{"report_id":"948f56ea-c62a-496c-9c3a-9c2a15d25e8f","version":6,"status":"done","tags":[],"date":"2025-12-17T19:36:52Z","url":{"schema":"https","addr":"fast-links.org/s?vKePiQLX","fqdn":"fast-links.org","domain":"fast-links.org","tld":"org"},"ip":{"addr":"172.67.154.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aywithmehesa.org/s?vKePiQLX","fqdn":"aywithmehesa.org","domain":"aywithmehesa.org","tld":"org"},"title":"Acces aux Videos","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"fast-links.org/s?vKePiQLX","fqdn":"fast-links.org","domain":"fast-links.org","tld":"org"},"ip":{"addr":"172.67.154.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-21T19:36:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"d3h26c51lqz4go.cloudfront.net","ip":{"addr":"3.167.7.128","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2024-10-08T03:58:59Z","last_seen":"2025-12-13T23:28:29.809834Z","alert_count":0,"request_count":2,"received_data":39171,"sent_data":916,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-14T22:13:59.416786Z","alert_count":0,"request_count":1,"received_data":8718,"sent_data":536,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dfdgfruitie.xyz","ip":{"addr":"104.21.13.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-22","domain_rank":235166,"first_seen":"2022-12-12T11:59:22Z","last_seen":"2025-12-12T07:34:40.261938Z","alert_count":0,"request_count":1,"received_data":665,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2020-01-28T19:52:40Z","last_seen":"2025-12-15T21:06:27.488046Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":1024,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fast-links.org","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-09","domain_rank":1875173,"first_seen":"2025-07-31T23:10:04.663621Z","last_seen":"2025-12-17T19:34:49.168986Z","alert_count":0,"request_count":1,"received_data":96268,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-14T22:17:06.291076Z","alert_count":0,"request_count":2,"received_data":36051,"sent_data":964,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ukankingwithea.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2025-12-15T21:43:12.030896Z","alert_count":4,"request_count":1,"received_data":842,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.unlockr.app","ip":{"addr":"172.67.188.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-18","domain_rank":844335,"first_seen":"2025-03-20T23:46:19.496978Z","last_seen":"2025-12-17T19:34:49.186109Z","alert_count":0,"request_count":1,"received_data":881,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"d1zhmd1pxxxajf.cloudfront.net","ip":{"addr":"54.230.241.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-11-30T01:33:59.087014Z","last_seen":"2025-12-17T08:41:35.610131Z","alert_count":0,"request_count":1,"received_data":277323,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"aywithmehesa.org","ip":{"addr":"104.21.58.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-05","domain_rank":0,"first_seen":"2025-11-23T15:29:16.06264Z","last_seen":"2025-12-17T19:34:49.093793Z","alert_count":0,"request_count":3,"received_data":207319,"sent_data":1485,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fingerprinting36542.s3.us-east-1.amazonaws.com","ip":{"addr":"52.217.138.18","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":980294,"first_seen":"2024-12-09T20:50:57.594921Z","last_seen":"2025-12-14T15:47:30.061526Z","alert_count":0,"request_count":2,"received_data":39938,"sent_data":996,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"nismscoldnesfspu.org","ip":{"addr":"172.67.213.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-07","domain_rank":359459,"first_seen":"2025-02-12T02:10:07.887399Z","last_seen":"2025-12-17T19:34:49.355842Z","alert_count":0,"request_count":2,"received_data":4001,"sent_data":1025,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"d1wzdj81h1hubn.cloudfront.net","ip":{"addr":"18.239.47.111","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-01-18T20:12:00Z","last_seen":"2025-12-11T13:31:43.988004Z","alert_count":0,"request_count":2,"received_data":849934,"sent_data":941,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"togetherefwuko.org","ip":{"addr":"104.21.96.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-06","domain_rank":0,"first_seen":"2025-12-07T09:36:47.676338Z","last_seen":"2025-12-14T09:51:38.858515Z","alert_count":0,"request_count":1,"received_data":521,"sent_data":579,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aywithmehesa.org/WrappedBotd.browser.protected.js","fqdn":"aywithmehesa.org","domain":"aywithmehesa.org","tld":"org"},"ip":{"addr":"104.21.58.