{"report_id":"955018fe-c908-434f-9736-414f7be42ad6","version":6,"status":"done","tags":[],"date":"2025-11-23T22:10:38Z","url":{"schema":"http","addr":"hdking.foo/","fqdn":"hdking.foo","domain":"hdking.foo","tld":"foo"},"ip":{"addr":"104.21.63.57","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"title":"HDKing | Jalshamoviez All New Movies Free Download HD King – HDKing | Jalshamoviez Hollywood \u0026 Bollywood New Hindi, South Indian, Hollywood in Hindi Dubbed Movies Watch Online Free Mobile 720 , 1080p Download – HD King","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hdking.foo/","fqdn":"hdking.foo","domain":"hdking.foo","tld":"foo"},"ip":{"addr":"104.21.63.57","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-28T22:10:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":8}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-23T22:10:18Z","timestamp":1763935818,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.13","port":33623,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-11-23T22:10:18.432085+0000\",\"flow_id\":1316190685927381,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":33623,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-23T22:10:18.432085+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hdking.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"m.media-amazon.com","ip":{"addr":"54.230.82.146","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-08-18","domain_rank":3022,"first_seen":"2017-01-30T05:27:40Z","last_seen":"2025-11-17T05:19:11.922504Z","alert_count":0,"request_count":3,"received_data":437136,"sent_data":1510,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"betteradsystem.com","ip":{"addr":"162.252.213.208","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":64565,"first_seen":"2020-04-19T20:28:40Z","last_seen":"2025-11-21T16:13:31.04626Z","alert_count":0,"request_count":1,"received_data":257,"sent_data":1747,"comment":"","tags":null,"fingerprints":null},{"fqdn":"greenfox.ink","ip":{"addr":"104.21.92.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-25","domain_rank":1688223,"first_seen":"2023-10-27T11:52:46Z","last_seen":"2024-12-30T08:49:57.93288Z","alert_count":0,"request_count":2,"received_data":1615,"sent_data":822,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hdking.wales","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":45598,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"c8utedu9yk3f.s4.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-11-23T22:10:41.477148Z","last_seen":"2025-11-23T22:10:41.477148Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.adsco.re","ip":{"addr":"104.16.42.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2025-11-17T12:06:42.792462Z","alert_count":0,"request_count":3,"received_data":72090,"sent_data":1333,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-16T22:16:03.162694Z","alert_count":0,"request_count":3,"received_data":1289647,"sent_data":1299,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"acscdn.com","ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-05","domain_rank":18769,"first_seen":"2020-05-06T08:07:13Z","last_seen":"2025-11-17T15:31:57.933325Z","alert_count":4,"request_count":4,"received_data":120908,"sent_data":1655,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.betteradsystem.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":944570,"first_seen":"2020-04-18T19:46:40Z","last_seen":"2025-11-21T16:13:31.028391Z","alert_count":0,"request_count":2,"received_data":84990,"sent_data":904,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2025-11-21T08:31:02.428571Z","alert_count":0,"request_count":2,"received_data":860,"sent_data":849,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-16T22:13:25.532985Z","alert_count":0,"request_count":2,"received_data":153819,"sent_data":1277,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"movie.shineads.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-05-08","domain_rank":0,"first_seen":"2025-11-23T22:10:41.476412Z","last_seen":"2025-11-23T22:10:41.476412Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":964,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-16T22:13:25.550079Z","alert_count":0,"request_count":4,"received_data":99294,"sent_data":2162,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hdking.cymru","ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":31,"received_data":1131511,"sent_data":17134,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"GenerateBlocks","description":"GenerateBlocks is a small collection of lightweight WordPress blocks for the WordPress Block Editor.","website":"https://generateblocks.com","common_platform_enumeration":"","icon":"GenerateBlocks.svg","categories":["WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-11-18T17:37:46.430165Z","alert_count":0,"request_count":1,"received_data":1788,"sent_data":484,"comment":"","tags":null,"fingerprints":null},{"fqdn":"6.adsco.re","ip":{"addr":"104.16.42.28","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2025-11-21T02:07:42.170256Z","alert_count":0,"request_count":2,"received_data":993,"sent_data":849,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"usrpubtrk.com","ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-16","domain_rank":6824,"first_seen":"2025-06-17T13:34:00.105327Z","last_seen":"2025-11-19T17:18:27.892789Z","alert_count":5,"request_count":1,"received_data":532,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"a.ltrbxd.com","ip":{"addr":"172.66.144.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-08-19","domain_rank":407193,"first_seen":"2017-01-30T09:38:59Z","last_seen":"2025-11-16T06:37:39.554956Z","alert_count":0,"request_count":6,"received_data":2197751,"sent_data":3058,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hdking.foo","ip":{"addr":"172.67.143.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":101663,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"c8utedu9yk3f.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-11-23T22:10:41.473932Z","last_seen":"2025-11-23T22:10:41.473932Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adexchangeclear.com","ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-27","domain_rank":24943,"first_seen":"2025-07-16T08:40:02.47428Z","last_seen":"2025-11-17T13:55:56.757999Z","alert_count":6,"request_count":6,"received_data":6737,"sent_data":4695,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"c8utedu9yk3f.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-11-23T22:10:41.483832Z","last_seen":"2025-11-23T22:10:41.483832Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":436,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"df0f0e3e7f31f2501d7e19833ccb4ddc","sha1":"e551bfcbdd3a7c41875f1a974ad1914604b5969f","sha256":"511e9d231c9360fcb7670f7cbaffb35bf8180f124fc080ebbfa5962d4c8bb089","sha512":"57497c56a50a2a0ed0cd9862fdaf381fbf969bd3048dff24dee46f2dc10139cccfcc4b275d7d74cd3d8f036ada1eabe54d05c4773e80ba797748aeff6c855898","ssdeep":"","tlshash":"b98000f8002300c302300f032b0b3302b033000c3accb0ebba3080303802303f8020c0","size":33,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.512729Z","times_seen":18132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc0923c33f2f758c84c52fbb61c834a3","sha1":"b058be2d1733bff3d424d94ace699f13151e3df7","sha256":"d37ef4938c8ae1d3621058c0b807b594bdff045977dab405590883e514289ac3","sha512":"428f2cdc01d9aa9d3dc8ed5a91cbbc7bc7f1e0e05118f0d8a5e817f78b4348022cc0f7219d8362cd7295faca28e22392b2766cbeabb3b65d2387366e142294eb","ssdeep":"","tlshash":"f4d0c77df0585e5020c2607fb471a016521791b9bd941130d75ebc49ff08be546afeeb","size":215,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-21T18:39:59.200121Z","times_seen":27845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9f9b0f82813d813afe0d450e9fab4d6","sha1":"cb6ce93dd97adc3649f697ff49681f5aaf8b1671","sha256":"d204422e9d49293ab422bfabae9607635876cb30f77215f133603bac691f6f4b","sha512":"849997b396eb218b8bbc788eeb34ec3eb9ab4c809a07ac707a57a5e13baabb69d2c52795403d032f007276109c7f4476daa8255550fa236873e1eb9ba6dba3ba","ssdeep":"","tlshash":"706000c20008802002c200028820a2802832008a20022000c00800000000a0c0222808","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-01T02:02:24.983731Z","times_seen":23638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"be6b25353280fac3960e70c9dcb6804f","sha1":"46c69609a3bb697e60644b18dc85d780c44804ea","sha256":"38be2b1c1c886666cd4ac85d71bb8b65e51d95c7c5f40b0c575f7d196a0442cd","sha512":"cfb553df29882616e097d28e643208df6aae0e005e63b7e7d9310a731135e9e33407ec268f12699208db7dd4fe2e8ba8a49de900e8b0a1a4bd83bd522f2ee953","ssdeep":"","tlshash":"10700008e08020a308380002028223222a0c282080822020002b0280288228baa88a80","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.509203Z","times_seen":22176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d5757abfc2dfe2efd4bb1409941cf087","sha1":"a3eb249ef753951d22faa61f87302479aff27023","sha256":"bc9c06f981e7daa0478c449324d4010cdbc3c83c9a95879b99a0b531f5cabb87","sha512":"a21d0aae842d3e854147d43d706f8a72afeb8a045e8c020c6a3f0e61a0c91066b86163539ba9a2827f0a61d53b120a90b5c1ba65875e334a87ceca32b06c0117","ssdeep":"","tlshash":"188000ae80a800202230282a020222a02203e002c882008000ab0300208002b0280c80","size":27,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.51193Z","times_seen":19592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d720eef71edef78b948a643d5712ec07","sha1":"ea5eb334bd6ddb0f04abafb700dc2ecb30070c76","sha256":"2daa1a91b2430e9867296c9cb26d1483785954a9bdd66f79b2c754bab7092cae","sha512":"63368ff1fef849df7f849af23bc2f24698893bd3d58300282427a76665b2d5c94f097d409f93173ad9c36944b4fffc2e37fa03a91f81e4e04f3737f9b73d2d6f","ssdeep":"","tlshash":"5f6000c00000c00c0000ccc3c00300c030000030c0cc3c0003003c3300cf00ccc00033","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.51255Z","times_seen":24260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6043a0b1ebb36c505a9191b20e11815f","sha1":"6f9cda2539774241dca5f5df2e40b2e83139768e","sha256":"354d474759535f5f0bb63dc6c5ea17455fb3d281aeb3cd6d44c2f3f594c5dec3","sha512":"5a55931f152716ef8803227e0518befc7ec9fdbc66f16aab57824511c7f3a94bfd9b93b4417d6f759d04c517f3d242eec582b49a8d92be6079b88e10a27fb9bb","ssdeep":"","tlshash":"517000a20c0ba0020c228b02838222002020028a288830c220a088203222e0b3028080","size":24,"data":"","first_seen":"2024-05-15T22:21:35Z","last_seen":"2026-03-06T11:55:01.515568Z","times_seen":14363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