974ec0a95ba17d066cde60db48b8b5d248fa90a0ae66082d67b1a743dbc080a24b54c8be2","ssdeep":"384:A1CZtuXK3w/746QFP8ApM6N9UK75MfLyMfV0fI7Qi+04SAqO:A6EXXTwJrUtPNPR4oO","tlshash":"d392e142846b31e9f784cd0a57159ac7484e4e927ba4cae7aac37c0808efdf46716b90","first_seen":"2025-12-27T22:18:28.756389Z","last_seen":"2026-01-05T20:52:48.305913Z","times_seen":2,"resource_available":false,"data":null}},"time_used":999,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":585,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/637.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/637.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42979\r\nlast-modified: Fri, 31 Oct 2025 05:56:03 GMT\r\netag: \"69044f73-a7e3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42979,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 71x72, segment length 16, baseline, precision 8, 380x214, components 3","md5":"c8c61c89954d8ca96cb64d19f526481c","sha1":"8a3dfaf0b1730a6ad13dd3c608f93bb1a0fd0c41","sha256":"e60a8dbd7845de8cca8909073e47a4bb61a2f1e96abd016035f9d71cd563307e","sha512":"93b7958c6964e786cc74e37d1a2c0bc7459edaad3f4232e77ba61cc7c48dcd37f1f149305ee98f8f050dde5d2dd8ba14be19cc03e144ace7c58c8fbbc0bf01be","ssdeep":"768:oHOj2pec3hmik3vP14dT+uaVKJ6l2gtC3sKnZOKjk6S0Qt8AbzaPB:ouj2pec3hmikn1EaVKJwdVKncWSQAb2B","tlshash":"5513f221f662ce5291c4b02ca86c128837957c77645e2c467509c91dfc49e607bfb67f","first_seen":"2025-12-27T22:18:28.696526Z","last_seen":"2026-01-05T20:52:48.306783Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":588,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/632.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/632.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15757\r\nlast-modified: Fri, 31 Oct 2025 05:53:06 GMT\r\netag: \"69044ec2-3d8d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, components 3","md5":"985b7973a4ae4e5edfcbd90f1816f8e5","sha1":"9ae23e67adae40fbbc2311e079f83a9d4d202c62","sha256":"8a3baa844082a2c44d5e2bf405424b062ccd8e3a144ed059578109adca5ccbd6","sha512":"6b4b2621606293409ce7015cbd4ca1328191753cb110f3b3300c69df87c1e2656e2510dfd7365005bb8a4395ef6afa3f7e35e99509647d82fd0e1ebc242312e6","ssdeep":"384:lwN8TmoZsNHUiWT2alo5FzN+Vbw1hKP+888SY+:iNN6iya5FMVwhq8o+","tlshash":"0462d0d3faac1705f15c1fba2924def4b20c596044762aad64f18d418b80f6fb2903e1","first_seen":"2025-12-27T22:18:28.798008Z","last_seen":"2026-01-05T20:52:48.307701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":999,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":589,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/615.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/615.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31716\r\nlast-modified: Thu, 25 Sep 2025 03:59:08 GMT\r\netag: \"68d4be0c-7be4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31716,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"000b375160df2ed38f5c928fd68c6a81","sha1":"e4d01d1538f923f14270bbb576fc0fd7cb78e06e","sha256":"8b8b3e82e5ca3ca2d7a914a4df655354a1c2f4690df0e8ec6706ada3b5ae01c3","sha512":"c7154d9f08756f622ea6f51d422f48d2d1b5622bdc4d272b50051089076aae15f87ce8374cf1877fb86bbb1c3faeb42cd6faf2a68f1c31f18140712ec8b15c38","ssdeep":"768:TuGKC7r1AyucHlYqZhvMW7V1TRQCMJdlaXDORL1xEQ7KJ8no/G+Suv3:IC7KyucHCqZhvMWtcdlYERKtJ4NYP","tlshash":"d0e2e2a3493bf9f46c3451937e6ba81515237cfaef648d192e0ec992c0e30275d15338","first_seen":"2025-12-27T22:18:28.758872Z","last_seen":"2026-01-05T20:52:48.308598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":602,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/492.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/492.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11945\r\nlast-modified: Wed, 08 Jan 2025 09:27:10 GMT\r\netag: \"677e44ee-2ea9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11945,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 212x240, components 3","md5":"783a08f67480fc063c088481908f0bdb","sha1":"efaa68ab39726a51f94800b96b5d9006e57a0355","sha256":"2c857171d93109a530d98677a562e44e2da19d4ccd7a6bc10f3bd3bd0bd7650b","sha512":"123b0c526cbf8cd12b315a6ec49482e4a5bce093f7a5081f50d6d85cbd8edab753108937073e7859f07da7a608fabb740cf4e672206e20ae95b1dfd5ddbc6c99","ssdeep":"192:2eWzyeRzruo67MDdMo0Zofhr/MJzd3vJY1fxqmHnHTFb/5gSJ/UR1A5fZUghMnXP:2bjz676dMo0Z4FUJNJWFnHJPqgahnWZ4","tlshash":"4c32cfb2711cc387d0d8ce34d4f0095e2ba356fa5a908d8f3060c72d7580a7f989e8d5","first_seen":"2025-12-27T22:18:28.786013Z","last_seen":"2026-01-05T20:52:48.309338Z","times_seen":2,"resource_available":false,"data":null}},"time_used":999,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":605,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/694.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/694.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27494\r\nlast-modified: Wed, 26 Nov 2025 20:32:04 GMT\r\netag: \"692763c4-6b66\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27494,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1280x1281, segment length 16, baseline, precision 8, 300x200, components 3","md5":"33d7de136b6f4bc1c242ade6a2082836","sha1":"8be87250f0cb6317903527fbb7b1014c5dba9cd9","sha256":"0ca296aed7a7bdbfc94c69e2c515c6182b2d3c06fe5f0aed8b938f4bc1a54d12","sha512":"dfa7a228bc294564b321b4ca290c53b6515a4fba58f1f251488cf542619cb2ed81f37cc3c2f52470b1c0524c9113f741aa07af4383b6af9aff0e987fe8d50063","ssdeep":"768:aM4oy8VwkJ+jq0MvrVyaGdVn8oGj3MieWLY:aM4oROkJztDVyViDDdY","tlshash":"26c2e1109b1ac682fd7473a73108ad998afb692ccd7a025c6bacb145d4de1727f207f4","first_seen":"2025-12-27T22:18:28.733354Z","last_seen":"2026-01-05T20:52:48.310221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1096,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":726,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/twitter/twemoji@14.0.2/assets/72x72/1f44d.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/twitter/twemoji@14.0.2/assets/72x72/1f44d.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emoji-css.afeld.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 14.0.2\r\nx-jsd-version-type: version\r\netag: W/\"30a-hDuPg1JpMMlz2d7mRTXPuLz0tD4\"\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\nage: 1723283\r\nx-served-by: cache-fra-eddf8230095-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 778\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":778,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"4a32750fe064ddf814db545eed11d57c","sha1":"843b8f83526930c973d9dee64535cfb8bcf4b43e","sha256":"42b43325b3edacba2a0e72b742bdc6fc5e4bc2ad38adca271fcc6d8353639887","sha512":"e3ab812f9d4c0cccd05feb12958a93aec0dec90ae393f4bdb28cbc30d88d2daebb46534f2879f8a445bacb997cac01eb3193355835535f277a3cd34391449a0e","ssdeep":"","tlshash":"2c0120610623262ff3af5f625a4632b0fb505601df5a301bd9ae426a6ca5080738eab5","first_seen":"2023-05-14T21:38:45Z","last_seen":"2026-04-05T12:25:26.538963Z","times_seen":162,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":102,"dns":28,"connect":17,"send":0,"wait":18,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/rect.js","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:14.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /rect.js HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 808\r\nlast-modified: Sat, 13 Dec 2025 08:18:15 GMT\r\netag: \"693d2147-328\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (379)","md5":"c8fe18c5c852abe30ac6f2902ecec207","sha1":"287e674b825d7e43ec4ecb806a5018d8604494a3","sha256":"788119f84df20b59212096973e4a09b353a3bb6aef977cac599d2e32477fae84","sha512":"bfa38adc2d743a37471370e7024a7159e5649876538c27421bbaebe923576f671a33ee789c1dd0d911a1954e70c53f2290b12f68c5a49d573bc5d0f0a5ade2f4","ssdeep":"","tlshash":"2001615d14f524745f6335785eff613c60352683a8878f227a1d4e422f7421fd595d88","first_seen":"2025-12-27T22:18:28.812186Z","last_seen":"2026-01-05T20:52:48.311649Z","times_seen":3,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/383.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/383.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37084\r\nlast-modified: Fri, 27 Sep 2024 06:02:06 GMT\r\netag: \"66f64a5e-90dc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37084,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"45921686cb97a3d77058a21c2d7a8f5e","sha1":"c82c53d131c5c445245ba724523c257a7bdbc341","sha256":"d17742f2e73f738379c19321d7627950095f62c55313ebd121bf1209a9125d00","sha512":"c56041204d987429f79c8f4342634bdb2a23d0e3dbb45183f55095bc9ee6cf46fde5b1c06a7b6381b0d404710321200c993fad10597bc360b356d6f0a70c7c88","ssdeep":"768:pcBnyP8nZVCZCyZEmpOoWwAjgNzp0drA+L/9yKYpgviXgYaI5wldHilgUhx:pVUDwZ2oWw3IhwKqRgYtwldClgUhx","tlshash":"60f2f1c831642a8975dbc43998857fd54ee44b69b94fee3ea1fdd83e42188393e820d1","first_seen":"2024-10-14T23:54:22.668731Z","last_seen":"2026-01-05T20:52:48.312374Z","times_seen":3,"resource_available":false,"data":null}},"time_used":864,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":442,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/541.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/541.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37099\r\nlast-modified: Thu, 29 May 2025 07:23:15 GMT\r\netag: \"68380b63-90eb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37099,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 300x200, components 3","md5":"f451220d29547c9c61c4b0976a853758","sha1":"7f227eae21428b019083f276c2f1dd98dc6dd900","sha256":"57fa00663e7c45a42f651fd6d9a6d8046a9ac66726ed82af169815f09ced8a5d","sha512":"a3f35002c157fc0417c4438fba3cb1b09da49428821c795ec1801de17371fc85d2c323e81ddfaea9e358802711c2d7313161b4e8f388e0fe33e6bd72a9db43aa","ssdeep":"768:MyqM0gUIaL7YoeFkepNbqLDJbfNV+Dyt30zL6EzG5B0k:DqM9Bo7/HAeDJbfGCOUGk","tlshash":"1ef20143b38688c4d7b22725c755b52cc9bf916768237a95c57044c2dabc2b4a6fc4a3","first_seen":"2025-12-27T22:18:28.816449Z","last_seen":"2026-01-05T20:52:48.313165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":992,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":577,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/497.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/497.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10092\r\nlast-modified: Wed, 08 Jan 2025 09:27:15 GMT\r\netag: \"677e44f3-276c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10092,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x225, components 3","md5":"cf0a5e56a9778e72288ef7156fc47fa7","sha1":"16cf3ae4334c662adb48dca65cfd7b0755eece6d","sha256":"6ea883b9ea9b9106efe3356f888fc9cea3a346b633bb77942a4706a89318e7c8","sha512":"b66dafe15c1b6a40bd4d25dff69112e132b7313c30682d1159e1d29103f3479ac450186b91fb6068cec2e52da85d0a4bb0ebe2cac1958feeb90b8bca2365c2d8","ssdeep":"192:fcVpQmIfrH+nMjBVOE9OHvZ5teJrvS0MlB3FtPfR/eVFMin2wL:07QmIzGQgLZ7exKnxtPfRmVd2S","tlshash":"1f229fb77addb63abc53ed71880dfab5b30e3a02c638715d28dd1a63187e494702d096","first_seen":"2025-12-27T22:18:28.725147Z","last_seen":"2026-01-05T20:52:48.314063Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":586,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/384.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/384.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13814\r\nlast-modified: Fri, 27 Sep 2024 06:02:06 GMT\r\netag: \"66f64a5e-35f6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13814,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"194808b56527703de3e413452e224d55","sha1":"471c35ce4eadeb075e2b9b2a1da12cff720df1d0","sha256":"0f327b6dcf288d8e7eb257a07b0309588c2b28e95974ddd8f98ac9ba4ebb0f65","sha512":"5b4252cf8c2274d522483d1d89b94701b3b99078c0187aba09a3940a2eb8be6cb61fc8af951b61a8c54383071e0e395819f958dc7ad768f8d1423f6ee22e2636","ssdeep":"192:wX0stsh/93g9PqEs3dkIWOguqL04kYagEOukcu2q7JVfZ9n5bKgHmwlvwNa5+Sp4:wX0Msh9w5qfvZRcWuF55egHmwlbvJcj","tlshash":"fa52c05f4a3050c172782a2259926d9ad6e8b4b1b25fd4893febfa2406ff8d473f50d0","first_seen":"2024-10-14T23:54:22.577766Z","last_seen":"2026-01-05T20:52:48.315069Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":601,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/612.