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95888320adab6afba4a8e0c8f06e8361","sha1":"c04b231b41d57f1cc95e66e04d8f2631a4b10018","sha256":"8fda68ace483a03aa4362a8731fff5b2a37d85aab3de76801ab8e225b217b2df","sha512":"e3a17ad670f939f563fe6d1dc507ab5ba99f90a4b6bc94364fa2f56d5c5ca1a552b0dbb973a4f68f7694ca9a8bf1a3ff3bf28b0dc1f4bf2fc796deef5007bd82","ssdeep":"3072:9ISWWZitd7yfmAa0Zzg/N8OSv0TfuuC8a5MAVCGNs:YhlLqD0TmPMAVCSs","tlshash":"bab3d79462472c958392d1ff142fb285ac2d8e51bc8fdce1d651c3959c306c78afbba2","size":109231,"data":"","first_seen":"2025-07-01T16:50:14.740307Z","last_seen":"2026-06-06T22:05:35.22437Z","times_seen":655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aywithmehesa.org/s?vKePiQLX","fqdn":"aywithmehesa.org","domain":"aywithmehesa.org","tld":"org"},"ip":{"addr":"104.21.58.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"39f7fadfe3e07ca1f6c578ad375f1282","sha1":"2a786c46797f64e68681fdffebfeca61b9d0917f","sha256":"4623916af2e642bd6b20afa621748a882b90bcb1433839633ee511a03720ccb8","sha512":"8320b5859248ba67d95393b3323530876713a730a6769806a20beed4c788f165015ec3679671f4605525c131c20b7e7a1ccb5fdb3b4b9149acd776353ffad755","ssdeep":"","tlshash":"fb90021c1231c4ba451d8584103881a439fa6a56361ab5c6422a4a515292991a980c09","size":57,"data":"","first_seen":"2025-12-17T19:36:55.168281Z","last_seen":"2025-12-17T19:36:55.168281Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1zhmd1pxxxajf.cloudfront.net/?tid=1002625","fqdn":"d1zhmd1pxxxajf.cloudfront.net","domain":"d1zhmd1pxxxajf.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00935cba83886bbc08b784ad4ab6455f","sha1":"f5ec21f726d9d81b970e2d8570480e0f1dd86f57","sha256":"4771aa52c3beacec04827fe4c4a90ab4ab53fec7aedefec72651d3c219e4d4a2","sha512":"d642ceeee126cf7aeb2a4350f2f4b2e6b3e498161c85f14469410effcd5ee4c103826d9e78e3ebc21a7181029c6c58578d6c0b941598e423b3082469940a4a98","ssdeep":"6144:oDUhcgrANfBRiTqy6LG5Zmvmjm5t8u0xEb3b6OeiSQP:YUhcBNfBRiTqygG5LbxEb3b6OeiSQP","tlshash":"7f446c256626310aa17351eeb0fa6785f065d014fd024ad8a0e5c87ca6ddff621fb3ec","size":276853,"data":"","first_seen":"2025-12-17T19:34:52.912614Z","last_seen":"2025-12-17T19:36:55.166481Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:31.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aywithmehesa.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 10 Dec 2025 21:59:25 GMT\r\nexpires: Thu, 10 Dec 2026 21:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 596226\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-07T02:09:23.648524Z","times_seen":352660,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":101,"dns":1,"connect":11,"send":0,"wait":8,"receive":1,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aywithmehesa.org/WrappedBotd.browser.protected.js","fqdn":"aywithmehesa.org","domain":"aywithmehesa.org","tld":"org"},"ip":{"addr":"104.21.58.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:29.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aywithmehesa.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 12:32:06 GMT","end":"Tue, 03 Mar 2026 13:30:45 GMT"},"fingerprint":{"sha1":"97:AF:BF:77:B4:E0:C8:3A:62:78:84:A8:15:94:14:6C:F2:AC:57:7B","sha256":"F3:EE:30:92:48:8F:39:23:70:4D:40:98:D8:13:45:48:9F:80:7B:0B:48:41:3A:0C:E0:F7:EB:5A:A2:55:44:4F"}}},"request":{"raw":"GET /WrappedBotd.browser.protected.js HTTP/1.1\r\nHost: aywithmehesa.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/s?vKePiQLX\r\nCookie: uid=7G19fAp82jvhZUnn5TSR2Fv3elkLhMH6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 19:36:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Dec 2025 18:35:56 GMT\r\nvary: accept-encoding\r\ncache-control: public, max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJAtfamxHN%2FmqhK7TxoZbOxDylzb7lSVRDPGJkzAEYPu8RIdhdySjVzrt4ijbv57JntSedmplUUJgsRjM1ElgeFoOHUKAtYYNklYlhhVP9c%3D\"}]}\r\nage: 2280\r\ncf-cache-status: HIT\r\netag: W/\"6942f80c-1aaaf\"\r\ncontent-encoding: br\r\ncf-ray: 9af8de9e29981525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109231,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"95888320adab6afba4a8e0c8f06e8361","sha1":"c04b231b41d57f1cc95e66e04d8f2631a4b10018","sha256":"8fda68ace483a03aa4362a8731fff5b2a37d85aab3de76801ab8e225b217b2df","sha512":"e3a17ad670f939f563fe6d1dc507ab5ba99f90a4b6bc94364fa2f56d5c5ca1a552b0dbb973a4f68f7694ca9a8bf1a3ff3bf28b0dc1f4bf2fc796deef5007bd82","ssdeep":"3072:9ISWWZitd7yfmAa0Zzg/N8OSv0TfuuC8a5MAVCGNs:YhlLqD0TmPMAVCSs","tlshash":"bab3d79462472c958392d1ff142fb285ac2d8e51bc8fdce1d651c3959c306c78afbba2","first_seen":"2025-07-01T16:50:14.740307Z","last_seen":"2026-06-06T22:05:35.22437Z","times_seen":655,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aywithmehesa.org/favicon.ico","fqdn":"aywithmehesa.org","domain":"aywithmehesa.org","tld":"org"},"ip":{"addr":"104.21.58.