ef9e29d830b47e493c51972bb3af3ef6","sha1":"95d6255c5e100dce97da5619be073c8dbf4f00c0","sha256":"fc5a1ffc9513896711ec2c788490995715c8d32ccda8c4e2c68a9bd8cb214e77","sha512":"af408037587ea95e4db5c0412d582ea898d2fb5084e5917048698bc482dd7c3e8854d87fcf3adf508fd8cceef746eab017029aba07aa934184675a6e6c88f0b9","ssdeep":"","tlshash":"a270000000002830080208002020ca8e2a22208022033a00800a000000208802088b0a","size":19,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.495259Z","times_seen":19082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d02fda19fdaf8d4d6fb77efcd948c64f","sha1":"a171c17c13dc66bdce8bdf61d90efe241df2dd0c","sha256":"3ea799f6e10ba6105ba8f292b670a5051eb2219d2e8ea584d1b19fd85fb51296","sha512":"4346eaf8bfa01a08cb4b05b9ef6792ce709fee314ece814abd83a69fc6352a0bfe1402c9e3f1ef99dabda0e1f1fa10f9f29021ed396d7b2e8fc56bba733d0590","ssdeep":"768:da/KJnPxjXnY6PnHAj4d14StkKDBAPBzSz9jsedR3mrkQqNolr668AYv:cSVxjXnfbtkySNSz9jtR3mrkQqNoJUv","tlshash":"76632ab97672303842b119f95a3f9311b1b95ae02c4690f193bd85503d34e9b933ffaa","size":70291,"data":"","first_seen":"2025-11-19T00:46:58.080234Z","last_seen":"2025-11-24T19:33:13.455737Z","times_seen":398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/js/c8b60bda24d2583fb278c653ade8249d.js?ver=8249d","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b22fbb896057aca38ff589ae652d5e51","sha1":"d7c80ad48aaa92283cee16b0ae35f5753f05c74a","sha256":"0b4a5bdce233322bbe51815709234569a6a1b925d4d130aa7319e9d02e411935","sha512":"08f46cffee943afdfda956bfcb88d29823563f6c054eb2ee6d67b4586acba5ad09f2b73811b9ee051b6063978ed18df829d0b70f67e6a2d553ba70f6077da327","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+0:s6Udn3LzoJphH8uClD2tFtJ7byTwt0","tlshash":"4d12d9ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9143,"data":"","first_seen":"2024-04-07T17:24:00Z","last_seen":"2026-06-21T16:06:12.000494Z","times_seen":4751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/interstitial.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec9da8742b4e2206f0ea753445f9999e","sha1":"80d5f3856e05338342b8ee393a0fbbd41dd719e5","sha256":"6295546af5912bb182bd40f1b7acf6045b061bf84c3f03ef14b8431325b1d5c5","sha512":"fe7caae7787f96e52fbed7210f86650fdbc9303058a6b92f4d8196927598d1ade48138f4d3327570ac007b8aded07fcf5be27bf4620361628f35aa242d900472","ssdeep":"384:oIj4P3R82/54Eege+NfryEHyqk5pUegq+Ns/ryEHf9/hehZHkntdP7I8gaRhhvul:oIjsR8+CEbeMfuJqkzUbqMSump6entdM","tlshash":"3c82e77622165378b28490c7bcb4bb50b5119218b716c428b1fc8cfb619fece7976778","size":17770,"data":"","first_seen":"2025-11-14T04:21:34.963995Z","last_seen":"2025-11-24T03:52:08.289Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a97ae6bd4dc972c26de801f868a79d5c","sha1":"cf1a46aa575a9718f8d4154813a7892317e7f8bf","sha256":"51c1083130407a8772738aa2380eb5a583240a47d98f2204b124c06fd11aabd5","sha512":"f16b7e511db0f35f83e9380c46a6173de1ca6aebbcf4aec1be6efd8d0cb669fc9a07c4e7702149f0421425109c35a9cd041347677ccaed445c978296502e78a8","ssdeep":"","tlshash":"51600003030c0000c00000030c003000fc333c0c3c0c30000c0030000000f033cccf3c","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-06-18T00:33:14.939103Z","times_seen":20834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.betteradsystem.com/a/fnumbers.min.js","fqdn":"www.betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2ffb70a2dfc54bbf3e672dfbfde29de","sha1":"3f293b5901c38eec954dc7724020beaaab393988","sha256":"4453a5f19789fb6b55d5d965d78be6db6d24b7f204b39a253823706678e8804a","sha512":"1b272305bfd6a60ac670929b196cb4131bcd12256b01badbc71014e8cc4c3d4921a936aacff2a62907ebe4de965cd7cca109ee957daddf3a4313999c912fc936","ssdeep":"768:bt9rqAYKKuZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCfRCntlqonr:bbNZzFQ9JsTgZvfzmMzhYrTscpJZp","tlshash":"31132aaab286282601e741ba503eb316b23305167912d458fcb9cdf96e3ddc6117b7fc","size":41943,"data":"","first_seen":"2025-11-23T22:10:53.106322Z","last_seen":"2025-11-23T22:10:53.106322Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aec9b42fe1b8023f14ecf097a613214f","sha1":"ec0d72443fcd5962efbdec54c12448ed7c2c2552","sha256":"e99c19ebdb4b3d74ad05fdaa7854a7e3be66c7cdd4348d116ba65cbf80903c1c","sha512":"e5f7fb6a6579798889f2c7393f0488564814d189fbe05a4b425e2464953df2fc06c8d30694f2718ca0011a80f4879b8b0c1f348b6a221864f816662098cccb6f","ssdeep":"","tlshash":"4611942c290ab53061d464bc463afd2a787712ea819467e96cef95c05b3b9c31d0be9c","size":992,"data":"","first_seen":"2025-11-23T22:10:53.168516Z","last_seen":"2025-11-23T22:10:53.168516Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,YWNsaWIucnVuUG9wKHt6b25lSWQ6JzEwNjEwNjQyJyx9KQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef95b4dfb318d1a1f7b0c09a7ddfd752","sha1":"f4fe7bb8222cf1a57afd8c7847e7fc415f5e4069","sha256":"5e4051b5a4d0f450bdbce74489da33e818aa91a19e9f9d83445b7ba44fbcd592","sha512":"e2161872266ece463cb131708765ab1175d1debc953d112f8a9bb3248768f51683709657c44f198785008b0c81505d8e91ce8182f224342f61e6dbab94fcd1c3","ssdeep":"","tlshash":"6080041415304177fc44050ccf147d50405d0401c50f710135405400f030dd00145040","size":34,"data":"","first_seen":"2025-11-23T22:10:53.17689Z","last_seen":"2025-11-23T22:10:53.17689Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9aa3dc35f8ba994aa0f04a42c4da5062","sha1":"a65df79b7b70e8b8d22a2db929f6598428a827e0","sha256":"89e4c05e12e12f5bdf85a4fb89bad572dd85256091add09fdb9c6e42e703e2bb","sha512":"72ec1d5aaa34463f798b2d2c5976a6221f70e51ea2afff582319f4c8b7e31f4a67ef2a2d39427b4d1cc89ca66c4d4374db662c1137380ce0aad2acfcdbed4d6c","ssdeep":"","tlshash":"ec7000080000a0308808a002882ca3803c20a820b022a008080823080000a020008e0e","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-01T02:02:25.041668Z","times_seen":23255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab3b4884408bb0261d6b56a7d288fe80","sha1":"b0f370141ada9b591302b575434c255db51ae151","sha256":"e5a13721b456c9e090f80944728fc91767f5ae01b01f59160e73ff2c7cacc587","sha512":"e57cb5cdac6519a8a24e85d5d91f2c6492e282308a94d369619e9455cef8f22a2a6abd62023647fbfa0228b6d3e12da22c280d691cd351608aada9c284ca3a66","ssdeep":"","tlshash":"6c80008ea0803232a2fa02038a822200a2af38ea88008820000a0200288030f232ac8a","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-01T02:02:24.975662Z","times_seen":23030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d72b80690ba108f701c1b1a5e697720","sha1":"befbf4e1dec83cfd6b3a327a909be07a4f8ab490","sha256":"0d8bef99a34b9446ad386668c9742d804417dad6f930213a1dd1cbb8dacbd6e3","sha512":"7cc76f2ee11c4395caa4a50a63bbd1668733e4f8ba3d89189a8014364a7e93873434b7b7b7c7ab37f624d4558e064d913657c064dcc9b35f892a0f05e0991130","ssdeep":"192:q6e4j3qVXlu798fbuEO4C5/hsNs35PhSkzISM8Z:bel29YFts/Swau","tlshash":"62f153497542b57f393b7071d0af220b313970a3a84b4861e9b8f6d87c789792a23d7d","size":8109,"data":"","first_seen":"2025-07-25T05:28:04.240916Z","last_seen":"2026-06-21T18:53:16.511277Z","times_seen":24359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/js/c9f49253ebef8ce0d6ff974316d2f5cd.js?ver=2f5cd","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c5fa2d41fdc9a50e55ed927b3aa1028","sha1":"32dd6f3a6959ed35b9cb8db31e733e29eed293c4","sha256":"adb9c4be6a3fe023e91f7952e0e851016582ee2b04794bb4c0d96d05e1b65501","sha512":"d3a85506eddf8ccc83e9583e0f4655aa9bdaa612685dfa5e69b534a3d0e883a3af75c6c38f71b27a5775f272486490c3374065cb66e407256a12caac20ae902d","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRem8:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC3","tlshash":"18a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4778,"data":"","first_seen":"2024-11-19T14:47:18.813848Z","last_seen":"2026-06-21T16:06:12.007891Z","times_seen":4430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aaf72876f0d5e8a677a383fd45bf938b","sha1":"d8b2ca3c238c933223f4a6313c5c0561f99e0c1c","sha256":"15eb7e222abfc64660d0f94c04053839498df20ea9ac9a13a201701a56ce3bf6","sha512":"c6bec20224539a5319a753a794c7521e7063e76b3d41bac8d7f0159880eaf3ed07c3fc1b0eb4ec285f1970f270f4b0ab68890d5a0ed01e3b1542102ad707f6d7","ssdeep":"","tlshash":"207000080820000820200802220322283822323022cc0002220a083022ea00b80282e2","size":24,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.498128Z","times_seen":23956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79e362235e366729632e60d6d35f8904","sha1":"69df1a1691b05442e11e2bc5825fc6297b977a92","sha256":"da82a56eb8524f5d12a2afcf2c5d0cb6184f26995167212a0ccb3bc2ba0def36","sha512":"94ca14ccb12238f547249a07134689257dd97639be34d7f466f52741df7176be982d88c5d294dd42a534a32d908533b5eaae33a13cb47ce0cf065d3098d9383d","ssdeep":"","tlshash":"fe60000000000c30000303000c30c3cc3c3f000030033030030c00000c00c003300c00","size":15,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-06-18T00:33:14.970437Z","times_seen":23625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/inpagepush.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93bb87f0d4f2de21438e16cbe4889ac0","sha1":"38cd3905a1e6a35553d485d6f79ecf628164612b","sha256":"494bdbc51663f7381d3390c951bf61351f1a5c0adbd129e52984459b57a8852e","sha512":"5e027fd5c2a3f7828e5e94e5a5de72de057470d334d17cdcdb87813661e7e5383e9c8a5a79851f6d808703b37c2e2ab8a0db3d6a3c1c0f2b1336490b4640ec16","ssdeep":"384:oeu7RnyUklMtlAZ9VKNrD9iDuXXY3ja7LuyfSxZywC2KyTsypUxxV4MQon2YXr6N:obMUklMtlAZfKNr5sunWGnmZywC2KyTP","tlshash":"ac72d9762123033539e581dbfc74aa81a6216168b956c42cb1ec8cf6a35fcda3c74f78","size":16292,"data":"","first_seen":"2025-11-14T04:21:34.969848Z","last_seen":"2025-11-24T05:54:03.309371Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-21T17:28:48.89895Z","times_seen":77951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b5e8699c1b76c14c38283a27772a3e0","sha1":"8e39b41dbcb6877e9b189351a2c90908abdc7754","sha256":"cfab5312f1cfff1e8162225ab27453306ff627f512bcf18225c0a305ca093e1c","sha512":"66ffa0031cc22b4eec8867f36dcf3d887b021a11ea74f51c2a2eff1ec4cf9eeb44c4e1d5a6c197f29d66546c5f42ef283c54261f6157687237e4dabe1715523d","ssdeep":"","tlshash":"cb700000000228a200fe230e8e82230822282223a28820c820220a2820003232380880","size":25,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-01T02:02:25.035676Z","times_seen":22396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c24107ca675c86ce400f00f60737bf91","sha1":"915db7d3426c409da4f1c6d58c38d9dfd6ad39be","sha256":"3688d7e88d248ea850c456f0233738d10695a410a3dec97785ca7422c3f562c1","sha512":"0b10c8522a9d3b4cd1b5d63918ca7888bf837bd48c2c456c38e20e215a0c5e1cc38e5248658c54021b1d2337a68dc1f61b17adfbda678078d0d4a8cb4fc56e40","ssdeep":"","tlshash":"2870002002002830880200022020cb8c2a200280280230008208000800208002808a0a","size