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/612.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39346\r\nlast-modified: Thu, 25 Sep 2025 03:59:07 GMT\r\netag: \"68d4be0b-99b2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39346,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"7f6a407cb98981c832231f4c3e71c512","sha1":"ad4d801f2985598ff631711f5537f9f8f42249b5","sha256":"29b2e5c64729ddb0c208a10e47199f6256e1f15f5914abb328b2856e75e30e6f","sha512":"3edae2887b798ded449c3fb27e316963cedadfba74f65f3cc4a50d4e3692beb5c513e7b3567ebb6672d6237b49cd3773ef2aad5b0166e61634d2087ee5eb988a","ssdeep":"768:+rw3gqI8JJYmz26RVzUxYmCxoIQM1TFE5CEHZMfafklENY1SUahFs:+r2vVYm66RVzokuItCQaAwU0C","tlshash":"2d03f1a63ab37e458a90daf31d6c97f84f96cd2df4c856f2c93e2445ed1351c1839024","first_seen":"2025-12-27T22:18:28.851567Z","last_seen":"2026-01-05T20:52:48.315962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":607,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/624.webp","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/624.webp HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15278\r\nlast-modified: Fri, 31 Oct 2025 05:51:06 GMT\r\netag: \"69044e4a-3bae\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15278,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"850cb316d99246413c83bd585fbca4b0","sha1":"cd045bb15712959f67033270387c2f3047d25996","sha256":"375878ccf70034362b4875e7e6b10f8480da64765493b1ac18606cfbee62c10b","sha512":"4cca63b3d7763a9f5e42ba25340bb6645ee524b84e26cdeae517bfde19cb64fdedb894cd627902f344c59715db768c86d4a3af41380af61cfb69bc5d4ea7c53a","ssdeep":"384:59LDmivWC6Kx2LzrXdW73Eh/0SMrQVuyeYm108x:THtvUKxOv00ySMkmYM0+","tlshash":"cc62d1208993506c4c95723db8e7709ce377fd016d09b1d5a2f5ae865d42aaf0609ecf","first_seen":"2024-09-19T21:02:11.354288Z","last_seen":"2026-01-05T20:52:48.316947Z","times_seen":3,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":607,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/616.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/616.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38085\r\nlast-modified: Thu, 25 Sep 2025 03:59:09 GMT\r\netag: \"68d4be0d-94c5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38085,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"ae9f15f3099fb95d15b1c5f9266afb58","sha1":"ea52571f11458b5c4968406878271bbc0edc1316","sha256":"97ef1f77c9ab162725250baed75fe0f8c2b09263c9c2b1c08801f90cea9a737a","sha512":"35dfd011cbc5248f67370bbb36d1aa0fa1fa08d09ca0552f149b1639516b2456838986b1fc8b8e435185f494438b74bac09689ac9089ae1f4fa43c7d844016c3","ssdeep":"768:kNOtRTrUWEeM3nw2a0CnNrFOBROWaJ4HZ/H5qV5GlCxs/fHZBKEW44u:aOzXFEzw2a0CxABRLXZ/Z6GcqHHKEW43","tlshash":"470301440e4b4901e6b92b7bdeb78a365ca5cecdf908816e6e677a35dcd02d1053bf08","first_seen":"2025-12-27T22:18:28.73693Z","last_seen":"2026-01-05T20:52:48.317845Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1093,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":599,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 03:12:50 GMT","end":"Sun, 05 Apr 2026 04:12:43 GMT"},"fingerprint":{"sha1":"3A:1D:A3:E2:34:8B:CF:4A:E2:79:81:4F:39:B4:6A:A6:31:3D:FF:E5","sha256":"EA:50:C7:FC:EF:08:29:A0:8D:98:25:B7:58:5D:21:DC:0C:4B:87:8E:BB:AA:45:C9:FF:08:27:40:D9:87:6A:D6"}}},"request":{"raw":"GET /script/aclib.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuploads.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AHVrFxN2iBpb-t5ZfS7VArRJLFCT_VqFVa-k_zQ-uVo_DGLQ5Kg_G4ZI5UED5xfr9wCf76B8\r\nx-goog-generation: 1765975833874839\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 171200\r\nx-goog-hash: crc32c=Y6PsGw==, md5=SCUDcDR8fy0FQyHgPI45Tw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Mon, 05 Jan 2026 21:52:15 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 17 Dec 2025 12:50:33 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\nage: 1524\r\ncf-cache-status: HIT\r\netag: W/\"48250370347c7f2d054321e03c8e394f\"\r\ncontent-encoding: gzip\r\ncf-ray: 9b95dbb9cbb4b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":171200,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"48250370347c7f2d054321e03c8e394f","sha1":"dce1356dc4ee7b2b650fc3b2fa5c75e2de60c840","sha256":"e3fd6b9ca5d9b8d65c6330aa94f08f24cd2b59e1834cd7c960ea6ea3417acf52","sha512":"37527c5fc8159f26120d652f8477a70703eb6fb1f30126ceb66f9a58e05ddc365a1cb34b82b5bdcb24b694036bfe2a7c3052a50d883b956cccf2e167a7188ae7","ssdeep":"3072:ZcmbG7ee6cW7n8GrMN1HDxlfm1VeDbclbsZpyQ:y/FW78GrufmyclbsZpyQ","tlshash":"f4f395083a9455037b4b6fbb271774e5e9062c4ab894099eb254bc74e2836b3fff1136","first_seen":"2025-12-17T14:33:37.34138Z","last_seen":"2026-01-13T14:12:13.867658Z","times_seen":466,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":32,"connect":1,"send":0,"wait":18,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/537.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/537.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42472\r\nlast-modified: Thu, 29 May 2025 07:23:12 GMT\r\netag: \"68380b60-a5e8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42472,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"ddfc1d8eba7406cb83a2c64dc909c90d","sha1":"5cbf2f395cd07e3c9d31dfc0701f7d15c6d2a970","sha256":"a30a4d8c334ec1c1f85e286a6eed52abce2ed2dc5b2c6c76466ebd0fb451666c","sha512":"693dbce68cef4584ef07819f769ef270addc15734150a5c368c346cc9d5de8a9cf171ffce3761b1c1afccaf7b97a1545d3a44d081571a7444492b9a9eb12b162","ssdeep":"768:37NxJdfmrJp9qyYpNP+4g5pfjZniC4u0vPt+YtP82ZqSH8JS+0wjBIxP://f6pRqG7praHXqSH8JS+0OIR","tlshash":"461302e8c1343263d7673c78a9ca7245e135aa14378e4fa15880e55afc7dc03fa6d1a9","first_seen":"2025-12-27T22:18:28.796766Z","last_seen":"2026-01-05T20:52:48.319352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":449,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/531.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/531.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55355\r\nlast-modified: Thu, 29 May 2025 07:23:07 GMT\r\netag: \"68380b5b-d83b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55355,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x200, components 3","md5":"f1739b28136613f44a51d568aa811233","sha1":"10ea38eb29a93e79caac8a5627039ad71942bf12","sha256":"4ebe6d58f2d7eff2b264b98d14f44fc5139d42e4cfdcbb8b973df806b47ba377","sha512":"7e4d8af644dd32407ba311171f0fa981261e4bd7fb12143fb1c5dec705ba3db51aaf69f99a6caa1080af327bebd5521b434254ab256e433928bdd8174a2bf84e","ssdeep":"1536:b6KsUqOUBjGDKujlZrzjnEpYmiAxx4KG6xnTQiq:b6lTodxbEpEefSiq","tlshash":"e64302be406b6aea3f123431cb8d9b1083c17fdb36e23089463f7581e016aec51c5263","first_seen":"2025-12-27T22:18:28.723407Z","last_seen":"2026-01-05T20:52:48.320306Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":600,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/501.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/501.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9559\r\nlast-modified: Wed, 08 Jan 2025 09:27:20 GMT\r\netag: \"677e44f8-2557\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9559,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 189x240, components 3","md5":"dc8484bfc71f0effe2ff5d76f35c5ee6","sha1":"ca0267dff3c341eb5f8c984f529f57ca90a7b7bd","sha256":"406fc4a8efd439f41f624f25b95ef25f1d2c28f1c1e1d0ee6679ddf4d82a84bf","sha512":"108420b43eddd25f81fe3d5dd4e803b87a993eabc27585cc5b0acdb98e430ce8b80003a05aa561b07a0ae59942f95b6042633ade8666394c22bc347e772e3720","ssdeep":"192:XMOHDRUMwAhaPCNyqXo9wPx3hzzhUhoTFEUhVVbgmfY2pPKW5t83:ZDRUM54vwJNzhUhoRRbVcQBtm","tlshash":"b212ae413166de12a403d73541f9175876ab81aeeba9918f97ad0508f4a0f23cb3e8fd","first_seen":"2025-12-27T22:18:28.839141Z","last_seen":"2026-01-05T20:52:48.321129Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":605,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xuploads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21856\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:57:58 GMT\r\nexpires: Sun, 03 Jan 2027 10:57:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 208457\r\nlast-modified: Wed, 10 Sep 2025 16:48:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21856,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21856, version 1.0","md5":"8a53e5ecdbffafb4aaa40a23fdece238","sha1":"446adba5bd78ee16c84f35e33b5ecc5c2976a0bb","sha256":"1fe9ad5d8b2ebd8ecb8fbd05bed1e3fdfa52dae3f1a04e1c219918442fe9394d","sha512":"82333082235dc518ae7e788db3ff7007f111b706586f065f38bf19340019fffba1bb2f9a88a3cfe6eb37c3ce5cada82bcf0811694cf7ebef6dfb151b1be9bf2b","ssdeep":"384:OE2iuJGj3ntoOm5d1JrjMnsuNXbxLt6/B8ZfB3Q0tlqLUIgRtBlhi6D0R7pw27:OE/uYj3ti5Fr0swLb6/eQcWUnh7uyC","tlshash":"b9a2e12544b70e10d985d5f741d29adb9430dbc81ce6af8adc14bce887356fc09adf68","first_seen":"2025-09-11T17:03:52.650693Z","last_seen":"2026-04-06T07:06:46.947311Z","times_seen":6618,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":260,"dns":4,"connect":28,"send":0,"wait":47,"receive":45,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xuploads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 523779\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-06T10:11:42.544918Z","times_seen":718473,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":235,"dns":4,"connect":9,"send":0,"wait":69,"receive":2,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/550.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/550.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41701\r\nlast-modified: Thu, 29 May 2025 07:23:22 GMT\r\netag: \"68380b6a-a2e5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41701,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"8befd1b951def2f96839722232f96f4d","sha1":"caf6104c9fc57d2e7975ca55efff3b66e68df646","sha256":"4d1859920cc6fac67f2c92afc3ed605a0436f3d58aefad6e4727be24999bfba7","sha512":"b526c1e6ff1af9eca792c00019e4aee254b83e7058f7cc7ca44b5a3c9e892c21d99b363d9af1228e7ab81c0e6ec2785e9c69881e8a1709c4a1a7c4bf18c32616","ssdeep":"768:0BgzJ7+eNKleIrzNR0j74C1070WDx29bvNrHwK4bS6n4xjbEl+eFI198M/M2GaB:0BgzV+le+R69107vMbvlRNb7ey8Mk2G2","tlshash":"451302efdac84965f97c7e934ca32f52401b19c91e63c0ef1c5a9a4dc81a5d59000aff","first_seen":"2025-12-27T22:18:28.718325Z","last_seen":"2026-01-05T20:52:48.322525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":305,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/651.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/651.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45044\r\nlast-modified: Wed, 26 Nov 2025 20:19:06 GMT\r\netag: \"692760ba-aff4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45044,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1280x1281, segment length 16, baseline, precision 8, 300x200, components 3","md5":"13998e6113c27db59be23793d07817b8","sha1":"381d8182ce130cb85358172a40f03d0985411cc4","sha256":"d2ca3e5ee9bf7a82d38a86212327218f2da508da9cf24b66bf86fd911c7cae5f","sha512":"0330030bb4c34353c5b1f93a022f67e01f9725477fe5def547ecbfa81d4b9004b51a7b227efd877dda7e1b09e2f3955845af7a95cd8d0d5b346c38978a1e74b7","ssdeep":"768:VFtXurrUKZxP3CXLAMcZAJP3BlzHevxoVvUpqgqbCVwGc3dqpQh+X4sdqqV5JEiX:VFtBKnC7IA5xtHe5o9Upq4VFctqQYX4M","tlshash":"b413f1df4de834dd92f4f72fa8a2a604962dda9351f0552a58970acccf85aed4fb0018","first_seen":"2026-01-05T20:52:48.3233Z","last_seen":"2026-01-05T20:52:48.3233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":433,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/618.