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:29.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aywithmehesa.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 12:32:06 GMT","end":"Tue, 03 Mar 2026 13:30:45 GMT"},"fingerprint":{"sha1":"97:AF:BF:77:B4:E0:C8:3A:62:78:84:A8:15:94:14:6C:F2:AC:57:7B","sha256":"F3:EE:30:92:48:8F:39:23:70:4D:40:98:D8:13:45:48:9F:80:7B:0B:48:41:3A:0C:E0:F7:EB:5A:A2:55:44:4F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aywithmehesa.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/s?vKePiQLX\r\nCookie: uid=7G19fAp82jvhZUnn5TSR2Fv3elkLhMH6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 17 Dec 2025 19:36:29 GMT\r\ncontent-type: text/plain\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nage: 2279\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 17 Dec 2025 18:58:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gHFGSZ7PV3otlOp484AQZKBKidH5cSQ9ip8IzUNTa4mITkWWnWUq53rwloQSyCmCF5nGa0pGEsSL0G1hmBP53%2BniUWZEEr1UPro6Xi9m6cs%3D\"}]}\r\ncf-ray: 9af8dea32f84120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfdgfruitie.xyz/adserver/yzfdmoan.js","fqdn":"dfdgfruitie.xyz","domain":"dfdgfruitie.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:30.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfdgfruitie.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 12:48:37 GMT","end":"Sun, 08 Feb 2026 13:48:21 GMT"},"fingerprint":{"sha1":"17:F4:0A:11:83:45:F9:54:1E:44:BA:26:74:30:51:44:D4:E9:8F:06","sha256":"87:51:D4:65:85:8E:A4:B6:97:24:72:3C:0F:2E:46:91:A7:21:B3:D6:A2:25:AB:D3:69:4A:58:62:A0:BE:21:8F"}}},"request":{"raw":"GET /adserver/yzfdmoan.js HTTP/1.1\r\nHost: dfdgfruitie.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 19:36:30 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 03 Feb 2023 19:26:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cMmP1MmwLj0kUgPdsGTibud1AOIDNbxmqyX3CR64IOSRK%2F%2B588Jtc2GpXuxmz9NWuXPE2RzrDv3w3IOp3zGGqJxxIA4XQa%2BS3Jm61vM%3D\"}]}\r\nvary: accept-encoding\r\nage: 4544\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"63dd5fe4-0\"\r\ncontent-encoding: br\r\ncf-ray: 9af8dea48df3b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":11,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"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","fqdn":"undefined","domain":"undefined","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:30.312Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET 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 HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fingerprinting36542.s3.us-east-1.amazonaws.com/loadFingerPrint.js","fqdn":"fingerprinting36542.s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":"us-east-1.amazonaws.com"},"ip":{"addr":"52.217.138.18","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:30.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:D2:7A:E0:6B:B2:6D:C0:8F:8C:4E:E5:2B:1F:47:F3:EF:60:7F:68","sha256":"EF:42:24:62:84:5D:EF:F9:AE:18:7F:85:D7:C7:56:73:2D:8B:30:D2:CD:83:77:3B:45:EF:24:B2:93:43:99:33"}}},"request":{"raw":"GET /loadFingerPrint.js HTTP/1.1\r\nHost: fingerprinting36542.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aywithmehesa.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9lRRSrmRwDKgttd3FmYSW5nR+J3Nss+bQOn423CUERcXRm63I54oM8lR76k4vPuFsi6wz+uWUK8=\r\nx-amz-request-id: DSSXP1HKSH1A9JFW\r\nDate: Wed, 17 Dec 2025 19:36:32 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, PUT, POST, DELETE\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nLast-Modified: Mon, 09 Dec 2024 12:05:18 GMT\r\nETag: \"6c2ea9c45e0053e2d4fe3eaeada5d896\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: application/javascript\r\nContent-Length: 653\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":653,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"6c2ea9c45e0053e2d4fe3eaeada5d896","sha1":"e5ec1f9cf5dceded1d58900137c9ecdea4fca4d6","sha256":"6b3e0f4edb818818625ffb8ede90fea90a9778c7516bec1d197fed877d5d37e2","sha512":"0b36faab7e796c6a96e5b567910fd6cfefc9487e2c88b20f07cc394793c94951289e7cd94d131dc420e921fb8d912a4af05cb47befc6c3bac211f3aaee30c432","ssdeep":"","tlshash":"a6f0f61b0a720817102b21688e4b911651336d5b46fcf9087f1dd7653f806548918fdc","first_seen":"2024-12-09T20:50:59.330164Z","last_seen":"2026-03-10T17:42:36.683977Z","times_seen":690,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":226,"dns":5,"connect":94,"send":0,"wait":117,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.org/tc","fqdn":"nismscoldnesfspu.org","domain":"nismscoldnesfspu.org","tld":"org"},"ip":{"addr":"172.67.213.