":20,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.509945Z","times_seen":18884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdwY2Y3PXsiYXBpIjp7InJvb3QiOiJodHRwczpcL1wvaGRraW5nLmN5bXJ1XC93cC1qc29uXC8iLCJuYW1lc3BhY2UiOiJjb250YWN0LWZvcm0tN1wvdjEifSwiY2FjaGVkIjoxfQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbee6512965e022a3595733d2f0b958e","sha1":"b0cd38295d1bf8a0e6c80a2553e950498c9c0810","sha256":"f533e8b9eda8163d37bdf81fe0e4e87359c3c3846626f88e6ef95f967abb8fd3","sha512":"6ef37787743e5289d9ae946f860f432a81c0d8ab37a7d3a5c459297f1f88e674a4e0c914f7ed7283416cc358007e4abdae0c4f5a08f6a90c0fd7886bf82338af","ssdeep":"","tlshash":"a4b0126d6b818f0919a9c3c9034c32b17560751b4d376357d14401844b6e06ce4450d2","size":106,"data":"","first_seen":"2025-11-23T22:10:53.181618Z","last_seen":"2025-11-23T22:10:53.181618Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb440b8133f21c3e5d3e39624e7bda94","sha1":"1b46d8568f9bd8a2be944d6a61924a21ec0b6e4f","sha256":"a5e2bc908c3bd3196d273564d073484f9905d13817490eca5aa249e701139cdc","sha512":"f874692932aab2be754d763a3998c5cd3c654a5bcd78c5d839fe0ba506f9a9e563d3cecba0ca71a6b0db35ff94943f6fa8bb0292f10c1aeb7df2704ea6d85fbf","ssdeep":"","tlshash":"047000000000000820200802220322083822223002cc0002220a083022ea00b80282a0","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-06-18T00:33:14.974713Z","times_seen":24326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"11cc3621e45b2f0b945ccf3c32be2d99","sha1":"65369460879076ce3d2ca049392097e9c15b8149","sha256":"8eab171b0d256cf386d222b71fbf5380f2051b67452dbd83f41401a6216a789c","sha512":"e8af12a7397f87b88e2b71577fbb9be3be97b309345786db07de0c882ef2203a6d2b98a7f74c4f5b065e3d67cdb2c54f23ff7694c9ccc83e22ee93e950e60715","ssdeep":"","tlshash":"8bb009b69262c0b9c4469c9eb13ad6e7397a12143813b327901d49205522e5e2b008a0","size":108,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.455072Z","times_seen":20074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bdc6234a33432c503640ad2f62105dbf","sha1":"2e733c2d4f1953a7ca2231208e8e31edc399ab19","sha256":"61e43d202b6cd0ebf29ac8014115fcb890eb5593c4160b9ae285206ca911bce6","sha512":"ff6da6a9cfa04e9c0e4c8c038b70ff6461de31cf3020ffa062fb50d6507ffb72d431652f7a8eaf7fab316b387a16a0ba5923cb568450f6e5a3eb7c232a3793b6","ssdeep":"","tlshash":"bd70008e020000a0cab220a80a022300b0202c0008022200a0a00008202ee038288080","size":21,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-06-18T00:33:14.960208Z","times_seen":20602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a837a4ba8ea13b8193945adf0261e19","sha1":"61428cd720ebc0f01c4c017204c313193c22c101","sha256":"28d9693460ce57dd4e01742e50a1baa10cbed3fa6c20c2a69f02424f80fb9a2e","sha512":"abe0e46d98027527a7d2567c4feaece7ad3c1ec94eed8fea59b9eec596cdd4fa39e7776e9dbc4dd6fe777d9b09300d45ba2a49fc9479e0acbdea92ebf5ef940f","ssdeep":"","tlshash":"516000000003c03300300300030f33000030003000030000000c00303003c03c0030c3","size":14,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-06-18T00:33:14.985208Z","times_seen":23275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6a88d4bd5bd93656328a2f38b4378d0b","sha1":"d2afdc9b1693f0cf62ab6e88bbcf4e20fb62844e","sha256":"3b1758c84d9df642c22e7c547795bd40ff0a9610795e44c90109fa7f9b8016ab","sha512":"c64eb8517871a1b996d76fd0d9982a9726515a003cebbbdf1639067607e2f7697c97f79fc176802c7e560f325e3f39f40c9edecb49e7c1626b95ca0cb8349424","ssdeep":"","tlshash":"687000380a2000000230202200020002008282a0c0a2a8c0222a820002020200282002","size":21,"data":"","first_seen":"2023-03-07T12:58:03Z","last_seen":"2026-03-06T11:55:01.48721Z","times_seen":8444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,YWNsaWIucnVuQXV0b1RhZyh7em9uZUlkOidlbnA0bHdianY4Jyx9KQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6db010cde576a9b0643fd2013fb736d","sha1":"ef8b270d43b7665c8e70b8065947949ca849f769","sha256":"f6a328d982cf99a22b5b52ccc72d90c96d81976f85190ae3f98bcbdca0271bf8","sha512":"2fcf9694517b1e40d0754a5cdcb95e644dcd48fa41b00500d158d6d7df29846fd34cd268c69881b1a0759ce2634f1e53ccaaa10d2e9ce2b30c757309bfce1927","ssdeep":"","tlshash":"c59004171450007f5d40170ccd045ff35c7d0107c5003350c041335c14d31c14047155","size":40,"data":"","first_seen":"2025-11-23T22:10:53.184965Z","last_seen":"2025-11-23T22:10:53.184965Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGdlbmVyYXRlcHJlc3NNZW51PXsidG9nZ2xlT3BlbmVkU3ViTWVudXMiOiIxIiwib3BlblN1Yk1lbnVMYWJlbCI6Ik9wZW4gU3ViLU1lbnUiLCJjbG9zZVN1Yk1lbnVMYWJlbCI6IkNsb3NlIFN1Yi1NZW51In0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f806560f25ce278719a690887b877c38","sha1":"bad9ca108556d34e75a252c0e65466b9c15d81f8","sha256":"17b767f85a14d9d6e5ec49c39498113f8453bbcf4abf90153034a0704f20faa0","sha512":"7e4f8ee51bf462866680ceeca3a444a2685aad1acf30144fa741941a14b0c1a109b0cae6858a60b719c4c5033be61e6d8c99e6420dd1e55d0b3b798f7f93b9d0","ssdeep":"","tlshash":"8ab09b6d52439663d19276441384d423c07508d84209441ff15580dd6a54d931ccd447","size":122,"data":"","first_seen":"2023-03-07T13:12:01Z","last_seen":"2026-06-14T18:29:26.357276Z","times_seen":284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7145e6d4dd187b573a13f0240103f6f0","sha1":"f8e7ff7fd488f675f418011ef8ecca4a822933b5","sha256":"02665a4c106fc96e71ef5a17511cf353ec3f5cccb82ec9fce719b23967728897","sha512":"8fb980002683780ece97cb8cc6679fb9c8c97f543b927fe1efbf4073887176b68be02fd0ffbbc4bec0ebce401d04132fe4d1ab1edab9d006be9493f77bcfc736","ssdeep":"","tlshash":"0d700020000082000b2000032f83b280300a033000c8000002028f32a8e802fc020080","size":25,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-01T02:02:24.962633Z","times_seen":21543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c809887dc51fb5a7e73a3a98c3dd661c","sha1":"7d7574d4dcf1e06e2230379897c5df681ba603de","sha256":"1138f8c1bb11f4a5f7d8354b8c8a642ef94c9c741d76a7f476bac6473b7de085","sha512":"3a5e6abed1f1fa40c5d7d13b98d4e90d180f5913a673f10db23f40b1fe68a70de8e780c2633bb6f37745ce4aaf81707844817fa84baaa2b764a322831c298e7a","ssdeep":"","tlshash":"9b8000f00283008b08308f03230b3300b030200c30c032cf3038003c3002383bc030c0","size":32,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.510411Z","times_seen":17900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,d2luZG93LmRhdGFMYXllcj13aW5kb3cuZGF0YUxheWVyfHxbXTtmdW5jdGlvbiBndGFnKCl7ZGF0YUxheWVyLnB1c2goYXJndW1lbnRzKX0KZ3RhZygnanMnLG5ldyBEYXRlKCkpO2d0YWcoJ2NvbmZpZycsJ0ctVDZCSk1LOVlNOScp","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"98c146a6926608dca667152a58914de3","sha1":"01f138d543d01f90e1f09ce298096f03e7546e6d","sha256":"73acd7545994dc957b0ca815ab3da85dfdcf8d7d0d64d505091224c2449f7da5","sha512":"daf32d726b0443579a7e8423998bcef39eb8c797e3b3535b0f81888a81649c94c57922b3bd4d31d5010e2d10a43c15b17cc5496d1f474c5abf31f8ed8e85606c","ssdeep":"","tlshash":"6cc0228c22028cb282ff0b820bef3200a202300080800c320802b3ca2022ce3a28ac80","size":132,"data":"","first_seen":"2025-11-23T22:10:53.198098Z","last_seen":"2025-11-23T22:10:53.198098Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/js/ed1551a735ca89a5248d9addfd8f2edd.js?ver=f2edd","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3903fc6792b30db20d567ac27cb32d7","sha1":"3878ed47da14f29379d385c89b07c7c43e46235a","sha256":"e7802a0072e0400e012d016dfa8fcb77e5bc9d7d86dc5500d502c22b76467eb6","sha512":"c13ef44338efd56a34a0f02c89d246158187ffd6f3fcd78ec88222aac313170422f16b8465ad86c76d6cdcb2a42a9f6e4e040bbb48751f2425981cd0d1f10563","ssdeep":"96:BiLzZp1jH2BKyAWjjp9+1YYE7Aq5l0ok7yyAMGrrAU9gEuqOxVTHjiQzBSw6MCnp:B6jH2cK5IKD0Y3vm17iQz8VBAn06kd","tlshash":"9702d88cf71034b548bfc69e81dba500d1bbc92596439086f69d8c4e1949f6813e7fdd","size":8526,"data":"","first_seen":"2023-05-29T23:05:28Z","last_seen":"2026-06-21T09:42:35.797453Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dca14c896efeb4b80c68c457aea67f39","sha1":"2488a552655a41fbd3f3165ea5b1999f46f25738","sha256":"998158f6df4183edd82539e6dc971d32f50bc7ee075f64d4abc46d3011a9da27","sha512":"56d0ea635f1a8dd9f7bfed6a8e087ec4d8e38bf65eaee1e1262740fc7ce80cf1b45ea861f0d5949b69ecc650427ccc8879f1b7c9af78933ba26d0aa9f704033b","ssdeep":"","tlshash":"ac8000b02a02b830888c220eb030c3c83c30000030033800a22c00cc08b0ec02208e8a","size":37,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.469862Z","times_seen":18394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/suv5.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"699de1941b9464587082d47263bcebc3","sha1":"e2611925e9899acf1576c275dcbee6090cd09415","sha256":"6349b83d17e8da94b7b10b14fef659796c77a9b161e5317c478a0fad84d497bd","sha512":"9e7b8e477e8650835f20dd2a3a610791557481443268577498957a281dc0e430cd3d5f3d9b8322c30bb0312162ca0cd4b60d906a2c9208b65ae8e6cec42def48","ssdeep":"384:AEP2zguQPzflgkjMi9ePI+r1wFBz10QllxRkVTMatf4eTK5ZYXF5CwW55JV/OCYO:A+6i2kjMi9YreFBzWQxkVTMatq0XzdWP","tlshash":"efb2282b3313577af39e95daae665621a3308192b842401c769d4cd7132bfca71b8f7c","size":24509,"data":"","first_seen":"2025-11-13T11:47:07.616991Z","last_seen":"2025-11-24T10:42:55.666792Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad81beb0a28e87fe3ce3742823d264a8","sha1":"f0aa1a71cc5d0b2b40e1b009486fc627f7703878","sha256":"10531cb9ccd59383133c85843a19c55ba0a27d1a2eb912628e9bd7f68b479aa5","sha512":"ed7834311ae7828b03aa5a7411e9f4bbf5066879ee89fe01f83fa28d1a299733d0a81eea1cc4ab97477bf80c13c5ecf94e398d95c3bd3a2911d480b651c6fb78","ssdeep":"","tlshash":"9131ee7df5291636095661fde399e341a030f0dadc428424efb5cc5ea8cce9548abdf2","size":1717,"data":"","first_seen":"2025-07-25T05:28:04.194173Z","last_seen":"2026-06-21T18:39:59.202126Z","times_seen":17068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,d2luZG93LmRhdGFMYXllcj13aW5kb3cuZGF0YUxheWVyfHxbXTtmdW5jdGlvbiBndGFnKCl7ZGF0YUxheWVyLnB1c2goYXJndW1lbnRzKX0KZ3RhZygnanMnLG5ldyBEYXRlKCkpO2d0YWcoJ2NvbmZpZycsJ0ctMFJDTlcwVEdHWicp","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff755030f9c753ac49b73993bdbd3883","sha1":"18e1895ebda16b42e31b56462196b2c7864c2c5e","sha256":"729be1a052e74c159d304162d165e672eb1e8fc9f2012ed0890a0d1964f143ad","sha512":"5701f7328e4f7841d7bb89e19386a641532b985f67c87bb9558f2632db7b641e4a612848119ddeec54aeb55eff2250d68ab072a212941f0ee8965b76df44591b","ssdeep":"","tlshash":"e1c0228c32028cb282ef0b830baf3220a202300080c008300802b28a2022ca3a38a8a0","size":132,"data":"","first_seen":"2025-11-23T22:10:53.200235Z","last_seen":"2025-11-23T22:10:53.200235Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,IWZ1bmN0aW9uKCl7InVzZSBzdHJpY3QiO2lmKCJxdWVyeVNlbGVjdG9yImluIGRvY3VtZW50JiYiYWRkRXZlbnRMaXN0ZW5lciJpbiB3aW5kb3cpe3ZhciBlPWRvY3VtZW50LmJvZHk7ZS5hZGRFdmVudExpc3RlbmVyKCJtb3VzZWRvd24iLGZ1bmN