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/618.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68008\r\nlast-modified: Thu, 25 Sep 2025 03:59:10 GMT\r\netag: \"68d4be0e-109a8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68008,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x200, components 3","md5":"7621a4fb8ce1a5d1cfe8e05e1ddf7749","sha1":"0b7b364afbb071e67348af3c9ff2ecbfc42867b5","sha256":"22d4699d6bd7477ab080f78b276fcc4f9a0af7c5d791f2dff3167a1ad950f38e","sha512":"973df46f5c210dc8745b7e045eeeb58ffb4509517c62cc583d0a5c73396524785317f9896e7623bf2e8a92d48b18554c73584f7d23c95606759bb6b62289b19f","ssdeep":"1536:UFksyYRkPGO8nu8672RI6rsHOaceh2rpCqTvhOnq6e:UFkcCOL6AzeQlZl6e","tlshash":"0063024bd63d119462208552b4c01926da726f3976fad8c304796cabdc05dfeeefc0ab","first_seen":"2025-12-27T22:18:28.843044Z","last_seen":"2026-01-05T20:52:48.324103Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":754,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/379.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/379.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15095\r\nlast-modified: Fri, 27 Sep 2024 06:02:04 GMT\r\netag: \"66f64a5c-3af7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15095,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x225, components 3","md5":"acf1690c4d49a3c2d91c1fca57f20ff2","sha1":"6b7459b69a2fd0e0674c2e7d5fa631e22864127c","sha256":"8e8938a59f510a082029cb63ad8aa96380d69d4fac446c71206987015be1a21d","sha512":"2f776247b64a456188e6fda1bfd4d66fe5578f72bbd738cdb3c984ddec04db1aa3f000ab1bccbfb3cfba55cd5242770af0c94ebbd187c3315225663b4f19850c","ssdeep":"384:sYLw10Qazw/9/mYVX15mQzklsfUo+v8U1JnljLVO6:3Lw1Pac/A5QzkmMo+v8UFU6","tlshash":"6362c096e84035c0e8884773b7f8fb211aa5d73124aa3bbb5f8375ed44b0433e2a0556","first_seen":"2024-10-14T23:54:22.568831Z","last_seen":"2026-01-05T20:52:48.324863Z","times_seen":3,"resource_available":false,"data":null}},"time_used":993,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":575,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/360.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/360.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15454\r\nlast-modified: Fri, 27 Sep 2024 06:02:02 GMT\r\netag: \"66f64a5a-3c5e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15454,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"7e22032c74a84db61314daca4e1f7e28","sha1":"a0657b9d28c13e35f02e25b3a708b135d8fa21d0","sha256":"b842da8cce73db2d6d9325c7415c3ea3de1d2982bf1e37e1d848c9aae58fd546","sha512":"b393b4607d92dd2ae43e5abfa727061ef1c24dce365614354c2fb16f79930d389aa0b02970b2d5df4d018e7f53252d5110a7071c236ed3684ca5e9234d07dc50","ssdeep":"384:5o7s6dNC+KNBIwbqI6axi/rfuikNQlxKKXN:F6dNCbBIpI6amfunSlxLd","tlshash":"f862c0c532026b54e2694a7d12fe6f4c8f148a6b250946e33181ecffea7419143a4e6e","first_seen":"2024-10-14T23:54:22.646359Z","last_seen":"2026-01-05T20:52:48.325635Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":586,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/534.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/534.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40655\r\nlast-modified: Thu, 29 May 2025 07:23:09 GMT\r\netag: \"68380b5d-9ecf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40655,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 300x200, components 3","md5":"dfee638e4ae87812d9db9c46fcf1e0dd","sha1":"f72383232d07dca80f9e04471e52a17c5326dd20","sha256":"00ca849627ab07572176a5314e741af0c0e785dbe2db59a39f21a4f2d91b803b","sha512":"d4858d048d85aa79c8cdee4bb2eaeb835ef13a92c49d81d15d2b19166901680f0a798d22205511e7714a06601d3e2a567183f800b66e8f0d527ae0ab1acc3ed4","ssdeep":"768:5kA9TnM4ykRjOVOfT38GUSzC62yiaMxMYYdRcEywHOFJbpgwZ8:J1MsJwOAxymypIMYTcoJ97m","tlshash":"5f03f1e497a0edec484ffabec97712e05b4c2725608e8b39c06695f8f81a5b60311208","first_seen":"2025-12-27T22:18:28.728976Z","last_seen":"2026-01-05T20:52:48.326571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1096,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":594,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/495.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/495.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9523\r\nlast-modified: Wed, 08 Jan 2025 09:27:13 GMT\r\netag: \"677e44f1-2533\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9523,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 180x240, components 3","md5":"b2ac31bc2b522c0715a173f2ca42ba88","sha1":"36cc5cd6d202faa41bd87a3f751e4362f6c49617","sha256":"3836ecb78adab0755d777c002e9afb6adb2a7435e0003193249cbb9f84d28fa6","sha512":"333814689921dde40f5126c1f7d3a0af82995c04d90ca856022f742198d000eeff063a1815059de9822e0424517e0b2ee582a2f19bd2d9ec8bdf7bd81e76f814","ssdeep":"192:tyVNkNSZ7Ie9gUro0HpBudK86gFaYGTRdojDbEeAhuNASvy119RjN6OrX:kYNgx9gcpBeK86gUoIuN2bjEUX","tlshash":"3712a01f375bf102ec5ae97b05dd2016bbed7b54468b090e035ca670bd6c5ea21143bc","first_seen":"2025-12-27T22:18:28.803413Z","last_seen":"2026-01-05T20:52:48.327894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":597,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/twitter/twemoji@14.0.2/assets/72x72/1f426.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/twitter/twemoji@14.0.2/assets/72x72/1f426.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emoji-css.afeld.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 14.0.2\r\nx-jsd-version-type: version\r\netag: W/\"3d4-OIY/p8tiXpvPmLQMNyzWA/ZBkZc\"\r\naccept-ranges: bytes\r\nage: 1177661\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\nx-served-by: cache-fra-etou8220105-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 980\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":980,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"c79aa41f62bc0360a9dd7200cc7f9b96","sha1":"38863fa7cb625e9bcf98b40c372cd603f6419197","sha256":"e0a526ff1590cd0d197f5b38e8f887514ced114a21efe0e9a6b7ec9cc35c146f","sha512":"da047b060cd27ac27c47f87485b277e2a3b3b4d89e4ac8d7a4d6e5a290124d2be55137220684db08aadf5600d9030214a5db12c1461b108c6ba1d7697c5bc6a1","ssdeep":"","tlshash":"721194ab4e48095951aeac75f411c2e1bdeedd454680b2d14cf040ac934c0e74271b3e","first_seen":"2023-07-13T01:52:15Z","last_seen":"2026-01-05T20:52:48.328682Z","times_seen":15,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":93,"dns":35,"connect":13,"send":0,"wait":18,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/361.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/361.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10658\r\nlast-modified: Fri, 27 Sep 2024 06:02:02 GMT\r\netag: \"66f64a5a-29a2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10658,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 352x198, components 3","md5":"2245860eefd15826725d03dbf8af4986","sha1":"e5a5bb2086a2f708c6e346623bee0a9c120c8826","sha256":"a1c2f67732f5cfad781c63db558abc523984b5e7a63e1b4b72e603ed45ed64ea","sha512":"8a8511936c0e4d620e17045ac859dcc043d8e1779a7b5996011e1906b1dc9067b751f47c88b8d43859faf8962137cb5b658608d3e12b7849570f4a2191083147","ssdeep":"192:ob+Lsd0/zeE3lydXq6ihWIZw4st1maUz7+kSI6TFybbj8JO:o660/K0kJlihWPzNUPdSabbAJO","tlshash":"f122c02b88caad20050f47f3d72582d06d52ec8df175213cf49c715b57e72e61c1adaa","first_seen":"2024-10-14T23:54:22.561088Z","last_seen":"2026-01-05T20:52:48.329417Z","times_seen":3,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/577.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/577.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41426\r\nlast-modified: Thu, 29 May 2025 07:27:05 GMT\r\netag: \"68380c49-a1d2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41426,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 299x299, segment length 16, baseline, precision 8, 300x200, components 3","md5":"b85cf38509bf9dece73e295274cd5687","sha1":"9f31a92c57397549ea74adced6b904101442d92c","sha256":"ae1e52d8514fdfa73486d32365729c2fc876ee92ce99930313f686f7c9a38bde","sha512":"81fbdb74307f235336151edd7c7f13d330fa87b6d974f145d56c2d5d901fa20399d1e94a9c8de165e07dd1b34e4c644aa5fd4bf3f17db107e51cdc0492b42e60","ssdeep":"768:4zZZJVJdqc905JKbU7s6t5HRJ8s1aETbcTky9lpt0zGBiMz/NrYSJto+lfF:4r3h9KKd+tBTbQky9lptaGYMz/Nr5Hl9","tlshash":"2c13f167115a6e66cd2e20b5be4597672f25cbbbd33b236b05940cc0cc931895b3b06b","first_seen":"2025-12-27T22:18:28.700982Z","last_seen":"2026-01-05T20:52:48.330657Z","times_seen":2,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":290,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/467.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/467.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13259\r\nlast-modified: Wed, 09 Oct 2024 13:25:04 GMT\r\netag: \"67068430-33cb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13259,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x180, components 3","md5":"de452eaebc0909d9c9776174d408cfc2","sha1":"e66e657bc698d2653c6c4902d24d37751cd671da","sha256":"d5f226f9275b354db9f6e13197a966847f0ca99199e0e80e2121131cb25b4ec3","sha512":"2996c32e2a1a6e94f6b6681a9b4e0d81f2b147d0af94139158f06db4a2ed4c635d86cf63002b4f9261c0879c0fbe560a385e15b883e62126f1473fab5f9171e3","ssdeep":"384:PEX68pfH7hyKT+35lo+7s4HDp3fEeFg7u1:PEX68zT+p6Z4dEe67u1","tlshash":"d952a05167dcdac6f12554b4827aff789bee8904ec88353754ec5f46c8202e950cb2c6","first_seen":"2023-09-28T07:34:56Z","last_seen":"2026-03-15T06:41:39.464586Z","times_seen":43,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":308,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/638.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/638.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60178\r\nlast-modified: Fri, 31 Oct 2025 05:56:03 GMT\r\netag: \"69044f73-eb12\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60178,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 380x214, components 3","md5":"8286a800b14cbaa98a933811a7cd892b","sha1":"464f959884810c0f9653f2b888c7410342dd8995","sha256":"ff9f01c7cdea97582336f60bf0a3be1d0a7c179a1a36d7266ef4b8fa82b3b8fb","sha512":"8fe4ae42475d7e6b9a7fb43f225f55a0599cef989b0c7fba35bd1b9e55ee500dd46830d3bc86a3e46eb4edb9e32ab449bfd0fff80ff1c2aaf0849219e20285a7","ssdeep":"1536:DjnTwn7bdRUUjwriKrdJKTTYC8cuLIjTquDqWVOt+:DjnMn7bd+Uu7JJtVLMTqOVIt+","tlshash":"834302b62e3d5d0f60c767b24e429f5c8748c8534dabadfda8cb23cde622865d490447","first_seen":"2025-12-27T22:18:28.804667Z","last_seen":"2026-01-05T20:52:48.332491Z","times_seen":2,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":446,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/623.webp","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/623.webp HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10650\r\nlast-modified: Fri, 31 Oct 2025 05:51:05 GMT\r\netag: \"69044e49-299a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10650,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"55292c3f6f64d166138e283bfcedcdea","sha1":"4b3980c9b55f42a9089a92048ede99eecd3f2a82","sha256":"7b5d2938048c2c7b92e127102baee92628fbaf66d18d7054dcb15f211b531de1","sha512":"5afe1c354812addcb0c9f41b46359f8bcccd28eebcb3ecd13776225a669a786b20a319835fc24f6c7d9bc43378cf94e468ea3f0df22e8a9dcd54bcf04b63ad4c","ssdeep":"192:IGWYLF/PCQvm2NL0M8rOvU11JzJgW48PiPeJ/k8jkbQwQTOVXqlzuO:IFK5bArOvyJzSW48aPeJMTblQTOVX6","tlshash":"14229edaf3f0ad3149b2308bd4975441347b25d73065bb1c8a387d69e20d2b89dae72d","first_seen":"2025-12-27T22:18:28.844843Z","last_seen":"2026-01-05T20:52:48.334182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":719,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/video/slider.php?r=10433058\u0026atv=74.0","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:16.