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:31.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 22:27:17 GMT","end":"Mon, 26 Jan 2026 23:26:04 GMT"},"fingerprint":{"sha1":"A2:92:21:8E:E5:E6:99:D9:8B:61:2A:9B:E2:BD:A9:8C:2C:2D:94:45","sha256":"A9:E8:83:6C:CC:B4:4E:DA:BF:5E:3A:05:42:AA:C2:1D:13:C4:17:06:E3:ED:A8:7F:38:B7:7C:50:4D:ED:68:AD"}}},"request":{"raw":"POST /tc HTTP/1.1\r\nHost: nismscoldnesfspu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aywithmehesa.org/\r\nContent-Type: application/json\r\nContent-Length: 731\r\nOrigin: https://aywithmehesa.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":731,"data":"{\"tid\":1002625,\"bl\":[10],\"session\":\"282983525946873418\",\"max_tasks\":5,\"design_id\":11,\"cur_url\":\"https://aywithmehesa.org/s?vKePiQLX\",\"doc_ref\":\"\",\"abt\":0,\"cookie_id\":\"1818918244892642\",\"rkey\":\"459997915620606476\",\"offer\":\"0\",\"subid\":\"MAIN\",\"botd\":\"{\\\"bot\\\":false,\\\"timestamp\\\":1766000189319,\\\"webGLSolution\\\":{\\\"uuid\\\":\\\"8ac64c1d-ccDc-44Af-a33b-Bd47611Fa92e\\\",\\\"nonce\\\":864,\\\"time\\\":549},\\\"encrypted\\\":\\\"yNHmh7Oy8NoFRjkTUN+WinLn98Eo5axDLkSleqsrPJLn/JPujLV0HTWBEgZQTr30r4WOA4v5muHYxrFf3msO1u2vzjLxKH8c8snkn8VpIuILPm1NLbK413D/zLNRdAb7YbRzRKlznzKB70ZAfL0jrPbV0lHsP9FJX+H6S5H4+p25go2rj5Z+CdGG4RSSjZsjNVGxQTohwjZHYw==\\\"}\",\"botds\":\"8ac64c1d-ccDc-44Af-a33b-Bd47611Fa92e\",\"fid\":-1,\"clid\":\"7G19fAp82jvhZUnn5TSR2Fv3elkLhMH6\",\"is_loot\":false}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 19:36:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nset-cookie: ci=1745088727763848; Max-Age=86400; Secure; SameSite=None\r\naccess-control-allow-origin: https://aywithmehesa.org\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jUsT4AjdLacxdSFMwraRsJ6%2FFyDKwp99yyBZe7aHYVypbVvpNJUjzgsIhNSwePrXQRnxOLa0p%2Fhy%2Fdzowfo%2FObNgrqhaCf65Z1kKFvi%2FMnCx6dOQ\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9af8deac2a558deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2144,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b4bfd73381b3cd3058f3a1dc6065d13e","sha1":"119a2f0148cd50d27ad824c8d4c3f721d0a330e3","sha256":"14eae3dc5b935d926fba58d23c729c2b2a6bdd6aa2eec53d7fa98022d660e98e","sha512":"23941b2e991f004092a3d098b5048992949c7b4e43eca5ac54796d6bdb907efb7489cf4f6888df115c9918dea04cf497f5de97ab4f6dc16ee3900c40f429d276","ssdeep":"","tlshash":"e641051f969e69b31bf2c012ca623b443791539b17d0c82da5a1c82c4aeeff5108779b","first_seen":"2025-12-17T19:36:55.160966Z","last_seen":"2025-12-17T19:36:55.160966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast-links.org/s?vKePiQLX","fqdn":"fast-links.org","domain":"fast-links.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-17T19:36:28.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fast-links.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 11:47:47 GMT","end":"Thu, 05 Mar 2026 12:46:17 GMT"},"fingerprint":{"sha1":"E0:FA:84:E6:05:E1:FB:7F:8F:23:0D:97:36:D6:9E:1D:7C:3B:98:53","sha256":"5C:93:8A:2C:60:81:A7:E7:3F:3A:39:ED:DD:98:D5:C3:6F:D6:B9:A9:FE:60:92:D8:53:C7:9D:32:56:6D:9F:BF"}}},"request":{"raw":"GET /s?vKePiQLX HTTP/1.1\r\nHost: fast-links.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 17 Dec 2025 19:36:28 GMT\r\ncontent-type: text/html\r\nlocation: https://aywithmehesa.org/s?vKePiQLX\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nMDrgW0%2BFybVxEhzc1dYmuTKubRaFq4iWbQcvq3iC1wvtRZifQ1kDQum9M8BQVOv34SH5v0RFbMyuAi3%2BWfOajz1GpOAIMtoSHzo9v0B\"}]}\r\ncf-ray: 9af8de9b3eb84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95722,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":125,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:29.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"DF:9F:85:F6:4A:53:64:E2:D3:A4:9C:9B:0A:4D:88:F2:DD:8C:92:6C","sha256":"99:65:94:2E:11:0B:3A:F6:B6:E7:38:F9:58:D0:01:2A:B6:CA:D4:2D:38:BB:87:ED:72:23:CA:63:32:85:95:35"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 17 Dec 2025 19:36:29 GMT\r\ndate: Wed, 17 Dec 2025 19:36:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"49f2590313831152e2b656ca33b7fc37","sha1":"910db6f788b80561905582e510ed3a09ed752c59","sha256":"591b1c315e1d15fd0a13a83272e68f621d26092559ad6adbf0108012d22d3173","sha512":"65a0b79b9011b31f8b55a7a0ed8a5c6e55f992f775c21592c0502765afa716f01ef5c65e7abbc2d8681bda6ad804f2661072016fc5e529cf5dd007a9c1811837","ssdeep":"768:DDSDjDGDUDB4DiLDZD1D5CJmwBUiRDfMTcfFBhiEymDcTYeBai75tdmtC0BQiVPI:I0rAwyl","tlshash":"3de200a1041750009b838ce223cebf35fe1f52517142d0b5abfdab6badcbc66526936d","first_seen":"2025-11-19T00:32:15.532783Z","last_seen":"2026-02-19T18:58:31.233433Z","times_seen":1940,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":85,"dns":1,"connect":20,"send":0,"wait":32,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1wzdj81h1hubn.cloudfront.net/resources/0e47cb009c7b263a.png","fqdn":"d1wzdj81h1hubn.cloudfront.net","domain":"d1wzdj81h1hubn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"18.239.47.111","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:29.