0aW9uKCl7ZS5jbGFzc0xpc3QuYWRkKCJ1c2luZy1tb3VzZSIpfSksZS5hZGRFdmVudExpc3RlbmVyKCJrZXlkb3duIixmdW5jdGlvbigpe2UuY2xhc3NMaXN0LnJlbW92ZSgidXNpbmctbW91c2UiKX0pfX0oKQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"eccb37da7be12b61bb531eb81e4cdd90","sha1":"76d9d2fb585e40c74d7363ef7e2efe4830ee034d","sha256":"2909117400dcc95f99cbcc62930bce751a820266f346a6e676aa573f71e922c0","sha512":"852507b842846420d539950d075c9186c2a93a32f89f4cfc4a4fca1f327354ed89f0a5c3b5dfadb42ab1e527219c8033b65ba90de619a3b708bbb3ebd2b4907c","ssdeep":"","tlshash":"6bd0123a6b562b320997a7a266efb7413b6306b564c105135c75c8892f34dc981754ca","size":259,"data":"","first_seen":"2023-03-07T13:12:01Z","last_seen":"2026-06-18T02:06:24.260382Z","times_seen":369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,d3AuaTE4bi5zZXRMb2NhbGVEYXRhKHsndGV4dCBkaXJlY3Rpb25cdTAwMDRsdHInOlsnbHRyJ119KQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"04a9b59b7e49f913a3926f6431334155","sha1":"35f2521d3ab3f75895b02da9c6b5419e1a35be59","sha256":"94c4eed60653e14337c021261a52581e9b6f93ae9ba512912ca30ce656b3ac64","sha512":"40068c8ae55d5f7b8bdd0fcf5eabdf443cd6b033788c1686b0a96adf4f645bfd34d50ea7f0017c9514e3029752b213826373450e791760bf8310e0c303aaa750","ssdeep":"","tlshash":"57a0028530a76805c505d1605967fc00446415cb818eaa181ae5ee30e515598748232e","size":58,"data":"","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-06-21T18:47:26.558556Z","times_seen":16663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"41310478a380eaf7e07dbad9b4f81a97","sha1":"1714b6ef86e90b5b23e2aaa1e7728ed9c59f4d34","sha256":"848e5342d9196c0f64861ab926a3c5aecce9294750febbd22e5d8df859bdb144","sha512":"7b93f330547524ce01b8f888a8d56c19cd4432fbee43db16aab33fc1aecd77243762c5e7dd5ce767e38c0fdf9d58bc629caf106d77689c1ef90ebeb09406580e","ssdeep":"","tlshash":"d37000000000000b203c00020a023a003003003000880800820808302ae800b802c0a0","size":23,"data":"","first_seen":"2024-02-12T20:00:21Z","last_seen":"2026-03-06T11:55:01.500018Z","times_seen":19951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-21T17:28:48.89895Z","times_seen":77951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b7d8a1a33a77fcd0328d3c709c5a9eb3","sha1":"e8ea90d66488aae87f231079141b02b04cc26f05","sha256":"3f06772f212125287a824492bf133d5fc6ef851b8478c081406f650716869cde","sha512":"b92d0879e95318270c892770db71380d6f66efbeb8e4c9a8155e82b09e66a0a90844a4d0e38ede9b6bd536d8926ab4359e3bcc5266594f04136fa66295bbc9c1","ssdeep":"","tlshash":"f37000082080000200200002020222003202203080c82002a2000a3020ea08b8020080","size":20,"data":"","first_seen":"2023-03-07T16:36:56Z","last_seen":"2026-03-06T11:55:01.489296Z","times_seen":4296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"476b43130f4da0758e51a26ea93e733d","sha1":"5eac9c53e9cc1410e58f6f0bdc85528acab30736","sha256":"b19d05a8d492320ab4db4d74ea0e9e90374bed47a18e805f8018ebb00af0c23c","sha512":"d7b6af5bbc8185dfa58fccd8be30e14c79aed4aba53d8824cc066465690837c5f2d173bc3bb78eda33f9ae91ac0434fbb63d4d4c906e1874cc614ecf72ac4291","ssdeep":"","tlshash":"547000088202202a003828028282a220223ca82080028020000a020228002032ba08c8","size":22,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.474522Z","times_seen":22786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"879c12264b74d969b0314e9a9cd1f17d","sha1":"714a5d759f4d1b7d41f8c5526451aef114b33d41","sha256":"28be88d787b6e773eaf5d0818a6c62446ce628dd8ec0659c6f78410588838337","sha512":"3547b27de7764e655bc8749fd5c1166599da57d2a76057e66923476fda692917a9e537a934374c77f361359b9fe94d739bc037044bbcf2648feb43f7ff9f1c7f","ssdeep":"","tlshash":"f7700008e0a03032203a020a228222202a0c2020800000a0080a328028882832380880","size":22,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.498638Z","times_seen":21975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95e9f1cbdece09183c4794acedd4d88e","sha1":"20837bbb3c53f0b8421af7f0314820c491b0b12a","sha256":"9b078b8e24e4655c21a5876570daac97f2ddc241bfdb259644582b6a7a60930b","sha512":"955c11b9ab26c41f7b2b297856dfb4350e5c30aeeb6425d9378f5d63bf44c7f0d53b219c4bf41f5ca1eaa1abd9c9ff7c4c1a13199493b01be33cfca2f0352a54","ssdeep":"","tlshash":"e870002820208008002228aa288000000002a008e00a0880202a0a8880000b00202828","size":19,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-06-18T00:33:14.977858Z","times_seen":15159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3fb31fc4a0b37980210c57f2698989d","sha1":"82a161b3a63cf0d5a5b37e9eacdfaf298bcbb55b","sha256":"45200934a32157fcedfec503f25c156ed7a19df9a9538269e7848ad8f1adc936","sha512":"69f23736f39a72a620c7ee834ab1745e31b0289d9724365899af60148af4a28c26c7f2bfd64649776390a2301775e2c5be863604d3c932f264eaf572f0c2b3e7","ssdeep":"","tlshash":"0fe0a330f14849201040c569f274c41110b2ca85dc2aed30f38db818f830989c1b7df7","size":408,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-21T17:51:45.734294Z","times_seen":15760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-includes/js/jquery/jquery.min.js","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-21T18:30:21.13542Z","times_seen":920416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/js/4c07cd76cc4a64b9725b828777d243a4.js?ver=243a4","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab2b109461499404e6308fc102ceba5a","sha1":"3400d0407e06e7746cb7b5b154b76aeebe6f5bb8","sha256":"0d5ef0324954e39c6b7804a30be454deaaed55369bdb76a965eb475e21e98d43","sha512":"f61bff510c3ac17ada29ab53682b03746cb73f6c1edd2ca51243a20f168fe865036f0dfb5312cce5ce1d3bf231e798dff0ad31bd76d47785029e0f738ce3e51c","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvz:bqHngROnvgJUqDi9cNYTnGvTbvz","tlshash":"cfe112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","size":7335,"data":"","first_seen":"2024-09-02T16:35:56Z","last_seen":"2026-06-21T18:24:23.869093Z","times_seen":1005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e969e6981adb7ab1cb174994a5c8c627","sha1":"5f534a259a6f3754d1d392028fd4cbb344fb6563","sha256":"5cb18f9c0eebf644c0bc27e5224177984121b4c4a3f8189861a6d797a15a2e7a","sha512":"10bbe815bb6e4ade10d00a42a82dd10b668e95e275161cb0a637b2ea95785f8f7fc72b31bb48ac9c1dfad03d811912c0683941a3c09357525f164915d5b033cf","ssdeep":"","tlshash":"a380000a88a8a0222a30a0228c020200202e822080ee208083f2032020c283c022b802","size":30,"data":"","first_seen":"2024-02-12T20:00:22Z","last_seen":"2026-03-06T11:55:01.514986Z","times_seen":20053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/js/0582711f8cbe8bf5cf245951bea9372f.js?ver=9372f","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e71574fc61389daf15e9585bcc93fe5","sha1":"92394cddb2ae40c7060c709621db86634b25fe1a","sha256":"2f441c962e351ef150f80bda82823c79cbb9ca057e0be5761a3584a3ba89b9e6","sha512":"028551afde3dd00b87ebd86e58888da9a3c317753760af83697602d9796956e687f83e5b1d60e3844d6f9b6acfcbb9cf93088116a6872e72ea6c2fafec85c50f","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O95:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XN","tlshash":"9c4235e16197e0f0c7c338a48816c051f2bf866cb8898054fb5dcdd22d5de07626b77a","size":12513,"data":"","first_seen":"2025-03-17T01:59:03.5715Z","last_seen":"2026-06-21T18:12:29.388277Z","times_seen":9350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61d9031f2b0da3ac81b6732b6d1ecf83","sha1":"515d4db3d1120a7160d1bc7d93d57f7fbdea1fc4","sha256":"436179ef4964c80a03e62015696ba10c5ae70602c6538d07f50b75f35bd72a27","sha512":"3b6ddafdb73b34756f57d92b3db048d03ac38dd2f96be7d4ba695835470b8ce460e2d6059a84e64f3bc2d5237b6151aad2a649f76ab43a81447182684b5741de","ssdeep":"","tlshash":"b58000b02020a830088e020cb030c3cc3e32000230033000a00c028c0830ec00228f88","size":36,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-19T05:15:08.455572Z","times_seen":18664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c510d5a3d97cb2f599576a56b2703434","sha1":"9bc8f27eddd88f1e3f879b2dceb86f92486dc1e3","sha256":"b4a3a83fe09d48db0c0b4416fefb19af5f9e069c12d2af8793a18f159574bb79","sha512":"7adf4f6f79a04ef4aa41503ef199d996dfe027863d5493881f4689e595cc9ce27a4451f1be2617108f3716d2c26bea30fe4ef4c7c4922d4896cf3f7f94e50467","ssdeep":"","tlshash":"7d60002002002820002002000a02a20a2002020c82020200000a8000220208300802c0","size":17,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-06-01T22:20:33.620865Z","times_seen":18168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-WEZ6Z72NKX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8c4b6a7225d59733ace5256f50f0143","sha1":"86caddb3106dd1b39b0395a487d9c7a2ee0d54be","sha256":"73da07d0cabad3c127fec2c2456981b617459108ca6a17558388528b6b032cb0","sha512":"7036add72dd355534d86f5255c165bac2579a62c7ba4c9ebe1bc90d9476dfc80e33fe3f451f5859bacd300903287bde322e499bab22163cf24aacaae93271380","ssdeep":"6144:i97BUKltJeUI2XVUULUVWo6O7GQEO7QZ2ElVFBoOr+Lu:i9FDl2UnVUUtO7QZ/","tlshash":"da9419ce73d674225396f078502f018ba57b28a2b44cc899f1c9cde52e74a9a4277f7c","size":425048,"data":"","first_seen":"2025-11-23T22:10:53.103298Z","last_seen":"2025-11-23T22:10:53.103298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.betteradsystem.com/a/fnumbers.min.js","fqdn":"www.betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2ffb70a2dfc54bbf3e672dfbfde29de","sha1":"3f293b5901c38eec954dc7724020beaaab393988","sha256":"4453a5f19789fb6b55d5d965d78be6db6d24b7f204b39a253823706678e8804a","sha512":"1b272305bfd6a60ac670929b196cb4131bcd12256b01badbc71014e8cc4c3d4921a936aacff2a62907ebe4de965cd7cca109ee957daddf3a4313999c912fc936","ssdeep":"768:bt9rqAYKKuZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCfRCntlqonr:bbNZzFQ9JsTgZvfzmMzhYrTscpJZp","tlshash":"31132aaab286282601e741ba503eb316b23305167912d458fcb9cdf96e3ddc6117b7fc","size":41943,"data":"","first_seen":"2025-11-23T22:10:53.106322Z","last_seen":"2025-11-23T22:10:53.106322Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/js/816e5ba9a494bb6a1b8a45b167e4ee73.js?ver=4ee73","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84da02f41d9c61dec95f05d41236d497","sha1":"2bb978916e29e01050ea71d2c68a299fc61f90d3","sha256":"9d8c33c2fb6efb6c3e9778edd19c6c60bf61e327c1132787e14f66cb7cba9726","sha512":"8fb2072d48ed3c279ea005d758d64467384ff0efa72e5ffbe547dda86a6cdd3aa28741a2d342ca28d9e98cb8ee8a0c8d05fad75455d47eb858d7f4101b81e40c","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5D:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjZ","tlshash":"ab52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13453,"data":"","first_seen":"2024-11-03T23:01:56.192803Z","last_seen":"2026-06-21T18:12:29.247735Z","times_seen":9625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,d2luZG93LmRhdGFMYXllcj13aW5kb3cuZGF0YUxheWVyfHxbXTtmdW5jdGlvbiBndGFnKCl7ZGF0YUxheWVyLnB1c2goYXJndW1lbnRzKX0KZ3RhZygnanMnLG5ldyBEYXRlKCkpO2d0YWcoJ2NvbmZpZycsJ0ctV0VaNlo3Mk5LWCcp","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac2ee41fbe2c15ed2c5679e406682ae9","sha1":"e180e656e158589fe30295f837d91e0c15aff750","sha256":"7098e61a76e38a92ed19b8f54b3e93bd85719044755541771881c0a076ad5440","sha512":"50da959b212777626ea5631df588fa6b2d980b61c30f6a5dbd2f14281c53a70031099a1bfac02f35ef006d41d1f62d53b9a2182faba432908d3339aac6f2419d","ssdeep":"","tlshash":"fac024cc31434c7145ff0741075f3301f101300040c00c310405f3c53011c535357c40","size":132,"data":"","first_seen":"2025-11-23T22:10:53.207164Z","last_seen":"2025-11-23T22:10:53.207164Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"67b2371a222c2dc94f01b8579fff4f4d","sha1":"0b0a5e2d11790de282055efe8b8cfd6f4378bbfd","sha256":"dfafe4f2e08c006ec277e8042267c6237512a1a93bfcf57657420d4becc0a97b","sha512":"06a32863a820cca2b2f4460c10c4dc3583687648c909c5f67c746e727ecd4ea6301db1273b40dacdaf397a585ff257eb8c3e226fc023e95d3bda257e02505dfb","ssdeep":"","tlshash":"d4700002880200a8302bc808a3022300200080802882000008888002b0000230808088","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-01T02:02:24.96695Z","times_seen":20843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betteradsystem.com/yyniqynwokozufxck?UOAXmynk=BQOCAAAAAAAACZUAAkNsJRFRN_8mscXzYmo-gCgCb9Bx9iD66KeDJ06kNB9gmTQrBN40QxzhH9UkK2_hTf7Q50ebxVeI9LNIGmvntA5gBYmmfUw0R4b6QSJbE6r_OGWlqE8s83DrNVL4FPlz3t5h0lggEX5N3hsWlU6BV_uB14k9eXCxdYwoz3qHFPw-Ap0IvWAHUk2UFa0Im8ffHjGwMFwzYwHVCLjdAm2GJpsZKO8FhDHnRrNS2-lzUp9CxTLGlF6pNCdd0rEdjaNBYNHbWT--hBiCM10Wf9fiKJGazberWYUbr5xs5_BQZgm5YV5oogDedQ_sW_4XjDZf5FB_SNnnWmf6Lxcn15yeZ5i4c7cPSOBo3QSK6eRvPURbPm-12CoSssz5RdgIytweAsGuTuZXVv1nTJtY9w1pb7RUywuAtijYnigIvQUkDYaQgh1qm6uIUElWv6Ix0Rhhw5vt5bB8InctWEhhPDUJhnHMniyYUXGdKvuVj6FeWHzhUryTkGUF03kM-GW3z6190decoTlEDW41Sl7s0sgNO7f-81ApI25l8XFmPPn4DYNQ99daKWyJejIrZy9FlL9D7xjjwy8rdTnWIx5N8z4IEDxESIVbqan9eRxvb-pKYQCoe4qNxq2s2QTjL-1DHgEaz0eXRbWcOIAVFtAuV2mvt7SVWv25PrNhZH4zqEdKQND695YsCU3YvjV2Bh77m1bZoKGqoS6Q89LzOslFmkoIFhlcW65mxCw97W5z1VI8bDy65TzBnh5q4ltS5WqdjkoE7E3GvFGVGVhdQqClfPJX6Z7z92mKbS_hZT9lRB5_iV8CbVV3wHXjEGgD-RUpdq5TZgGbGrol_r5Qz7c3rBp5MIowilVf61RyvOkyfjV2AUWeP2Uk6o4563e6huvc5ud1cROgs8a7Fgi9Dt6hX1LPghbA7RgmXYLRGB_H_o4Y2YRHyEu_Xumdo5MRdlJgIPBXJBKo7XtxW22Xhtq0FVWuRc8Mz3Qc2FSQ2lVemxUlNROKeH7SsuyLcmC-up70rr2zIMrTKAkfRIzMZ0PEN5fSoytIi-q8Z2tbRiM3Jx-ZoXLbBi_Cp_E2UEJQV6tlooQTtSyFEmzVt0XkNywPvabqo-8tIyTSCgY-eAE8epKro32RNoseNjeRq5dwP1OgdBh6yadrQrA_lNMsmoq77T3j063h6gjMgWVqqG2i1gcnaKB_\u0026qCVGEPTh=4\u0026nGdXJUlz=5255933\u0026XADlOJEo=\u0026iNvUOBjx=0,0\u0026KxSMgmbT=\u0026PYgeBmKC=\u0026TCfhlAFR=1280,1024,1,1280,1024,0","fqdn":"betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"162.252.213.208","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-06-21T14:06:16.948125Z","times_seen":25127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0RCNW0TGGZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"125c335f2505ef5ab8d179d72ebaabcd","sha1":"1d0b436c4b6dd9d5c00232e21491f44cc92cfc01","sha256":"21c2e4d7007e5ddb5dd318bbb6a34537263d66043c643cd6b95136ffa81bef04","sha512":"78523475a4003dc273ab15767affaebacb0d6ef1266705930fb77c8787c52f1f365861f46ec2f5e61af32cf087b866a8d94c627bc6d41f04d3aa37814c821802","ssdeep":"6144:zJKiBUKCtJeUI2XVUULUVWo6O7GQEO7QZ2ElVFBoOr+Lu:lK2DC2UnVUUtO7QZ/","tlshash":"21941ace73d674225396f078502f018ba57b28a2b45cc896f1c9cde42e74a9a4277f7c","size":431395,"data":"","first_seen":"2025-11-23T22:10:53.1315Z","last_seen":"2025-11-23T22:10:53.1315Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74c80f0e297ec657aeae0d3ff655a6d2","sha1":"8845fc9520aa8eb9b3ab86ace1c2b3d0d3d75768","sha256":"58a8317d3ba9a957615f74753799530106474db430487a68da38eaf8ae81b591","sha512":"36006dc66be026ee9670e5d94fd43ad0bf43f311f0f94e11f21cd29d5d7498a9ab4c39d3d81b5eecf39e3dddfe4109f088a6c2f905ed0dbe42ad2df194484460","ssdeep":"1536:GQuSBruwmjbX1LQUSzlgjW64ZVB6G6/O1p5RiVgntTA73Uv9UYg1fUsBoiYf:NuSBrRmjhHjW64YL3Uvs6","tlshash":"0543292632132339b2d4809b7d66a75073315195b946841c72fc4ce6369ffca6a35fbc","size":58910,"data":"","first_seen":"2025-11-13T11:47:07.615154Z","last_seen":"2025-11-24T12:25:37.143619Z","times_seen":174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e018c77e67a96b7f5440da3c7397e35a","sha1":"a090b0a7035556c7f71070fe10c2e37fa15584c5","sha256":"5c5bb18e544cb67f765d8a6d2c774838d3ae95df9b62f25660c64554a7302d8e","sha512":"cfaad7c410b0f14c2c849855f859a973177c6bdeb27ce9e3dfbbb38169a4abd0f66252213aa1885751c54d1ae761fd68af739081e9b7d6875f084c2240874062","ssdeep":"","tlshash":"0a6000c000030030000300303030c3cc3c30003030333000000c3c3f0000f00c003f0c","size":17,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-06-21T13:32:49.40519Z","times_seen":21577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-T6BJMK9YM9","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"265de703a054a15fc9c0f8ffbc8472bf","sha1":"7981e05188240a3bbad73d0ff99d4a75aa23a0cc","sha256":"06ff355851ffb3c0667c2ea8afc41ed2080db75a16a5d483aded9998a05e2a89","sha512":"fa0e1846a531fea9e723a819f771613c1c47fc29a1b922b9fd454ef8a7762dcfd95446a64743e747878f22b17f119b907ed103024c699a1263745c7780d5b4f0","ssdeep":"6144:TJp5BUKitJeUI2XVUULUVWo6O7GQEO7QZ2ElVFBoOr+Lu:FpbDi2UnVUUtO7QZ/","tlshash":"a9941ace73d674225396f078502f018ba57b28a2b44cc896f1c9cde12e74a9a4277f7c","size":431392,"data":"","first_seen":"2025-11-23T22:10:53.152907Z","last_seen":"2025-11-23T22:10:53.152907Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7545d1da7159ca66338b4c84b69f8ae4","sha1":"0858800340ee5b8c413a1aabc50fb28d0bdf89db","sha256":"7510742fba4d25113b6124987e97cba40776bc5030a6a3678974dc8ba075bf81","sha512":"dbd944acd2868ed6eb1de313c0efe7590f715129f7ca5a9ae5a3dfb9de0035612a248441d9e6c4c1812d8ec4b3de7cd2a5973c4c71887361a2276de1d73fab94","ssdeep":"","tlshash":"af8000088820202a20be0a0e02a3e232220e3022a0020220000f0280380020bb302880","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.475594Z","times_seen":22616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fe99bbf2987d52a27e4d042d61264b5f","sha1":"96bb68de49d3a4146142cce3f02de1ccbf8d0bf6","sha256":"cfe90e4da6c1841088b25b3582dc78b887f3239cdfde633ff426703c6ed538f5","sha512":"9dd74689d8b3460b4da7557d2797047f31cfa1b8522959d152c08f1f48989897e15f026d9b254a7ef61b99b9b18fc002054f29a12a2e30554a68d7815c53f3dd","ssdeep":"","tlshash":"d570000a20a02022082a000082022200288c0082a80800380a008b003c008032222382","size":22,"data":"","first_seen":"2025-03-02T21:04:17.177505Z","last_seen":"2026-03-06T11:55:01.511158Z","times_seen":8483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Nov 2025 23:52:35 GMT\r\nexpires: Wed, 18 Nov 2026 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 425862\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-21T18:31:41.595923Z","times_seen":891342,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":137,"dns":1,"connect":33,"send":0,"wait":14,"receive":11,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/interstitial.php?r=10610610\u0026srs=d1e6ce681432d34fe95874a3d84e855e\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fhdking.cymru%2F\u0026atv=71.2\u0026cbref=\u0026atag=1\u0026czid=enp4lwbjv8\u0026aggr=2\u0026ppv=1","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:18.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 20:14:35 GMT","end":"Tue, 06 Jan 2026 21:12:18 GMT"},"fingerprint":{"sha1":"7C:B6:62:0F:43:12:2D:86:DD:92:D1:44:95:36:24:C7:2F:BA:B0:B6","sha256":"06:21:18:21:3A:A8:90:A4:4D:D0:A6:7B:7B:C8:4A:3B:31:47:C3:5D:48:A5:94:AC:08:75:A0:A1:DF:D6:B9:3C"}}},"request":{"raw":"GET /script/interstitial.php?r=10610610\u0026srs=d1e6ce681432d34fe95874a3d84e855e\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fhdking.cymru%2F\u0026atv=71.2\u0026cbref=\u0026atag=1\u0026czid=enp4lwbjv8\u0026aggr=2\u0026ppv=1 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdking.cymru/\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 22:10:18 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FfGByFQ%2BgVlc0fy4uzrfUsw2PVcABpGpFTc%2B9mTSSznz09OL%2B44xrbaYFmN2bEe6UEvCL3%2BhfW2T%2BZD9d6q6pEePsOlb8g3Vsg0TUNuwoT%2B1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a33fef10b27569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/plugins/litespeed-cache/guest.vary.php","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:15.973Z","timestamp":0,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wp-content/plugins/litespeed-cache/guest.vary.php HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdking.cymru/\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2FqIVb4qwALH05JZx74pN2EEyeLd%2F6aTD3IIuec7GMqRfQooAPG6%2F%2Fwoytfz57LSI3ngiDH5jeBGv%2BkaHqza7CepqKYDaBb0hYlw0g%3D%3D\"}]}\r\nx-robots-tag: noindex\r\nx-litespeed-cache-control: no-cache\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28; HttpOnly; Secure; Path=/; Max-Age=172800; Expires=Tue, 25 Nov 2025 22:10:16 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a33fee1c86bb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/css/3743ddf549d307d26ad5831dec31b211.css?ver=1b211","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/css/3743ddf549d307d26ad5831dec31b211.css?ver=1b211 HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 542\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:00 GMT\r\nlast-modified: Thu, 20 Nov 2025 15:19:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283815\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IuYVylF%2BDB%2BMgkJZKM2LL5JNX3g0MVoUvy%2BkS%2FG32QQ6vGDg50CLWTMecvdIeaOJtqmJYb8zS3Yjbg8hrvDhzIHYXdnMgofu3hYfJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a33fee5ad3075ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2566,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2566), with no line terminators","md5":"ebc4817d78928435ca7eed8216d49e5b","sha1":"8e120ea34776bca556b3c6bccb361c45f0a7f964","sha256":"7c8eb7fd8354e29e58e77290872b6e05a65404a4d16fe26996b72b6f2f606281","sha512":"cbcc6cc2e06303e3e0fae560253b7f9438fef8a83f6a5dbf84d0b6f24ca9f4b8855e55e979dc55b41517a21ddb5e789f16957efa1e470978ad3b4a12110f8360","ssdeep":"","tlshash":"f8514bd9d1b8248640f34b2ff7d6865438f3a41452977a82a0db671548efe4607a3fbc","first_seen":"2023-04-06T22:42:41Z","last_seen":"2026-06-21T16:56:45.197798Z","times_seen":5130,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.7140824629223812","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.42.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:18.