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 23:08:46 GMT","end":"Sat, 07 Mar 2026 00:07:30 GMT"},"fingerprint":{"sha1":"D5:B9:71:11:A1:C5:BD:EA:60:68:49:87:01:4B:0B:CB:81:8B:FA:6C","sha256":"66:19:A7:E1:FD:B7:41:C7:AE:CB:33:20:81:70:04:52:48:C8:D0:0E:66:96:B3:F7:FE:B5:FC:10:FE:48:0A:44"}}},"request":{"raw":"GET /video/slider.php?r=10433058\u0026atv=74.0 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xuploads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuploads.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 20:52:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29lK5RmK1zkSBphHDVybcFliQgra2iuQRZMPHuNauDO8%2BmJWwwIuehGyr0CMCQwsuS6vSuSubUsMwgkt3Ce9yUVpnVfYahTDGSEWl77MzrBhkHQ%3D\"}]}\r\ncf-ray: 9b95dbc04f958be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":186,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f50c8cda59b6eaff886359c1ef19e051","sha1":"865736a94728e0ae16065aa77be007eb6fd8a668","sha256":"222ae36cf789857e921ffe50afc5b687c642b0234455ec260f7d4bbdd34e19a9","sha512":"d16b8da292330c1df89519b8b34d10ae2e2e4fc47e03e081f1d79e907bef6dbe61113fc2a8a318822e19fe5e8a771d9a7ba0772deeaa9a15c3276ec726a9194c","ssdeep":"","tlshash":"51c080010c6e324938d153cb87f74c73555d1c841d94195df19d4487ed56524362d319","first_seen":"2025-11-04T03:33:49.029819Z","last_seen":"2026-01-05T20:52:48.335299Z","times_seen":11,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":36,"connect":1,"send":0,"wait":160,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/suurl5.php?r=10437074\u0026cbur=0.10247579943033225\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=XXX%20Uploads%20Free%20Porn\u0026cbpage=https%3A%2F%2Fxuploads.com%2F\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1767646336512\u0026srs=645c0c4f68d4c24230c8afb83513aad0\u0026atv=74.0\u0026btp=0.01\u0026pblcz=10433058","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:16.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 23:08:46 GMT","end":"Sat, 07 Mar 2026 00:07:30 GMT"},"fingerprint":{"sha1":"D5:B9:71:11:A1:C5:BD:EA:60:68:49:87:01:4B:0B:CB:81:8B:FA:6C","sha256":"66:19:A7:E1:FD:B7:41:C7:AE:CB:33:20:81:70:04:52:48:C8:D0:0E:66:96:B3:F7:FE:B5:FC:10:FE:48:0A:44"}}},"request":{"raw":"GET /script/suurl5.php?r=10437074\u0026cbur=0.10247579943033225\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=XXX%20Uploads%20Free%20Porn\u0026cbpage=https%3A%2F%2Fxuploads.com%2F\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1767646336512\u0026srs=645c0c4f68d4c24230c8afb83513aad0\u0026atv=74.0\u0026btp=0.01\u0026pblcz=10433058 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xuploads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuploads.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 20:52:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=StUs80X5qg8w8ZxN7drMWM6%2FZAs4jKa9gct4ArqNnNuYZ8XQbh2WsJobNe8Ao2JApcsWtLMNYOAksgjIjbEuKBbHShrcex%2BpHVlNy%2FK5WNca\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b95dbc3387356bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1006,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9b2840f1154f06e1e4b20914fc8a208f","sha1":"fb3701d07af8882eb1530adbeca04789ce8616dc","sha256":"be6f0d715797c8982a7e43011a27baa9d924643ebb057edcabdf80f9751f206a","sha512":"723f5ef5647deddffff6fff59140f23d0edec3ab3196b72447375a8ff83bebaf22d7cece85cbb8fe08bf6b6cc71e7f072b363abab7659ceb320617e8af604726","ssdeep":"","tlshash":"83114cbb9ecc020ec2dd30caced0493483133577138428e11046bafc11eade0644f112","first_seen":"2026-01-05T20:52:48.335911Z","last_seen":"2026-01-05T20:52:48.335911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidwestxyz.com/458333820/24038998/mid_1280x720_2500.mp4","fqdn":"vidwestxyz.com","domain":"vidwestxyz.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:16.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidwestxyz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 13:58:23 GMT","end":"Mon, 23 Mar 2026 14:56:08 GMT"},"fingerprint":{"sha1":"D7:1E:96:F7:6B:DD:31:8E:DE:B3:5A:53:B8:E9:D7:D7:4F:C3:BA:99","sha256":"0E:60:DF:9E:34:15:C2:C7:E8:F9:D8:9E:D6:28:D9:CB:BC:A9:06:67:FF:E4:F6:66:66:E9:AD:AF:20:D3:3B:9C"}}},"request":{"raw":"GET /458333820/24038998/mid_1280x720_2500.mp4 HTTP/1.1\r\nHost: vidwestxyz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuploads.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Mon, 05 Jan 2026 20:52:17 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 6051460\r\nx-guploader-uploadid: AAwnv3JXcbHIEQCY44yASinvwBPRILoipcbg6fg5IjEDFL0G3kPorwKvanXJmhDtd3kT0GqT\r\nx-goog-generation: 1759158785019761\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 6051460\r\nx-goog-hash: crc32c=EaXmAA==, md5=gawv6pNKZ0iJoeMhYG7gEw==\r\nx-goog-storage-class: STANDARD\r\nage: 3198\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type,Access-Control-Allow-Origin\r\nserver: cloudflare\r\nvia: 1.1 google\r\nexpires: Mon, 05 Jan 2026 20:34:05 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 29 Sep 2025 15:13:05 GMT\r\netag: \"81ac2fea934a674889a1e321606ee013\"\r\ncontent-range: bytes 0-6051459/6051460\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7sW2G5qLOnCffjdAl14B6KPEkn6%2FPov24rgyZStD461AbFxFjOuBxvJYKkmzbtfVoxmMSPfsQ8CgkpsLgVMd7blZSo%2F1Fs2LGJFh6g%3D%3D\"}]}\r\ncf-ray: 9b95dbc69d6bb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":6051460,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"93339bc3acda4e5f4723bda4b31c82cc","sha1":"1b2e89091a756a567f6ec33bc7d2a22c704071aa","sha256":"36605780d369e093e329a50ad1bf35ba80de3fe85295c99b6617b28ffe9432b7","sha512":"6503b362a22401094fc76ad914437af0c5ed37f62be10572932accea79451232cb1f33d1d129b0ee038fa27fed0dc1bf6c1a30599ea2a846811f3cfb7c660913","ssdeep":"24576:RpovkFjQ7S3agYnEKvW6UuP48/kAn0GR1Ifn0JhR6IxnkEJNE2:bovpgSvXUoznJH6IhcIxnkm","tlshash":"c12523272b62eab7c558427e04b84bc63335d1e88bd32d533a1f53548cd872b562eacd","first_seen":"2025-09-30T21:59:02.881441Z","last_seen":"2026-03-30T21:25:22.433274Z","times_seen":69,"resource_available":false,"data":null}},"time_used":1370,"timings":{"blocked":363,"dns":344,"connect":1,"send":0,"wait":11,"receive":633,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/536.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/536.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39703\r\nlast-modified: Thu, 29 May 2025 07:23:11 GMT\r\netag: \"68380b5f-9b17\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39703,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 300x200, components 3","md5":"c6aa842f2daea3d6ef400c1c334edbd5","sha1":"94439b5007f7488064062a53e88ef5ad80c3c0ff","sha256":"630acf99cb9c242f4e32ba1ea24c07316501711fd0a1e9d3f7006159f80618f8","sha512":"9d0a55a89b3c5ef6f4bfd08e33897962e91c08384969c8c1e6989085b3e8bfb61514674c0321412e15ba906e1c03c8e7fc85e98c74b00acda0ee39c2fdc59ef7","ssdeep":"768:wkG68DcSNc/Qlu1l6+7rnsNPxYiMhS0r+XIGPd20L08HipoII:+eSNcols7rnePQhS0K4Gl20L0PpoII","tlshash":"370301ba68ce8ac1f9f93e1b6f9ef41b82416c7916257c05c42bd5acfbc03225d66701","first_seen":"2025-12-27T22:18:28.710711Z","last_seen":"2026-01-05T20:52:48.337951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/678.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/678.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34351\r\nlast-modified: Wed, 26 Nov 2025 20:25:04 GMT\r\netag: \"69276220-862f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density -18104x-18113, segment length 16, baseline, precision 8, 300x200, components 3","md5":"f29ba54470aeba8aa13e76ead7f2a207","sha1":"09251c0574fa25ef17a227b01fc8285c6b0da986","sha256":"40fdf1286372b817b00fd54ebaf6d1d3a23ddab6770a6beba9babb517c9b615e","sha512":"8601157e1359e8914cbe1c6357345d2737d704bbe7b91bc5668b2ba640d8a6971f3243d0d81d882f0eca9224819cdd6aa573aa4dd34ed33e75fd4dcee0fe1123","ssdeep":"768:Zv+UrCz3BeGkJfZWLkQrZ6XpbL/gLkGCwbIU9p6s+O9Z7b80XZx81ncE:sU+z3MGIfZWL2NIqwbis19b80Xf81cE","tlshash":"56f2e175a3009b4c48dcbcbdf8b3e481281617b830b53d97caa75180f65236b27b1a1e","first_seen":"2025-12-27T22:18:28.70554Z","last_seen":"2026-01-05T20:52:48.338869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":997,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":583,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/548.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/548.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41744\r\nlast-modified: Thu, 29 May 2025 07:23:21 GMT\r\netag: \"68380b69-a310\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41744,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 300x200, components 3","md5":"deb670f6de8b1d46684056aaea8da69f","sha1":"8e0dd50fd13a85bbbaa3cc2b5027d56f6a00d9bf","sha256":"147e7e3ca781a1af9e7ad66fb923dd044746cfff59b57f564902d310cdb289c7","sha512":"5d28d0ea2984cbffe55528fd39f0afed00fef8fe09a9dfca3d6c5bef44a78e92be79e966941f3756ec13574b40acb1ccc927b6e1995233979857c9ad341774ec","ssdeep":"768:LPhZDtGPpVerg5IMD8mVH3RpTxMWoY/nbvZIYTkzJ590v7vwD2bJB9+JQxTj+:LP2pV48Amx3lMWoY/nb9IzL90v4ux+","tlshash":"4a13f107dbb088d9c6e580a4e1b98a2c1bdad6446c951af18ccb3e72ff7e05125f7b14","first_seen":"2025-12-27T22:18:28.832969Z","last_seen":"2026-01-05T20:52:48.339802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":593,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:14.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuploads.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 20:52:15 GMT\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11170,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"872397029f2e679476239e9af1ee89d7","sha1":"d7d9f8128975cdc4d6b71f8f4d0179c39e636a9b","sha256":"f52a6da7c0ccc77c22b7933e4c9226361066fd8f7f850c2c9862c44a81aba486","sha512":"7ae4f1c02e523c0d9ebbb1e45f4f68e47b2c41dfb01f90a5f114cf2af8e8efbf0e5b1da5933109779a43384bf5f0fcc89b20a15662cbaff68f5eedf38978e715","ssdeep":"192:2NKfmNKfNK4NKfkNK/qbNKDbqGIwV4BNKnNKuwNKiNKfXNKuNKNNKfZNK/qqNKDZ:8KfMK1KWK6KyhK/qY4XKNKtK4KfdKkKW","tlshash":"023210a1041b50009b834ce223cebf75fe1f52117142d0b5abfdab6b9dcbc66526935d","first_seen":"2025-11-19T00:21:16.090021Z","last_seen":"2026-02-19T20:26:46.863195Z","times_seen":4215,"resource_available":false,"data":null}},"time_used":785,"timings":{"blocked":355,"dns":3,"connect":30,"send":0,"wait":34,"receive":0,"ssl":359},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/539.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/539.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40018\r\nlast-modified: Thu, 29 May 2025 07:23:13 GMT\r\netag: \"68380b61-9c52\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40018,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x200, components 3","md5":"051d2a1388c2e0f47e354115c882b91c","sha1":"bb408f2c1305e314f9697350d6d1d9fe44451947","sha256":"65786d4dbb7d7fbad57f5f49d4ee558185d4550083bc56f54fb0775037151cb7","sha512":"767cecf787bff521429abe0b6c43ec263ce553b1d78c8279bd1e32e066cabd6f6f83315c84e0ce3a06adb326be185e848d419ccd45fe8664f203a6b5a16bce11","ssdeep":"768:x4Z+B6oWBk+lb9fxRSriUuYg7q6nj1bVJZQAsAoGxfX:x8oaR9fxRS2t5q67uAhX","tlshash":"6003d0f1bf799c6c644d1aa94aee8a712ff2d86868e1211cb8186b30f535d8446e40fd","first_seen":"2025-12-27T22:18:28.77463Z","last_seen":"2026-01-05T20:52:48.341162Z","times_seen":2,"resource_available":false,"data":null}},"time_used":900,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":483,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/438.gif","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/438.gif HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/gif\r\ncontent-length: 696117\r\nlast-modified: Fri, 27 Sep 2024 10:58:05 GMT\r\netag: \"66f68fbd-a9f35\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":696117,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 144","md5":"58efa93043f4aa76cea0f09a96d1bd4c","sha1":"9d7ff5b89b3d001036a623a6b5aab6f7f4fad54d","sha256":"32ffdc6cc54a33df782cb10ef096a9f366a7651faf62cd154227ddbd379b3487","sha512":"88f5577b9be8c4b627228be78f769a5de62e569c2105ced541abef2f2ec273604cbd9199e4f28588876fc23e7d451803dac7bccd80920b23f277ceac48fb260a","ssdeep":"12288:VBCAhCeTkk6TShy6bsbk0Shj3Fu61djKnkEJmfcOCWi9eK6nv/l8I/3zv9GGxj:VnCe4Sc6b1TBfCW1vt8Ij9Txj","tlshash":"3be42352ce298b1e9f2b1a2c2d1e421119d17c687dbd287b6ecf1d259d35383cde036a","first_seen":"2024-10-14T23:54:22.703568Z","last_seen":"2026-01-05T20:52:48.342051Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":820,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/614.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/614.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41220\r\nlast-modified: Thu, 25 Sep 2025 03:59:08 GMT\r\netag: \"68d4be0c-a104\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41220,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x200, components 3","md5":"8f093bf6002d7fae23adeaf827fbd391","sha1":"c116eef6c7229b364bc9101a4e0e79eab19e7c70","sha256":"2de79df4b8884aebf2291f98e4847ddebb934951ca7b7adbc0b3ae4824db9b5d","sha512":"f69e506cc8c0964ca903fec5fa38d4c82960ed6d98876985dc14a55289d2cd376d47c721097761a439aa3fd497da0cd834fa5363ce65fe48af064f8e0054fcea","ssdeep":"768:5qVkyMYpn/Sn0Q9fIvQe5jQvvL/d9ggjyHLOuJW6kZg68DJ3EMzPqfw9eit:5GX3E0QuvQepQRyH3J2OFSfwws","tlshash":"d003f1b8df1e89c3f1d848fa9e620558b5cc8b097d1d2ae65361d93feee80456383361","first_seen":"2025-12-27T22:18:28.778818Z","last_seen":"2026-01-05T20:52:48.34257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":580,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/607.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/607.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43378\r\nlast-modified: Thu, 25 Sep 2025 03:59:03 GMT\r\netag: \"68d4be07-a972\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43378,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"fd1b5b5971fa9e4dd11e5099a0036fc6","sha1":"d99cafa5d66fa5b743af91d3260aa9e5da90c9bd","sha256":"11ff5f39604384c9af28a5261e0c532d91ca0f53396866b1af2ac7e3b80cd75d","sha512":"6358586e89283ff95e15a3d3a98e90e7fe6008c800b88b34005b5dc6ea1066f538179837c5f028ab4bfb8540305e051eef69a906967ec21b49022defcd5f92db","ssdeep":"768:mEFtQ4LxpsZ1Wk9Z31kUZSKUbGZOhBoxevNQpV3KYgjmOjopeIRDqzH4wLVel:naOpsZ1WSlkOSDbGZOhBoxevCV3Jgjmj","tlshash":"7e130264331d0ed2945ea2b75d7c3dc49f192caa5237436cf47d18a3ca739aca45412f","first_seen":"2025-12-27T22:18:28.755274Z","last_seen":"2026-01-05T20:52:48.343469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":998,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":597,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/twitter/twemoji@14.0.2/assets/72x72/1f4a5.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/twitter/twemoji@14.0.2/assets/72x72/1f4a5.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emoji-css.afeld.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 14.0.2\r\nx-jsd-version-type: version\r\netag: W/\"406-6TxaSy7NXY2jPsYPrI/224Y+4Ws\"\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\nage: 2752067\r\nx-served-by: cache-fra-etou8220027-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1030\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"aface973085e388087925fe42cf94fcf","sha1":"e93c5a4b2ecd5d8da33ec60fac8ff6db863ee16b","sha256":"c64d226a7d1d5a7e4b5d9f4d485ee8261082044eb39b778b9d1e56b40c561632","sha512":"aea2577b03fdd1b61c392ed74eb9cde2f8d239544d8585724b914cf1323a8cb421a06a660c5c67f8921d15893790a746ee93adf0524c04199cb22628a630e1f0","ssdeep":"","tlshash":"fa117541ddc5d04b93badaba746d8aa1021c7a741550581bdfe8c5642912a4172fce46","first_seen":"2023-07-05T05:46:41Z","last_seen":"2026-04-05T21:07:55.296955Z","times_seen":51,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":98,"dns":33,"connect":18,"send":0,"wait":15,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/332.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/332.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12686\r\nlast-modified: Fri, 27 Sep 2024 05:56:02 GMT\r\netag: \"66f648f2-318e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12686,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x180, components 3","md5":"ae44d6a00d32b6a1025eb90c63c30633","sha1":"00af4168859b74660f48b2e9d8e917017323a320","sha256":"76c409c4a746484682dd6b313088a35568bd4743d1b1b05a45dc3393b63b5cb0","sha512":"544f92442c68323b60bfcc0ce9b5da10b3c655addee42160c25b70e4e9e88fbfd2dfd173ec9625a15ec21a719998f2218e4b5359f67ec700ff31c0479adc30c8","ssdeep":"384:O/kgXS73bXCuAmGrU0E6r+qmzzHV57v5Ss:Yk9PapEe+qezHP9","tlshash":"de42b05be30560c57ba50d49ff746c4915fea47b222e12de23ed234193e22beb8607c6","first_seen":"2024-10-14T23:54:22.559089Z","last_seen":"2026-02-26T21:04:33.52789Z","times_seen":4,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/611.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/611.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52939\r\nlast-modified: Thu, 25 Sep 2025 03:59:06 GMT\r\netag: \"68d4be0a-cecb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52939,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"a361ee528307cca59e356004cf12ab61","sha1":"2d14077ace7ddca621eae2f7c915448ea43c20b1","sha256":"1b55f5bd050db092a3580fad8883ad26c25e0b35bac8d0c916365b757a71a92f","sha512":"cc965fc83d05fcd5efae239176725ad0517be34a7ff52fcb1bbe7994b18a06198c5a49e91455e929c812fd1c54a0371009e41ea8ae44ae4c14c2b2e302a5f1e0","ssdeep":"1536:69g8rpT8SzGkfVCBKOHGy5nd6zRprTF8jKzVb:69gi6k9eKOHxnIzRf8j29","tlshash":"f333f11d78ccf6b5e1fece7f4a5f0a620969bf0951881f86530b2890d3f22eda5104da","first_seen":"2025-12-27T22:18:28.84118Z","last_seen":"2026-01-05T20:52:48.348913Z","times_seen":2,"resource_available":false,"data":null}},"time_used":998,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":591,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/499.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/499.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9020\r\nlast-modified: Wed, 08 Jan 2025 09:27:18 GMT\r\netag: \"677e44f6-233c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9020,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 333x187, components 3","md5":"72a67c11c965d3ed81ba5122e574537f","sha1":"467ebca11e37142e39b08c78d34db5d5b9ef7458","sha256":"8325d819d570b961703a2d3f867094646108c57f4e408dc22317e1ef8bd7fb6f","sha512":"0655cbf6f33ad113bac6d8c31f8c3a3ad0c96fc6ecda373071418988c2789f6905ff0d196422b192d023784e5a2d8e77e38897299723f24e06c7ba6ee8f28d6d","ssdeep":"192:mVIyS6FZLiKoQ6NRrqTKMq50FKZgD+PApYtu1kBXyGtK:mVIuZLiKoQopbMqO1yPApYBL8","tlshash":"b712bf9c969ab112f33c728d6c3a23f24383df12721e48bc0fa90699fb75b440791979","first_seen":"2025-12-27T22:18:28.770286Z","last_seen":"2026-01-05T20:52:48.349823Z","times_seen":2,"resource_available":false,"data":null}},"time_used":999,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":601,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/608.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/608.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68278\r\nlast-modified: Thu, 25 Sep 2025 03:59:04 GMT\r\netag: \"68d4be08-10ab6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68278,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x200, components 3","md5":"918592cec6108e9704edb5df3490e276","sha1":"28e0c409eb71149ed24be6d70c5b64463a54739d","sha256":"fd41b82869159a76c592aac6a954ebc05eb6bde16c6fb00e05ac367c97c165e5","sha512":"3c6d9a158c4cd72a97ed71ec43f89a7837f4cb9ba535772d3c898e295a18db0aebe9d25ee6d954f7df6b58c3b49e2d9523eb52089c84a60bb58b285c422efd4e","ssdeep":"1536:PFBwEeboskasiQ21O8/GGasL8t4gpD8Yr+E80KNz3d:LwE5+16Ga68+gpoyc","tlshash":"736302ab9bd297204644984b1dd25f6fd1bc34f804255ca79a8831e3d4b8f6682fa372","first_seen":"2025-12-27T22:18:28.846666Z","last_seen":"2026-01-05T20:52:48.350703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":751,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/376.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/376.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16075\r\nlast-modified: Fri, 27 Sep 2024 06:02:03 GMT\r\netag: \"66f64a5b-3ecb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16075,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 352x198, components 3","md5":"39328c7093c1dd0846240588595c602a","sha1":"328215951baab00ccf6bee35ae96447193c21fe0","sha256":"2419e4c4cd5c42d0757e7496ca2f0ce22988a71647f625e3ec3456ea8d0671f5","sha512":"b3f31a6bd33a809fc973371bbbf86fdd1a1943e34a96b1041b6979184fe1c84ce270aed8e3a1dd258a17b3eeca608eb8b9ca7a7ea813a4965e2b16f3f2a0c392","ssdeep":"384:iXmI5B32cv/4t6kXjYrve4f8fsbT9foe7CWzX+jLp2p7bt:i2I7DX4t6rrv/9kWKnkbt","tlshash":"3372e0a7c2ccc1c21ac64a270a6204d76782cb3d68753a8b5577722e8c579fdb93e4e0","first_seen":"2024-10-14T23:54:22.650907Z","last_seen":"2026-01-05T20:52:48.351611Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1096,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":718,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/650.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/650.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44552\r\nlast-modified: Wed, 26 Nov 2025 20:19:06 GMT\r\netag: \"692760ba-ae08\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44552,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1280x1281, segment length 16, baseline, precision 8, 300x200, components 3","md5":"46fb0737d16d7103c6cc2f5c2845704d","sha1":"6d95a708623940de4f840989022eaf595833e64a","sha256":"9015899865a714e2a4b363d05bad0b874bacbd317e3c51466bbaf37394b1659b","sha512":"b0e6845956a7409870d319244d77eb2e5360993d4ab49ce5d446867878dbcfc324ccc317d89585193245e7eeb426f64b3d0a04ec7ec80d6ee12daab87e0c3947","ssdeep":"768:80K65L1wq5sENY4MJe9Ob4x/hfoguiOHi4Smy7ndR0+GoZNpNQjAg7LF6W6Z:Mi35sENYXe9OMx/RLu6P1dR0iNIjpLFq","tlshash":"3d1301d8f7bece2c991644305b5fc90bb53ec5adb2586f26d7f90022e4ad45e7ca4280","first_seen":"2025-12-27T22:18:28.848255Z","last_seen":"2026-01-05T20:52:48.355348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":603,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/video/select.php?r=10433058\u0026btp=0.01\u0026srs=645c0c4f68d4c24230c8afb83513aad0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fxuploads.com%2F\u0026atv=74.0\u0026cbref=","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:16.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 23:08:46 GMT","end":"Sat, 07 Mar 2026 00:07:30 GMT"},"fingerprint":{"sha1":"D5:B9:71:11:A1:C5:BD:EA:60:68:49:87:01:4B:0B:CB:81:8B:FA:6C","sha256":"66:19:A7:E1:FD:B7:41:C7:AE:CB:33:20:81:70:04:52:48:C8:D0:0E:66:96:B3:F7:FE:B5:FC:10:FE:48:0A:44"}}},"request":{"raw":"GET /video/select.php?r=10433058\u0026btp=0.01\u0026srs=645c0c4f68d4c24230c8afb83513aad0\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fxuploads.com%2F\u0026atv=74.0\u0026cbref= HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xuploads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuploads.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 20:52:16 GMT\r\ncontent-type: application/xml; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: https://xuploads.