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /resources/0e47cb009c7b263a.png HTTP/1.1\r\nHost: d1wzdj81h1hubn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 16395\r\ndate: Wed, 17 Dec 2025 09:34:35 GMT\r\nlast-modified: Tue, 27 Aug 2024 02:27:22 GMT\r\netag: \"4da88876f6112b362642efb9447666cd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-publisher_id: 330329\r\nx-amz-meta-timestamp: 2024-08-26T15:03:06.299077\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c3919dfed58c39e6da91faec1344110c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P3\r\nx-amz-cf-id: hy0haEiqSwvuHzxFbXPKLE2ln0KbbmgAD_7BPGDGqBWmrPFkSSk-aw==\r\nage: 36115\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":16395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"4da88876f6112b362642efb9447666cd","sha1":"e1848f93c9eb794e6c4f3fdd6cfd1cd927458fef","sha256":"f141086f853602c867bb42f50e9d5bbce80aea709a53899e9a623d5dc6679590","sha512":"acaef6149b46855d4aa049f9a043bcb7343bec348f018b6704dd1325796737713724d81c9188e0af6f156b30da514aacd6243986b749276649e8fe68ca1f224a","ssdeep":"384:Pe/gO0itFwMaKxEzFtdfZ8H/F0TFI4EF05Gu:GYt+wMaVztZqdi3M/u","tlshash":"9472c037b3b46e04901d74f4be2faecf9c7391513454ad24aee69c7abc21121245acf6","first_seen":"2024-12-27T19:18:13.571637Z","last_seen":"2025-12-30T01:13:27.938463Z","times_seen":11,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":54,"dns":14,"connect":16,"send":0,"wait":23,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:30.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:27:37 GMT","end":"Wed, 21 Jan 2026 15:26:07 GMT"},"fingerprint":{"sha1":"9D:07:9C:6F:57:10:86:CD:16:B0:52:82:27:D1:5A:15:62:C4:01:4D","sha256":"45:86:DC:CE:A9:11:84:B3:7C:78:71:DB:1D:F8:E8:6C:0F:4A:58:72:2C:CF:60:ED:8D:11:60:CB:9F:03:63:EF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aywithmehesa.org/\r\nOrigin: https://aywithmehesa.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 19:36:30 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: csu=1818918244892642@1@1766000190; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://aywithmehesa.org\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2D6vUwqY%2FI9nw0vcamjEDXHmau%2F%2FHNqgjwOC4GYaNIKKxAFnKdIiaR4wlcpSOj2Npq9vY58KQQV1ecEmwRM%2BYXpMRfQaXrXG2AedoSgbt78LmQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9af8dea58b498be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"a899efebbc543cc6be745b53d7953e4e","sha1":"8808330d08a9e8c345cfb011e0c8f8db91d5ea14","sha256":"66cc05cd84682e29b2593600de8aba5d4f09f157cd57ed19125faee8ddeddfba","sha512":"f6506fb07b823965a72496b30ade85ccf0e2da9bb6e783a6569884dec15d6bdee7feb8d77d9f77472eca3dfb1c2e1f6015c45bde95e71589cd4e9662accead4a","ssdeep":"","tlshash":"8480000000e8000800832c0008a88a2883a02080aa8a00ca0208228a08c38000802ba0","first_seen":"2025-12-17T19:36:55.163158Z","last_seen":"2025-12-17T19:36:55.163158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":132,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-17","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.unlockr.app/pixel?event=unlockrPromote\u0026session_id=282983525946873418","fqdn":"app.unlockr.app","domain":"unlockr.app","tld":"app"},"ip":{"addr":"172.67.188.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:31.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlockr.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 21:16:37 GMT","end":"Tue, 20 Jan 2026 22:13:05 GMT"},"fingerprint":{"sha1":"D1:1F:FC:28:93:E6:E4:8E:8E:80:D5:BB:E2:D2:CC:5A:D4:89:EA:49","sha256":"AD:1A:AE:E7:FB:C5:A8:11:D6:9D:91:0A:A5:41:95:90:FE:B4:6F:A9:0B:51:25:C2:BA:CE:AD:5F:38:D6:28:25"}}},"request":{"raw":"POST /pixel?event=unlockrPromote\u0026session_id=282983525946873418 HTTP/1.1\r\nHost: app.unlockr.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aywithmehesa.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 19:36:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://aywithmehesa.org\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nmi8blQIDadoIhza6VFft%2FmfWAekxIrOUW2Foodxc95rP4SdRpv56%2B0upJRTAzIFq9au9GBm2LnerLLivjjq9RvYOvXeMf04eiY9IXA%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9af8deadb9c8b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":20,"dns":0,"connect":1,"send":0,"wait":125,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aywithmehesa.org/s?vKePiQLX","fqdn":"aywithmehesa.org","domain":"aywithmehesa.org","tld":"org"},"ip":{"addr":"104.21.58.