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:18 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncache-control: public, max-age=2678400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\ncritical-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\npermissions-policy: ch-ua=(self \"https://adsco.re\"),ch-ua-mobile=(self \"https://adsco.re\"),ch-ua-full-version=(self \"https://adsco.re\"),ch-ua-platform=(self \"https://adsco.re\"),ch-ua-platform-version=(self \"https://adsco.re\"),ch-ua-arch=(self \"https://adsco.re\"),ch-ua-model=(self \"https://adsco.re\"),ch-device-memory=(self \"https://adsco.re\"),ch-downlink=(self \"https://adsco.re\"),ch-ect=(self \"https://adsco.re\"),ch-rtt=(self \"https://adsco.re\"),ch-width=(self \"https://adsco.re\"),ch-viewport-width=(self \"https://adsco.re\"),ch-dpr=(self \"https://adsco.re\")\r\ntiming-allow-origin: *\r\nlink: \u003c//adsco.re/\u003e;crossorigin;rel=preconnect,\u003chttps://6.adsco.re/\u003e;rel=preload;crossorigin;as=fetch,\u003chttps://4.adsco.re/\u003e;rel=preload;crossorigin;as=fetch,\u003chttps://6.adsco.re:2087/\u003e;rel=preload;crossorigin;as=fetch,\u003chttps://4.adsco.re:2087/\u003e;rel=preload;crossorigin;as=fetch,\u003chttps://0.l4.adsco.re/\u003e;rel=preconnect,\u003chttps://0.s4.adsco.re/\u003e;rel=preconnect,\u003chttps://0.n4.adsco.re/\u003e;rel=preconnect\r\nexpires: Wed, 24 Dec 2025 22:10:18 GMT\r\netag: W/\"0C/aGf2vjU1vt3782UjGTw==\"\r\nvary: accept-encoding\r\nage: 1320\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a33fef0893b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70291,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (797)","md5":"d02fda19fdaf8d4d6fb77efcd948c64f","sha1":"a171c17c13dc66bdce8bdf61d90efe241df2dd0c","sha256":"3ea799f6e10ba6105ba8f292b670a5051eb2219d2e8ea584d1b19fd85fb51296","sha512":"4346eaf8bfa01a08cb4b05b9ef6792ce709fee314ece814abd83a69fc6352a0bfe1402c9e3f1ef99dabda0e1f1fa10f9f29021ed396d7b2e8fc56bba733d0590","ssdeep":"768:da/KJnPxjXnY6PnHAj4d14StkKDBAPBzSz9jsedR3mrkQqNolr668AYv:cSVxjXnfbtkySNSz9jtR3mrkQqNoJUv","tlshash":"76632ab97672303842b119f95a3f9311b1b95ae02c4690f193bd85503d34e9b933ffaa","first_seen":"2025-11-19T00:46:58.080234Z","last_seen":"2025-11-24T19:33:13.455737Z","times_seen":398,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":3,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/suurl5.php?r=10610626\u0026cbur=0.052768179746811694\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=HDKing%20%7C%20Jalshamoviez%20All%20New%20Movies%20Free%20Download%20HD%20King%20%E2%80%93%20HDKing%20%7C%20Jalshamoviez%20Hollywood%20%26%20Bollywood%20New%20Hindi%2C%20South%20Indian%2C%20Hollywood%20in%20Hindi%20Dubbed%20Movies%20Watch%20Online%20Free%20Mobile%20720%20%2C%201080p%20Download%20%E2%80%93%20HD%20King\u0026cbpage=https%3A%2F%2Fhdking.cymru%2F\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1763935818334\u0026srs=d1e6ce681432d34fe95874a3d84e855e\u0026atv=71.2-a\u0026atag=1\u0026aggr=2\u0026czid=enp4lwbjv8","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:18.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 20:14:35 GMT","end":"Tue, 06 Jan 2026 21:12:18 GMT"},"fingerprint":{"sha1":"7C:B6:62:0F:43:12:2D:86:DD:92:D1:44:95:36:24:C7:2F:BA:B0:B6","sha256":"06:21:18:21:3A:A8:90:A4:4D:D0:A6:7B:7B:C8:4A:3B:31:47:C3:5D:48:A5:94:AC:08:75:A0:A1:DF:D6:B9:3C"}}},"request":{"raw":"GET /script/suurl5.php?r=10610626\u0026cbur=0.052768179746811694\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=HDKing%20%7C%20Jalshamoviez%20All%20New%20Movies%20Free%20Download%20HD%20King%20%E2%80%93%20HDKing%20%7C%20Jalshamoviez%20Hollywood%20%26%20Bollywood%20New%20Hindi%2C%20South%20Indian%2C%20Hollywood%20in%20Hindi%20Dubbed%20Movies%20Watch%20Online%20Free%20Mobile%20720%20%2C%201080p%20Download%20%E2%80%93%20HD%20King\u0026cbpage=https%3A%2F%2Fhdking.cymru%2F\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1763935818334\u0026srs=d1e6ce681432d34fe95874a3d84e855e\u0026atv=71.2-a\u0026atag=1\u0026aggr=2\u0026czid=enp4lwbjv8 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdking.cymru/\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EsR7Wl%2FcX60tIcPMqOWgQBzN7Kp9sjbqsVqsSANBNo5R6doYHJP%2Fk4lsBZiVWFIdwhmOjDkjDL%2BPz6w4vIL8CffbRXuw92Q%2FrB6Ko06NPe3HxdY%3D\"}]}\r\ncf-ray: 9a33fef0bd72120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1103,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9fe829fb8f6e1524bc0b1cfd4feaa214","sha1":"2136910cb8d0f4ea9871904effbf954f120e8c24","sha256":"e01eda61fdf7e7bf152ebc96f592a4b270c14e4b5478794007be89583ad7fc20","sha512":"849b3ea6cdd2f2388cb766b966ae39cb129393ccc71a083f279d70036364f4c39acb33b69ae5077569d2bb67a347e9ed67e08a93833003eb6c5aaa13cc8b6f8b","ssdeep":"","tlshash":"5311f935082d0a3ad46e004c17f93409187235ca4d14f86dd366ee31441eba209eba5f","first_seen":"2025-11-23T22:10:53.101741Z","last_seen":"2025-11-23T22:10:53.101741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdking.wales/wp-content/uploads/2025/11/Teen-Rasamalai-2025-Saathi-Hindi-S01-Complete-720p-HEVC-UNRATED-HDRip-x265-AAC.jpg","fqdn":"hdking.wales","domain":"hdking.wales","tld":"wales"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.wales","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Oct 2025 16:06:54 GMT","end":"Mon, 12 Jan 2026 17:02:53 GMT"},"fingerprint":{"sha1":"08:25:6B:15:36:B3:4D:9F:93:D9:5F:18:B1:9C:73:96:34:85:09:72","sha256":"11:FD:32:7F:E7:F3:21:86:0F:FE:98:4D:34:F3:52:72:9C:BA:0B:7E:A6:02:ED:7B:62:3C:F7:DF:80:08:45:19"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Teen-Rasamalai-2025-Saathi-Hindi-S01-Complete-720p-HEVC-UNRATED-HDRip-x265-AAC.jpg HTTP/1.1\r\nHost: hdking.wales\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-length: 0\r\nlocation: https://hdking.cymru/wp-content/uploads/2025/11/Teen-Rasamalai-2025-Saathi-Hindi-S01-Complete-720p-HEVC-UNRATED-HDRip-x265-AAC.jpg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7XCynJmZ0WLS%2BLtl6%2BulVF2U1GZs83fQ%2BLYZNj8Y6VcMQm%2FhovjOPBqkZNzJaMU9uCJ6JqaqP8T%2B7ri8elIKwxCJcfV8dfNUjOhUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a33fee7ede932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44944,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":285,"dns":0,"connect":5,"send":0,"wait":6,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-includes/js/jquery/jquery.min.js","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29744\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:00 GMT\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283815\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hmFFsLpie8VBk%2BGu6LLICoQKQSfZDB25agMSboTSab%2BZDwwOuzyWPCuD52IJQBYQFZwyFuTM647g67O%2FMo%2BwVkFYXTVE66Q51ip4cg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a33fee5ad3175ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-21T18:30:21.13542Z","times_seen":920416,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-WEZ6Z72NKX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-WEZ6Z72NKX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\nexpires: Sun, 23 Nov 2025 22:10:16 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141709\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":425048,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"a8c4b6a7225d59733ace5256f50f0143","sha1":"86caddb3106dd1b39b0395a487d9c7a2ee0d54be","sha256":"73da07d0cabad3c127fec2c2456981b617459108ca6a17558388528b6b032cb0","sha512":"7036add72dd355534d86f5255c165bac2579a62c7ba4c9ebe1bc90d9476dfc80e33fe3f451f5859bacd300903287bde322e499bab22163cf24aacaae93271380","ssdeep":"6144:i97BUKltJeUI2XVUULUVWo6O7GQEO7QZ2ElVFBoOr+Lu:i9FDl2UnVUUtO7QZ/","tlshash":"da9419ce73d674225396f078502f018ba57b28a2b44cc899f1c9cde52e74a9a4277f7c","first_seen":"2025-11-23T22:10:53.103298Z","last_seen":"2025-11-23T22:10:53.103298Z","times_seen":1,"resource_available":true,"data":null}},"time_used":665,"timings":{"blocked":296,"dns":42,"connect":27,"send":0,"wait":47,"receive":20,"ssl":231},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/interstitial.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:18.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 00:40:27 GMT","end":"Thu, 05 Feb 2026 01:40:22 GMT"},"fingerprint":{"sha1":"76:9A:7C:2F:34:DA:E3:06:23:B8:73:B7:95:32:FC:FF:34:88:AB:1A","sha256":"F0:CF:B6:C8:DE:7A:81:6A:9A:D8:3E:43:29:D0:90:4D:7B:2A:8F:21:F6:9C:91:59:EA:FF:0E:B5:7E:07:E4:91"}}},"request":{"raw":"GET /script/interstitial.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:18 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-guploader-uploadid: AOCedOHL_BRsiHnz5yKwVHBcXVFmOwkA0g-h1R288kbmU_ADFN3_TEy63V_rs7gU3riJLuYz_XLC57s\r\nx-goog-generation: 1763022363528542\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 17770\r\nx-goog-hash: crc32c=P8IP8g==, md5=7J2odCtOIgbw6nU0RfmZng==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nexpires: Sun, 23 Nov 2025 23:10:18 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 13 Nov 2025 08:26:03 GMT\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2928\r\netag: W/\"ec9da8742b4e2206f0ea753445f9999e\"\r\ncontent-encoding: gzip\r\ncf-ray: 9a33fef0be6ab4ff-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":17770,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17769)","md5":"ec9da8742b4e2206f0ea753445f9999e","sha1":"80d5f3856e05338342b8ee393a0fbbd41dd719e5","sha256":"6295546af5912bb182bd40f1b7acf6045b061bf84c3f03ef14b8431325b1d5c5","sha512":"fe7caae7787f96e52fbed7210f86650fdbc9303058a6b92f4d8196927598d1ade48138f4d3327570ac007b8aded07fcf5be27bf4620361628f35aa242d900472","ssdeep":"384:oIj4P3R82/54Eege+NfryEHyqk5pUegq+Ns/ryEHf9/hehZHkntdP7I8gaRhhvul:oIjsR8+CEbeMfuJqkzUbqMSump6entdM","tlshash":"3c82e77622165378b28490c7bcb4bb50b5119218b716c428b1fc8cfb619fece7976778","first_seen":"2025-11-14T04:21:34.963995Z","last_seen":"2025-11-24T03:52:08.289Z","times_seen":12,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:18.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 7822\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:10:19 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK lon123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://hdking.cymru\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1212), with no line terminators","md5":"afa71f3960be2c13e15ee833f931bbaf","sha1":"e0dd6dd88f2beb2cdb715582fd3f66fb9a90cad0","sha256":"ab8bd3f38df9ec48166d061701950d2cf2658c50a8a3b7b46581dc2af367a9d4","sha512":"bcabf756dea14b5d51d8f75fe30857071af56287fe0b71db08bb84c14e4e412d38a1f7fefeba7d80370fd538cda9f0fafae29208abd4de69fb505b3c490262f8","ssdeep":"","tlshash":"9f21b7f3d0291ba25455b41ad7cbeb8621ccaa1f8546fc1b6e8487a704e55c4824842a","first_seen":"2025-11-23T22:10:53.105355Z","last_seen":"2025-11-23T22:10:53.105355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":84,"dns":1,"connect":25,"send":0,"wait":78,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.betteradsystem.com/a/fnumbers.min.js","fqdn":"www.betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1285643437.