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-credentials: true\r\nset-cookie: adcshVastUser=c05c5170-7919-4101-8396-51375ce8660a; Domain=adexchangeclear.com; Path=/; HttpOnly; SameSite=None; Secure; Max-Age=2147483647\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W7iMWj74oUiYoQRtyX%2FO1mrlEdHc6couFyXiPPHbB5rRxLrfvsNdW7CmlexUztsNe9fWEHNbAHqESNk5Ys0AbkZaLvLs6UL2FtzlrtqNOJ7QIkM%3D\"}]}\r\ncf-ray: 9b95dbc2afd68be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6190,"size_decoded":0,"mime_type":"application/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (726)","md5":"6d67779292aa9766c34f509d0edce1e1","sha1":"b7049fb8cc07184757abc2a06a21089e4faec8c8","sha256":"630d2b8635b9bdbc45b0e437d947a7092c7bd3407800548170c441a542af9bbd","sha512":"28edca372eed679d7a27694ba3b7f0ab561208a65415ea1e5e3f80bd2f52ad6994af6df270c57fdbcd54046100db42cf3c23b50016ac941e2d30641aca0fc321","ssdeep":"96:xRxAdvSVq3jfO/xYZ8REWn3EsYgQw9whCR5x3jwHEcNVIbi9xEA12:xRxVWjeGWb9whCzxTwFNVIbi9xEJ","tlshash":"d3d119e306d46cbe1d9c10649d38f48e5f58768f5da15c41ba0f74d6df0ec1a14a72d8","first_seen":"2026-01-05T20:52:48.356364Z","last_seen":"2026-01-05T20:52:48.356364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Chelsea+Market\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:14.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Chelsea+Market\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuploads.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 20:52:15 GMT\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":883,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b05629c514419cd1ea382d1a3b31e9ad","sha1":"1f20a04bb88b5a21e7589a78e99b2eed9cf75f40","sha256":"48917b83d335b7b31130cf75947fc1405542b98435f0dac49cfe92de3102314b","sha512":"2911b90ec243b73e6114bdee8d9e208bb2a1fff56c5d6a394cd17731d5ade056a735b9872949d95d63bd9a27420e5b5dd565af62e82a1bcf2b2095c9d820ea7e","ssdeep":"","tlshash":"f5112380042b9810dba30cd411d97e27ee1e13516880c869effd0894adbbd594301f0d","first_seen":"2025-09-28T08:56:26.029386Z","last_seen":"2026-03-17T15:35:54.204318Z","times_seen":12,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":352,"dns":3,"connect":18,"send":0,"wait":34,"receive":0,"ssl":360},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/502.gif","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/502.gif HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/gif\r\ncontent-length: 516485\r\nlast-modified: Wed, 08 Jan 2025 09:27:23 GMT\r\netag: \"677e44fb-7e185\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":516485,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 298 x 240","md5":"22b9aa588b2c2535498b0398c7402019","sha1":"80ff7ca9e3bffb2c91f660a324724143cfa3eec6","sha256":"08d2ad76634f74174a511deeecb2d84cc44fdabbb03323b4daf51e5f53a3437d","sha512":"3e73952e029908daa3f95ad91225e6be9a0ba577f355fa8c0b7562bdfe2aa3e2c194a8c521afecf76f6a4ecfc059a5f6e0b30c29bce00d4fddcab858bb366359","ssdeep":"12288:aZO0fHgjQfOTFLkk9M3cR6qccBkzu6QxLAwwcVrK:l0fHmQfKkkloq7zjUyVe","tlshash":"8bb42349e88b7e619f211abeddf0ffc08825543835b25a29784cfbb707bea08451179c","first_seen":"2025-12-27T22:18:28.738672Z","last_seen":"2026-01-05T20:52:48.367454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":794,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/630.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/630.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21731\r\nlast-modified: Fri, 31 Oct 2025 05:53:04 GMT\r\netag: \"69044ec0-54e3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21731,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x250, components 3","md5":"2495c52fc8ba5dad9852d4bc782ed9ac","sha1":"0daa4e9c5c2ce3c4f100a002f59ee0864dc8bc09","sha256":"c7d5d79f76fe11217bb1e192bb5fa1abbdce63e7f2229bd0c7a7855c8edcc4a4","sha512":"21e0511416312a457c2aaa9215fc7d932254acd53ccb51ade75f87875222bd98c46f1b76d43debda7d03967edc5fcb2697154255cd983e8a62630a34358da63d","ssdeep":"384:8Ko8Ccd4Z7Tacd+ERxcGrCxq2Z1AnHQ/zI+YhJ1nTCEtA2L6BWXlDMoSxFEKnV:8hru4hecjxCx5X6MIJhJtCEtv2BADI/X","tlshash":"96a2d0957b1d193349fc6168fa55e10270c7280ed43db97045fe2272839f4d23558bae","first_seen":"2024-08-20T12:41:11.17824Z","last_seen":"2026-01-05T20:52:48.368494Z","times_seen":3,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/366.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/366.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11001\r\nlast-modified: Fri, 27 Sep 2024 06:02:02 GMT\r\netag: \"66f64a5a-2af9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11001,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"8406a282c13265535964ff7463a754cb","sha1":"c6c81bfa4e5aae9a691d21381128997113bd6069","sha256":"cf700d4afccf8f4ce7eb7a371384e3a57acc0e0dd183fca7c10e97621572f23a","sha512":"225d735c637c65067c8d632dbde5b7243a9f59d5464c53e4c08fc8f9e77343d2fdcbe6053dc34dd7e51792f858d25ee06f8995bb40195a99be6e3cbb060cd63d","ssdeep":"192:j6L0bKlVjFL1QcIUssVaTHCF1sRTS4RutTu6FMHbASBIEM9pWtyo:j6L0bwl1GYa7CFwS8u3FMbASBIEYMX","tlshash":"5732bf8d9118375ffda485369c87290d7d48ef8be44c52db26d4e1d07e136e78ca0918","first_seen":"2024-10-14T23:54:22.609485Z","last_seen":"2026-01-05T20:52:48.369616Z","times_seen":3,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":436,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/682.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/682.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36477\r\nlast-modified: Wed, 26 Nov 2025 20:25:06 GMT\r\netag: \"69276222-8e7d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36477,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 300x200, components 3","md5":"9acd679c710737f41c45e8e1a2c6f5d1","sha1":"fc7409953edd43389f61d15c069266fe66742511","sha256":"7a28adfacbe7af2f9b8785719b4ef0e46c04c8e3f2a1077c29274ce152b7751e","sha512":"d8acf93515dbd591858c919dab8c3cc0d026c9c122f2754bd2d56784f118a9f38091b6a473e9b1d7ffd694037259e78bd54c0b1deaebfd5b87f83cf33af7272e","ssdeep":"768:cONMHZP9pm0hgJFsLYM1WF1saPHCfGf5fUP26bVSmnGxaq:cOaHJ9pmnFXo8b6fqBJ6bVSmGX","tlshash":"10f2f1582c749f42fe881734292f947d91102a6a12d95fcccc03e9b1da8e931763e6fe","first_seen":"2025-12-27T22:18:28.761387Z","last_seen":"2026-01-05T20:52:48.370547Z","times_seen":2,"resource_available":false,"data":null}},"time_used":999,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":604,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/437.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/437.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9614\r\nlast-modified: Fri, 27 Sep 2024 10:58:03 GMT\r\netag: \"66f68fbb-258e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9614,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 300x225, components 3","md5":"6befbf0bc3d36e930c6b86e17ed52f6c","sha1":"a88350174486777bddab89ab95b0a0829eb80358","sha256":"30d6c1d8998b0cc1dc64d1aeaa9dfb213575fb96acfa82f50d602ead26afab56","sha512":"62dd594998a45e2ce63e1079fbd735c84934782ee61c3f5e6ccca2f758de1e6453bccb6797a1ecd7c4c16b92c9ea6ad307d9b045305c7aadaf6dd0272103c7e1","ssdeep":"192:Wrzlt3VxCNm4jDdlbJ/hNPgsmlKD+Lt+ZJhv1coBVeZnuy24Y:Wzlf4/j10/4Et+ZJhv7jes4Y","tlshash":"93129d8517ebd936e7734db1f1a0bc195ec2d6332ca54e3caa64023e8a74d7105b2b93","first_seen":"2024-10-14T23:54:22.701534Z","last_seen":"2026-01-05T20:52:48.371928Z","times_seen":3,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":607,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/419.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/419.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9012\r\nlast-modified: Fri, 27 Sep 2024 10:55:04 GMT\r\netag: \"66f68f08-2334\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9012,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 180x240, components 3","md5":"87863e7a617886aa477047cd86b1f7ad","sha1":"5fa3655b244c491540f160a983bce1ad28ddcf00","sha256":"1dfa84cf7e499d63410d1fb081ca0cc5f42b39e3a2cb3ab91fb4f90793a4a79e","sha512":"332199b1966a998fd5e4c6e875382f0675cf2d98e317e9cfbaa4484ac3c5e6f11669a8135004f8841e9079824cb7649e8023d3bfd3dc31264b2c015347e80b16","ssdeep":"192:mxE8uqr6BB2xjwjwrowJLTTmcAL7PFnLwP7NI7aiUzVTzqAlQ:h+OBCwjwrzTKcALjJwP7NuUzVTWCQ","tlshash":"2402b0b529694d1e8728ab3c08b33c175289542106e35ef6d28e57769df1d76dccf420","first_seen":"2024-10-14T23:54:22.59776Z","last_seen":"2026-01-05T20:52:48.372903Z","times_seen":3,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":608,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/447.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/447.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11584\r\nlast-modified: Fri, 27 Sep 2024 11:00:04 GMT\r\netag: \"66f69034-2d40\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11584,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 300x192, components 3","md5":"69d41a8a4156c91d4212ab3a274b652e","sha1":"790106a6147c5bd7d08c053dcfae8bf4b3e1637d","sha256":"53a2e63cd5087344b36e9f117cfb20614632194e1efa77ddd89528d891a2d260","sha512":"62ed69cb2aebacf866707f06dd7a55ea1aba0d1ce8db97b65b139be5fde39ab90d34f560b7dbb1758275e09da720626ef3f856c87b16cfed69abd2157e72dbf0","ssdeep":"192:WtYq8RnzFLzDcx84flJ4qu5NMkO4xTeL/I6tM6PJ4BMfOH0FKECvaDAU7H6:Y+2JJ7k5qxua4BMmQovSAW6","tlshash":"1132b0e700a49f2ffb5966157e09abaccbb3c55845d43039c0ae7334280edfea126646","first_seen":"2024-10-14T23:54:22.579738Z","last_seen":"2026-01-05T20:52:48.373842Z","times_seen":3,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":609,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/rums.js","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /rums.js HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2675\r\nlast-modified: Sat, 06 Dec 2025 09:05:52 GMT\r\netag: \"6933f1f0-a73\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2675,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (560)","md5":"54002d1f815f7555da35b994d771b5cd","sha1":"ee59dc46a1cd507aa19088a668a7ed4adbab5d5d","sha256":"ffdb85dac66ec063278e386c7e1f569d0b6e127bfcd7936d1a31544d0426e055","sha512":"4338efd4bd99d3241a9807c0d2d85c1e3af5fa1e8e84c2f508c51e6eb0dbb093004cc09f27f9e624a470957aa2891552abb478c259bc2d348975a31b4b998f46","ssdeep":"","tlshash":"6351522564a5502f6237135aaf7e8b9db6327c01714bac39c22d52f13490c53db4ecba","first_seen":"2025-11-23T23:22:37.306537Z","last_seen":"2026-01-05T20:52:48.374687Z","times_seen":4,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/385.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/385.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19060\r\nlast-modified: Fri, 27 Sep 2024 06:02:06 GMT\r\netag: \"66f64a5e-4a74\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19060,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x225, components 3","md5":"dc4671edea15d2e2e3c779b0d516f114","sha1":"c25501d4ad64711d6b031ff282f7c02fe550b333","sha256":"683f959bf7d514adf35732cddf6d43e009083c85d9611ba9691a9e7b41ee5878","sha512":"b40a5a12524d3796192893c3d7e3bcdecca8643756cadf3552a241fbe85d34bb49a5d15285a13d55e9243228bbde515986d59174e6435d69beee68f7bbb8c366","ssdeep":"384:g9NfWO1D/Oc5cYOLZ/CoM9qI9hE8fa5q0K/4LsXtgAPS0GwSGD0Em:INuo9YC9qI/dfjb4Yg30Gmm","tlshash":"fe82cfa310892b63d31c7176a95ca8b924a4ee6c57a1961fce7408e4a35329f48c392b","first_seen":"2024-10-14T23:54:22.591605Z","last_seen":"2026-01-05T20:52:48.3755Z","times_seen":3,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":435,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/423.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/423.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13917\r\nlast-modified: Fri, 27 Sep 2024 10:55:08 GMT\r\netag: \"66f68f0c-365d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13917,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 218x240, components 3","md5":"6f9e7c09a3c8e6a22dfde22f865ee321","sha1":"8f3814029bafb9a1bbea124169224dd56a7aab87","sha256":"b7d649cec2862f552645bb4560de68a6052db1b38132f925188584fa2d53a048","sha512":"7ccdea6db59dd3a313e186b6b3db0e32eff26f0bfdd0f716d86be10694999d2f506a709d32a09de9f79166c72c24c70c4c4a1f02efe88a2dc6ceb2b29fca4796","ssdeep":"384:lnW8H9sNFvWXgKCVp/ZiV/jSRC2GnIILB:teFJKUzicC2GIwB","tlshash":"b552c05a3b03827e4879e07964bbb66ae30c9b91842e0acf0d646afdd43d0d5bc51c0f","first_seen":"2024-10-14T23:54:22.604561Z","last_seen":"2026-01-05T20:52:48.37673Z","times_seen":3,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":438,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/368.