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-17T19:36:28.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aywithmehesa.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 12:32:06 GMT","end":"Tue, 03 Mar 2026 13:30:45 GMT"},"fingerprint":{"sha1":"97:AF:BF:77:B4:E0:C8:3A:62:78:84:A8:15:94:14:6C:F2:AC:57:7B","sha256":"F3:EE:30:92:48:8F:39:23:70:4D:40:98:D8:13:45:48:9F:80:7B:0B:48:41:3A:0C:E0:F7:EB:5A:A2:55:44:4F"}}},"request":{"raw":"GET /s?vKePiQLX HTTP/1.1\r\nHost: aywithmehesa.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 19:36:28 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhOOFvpqQXuKIi2K5ZQkHAIcTfE2uko%2FqwnHW90Hm0pEALMDWV1y2%2B2JYiW42MHtDTzhcaLV0Zi4sfk3iA%2FJEoxmPrRsOUHKzC8fU2lF3xM%3D\"}]}\r\nset-cookie: uid=7G19fAp82jvhZUnn5TSR2Fv3elkLhMH6; expires=Thu, 17 Dec 2026 19:36:28 GMT; Path=/; Secure\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9af8de9c3c1a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95722,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (60952)","md5":"096e13f741e60e1b886f65a67fe18ad2","sha1":"70b6c487889671b57532519ad4a2c7390d44ee5c","sha256":"c94c0e4173285785423cacc0da9036b2ad5795c9afb0e183ba6a7d023b9795ca","sha512":"b9df3fb3c501073e94a2b5828cee7f2b8e66dd95e19a23b4a68cc1b2f46edfa8174c91c39545298aef02545b1b95135d1c41dda7624e9df0b485734aa7deb4b3","ssdeep":"1536:NHFSWp4Hu0GqdPcgncjjH0GhBYaL8APizoV9dSywhyd5vfikUo5gWVBYvri7:NHOHPnyHbhBYaoA6y94ad5vak3nAri7","tlshash":"839302906ad805b2177b112e6ae33b245316bda3dd49c5083ebce386cf8ef95c167235","first_seen":"2025-12-17T19:36:55.163995Z","last_seen":"2025-12-17T19:36:55.163995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":133,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"togetherefwuko.org/ZnBVSkZJTzY5ezwlDyYVMQQxLncCCAJ7d0NCEx8eVxQDAggzEwRsMg8UaHt2VkJjeHNAADwue1VFczkyBwQgOXtXVjwkIAlNczx7Vl5sZHZIQXM/e1dWITonAU1kbDYSBDl3d1FGY3p2VkFsenRfRg","fqdn":"togetherefwuko.org","domain":"togetherefwuko.org","tld":"org"},"ip":{"addr":"104.21.96.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:30.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"togetherefwuko.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 17:47:08 GMT","end":"Wed, 04 Mar 2026 18:45:33 GMT"},"fingerprint":{"sha1":"C4:36:FC:1C:51:5D:23:9B:5F:AF:46:47:D8:32:29:B5:28:13:ED:D7","sha256":"51:BA:40:C4:76:B8:B3:55:33:1A:F6:C8:DE:03:07:05:97:A4:D0:02:BF:71:0D:59:6C:74:AC:FC:A3:84:4C:9F"}}},"request":{"raw":"GET /ZnBVSkZJTzY5ezwlDyYVMQQxLncCCAJ7d0NCEx8eVxQDAggzEwRsMg8UaHt2VkJjeHNAADwue1VFczkyBwQgOXtXVjwkIAlNczx7Vl5sZHZIQXM/e1dWITonAU1kbDYSBDl3d1FGY3p2VkFsenRfRg HTTP/1.1\r\nHost: togetherefwuko.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 17 Dec 2025 19:36:30 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JHP6e%2BQ7DUf1TtUR0VvgyVKjW%2F5iiYGwOqcMlMFz48jbEGqyQBWqMAT0QaMan5Hc%2FaGl6HvHEPSmKVR6x5%2BecnO90N2HB5CQywYHLnwOWYA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9af8dea58ce05693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":447,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fingerprinting36542.s3.us-east-1.amazonaws.com/fingerprint.js","fqdn":"fingerprinting36542.s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":"us-east-1.amazonaws.com"},"ip":{"addr":"52.217.138.18","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:31.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:D2:7A:E0:6B:B2:6D:C0:8F:8C:4E:E5:2B:1F:47:F3:EF:60:7F:68","sha256":"EF:42:24:62:84:5D:EF:F9:AE:18:7F:85:D7:C7:56:73:2D:8B:30:D2:CD:83:77:3B:45:EF:24:B2:93:43:99:33"}}},"request":{"raw":"GET /fingerprint.js HTTP/1.1\r\nHost: fingerprinting36542.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aywithmehesa.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fingerprinting36542.s3.us-east-1.amazonaws.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: W/eNGgQFWJBAJ4SKWyBUHKbeApkozJKVLSBfQXVyr/wNcG4K/JFIjns2Izg2Gsb5+3QUm0/XMt0=\r\nx-amz-request-id: DSSNQS823742CHKH\r\nDate: Wed, 17 Dec 2025 19:36:32 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, PUT, POST, DELETE\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nLast-Modified: Mon, 09 Dec 2024 12:08:59 GMT\r\nETag: \"9ac06ba71cc5803c7515b3e8c3a2854d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: application/javascript\r\nContent-Length: 38143\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":38143,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38136), with no line terminators","md5":"9ac06ba71cc5803c7515b3e8c3a2854d","sha1":"03ba918aad85dda720c6f46267eb4fba9103aac3","sha256":"6cf24eed847d975853348f50d95b192ac37a4c49e96d8888af6dd2e15631a1fd","sha512":"8db044466454b70e2dcf368078e845163e714e68e5405fc5d3cb9202737c7e3f9696a1f231d1ba0b8ace9dc46712035eab112c3ef3f728be64644cffd587b0e7","ssdeep":"384:2xcDKdRZKREaMRMBp5iKQID95wH3KqwzrWmKj5+pCqNFaiE8E0QIQfJWbkhGYKon:x3RBp5Kjnc9NwlJWbhSu+AW","tlshash":"300306d8b2c3b06e227368b5457f6006b23a7d50346d8842c523e5d57ca9e6e913bfbc","first_seen":"2024-12-09T20:50:59.331644Z","last_seen":"2026-06-06T22:05:35.21612Z","times_seen":946,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3h26c51lqz4go.cloudfront.net/unlocker/qr.png","fqdn":"d3h26c51lqz4go.cloudfront.net","domain":"d3h26c51lqz4go.