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 16:38:13 GMT","end":"Tue, 10 Feb 2026 16:38:12 GMT"},"fingerprint":{"sha1":"EA:E4:C9:AE:61:81:6F:11:4B:72:3C:2A:46:18:ED:C4:47:6A:00:25","sha256":"C4:02:72:06:98:CF:DB:E4:B2:89:0B:79:BB:F3:E0:5E:5C:18:99:7E:B8:7A:94:20:38:B7:12:52:2A:86:05:BE"}}},"request":{"raw":"GET /a/fnumbers.min.js HTTP/1.1\r\nHost: www.betteradsystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:17 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb8\r\nexpires: Sun, 30 Nov 2025 04:44:44 GMT\r\naccess-control-allow-origin: https://hdking.cymru\r\nlink: \u003chttps://betteradsystem.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwwBX63NDQH321cAAAwBuUwKAQH3CZgAAAwBJRPCMQG3KQUAAA\r\nx-77-nzt-ray: 2a494a154269e90b6e862369cabd6009\r\nx-77-cache: HIT\r\nx-77-age: 22491\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41943,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"f2ffb70a2dfc54bbf3e672dfbfde29de","sha1":"3f293b5901c38eec954dc7724020beaaab393988","sha256":"4453a5f19789fb6b55d5d965d78be6db6d24b7f204b39a253823706678e8804a","sha512":"1b272305bfd6a60ac670929b196cb4131bcd12256b01badbc71014e8cc4c3d4921a936aacff2a62907ebe4de965cd7cca109ee957daddf3a4313999c912fc936","ssdeep":"768:bt9rqAYKKuZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCfRCntlqonr:bbNZzFQ9JsTgZvfzmMzhYrTscpJZp","tlshash":"31132aaab286282601e741ba503eb316b23305167912d458fcb9cdf96e3ddc6117b7fc","first_seen":"2025-11-23T22:10:53.106322Z","last_seen":"2025-11-23T22:10:53.106322Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":2,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.42.28","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:18.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:18 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9a33fef0a83e56c3-OSL\r\naccess-control-allow-origin: https://hdking.cymru\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":31,"dns":19,"connect":4,"send":0,"wait":15,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/push.php?r=10610618\u0026ipp=1\u0026mads=2\u0026position=top\u0026czid=enp4lwbjv8\u0026atag=1\u0026aggr=2\u0026srs=d1e6ce681432d34fe95874a3d84e855e\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fhdking.cymru%2F\u0026atv=71.2\u0026cbref=","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:33.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 20:14:35 GMT","end":"Tue, 06 Jan 2026 21:12:18 GMT"},"fingerprint":{"sha1":"7C:B6:62:0F:43:12:2D:86:DD:92:D1:44:95:36:24:C7:2F:BA:B0:B6","sha256":"06:21:18:21:3A:A8:90:A4:4D:D0:A6:7B:7B:C8:4A:3B:31:47:C3:5D:48:A5:94:AC:08:75:A0:A1:DF:D6:B9:3C"}}},"request":{"raw":"GET /script/push.php?r=10610618\u0026ipp=1\u0026mads=2\u0026position=top\u0026czid=enp4lwbjv8\u0026atag=1\u0026aggr=2\u0026srs=d1e6ce681432d34fe95874a3d84e855e\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fhdking.cymru%2F\u0026atv=71.2\u0026cbref= HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdking.cymru/\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 22:10:33 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAccf%2Bx%2B3JOFZNJB1CI7mINHqj122wwlR7bCjmT4AY4mISleygNGdbCxXVPx06muk6EaO89NA%2FwQKYbwn1R6tqHwxpb5MX%2F6YyOf7jdHIIUK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a33ff4ef862569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/css/308871568c6fe9439f874225953f5724.css?ver=f5724","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/css/308871568c6fe9439f874225953f5724.css?ver=f5724 HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 14354\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:00 GMT\r\nlast-modified: Thu, 20 Nov 2025 15:19:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283815\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUzfqTcKxig9bhrJbkF8HNxG20AoJa1hwur5L1xBTXLoyKLwB2EAumdR3Nduyj6bvOc2OJ%2BqiTLDPJr2eAUvZ1r6ZVjdnMnAfXjv7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a33fee59d2975ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116328,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"d0cb2a53625f20cb22d7ae2d18129847","sha1":"30e4b3e7f46956badb9ca6481e5c2363c46a78bd","sha256":"242eddaa92636d19d045d3b9098f529c63d3e24824253267ecaabd829c362644","sha512":"c9d1adcf7e0b3bbfd7e7e0f8a1d9a95bcea3f1e4b46d59135853e7f4455a6665b5562b2ceb3f5fbc6634b2a5caa0c652e31470ed2a28286cfbbcdc84d6624d06","ssdeep":"3072:PeeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:Q1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"87b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-16T05:23:56.480436Z","last_seen":"2026-06-21T16:06:11.99954Z","times_seen":2950,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/css/1f356c8e7ec7b5667144d8b745f2afda.css?ver=2afda","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/css/1f356c8e7ec7b5667144d8b745f2afda.css?ver=2afda HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 1702\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:00 GMT\r\nlast-modified: Thu, 20 Nov 2025 15:19:12 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283815\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bc5cAj5DLsRMg7WcyNSvASWo0rHEka2GlFn2uiZZ5crPe6Z9xGWxfpqbyzz7a26EVZEaWKNqWOHYW7%2BYZHdtCchFA%2BOZemlH%2F6MQJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a33fee5ad2f75ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12517,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12517), with no line terminators","md5":"14c21340c9822e735c16b645a017b6a4","sha1":"ede78f9ccae5203399de26d36ce9e645e3fac37f","sha256":"da31a0cca27df612b317504bc03a5c70b9c11fabb3619390a55a2ef7bd46fb49","sha512":"0349eec19e0da72714fbb4797ab5d7ab818da452192fd052b0abf4b07d794924b0d09a0217e88f43fa48d7fd993d54a1d1bc14888a03e2662108c3c1b6ed0df4","ssdeep":"192:ntcAx++YmhSeNLtH6qAJrgIIitgEXrrh0kq8sqABV1c:/zNR6qEgII5BTc","tlshash":"f44251a24921732dbb73a53d42a9798d3160d953e9ef17d9bc50e032c3caae53e31126","first_seen":"2025-11-23T22:10:53.109576Z","last_seen":"2025-11-23T22:10:53.109576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/uploads/2025/11/The-Viral-Couple-Stripchat-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/The-Viral-Couple-Stripchat-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28188\r\ncache-control: public, max-age=31557600\r\nexpires: Tue, 24 Nov 2026 04:10:16 GMT\r\nlast-modified: Sun, 23 Nov 2025 18:03:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zihXfRFqzmSMZKU4RDL859Kg8LQKaZhs0X4dsbcdtEk5SICe7HQAOXoI3nCOvrfBxyjcy0t9RfRWFG%2BV32OYRPFkKCk%2BPoVNaGEdyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a33fee5cd3575ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28188,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x510, components 3","md5":"a24511a36ca1b3f320e44da0b23bf56a","sha1":"557b4b8fc79ee2e900e1ea827b7f5edad59477f2","sha256":"196ea230616198fea42281b386171d4bac16069418cf9321e0a0ac7febca068f","sha512":"254d8ed2ea988f144ec47bb7ac6bdf7c977d00f5c279097699c7a76c501f6d4f395784112773d991ea6425d0c285105d81b25aff8b6a93b84edec1039315d968","ssdeep":"768:iw0N0nHFQardjR9ctm8K5xx4moUMXaSO1qE:aN0nlQarPywwUMyqE","tlshash":"39c2e145bb88cc9bf407cb3169fb8b074e48d50374c2d6debe8a783d91744d82a5183a","first_seen":"2025-11-23T22:10:53.110837Z","last_seen":"2025-11-23T22:10:53.110837Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/uploads/2025/11/Teen-Rasamalai-2025-Saathi-Hindi-S01-Complete-720p-HEVC-UNRATED-HDRip-x265-AAC.jpg","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Teen-Rasamalai-2025-Saathi-Hindi-S01-Complete-720p-HEVC-UNRATED-HDRip-x265-AAC.jpg HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdking.cymru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44944\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 23:27:51 GMT\r\nlast-modified: Sat, 15 Nov 2025 17:28:44 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 16944\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FJcFq41YVe4vR6d5uRqO%2B%2F0lCh4rsd6mcNo57Jx4s386uvYB%2F0cj4bhQBRKet9g8jZE0J%2FpWa0RoRj11NLOKCP%2BIe%2FwnDC7UIi8Cw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a33fee94d7475ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":44944,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x510, components 3","md5":"920619585fbc85cdbf3e2bcb6d92e6b2","sha1":"4dc24e3d21c377121d3be9825e4dbbda5da4ebd1","sha256":"b2ad7f61b0dbacf1856bf2125b864837ff1cdf4bcdcaf1a2b50fdb2aec0c2c8b","sha512":"b8c3db78ca2dcd663e87d6cc4ae6d8a0a99ef4ecd18cf44ff7b733cac5855b119af96517028fc5756c3189f4533173a7ce017eb5be8c70b87b48bd5507c982fa","ssdeep":"768:E9uq1T3Okk4j8NqFGaIR2nmhmWIRVkE/6ov+mRy2faqt8Su:Ezse8UUa82nmIBU81v+X2y1Su","tlshash":"0013f1507a6a9411f3b2f673e71c62779faf6d0395301f0b88ef38556c0419a9a778b0","first_seen":"2025-11-23T22:10:53.111728Z","last_seen":"2025-11-23T22:10:53.111728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/uploads/2025/11/Garam-Sukh-2025-MoodX-Hindi-S01-Complete-720p-HEVC-UNRATED-HDRip-x265-AAC.jpg","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Garam-Sukh-2025-MoodX-Hindi-S01-Complete-720p-HEVC-UNRATED-HDRip-x265-AAC.jpg HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55352\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 23:27:54 GMT\r\nlast-modified: Sat, 22 Nov 2025 17:30:30 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 16942\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CKD59BN4GAsArCFWQdfAfCgWkJly9%2FbeahEVGYdovWiZVUfcEeQrXL9AjW%2FZ9FgWmmgF3PYM0qbWkIw1jCmVPyCcbpyDiTVy%2F7oQiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a33fee5fd3875ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":55352,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x500, components 3","md5":"3bc72e3770bef23dbaab748d37457911","sha1":"27c34b2786cbc103b7fcece86b72286f7db50070","sha256":"623fe47b97c2c531e2328efabe595d179f06f444bfce237616f9e299acf74d0f","sha512":"0f8a7b1b19683d113877ddfafcf491532b6244bd89af6dc8cecc6987b69f464e7f71b55b0985ab1945830de9661556c432fd89152875a2a778b9d5ca128e69cf","ssdeep":"1536:2MPUaxgz2xrbJboFDGMQbovAjvaEFNRiFdDnNSsAk:2MGirbJbSDfczHpifMsh","tlshash":"1a43f119fd1e9140ee02ea3553765bc2f97aa81cb1110bdb1b6b8173def60809c8b5f9","first_seen":"2025-11-23T22:10:53.114496Z","last_seen":"2025-11-23T22:10:53.114496Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.9950443275547066\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 