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/368.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19283\r\nlast-modified: Fri, 27 Sep 2024 06:02:03 GMT\r\netag: \"66f64a5b-4b53\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19283,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x240, components 3","md5":"af35bbb7097e3d39a687b64c4357babf","sha1":"7accd1c7a32b3f09e73f8d68e9fa4d05fa09bafc","sha256":"7def80d740af5e2fa2bd6b5d20caa650aa6b209f45cae4354bdb15f42230bf56","sha512":"68d1501e21bd9d768a0ad5003d10812fb91b7ad3355abdeeddcbb1ed343fdd0292a1b4fdd7c2a87d37de4c0e03aa1225f8ed1af80c7be8490c60ae13af72afe8","ssdeep":"384:PI89yUV+Vj+i8P/51SfMKpTaWbxpFcaXUdRt+epBYzdUCVKKEr3:PNMKi8351SkKBaQCUUd/ZBEdUudY","tlshash":"b782e1c6f4973f8a2bdedf35a992d6ab9304238285ef466f50885c0a1158474f8cc01f","first_seen":"2024-10-14T23:54:22.639836Z","last_seen":"2026-01-05T20:52:48.377871Z","times_seen":3,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":439,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/664.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/664.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22780\r\nlast-modified: Wed, 26 Nov 2025 20:22:05 GMT\r\netag: \"6927616d-58fc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22780,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"ba3c2e6b08b13280c8fb09ee36ebee5a","sha1":"60310f654aa00396ec0a042d0a4a11fad9afbf80","sha256":"54fd6711189cfdee581cb84218c698075c4b3c0e9822b9a3f1ea6fd39c702dd0","sha512":"be83f34bb134a1dd030c8cf9bfbd6db235c2d9d2cd0311de08e654e4a3a1e21cd9d51605f01ae4ca0a53fa720873c259b1ac21aa3e7c50e3b681768a1f30025e","ssdeep":"384:rl4TGhfyBRRFK+NQDBjZb6OhtKklMFLZDHPoigziygjMeTm/G0AR7vRhtyIe:9ZybRXNeBjB65YMFxQpziyTtGxP3e","tlshash":"58a2d106b293a74bf5f3c5f3045607de49b6e22bd857845d300d2091ff15019a5abeeb","first_seen":"2025-12-27T22:18:28.708167Z","last_seen":"2026-01-05T20:52:48.381638Z","times_seen":2,"resource_available":false,"data":null}},"time_used":998,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":598,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/688.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/688.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15537\r\nlast-modified: Wed, 26 Nov 2025 20:28:04 GMT\r\netag: \"692762d4-3cb1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15537,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1280x1281, segment length 16, baseline, precision 8, 300x200, components 3","md5":"21b7b30eef8cd36bb0562e62b33d2b9b","sha1":"6e5e2a9c98a644b2cf20c8c03d359802714f50d8","sha256":"1247dba9c369c413b39c542fc57e913188e27655bda0cd210fb1117637c90b62","sha512":"6de42dc21f7c09c2b9a9dcb7f616eb674669d72ce38885001f563a608a66e8e4ff06a37048047ba9f0edb86ff0227ad26d76622a5c6a37a442be9bb2439cbe24","ssdeep":"384:PqzvsLBe/46yO+pkwMJR94iwwQSGpn/iio4:PesM/46yOMMlQTp/ho4","tlshash":"0f62cfe1d33c9e8a2c0f5662ed2bd270db15d4aa30e5215434aab8a4c8386676733d7d","first_seen":"2025-12-27T22:18:28.83512Z","last_seen":"2026-01-05T20:52:48.382543Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":721,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/690.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/690.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33732\r\nlast-modified: Wed, 26 Nov 2025 20:28:06 GMT\r\netag: \"692762d6-83c4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33732,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1280x1281, segment length 16, baseline, precision 8, 300x200, components 3","md5":"d41ab0c5782cdec194a9499ccf93b648","sha1":"a78c36cc2acef03f02fe8ee65ab01a6279a1b806","sha256":"5e864c08ea0266f7df5f5e013c73c64c48f4dbe8d293bb7b1007d399e0dc1a3d","sha512":"fea28fe0eab7cde8ce04a784d874d2d9246e19b17e09250eb03cf1470362537ea79d47bbf0f5b34ae1e10b9ff6919ad69999c042976c74411c3b1ed33d47a467","ssdeep":"768:FTJmstqd9vPX0WJeNiW3uDu4NdXFGMIJ70s8yfM5osOB9Q:FTQKqd9m3+uQu0s8VyLB9Q","tlshash":"31e201c2b5854de1db9fbe7a42e3563bab43c167784f7660d325ac78f07ad8481e8110","first_seen":"2025-12-27T22:18:28.727023Z","last_seen":"2026-01-05T20:52:48.384981Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":589,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.782721647210221\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:16.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Dec 2025 12:57:52 GMT","end":"Tue, 10 Mar 2026 13:56:16 GMT"},"fingerprint":{"sha1":"77:2A:71:0C:1C:F9:2B:14:04:DB:13:5F:A6:57:67:6D:B3:A9:A0:95","sha256":"E0:53:FF:DF:EC:31:75:79:08:DF:B9:B1:56:18:5A:48:15:62:EF:8B:BB:4C:1B:05:1C:E8:DD:3F:0C:A4:80:41"}}},"request":{"raw":"POST /ut/hb.php?cb=0.782721647210221\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 1426\r\nOrigin: https://xuploads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuploads.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1426,"data":"{\"clientHints\":{},\"isScrollable\":1,\"totalClicks\":0,\"sessionLength\":0,\"ippMissclicks\":0,\"visible\":1,\"caught\":0,\"lastevent\":0,\"isFullscreen\":0,\"isTabFocused\":1,\"eventImps\":0,\"retryCounts\":0,\"isScrolled\":1,\"isMouseMoved\":0,\"pagePercentageSeen\":10,\"belowTheFoldSeen\":0,\"touchEnd\":0,\"touchMove\":0,\"clicksByType\":{\"idle\":0,\"input\":0,\"video\":0,\"button\":0,\"link\":0,\"img\":0},\"browsingTopics\":[],\"ufp\":\"Win32/Mozilla/Netscape/true/false/1280x10240en-USunknown4824 bits\",\"sessionStartTime\":1767646336,\"sessionId\":\"645c0c4f68d4c24230c8afb83513aad0\",\"timeZoneOffset\":0,\"zones\":[\"10433058\"],\"pUrl\":\"https%3A%2F%2Fxuploads.com%2F\",\"pReferrer\":\"\",\"pTitle\":\"XXX%20Uploads%20Free%20Porn\",\"pDescription\":\"\",\"pKeywords\":\"\",\"pHasIframes\":0,\"pWidth\":1264,\"pHeight\":10600,\"vWidth\":1280,\"vHeight\":1024,\"inIframe\":0,\"bsd\":\"eyJwcm9iYWJpbGl0eSI6MC4wMSwicGVyU2lnbmFsIjp7ImlzV2ViRHJpdmVyUHJlc2VudCI6MCwiaXNDRFBEZXRlY3RlZCI6MCwiYXV0b21hdGVkQnJvd3Nlckdsb2JhbHMiOjAsImlzV2luZG93Q0RDIjowLCJkb2VzVUFDb250YWluSGVhZGxlc3NLZXl3b3JkIjowLCJpc0ZpcmVmb3hNaXNtYXRjaCI6MCwiaW5jb25zaXN0ZW5jaWVzIjowLCJpc0Nocm9tZUZvclRlc3RpbmciOjAsImRldGVjdENTU0Fub21hbGllcyI6MCwiaXNIZWFkbGVzc1Blcm1pc3Npb25NYXRjaGVkIjowLCJkZXRlY3RMb2NhbFN0b3JhZ2UiOjAsIm5vUGx1Z2luc1ByZXNlbnQiOjAsIm1pc3NpbmdXZWJSVEMiOjAsIm1pc3NpbmdBdWRpb1ZpZGVvIjowLCJtaXNzaW5nQ2FudmFzIjowLCJtb3VzZU1vdmVTY29yZSI6MCwiY2VudGVyZWRDbGlja1BlcmNlbnRhZ2UiOjAsInNjcm9sbFN1c3BpY2lvdXNTY29yZSI6MH19\",\"sentTimestamp\":1767646336260}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 05 Jan 2026 20:52:16 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xlZ6ta5ajV9VrDsH18OcUcZRGKWcjqZ5rKfgRV%2BvhfK0PF%2FHMq7NtUlc%2F6ghPO%2Fk8K5okdLM41Rdu11XYn2J8Pq8hwRNZgHXnIyZuno%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b95dbc2ffe5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":55,"dns":20,"connect":1,"send":0,"wait":153,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.8.1/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:14.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 03:34:08 GMT","end":"Thu, 26 Mar 2026 04:34:02 GMT"},"fingerprint":{"sha1":"D1:EA:76:08:25:BC:20:E2:FA:54:3D:E3:40:8A:F2:45:22:8B:42:77","sha256":"6E:5C:20:08:E4:D9:B6:48:59:6E:59:61:1B:E8:F2:1C:F5:04:FB:BA:9A:84:E2:B9:93:45:CB:E2:0C:EF:E3:42"}}},"request":{"raw":"GET /releases/v5.8.1/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xuploads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuploads.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 20:52:14 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6DRRPMeBvZHgpSnB%2FEQ86nT7WAEUJK1vqhEUMRuO0NTb9AyZ%2Fa3xACwbk2jyzqWi0wVDofnqzVTLWAEQXI2rqJXjRGsC%2FoVd3BVTHQ3UvDM1HKo%3D\"}]}\r\ncf-cache-status: HIT\r\nage: 2013161\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Sep 2023 01:45:55 GMT\r\nvary: Origin, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e4c542a7f6bf6f74fdd8cdf6e8096396\"\r\ncontent-encoding: br\r\ncf-ray: 9b95dbb988625ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55111,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54926)","md5":"e4c542a7f6bf6f74fdd8cdf6e8096396","sha1":"3a0571a695a35f238026b9398386dc99d9a0c56d","sha256":"eeb17a45a48aca1d7adbcf04de155dcd0b47cb36ad036310446bb471fea9aaa3","sha512":"80c8d07836842c9d2bc8223e16d22dbac53d3240227c265c1aaefcf45af3922338f43f256c38686946885f8012535f3bc287cc3658012787246eb5ccf6c13a3e","ssdeep":"768:guC31UP18Pq4/vnU63HJXkQCZ/WMQyjJKX719sGsQz5:gu5PWC4/vzH5BCkgc7zsiF","tlshash":"76330ab8e54c41d9a731c44fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c9fb9","first_seen":"2023-04-05T14:33:33Z","last_seen":"2026-04-06T08:27:08.699182Z","times_seen":21274,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":8,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/625.webp","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/625.webp HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35458\r\nlast-modified: Fri, 31 Oct 2025 05:51:07 GMT\r\netag: \"69044e4b-8a82\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35458,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e25b372c2edb9d548187721f3285c3b7","sha1":"77be71118ecdaebafe7beba12bec50be5af0eeae","sha256":"af72dc3e483c7314ea98081d6d3c588c04d040ac567680029b9b2738ec2e6b8d","sha512":"7a42d4cacd1a17aa14f442b54d98508c62ad210d21c7af23fc5605cdf0bc4f46ab6be948ac72c960d0b53d173a89f29d4d7dfd2082a3e3943e2587e93c586e02","ssdeep":"768:jn40/Irjzu9hvmusv7lZSYfUMX04Brbq4PUFCoqa:fiM+DvXJPUMja","tlshash":"17f2e1fc2fe4e65d7cf0505cd82f3b619480ebb1a6c7940a220e4913c4d7a46af8994f","first_seen":"2025-12-27T22:18:28.743475Z","last_seen":"2026-01-05T20:52:48.38964Z","times_seen":2,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/450.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/450.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11571\r\nlast-modified: Fri, 27 Sep 2024 11:00:07 GMT\r\netag: \"66f69037-2d33\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11571,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x200, components 3","md5":"8420eeb1a69193e130b0ba6b8bee47b6","sha1":"a52c89c5c3da3f45194e654f5e38bb70217f9c75","sha256":"cb9c1bdcc2e757bc68afcf1cd8612f57a2131e25284328bbce57eb9a8c8966bd","sha512":"205ae00d09fc7272ff6a177d1b00ca9f4c3034ea46673650bfca3dc6368e7042c08e11619c7a6a7bb435b150493487f9cb1c00e3394f99193b27aec6d25f814d","ssdeep":"192:m+z0pShY74K6eFPkO+ECm23SpP/wcM61OIlsb4jQ20VCFND:30u+BeO+k/wcM6zlnjrsCFB","tlshash":"f932b017711f9aaabb33607a0aacd65667f5a4010f307775c9e9235ab02fc7b6c11c0c","first_seen":"2024-10-14T23:54:22.697254Z","last_seen":"2026-01-05T20:52:48.390941Z","times_seen":3,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":437,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/538.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/538.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34581\r\nlast-modified: Thu, 29 May 2025 07:23:13 GMT\r\netag: \"68380b61-8715\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34581,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"feb22c81198c30944cb066ea2c024587","sha1":"d9b7ee966ac23ee9f7529591587df2a53364eb1d","sha256":"e217ab2d6acb8bfbb1ed7d973608132407029ce62c6d671b7e86b7c570f551f1","sha512":"4925a7fdc92fd512027828a8b46dbc6dbc5cc30c573d9ccea367ce815e6ec6cd43a7ed9f1f0e80b7bc9e9f38cd76566417e845b06ecebed1fc8ccb73a5434c17","ssdeep":"768:Mo2o+Xv76SzwzEayg/YD7/OvK/WFDvCRM3Vi3gqiCFZ:MRv76SszE/IW/OC/SDvaMA9vFZ","tlshash":"bff2f1c9b475e30de218b4d76d520ce007b9898662258d3fadb61a7bec05e281ce4f75","first_seen":"2025-12-27T22:18:28.766502Z","last_seen":"2026-01-05T20:52:48.392307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":605,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/430.