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.128","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:31.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /unlocker/qr.png HTTP/1.1\r\nHost: d3h26c51lqz4go.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 7224\r\nlast-modified: Tue, 18 Mar 2025 14:25:40 GMT\r\nserver: AmazonS3\r\ndate: Wed, 17 Dec 2025 07:18:34 GMT\r\netag: \"a93ba4860dc42551669d1c44999d6219\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 edea1d4f37b8855878682c02540138fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: HacD9MKTk5QnBhaCrjICH_cKIzDtSFkiLoVCBKMuv3wNLeZRGg2jhg==\r\nage: 46033\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1160 x 1160, 8-bit/color RGB, non-interlaced","md5":"a93ba4860dc42551669d1c44999d6219","sha1":"f42f4d71fa233d571ec60e8998b15772eedf9b6c","sha256":"bdd20de2c3c9af1e3df3ac71b2a52de1704c06e3bf2885db0a48423380f559cb","sha512":"c39361ebaf0aa3c799b0f2fa62acbaf5e779f19b19042c61c27bb7703d2c10bd11034755fb07a6bcff4035f690d65c51367cfb4dc5d1b0d12e4473ecdddd819b","ssdeep":"192:y5iSWmbbbbbbbbbbbbbbbbbbVbbbbbbbbbbbbbbbbbbZhpbbbbbbbbbbbbbbbbbL:y3WGB","tlshash":"e4e1b91d05510a2c6edeafeb89c544c8bed5e247c9f97b63e31a1868e40143cad6edb0","first_seen":"2025-03-20T23:46:21.232783Z","last_seen":"2026-05-10T12:20:36.389099Z","times_seen":594,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":27,"dns":14,"connect":1,"send":0,"wait":2,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1wzdj81h1hubn.cloudfront.net/resources/016154cd66d30353.webp","fqdn":"d1wzdj81h1hubn.cloudfront.net","domain":"d1wzdj81h1hubn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"18.239.47.111","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:29.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /resources/016154cd66d30353.webp HTTP/1.1\r\nHost: d1wzdj81h1hubn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 832356\r\nlast-modified: Tue, 11 Nov 2025 00:38:32 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-publisher_id: 330329\r\nx-amz-meta-timestamp: 2025-11-11T00:03:35.694034\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 17 Dec 2025 06:07:38 GMT\r\netag: \"3a85850361018778b8d081530edc8c5e\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c3919dfed58c39e6da91faec1344110c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P3\r\nx-amz-cf-id: RP2Xcu4gEnkSop1SvIFZ_tlMAp-EoBKQFO41MpNNjmepjg3mEDZ1wg==\r\nage: 48532\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":832356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a85850361018778b8d081530edc8c5e","sha1":"87fe7dc5695fe01f16e523bc040696d950f40a73","sha256":"0d2519b1b5c4fccff0f810a640a8853b5e53007e6facc053e832309f77038e39","sha512":"66ce43e6d3ba5ebb3868ad41e26e8d4330a1b6db608f869b8c722bd150cb09d6f9692320f8616000c2ce32015925570cccabb98c825bc1d03acf17ea180c420b","ssdeep":"24576:4XOePATjUfayNqzM9/kh9dTop/I5DZjX3G+k:IJATjUyg9/khfg/I5Fjm+k","tlshash":"d40533b67b31efd2861acd05096e31f578bf5f9757c25e8696207948acf8200f26234a","first_seen":"2025-12-17T19:34:52.897118Z","last_seen":"2025-12-17T19:36:55.165945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":54,"dns":12,"connect":16,"send":0,"wait":22,"receive":105,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1zhmd1pxxxajf.cloudfront.net/?tid=1002625","fqdn":"d1zhmd1pxxxajf.cloudfront.net","domain":"d1zhmd1pxxxajf.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:30.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?tid=1002625 HTTP/1.1\r\nHost: d1zhmd1pxxxajf.