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/430.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9197\r\nlast-modified: Fri, 27 Sep 2024 10:56:04 GMT\r\netag: \"66f68f44-23ed\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9197,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 160x240, components 3","md5":"aafa3a9ebc62a281c206ef82c4cb78ea","sha1":"05a1e76931633abc15d8b21f8579cdd887426254","sha256":"f980541751588626385725b00e4ab183518e5c76a176895e72ab7a8b465ebe7d","sha512":"39c4e9b664ab1fb09fa612e51d39fcb79effde674ee5cc474b6f4965a15a825765686a69855a5be59067c0e64930bf68aacb848e09de472997d184be03667120","ssdeep":"192:fMyUTpJ6erh71yzSeHgO+qdvvqflbxYRFHZcJJpOsMluWNkC+Py9cthz:EyUVQe970SmdvvUxYTHZc/vuurC+Py9a","tlshash":"e7128f873adcda5bca48f57c20c8c4c3331a5d307f35f9dc69e5960a6ad16159c9e608","first_seen":"2024-10-14T23:54:22.538916Z","last_seen":"2026-01-05T20:52:48.393553Z","times_seen":3,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":609,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/639.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/639.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34925\r\nlast-modified: Fri, 31 Oct 2025 05:56:03 GMT\r\netag: \"69044f73-886d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34925,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 380x214, components 3","md5":"10bbb68596ee699e41d4150845148504","sha1":"e2650300eb5e3a08cf9eccb8624d3e8487a9c18d","sha256":"298058cab47bc33f2da274739772e46fa5edadedf827cfed5beafd9380ccc209","sha512":"9832ab94c5475f27c1f5048bd1c427e517ccce99fb1bb245bfe65812d1c9c271788d2c656b600c94f62c86d139215f4460c4e188fa32b40de6ce0ccc91a0b89b","ssdeep":"768:MaalhXr8ARsC/6/D0vHOy5XzEf/rc14aldsZbsiwL8YV0Sg:MaUgKs9/DGtXSc1lrsxsiF1T","tlshash":"c9f2f25a7c9013c8a72f99ec951cbb6ed66121c3a86ecd9cb01c7074e0e7369c8d056b","first_seen":"2025-12-27T22:18:28.77342Z","last_seen":"2026-01-05T20:52:48.394511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":717,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/favicon.ico","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:16.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 22 Jul 2025 04:31:22 GMT\r\netag: W/\"b52-63a7d107cceef\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-04-06T10:25:12.839466Z","times_seen":5622,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/695.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/695.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29480\r\nlast-modified: Wed, 26 Nov 2025 20:32:04 GMT\r\netag: \"692763c4-7328\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29480,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x200, components 3","md5":"a30e626e0d3c9e4e472e4675d329488a","sha1":"c2cc8c1e163511f4780d68584d23602821516688","sha256":"800e2e6ec9af2b3b166e2cf005d53ba129f08b2774d4fe9f64ebe4dd48eeee97","sha512":"052f5629e186f6eef6f9a25db1d536b4a601013c4d44b2fcd614fcfcd21a53c574f7fdd38456df2c92d5fb5e5718d31cce037d2df37cf57ee2099416e0f4d228","ssdeep":"768:FgkNAmPqAyu62t+ZEJIIAlLg4Ukd4jXlq:FLuhJR2wE0lLxUkKjVq","tlshash":"a8d2e15306fe5f1fe9c57c287aa82927837d12329987fd1170878a8aee309498df5057","first_seen":"2025-12-27T22:18:28.837144Z","last_seen":"2026-01-05T20:52:48.398121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":864,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":443,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/372.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/372.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9191\r\nlast-modified: Fri, 27 Sep 2024 06:02:03 GMT\r\netag: \"66f64a5b-23e7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9191,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"a2594dd0aa89c21a565ae6e64be0cc62","sha1":"bfe8671e5080f52bff28d6d87fc0982ad8a69bc8","sha256":"336283e074c758e76b2b11dad444f2cf2c577c3f2291d3705147d245ccb8b2b8","sha512":"cff4252bf1ad1c80c66bcd4268b72cf7db81caad480e9acef26000cc2f53d74807c30fa0b3bc3fed916f4532f6dd1c0a4f0df51f908c86bd3e3a035789cda7f2","ssdeep":"192:v9Iz98PrWAKDaWebrYMludMLnhudt1CA+nCP+j8AlD6hWWXWpHxis8:Wa5oUO2kdr+G+jjuGe","tlshash":"b812aff137107467d732e83dd0926293a62429179a28e287fdb78e01129ebf7406f918","first_seen":"2024-10-14T23:54:22.551676Z","last_seen":"2026-01-05T20:52:48.402868Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":589,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/503.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/503.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7490\r\nlast-modified: Wed, 08 Jan 2025 09:27:24 GMT\r\netag: \"677e44fc-1d42\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7490,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 300x225, components 3","md5":"de5c56159735612b0dda6e67ef7de351","sha1":"a036738d29378e564cb22f2b359ac1e3b1e4c8d5","sha256":"24c79ab9e47e7fe0ea214ced829c1bdb4d745081fca983aa0cfcd7f731e85120","sha512":"6c09bbb751551b21af7786353f5c37d702670354ca6b15293983952b0ba32ccf7b514d28d35ae11221cefef672fc9952b80c86bc993b7aa697d320b63ab5ed99","ssdeep":"192:WxbraoZ+DKGfu7nHhinGrSovVSBKVkVzSqp8mEPjC7ja5yE:Ubra0WurHQC7jVASqOLOS1","tlshash":"83f1a03daf82e66e9bc51836aa8947b5f40d89507d33e43427ca0d8be310fb15a1511c","first_seen":"2025-12-27T22:18:28.750551Z","last_seen":"2026-01-05T20:52:48.40708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1093,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":720,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/681.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/681.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32783\r\nlast-modified: Wed, 26 Nov 2025 20:25:06 GMT\r\netag: \"69276222-800f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32783,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x200, components 3","md5":"780df6cb7f69f8f7c6de148e47b6a6e3","sha1":"f20a314984062b292c594bc7c23ee8a40d9d013b","sha256":"360edc5636dd69bc7725158fa187bad7f3893cc70d090b8a7a8ad465151d7cb3","sha512":"96744dc05fed85b06ee5890bc7a1037791246dec68ad4dfae86721ced837848b26f70c161bd7324169d550b6151e23e732e417bb746275cbd8b8c83ff7b02d9d","ssdeep":"768:DHJTziUpvz67ebU1gLOjUvIy/HWrJznfaCsZ/de:DHJTziUpvz4epL2Iadazle","tlshash":"49e2f123e4f20ea05f60a343099773e192e9acd9cd1dc55ff18ab16bdb60026f4152bb","first_seen":"2025-12-27T22:18:28.787193Z","last_seen":"2026-01-05T20:52:48.407976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":592,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/suv5.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.17.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:16.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 03:12:50 GMT","end":"Sun, 05 Apr 2026 04:12:43 GMT"},"fingerprint":{"sha1":"3A:1D:A3:E2:34:8B:CF:4A:E2:79:81:4F:39:B4:6A:A6:31:3D:FF:E5","sha256":"EA:50:C7:FC:EF:08:29:A0:8D:98:25:B7:58:5D:21:DC:0C:4B:87:8E:BB:AA:45:C9:FF:08:27:40:D9:87:6A:D6"}}},"request":{"raw":"GET /script/suv5.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuploads.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 20:52:16 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AHVrFxNjhSDeDCfYo-S78XpemEZnhLs0YZyYX5_rJheSp9k4DAZ7joWf_yJ-Klid8bb4F0I2tvNB6HM\r\nx-goog-generation: 1765976148566843\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 56337\r\nx-goog-hash: crc32c=C6SdHA==, md5=mj1apJ684TpjmecDoRbsmw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nexpires: Mon, 05 Jan 2026 21:52:16 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 17 Dec 2025 12:55:48 GMT\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 600\r\ncf-cache-status: HIT\r\netag: W/\"9a3d5aa49ebce13a6399e703a116ec9b\"\r\ncontent-encoding: gzip\r\ncf-ray: 9b95dbc2aaae1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56337,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (56336)","md5":"9a3d5aa49ebce13a6399e703a116ec9b","sha1":"a52991635eddd4f54da92d657a36af619b88ef47","sha256":"8924f212e1f3553244a9eb9e01a0cf05c585ea75ecf60002b0785b69553d0fcd","sha512":"ff21d8769d8397a2998058840da6e4e78672c7e489443077ef1341f0d50a1a9799e31d98ab2b763f3400d43da6d7fcaacfec56ea675639b1df375c92f6ed6953","ssdeep":"768:7Oa8VJZShPhDL2i1Ox0O2o1wFfLen1xje/EO6BEAi7y1qIV7qp258aeraeq0CmvK:aa89aDfO6lenZ0CmgPTueNWjk","tlshash":"d64385553e80461733098ebb3a13f8e6e858387a6489459ef608bd487287177f6fc772","first_seen":"2025-12-17T14:33:37.346036Z","last_seen":"2026-01-13T14:12:13.861788Z","times_seen":342,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/377.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/377.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12999\r\nlast-modified: Fri, 27 Sep 2024 06:02:03 GMT\r\netag: \"66f64a5b-32c7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12999,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"3578d76fc2f31e46cc3f460e1e362423","sha1":"451c134265f96fc44845282e6614ecf8457e94f0","sha256":"dac7f6d0388e0e9730326f124afe1703b3a4f7f9e5cbe54394b9b7d6d98f407a","sha512":"7ea56c0c78a8a915fa7d71fd6f6665eb0442f516d348edbdbcbd7139f6ea6281e7f2232cc99d52aaa922b29bb8425d1d8061bd7ab049ee01fddce51724f9e242","ssdeep":"384:eUzbakTDoVDjof0ZonYTjwKWDkFVJN1yBVwQF4Sy:eU66o1of05/mkFVn1yDwQF4Sy","tlshash":"6e42c031231bedc4e765707e5844d762c04a9897245acf6e3ac729c4572c28dea98fe3","first_seen":"2024-10-14T23:54:22.556991Z","last_seen":"2026-01-05T20:52:48.409769Z","times_seen":3,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuploads.com/tube/thumbs/0/562.jpg","fqdn":"xuploads.com","domain":"xuploads.com","tld":"com"},"ip":{"addr":"162.244.33.34","port":443,"asn":14576,"as":"HOSTING-SOLUTIONS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuploads.com/","date":"2026-01-05T20:52:15.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuploads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:00:49 GMT","end":"Tue, 10 Mar 2026 05:00:48 GMT"},"fingerprint":{"sha1":"EB:72:B9:8E:7E:EE:D6:89:22:8B:15:95:37:F8:C5:F1:A8:A6:13:93","sha256":"CC:22:19:2B:B0:22:3B:93:06:B0:C5:3E:F1:31:B0:37:13:98:62:B6:8C:41:56:0B:3E:6B:BD:0C:63:B6:47:9D"}}},"request":{"raw":"GET /tube/thumbs/0/562.jpg HTTP/1.1\r\nHost: xuploads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuploads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: from=noref; lfrom=noref; idcheck=1767646334; lp=%2F; index_page=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 20:52:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45241\r\nlast-modified: Thu, 29 May 2025 07:25:05 GMT\r\netag: \"68380bd1-b0b9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45241,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 59x59, segment length 16, baseline, precision 8, 300x200, components 3","md5":"2f9d55e17c1ae5142c09191a2b9645cf","sha1":"381b4e6a886b78898a966aa25d0c594a5595cc03","sha256":"41bef6e6fe8a68510fc2430792c64f15ec79f3c2c58af9356e9fc34859c597fb","sha512":"4c0c73028b9cf4e80decdcb9290b8c7d3b6439fa044acba716dda1f952338b2c70839830a758074ed0c64ee9e71a852f55285c5e6e6f96f26fda7172496a068a","ssdeep":"768:WUOBNkGCEaX5hQToj0cLMbFKLgwcbsqWpLtv8Rug/8OZE1Eq8612mtiSlj2RryKr:W1g/bQToYcL0wcYqCt8z8vn9jcyKXb","tlshash":"511301840a18d4f9ebebd552719d398339778f7024fe73a0204b79c5c5f1822931abab","first_seen":"2025-12-27T22:18:28.793382Z","last_seen":"2026-01-05T20:52:48.410572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