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 74692\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Wed, 17 Dec 2025 19:34:26 GMT\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: PoVXKMLGBOiSB6Tvs9xvI3oXzsHI1VQXg3F4jvyooef2sSiJzsC51w==\r\nage: 123\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":276853,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (1324)","md5":"00935cba83886bbc08b784ad4ab6455f","sha1":"f5ec21f726d9d81b970e2d8570480e0f1dd86f57","sha256":"4771aa52c3beacec04827fe4c4a90ab4ab53fec7aedefec72651d3c219e4d4a2","sha512":"d642ceeee126cf7aeb2a4350f2f4b2e6b3e498161c85f14469410effcd5ee4c103826d9e78e3ebc21a7181029c6c58578d6c0b941598e423b3082469940a4a98","ssdeep":"6144:oDUhcgrANfBRiTqy6LG5Zmvmjm5t8u0xEb3b6OeiSQP:YUhcBNfBRiTqygG5LbxEb3b6OeiSQP","tlshash":"7f446c256626310aa17351eeb0fa6785f065d014fd024ad8a0e5c87ca6ddff621fb3ec","first_seen":"2025-12-17T19:34:52.912614Z","last_seen":"2025-12-17T19:36:55.166481Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":23,"dns":13,"connect":1,"send":0,"wait":25,"receive":3,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:30.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"DF:9F:85:F6:4A:53:64:E2:D3:A4:9C:9B:0A:4D:88:F2:DD:8C:92:6C","sha256":"99:65:94:2E:11:0B:3A:F6:B6:E7:38:F9:58:D0:01:2A:B6:CA:D4:2D:38:BB:87:ED:72:23:CA:63:32:85:95:35"}}},"request":{"raw":"GET /css?family=Poppins:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 17 Dec 2025 19:36:30 GMT\r\ndate: Wed, 17 Dec 2025 19:36:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1189,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"70f6f56be7ff7ace3e1f9979aef5db75","sha1":"3247717a7c2321db34762076775f37f8adc1e6e1","sha256":"ce53fd6ea2c59a3106afb0cf49f27a403675291622352c323c04ab5cc642a321","sha512":"b2020165c0c7b5c32c97d6b62bac6666d9b7c895ab837dca8272334ac3cdf164030e1780f80461b602690075ada4f3e836a4bea1505532b3bd6f281cc110392b","ssdeep":"","tlshash":"2d219791087bd114ab871cc523ce6d37ee0e9251b810e5786bfe0c98adabc654362b2d","first_seen":"2025-09-17T08:48:26.697017Z","last_seen":"2026-06-07T00:31:12.57747Z","times_seen":5674,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.org/tc","fqdn":"nismscoldnesfspu.org","domain":"nismscoldnesfspu.org","tld":"org"},"ip":{"addr":"172.67.213.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:31.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 22:27:17 GMT","end":"Mon, 26 Jan 2026 23:26:04 GMT"},"fingerprint":{"sha1":"A2:92:21:8E:E5:E6:99:D9:8B:61:2A:9B:E2:BD:A9:8C:2C:2D:94:45","sha256":"A9:E8:83:6C:CC:B4:4E:DA:BF:5E:3A:05:42:AA:C2:1D:13:C4:17:06:E3:ED:A8:7F:38:B7:7C:50:4D:ED:68:AD"}}},"request":{"raw":"OPTIONS /tc HTTP/1.1\r\nHost: nismscoldnesfspu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://aywithmehesa.org/\r\nOrigin: https://aywithmehesa.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 19:36:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nset-cookie: ci=251790995796736; Max-Age=86400; Secure; SameSite=None\r\naccess-control-allow-origin: https://aywithmehesa.org\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8wd%2BXogj%2BRYt4AotqELjrHvSfOUZdkAcUhjtmXooy3OwFPZaXoyWfjxxin4u7eVLDU%2F2cHu8QacsCsVF4i8pn6GEk7zjwSOB4IBUiEnFNnlMXS7s\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9af8deab4dc94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":33,"dns":4,"connect":1,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3h26c51lqz4go.cloudfront.net/unlocker/unlocker.png","fqdn":"d3h26c51lqz4go.cloudfront.net","domain":"d3h26c51lqz4go.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.128","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aywithmehesa.org/s?vKePiQLX","date":"2025-12-17T19:36:31.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /unlocker/unlocker.png HTTP/1.1\r\nHost: d3h26c51lqz4go.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aywithmehesa.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 31030\r\nlast-modified: Tue, 01 Oct 2024 15:27:43 GMT\r\nserver: AmazonS3\r\ndate: Wed, 17 Dec 2025 07:07:34 GMT\r\netag: \"aa3e9ab7989d9c695c98fc750957670d\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 edea1d4f37b8855878682c02540138fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: SSVwnmHK8_0XnHG94hEhZSqXKDFc_e_wc4H830ju8ezHYtUGGmmB7Q==\r\nage: 46034\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":31030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 246 x 246, 8-bit/color RGBA, non-interlaced","md5":"aa3e9ab7989d9c695c98fc750957670d","sha1":"4022d553f4952fa7c7b57f00942b202354b66acb","sha256":"5e0813c96779ef092cefc6e77fa90de7a86e307f04bd6d64f9d37a5d9a8fb4e0","sha512":"e3b681724244c3834a9d24d92c3b3817afb553e1a697c58b21d84e6a8ba1c07cece4b14e1316c6235436768b2e62362169810568921d660efc576536ec41696f","ssdeep":"768:nwlF+bky/Yt20bgvguLfk7D07HIcDbMXj5ZVp0iB6VRc8p6UvzMVOs:NkBXghfk7aHbDbMXj5Zh6LcC6YIVOs","tlshash":"54d2d0f5b033745de9f50006fa4647b801bb8af07f31b618d4bbc60eb78839e24a9965","first_seen":"2025-03-20T23:46:21.230829Z","last_seen":"2026-05-10T12:20:36.378905Z","times_seen":594,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":30,"dns":14,"connect":3,"send":0,"wait":1,"receive":2,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