12:29:00 GMT","end":"Sat, 10 Jan 2026 13:27:25 GMT"},"fingerprint":{"sha1":"2D:85:E1:CC:5C:69:E9:00:F0:2A:D7:4D:EC:27:FD:E4:0E:99:3F:1F","sha256":"FF:B8:FC:07:03:69:0B:74:AC:FD:81:98:21:29:56:B1:D8:28:5E:79:5B:0B:DF:E3:6B:94:DB:9F:B8:AF:5B:7F"}}},"request":{"raw":"POST /ut/hb.php?cb=0.9950443275547066\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 1093\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1093,"data":"{\"clientHints\":{},\"isScrollable\":1,\"totalClicks\":0,\"sessionLength\":0,\"ippMissclicks\":0,\"visible\":1,\"caught\":0,\"lastevent\":0,\"isFullscreen\":0,\"isTabFocused\":1,\"eventImps\":0,\"retryCounts\":0,\"isScrolled\":1,\"isMouseMoved\":0,\"pagePercentageSeen\":30,\"belowTheFoldSeen\":0,\"touchEnd\":0,\"touchMove\":0,\"clicksByType\":{\"idle\":0,\"input\":0,\"video\":0,\"button\":0,\"link\":0,\"img\":0},\"browsingTopics\":[],\"ufp\":\"Win32/Mozilla/Netscape/true/false/1280x10240en-USunknown4824 bits\",\"sessionStartTime\":1763935817,\"sessionId\":\"d1e6ce681432d34fe95874a3d84e855e\",\"timeZoneOffset\":0,\"zones\":[],\"pUrl\":\"https%3A%2F%2Fhdking.cymru%2F\",\"pReferrer\":\"\",\"pTitle\":\"HDKing%20%7C%20Jalshamoviez%20All%20New%20Movies%20Free%20Download%20HD%20King%20%E2%80%93%20HDKing%20%7C%20Jalshamoviez%20Hollywood%20\u0026%20Bollywood%20New%20Hindi,%20South%20Indian,%20Hollywood%20in%20Hindi%20Dubbed%20Movies%20Watch%20Online%20Free%20Mobile%20720%20,%201080p%20Download%20%E2%80%93%20HD%20King\",\"pDescription\":\"\",\"pKeywords\":\"\",\"pHasIframes\":0,\"pWidth\":1280,\"pHeight\":3440,\"vWidth\":1280,\"vHeight\":1024,\"inIframe\":0,\"sentTimestamp\":1763935817404}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 23 Nov 2025 22:10:17 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F17YzDkpPVYneHLgCPnem4jyeu0p5CBk3CH6CgWO0b6%2FsSFx4EKB5%2FuKQ8fYwZwxCS%2BUKJbxr20ShfS7nL1frMOlz9xKvFNaonQwSdM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a33feeb18000daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":45,"dns":22,"connect":1,"send":0,"wait":156,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/suv5.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 00:40:27 GMT","end":"Thu, 05 Feb 2026 01:40:22 GMT"},"fingerprint":{"sha1":"76:9A:7C:2F:34:DA:E3:06:23:B8:73:B7:95:32:FC:FF:34:88:AB:1A","sha256":"F0:CF:B6:C8:DE:7A:81:6A:9A:D8:3E:43:29:D0:90:4D:7B:2A:8F:21:F6:9C:91:59:EA:FF:0E:B5:7E:07:E4:91"}}},"request":{"raw":"GET /script/suv5.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:17 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AOCedOEJA6HdeJF4Kq1reudAj5T9Px6kUcr4w-MjvAZqZ6xnhPSZnDcto0OMXGJGC_a-0mO6eWcqduk\r\nx-goog-generation: 1763022500313894\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 24509\r\nx-goog-hash: crc32c=Vn82Mg==, md5=aZ3hlBuUZFhwgtRyY7zrww==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nexpires: Sun, 23 Nov 2025 23:10:17 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 13 Nov 2025 08:28:20 GMT\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 853\r\ncf-cache-status: HIT\r\netag: W/\"699de1941b9464587082d47263bcebc3\"\r\ncontent-encoding: gzip\r\ncf-ray: 9a33feeac8ffb4ff-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":24509,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24508)","md5":"699de1941b9464587082d47263bcebc3","sha1":"e2611925e9899acf1576c275dcbee6090cd09415","sha256":"6349b83d17e8da94b7b10b14fef659796c77a9b161e5317c478a0fad84d497bd","sha512":"9e7b8e477e8650835f20dd2a3a610791557481443268577498957a281dc0e430cd3d5f3d9b8322c30bb0312162ca0cd4b60d906a2c9208b65ae8e6cec42def48","ssdeep":"384:AEP2zguQPzflgkjMi9ePI+r1wFBz10QllxRkVTMatf4eTK5ZYXF5CwW55JV/OCYO:A+6i2kjMi9YreFBzWQxkVTMatq0XzdWP","tlshash":"efb2282b3313577af39e95daae665621a3308192b842401c769d4cd7132bfca71b8f7c","first_seen":"2025-11-13T11:47:07.616991Z","last_seen":"2025-11-24T10:42:55.666792Z","times_seen":97,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:18.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:10:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://hdking.cymru\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":104,"dns":21,"connect":29,"send":0,"wait":27,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c8utedu9yk3f.n4.adsco.re/","fqdn":"c8utedu9yk3f.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:18.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:20 GMT","end":"Wed, 11 Feb 2026 09:14:19 GMT"},"fingerprint":{"sha1":"FB:34:12:01:B6:D1:B3:BD:9C:64:10:4B:29:6B:C7:44:FD:21:82:69","sha256":"D8:BD:52:A0:9E:11:2A:7E:51:D4:43:1D:9D:F7:F0:66:68:70:DF:0B:20:4A:38:60:4C:B5:37:82:2C:42:01:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c8utedu9yk3f.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:18 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 16 Jun 2023 08:37:42 GMT\r\netag: \"648c1f56-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":378,"dns":120,"connect":87,"send":0,"wait":87,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 00:40:27 GMT","end":"Thu, 05 Feb 2026 01:40:22 GMT"},"fingerprint":{"sha1":"76:9A:7C:2F:34:DA:E3:06:23:B8:73:B7:95:32:FC:FF:34:88:AB:1A","sha256":"F0:CF:B6:C8:DE:7A:81:6A:9A:D8:3E:43:29:D0:90:4D:7B:2A:8F:21:F6:9C:91:59:EA:FF:0E:B5:7E:07:E4:91"}}},"request":{"raw":"GET /script/aclib.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AOCedOESq5R5VzqCUtQ_cBYUK_5cYjWdOQ9UzGd2uxKvF051_bQkLF6IKNQ7RrJbrAZQebe2Zht_WhDFXElOKQ\r\nexpires: Sun, 23 Nov 2025 23:10:16 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 13 Nov 2025 08:23:40 GMT\r\nx-goog-generation: 1763022220639253\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 58910\r\nx-goog-hash: crc32c=IyuIHQ==, md5=dMgPDil+xleurg0/9lWm0g==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\nage: 1972\r\ncf-cache-status: HIT\r\netag: W/\"74c80f0e297ec657aeae0d3ff655a6d2\"\r\ncontent-encoding: gzip\r\ncf-ray: 9a33fee648c64e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":58910,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (58909)","md5":"74c80f0e297ec657aeae0d3ff655a6d2","sha1":"8845fc9520aa8eb9b3ab86ace1c2b3d0d3d75768","sha256":"58a8317d3ba9a957615f74753799530106474db430487a68da38eaf8ae81b591","sha512":"36006dc66be026ee9670e5d94fd43ad0bf43f311f0f94e11f21cd29d5d7498a9ab4c39d3d81b5eecf39e3dddfe4109f088a6c2f905ed0dbe42ad2df194484460","ssdeep":"1536:GQuSBruwmjbX1LQUSzlgjW64ZVB6G6/O1p5RiVgntTA73Uv9UYg1fUsBoiYf:NuSBrRmjhHjW64YL3Uvs6","tlshash":"0543292632132339b2d4809b7d66a75073315195b946841c72fc4ce6369ffca6a35fbc","first_seen":"2025-11-13T11:47:07.615154Z","last_seen":"2025-11-24T12:25:37.143619Z","times_seen":174,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":21,"connect":2,"send":0,"wait":7,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.ltrbxd.com/resized/film-poster/1/1/0/7/2/1/8/1107218-sisu-road-to-revenge-0-1000-0-1500-crop.jpg?v=c2827208fd","fqdn":"a.ltrbxd.com","domain":"ltrbxd.com","tld":"com"},"ip":{"addr":"172.66.144.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltrbxd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 17:36:44 GMT","end":"Wed, 11 Feb 2026 18:36:33 GMT"},"fingerprint":{"sha1":"05:71:8A:8D:87:FC:BC:E2:97:F2:88:E8:8E:AE:5A:9D:1A:BB:FC:31","sha256":"3A:DA:CB:61:84:24:55:FF:A7:9E:16:2C:24:D2:73:26:CA:3E:06:3C:51:D6:0B:1C:72:DD:F4:4D:51:26:85:69"}}},"request":{"raw":"GET /resized/film-poster/1/1/0/7/2/1/8/1107218-sisu-road-to-revenge-0-1000-0-1500-crop.jpg?v=c2827208fd HTTP/1.1\r\nHost: a.ltrbxd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 551193\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=597870, status=vary_header_present\r\nage: 16945\r\ncontent-security-policy: default-src 'none'; font-src 'self'; image-src 'self' data:\r\netag: \"6bfe40fb76c34987cedad867d2acb3a0-1\"\r\nexpires: Fri, 06 Nov 2026 03:11:59 GMT\r\nlast-modified: Tue, 02 Sep 2025 05:30:33 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin, accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: HIT\r\ncf-ray: 9a33fee64e452efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":551193,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1500, components 3","md5":"4a889bfc06492feccd3c4c9ae67eabfb","sha1":"a80dd59cf62796f68a9e35b17d2194b4644ea005","sha256":"efe30d0ade4fdc445cb55eeccea29fdd816f0633bed004483006b0b8e4b9d001","sha512":"b168c6ce0ffce410fc4a8d4b5df142c340f19ec4d0c12390385ea1338efb4a82e67a173bc628df148f97a2b213e98fba52d74e20d26f547461787e6e152d5378","ssdeep":"12288:yzWR/WA+dv9qDhXzLNutcJhl+cphWFwrmSyMjFOerEo9:04+xqVjLNueJhIUrmEOsEo9","tlshash":"91c43316b16d82ecc5aeacf3d7b3dc18c5601aaaa0ac669f13c1f06151673e5a779203","first_seen":"2025-11-23T22:10:53.127506Z","last_seen":"2025-11-23T22:10:53.127506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":13,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.480Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 00:02:19 GMT\r\nexpires: Thu, 19 Nov 2026 00:02:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 425278\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-21T18:33:40.484511Z","times_seen":265950,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":130,"dns":4,"connect":37,"send":0,"wait":15,"receive":1,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/uploads/2022/01/cropped-HD-King-1-e1642066363852.png","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/cropped-HD-King-1-e1642066363852.png HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 14767\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 21 Nov 2026 19:02:30 GMT\r\nlast-modified: Tue, 26 Mar 2024 11:23:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 205665\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oDqwRpBrjZW%2FnfgmaFGLH2Ttym%2FdlgraPMdHYh2GevXi6kW%2FMcjD5TyuOOJ9iCUOBPK7bDhrR8cUwV5ublZFXOJ3b6Y0BZFsEOC5Rw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a33fee2b8f9b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14767,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 48, 8-bit/color RGBA, non-interlaced","md5":"134a62f6f6d5685b05b3fadf93ede3d8","sha1":"6177cd0d70fc2e1a60700efb98e8ef32c5259103","sha256":"4d5363daddd520df988f3bb7d1ad4b5e71734d7dda3da185ade13b788f800963","sha512":"65346840e5f58c70d699bb50756e30c24b8f2d1ab5214685c9f0755a857a6bf42aa280d6f6d069d23c50610c2ca95263fa4fab6e8230aecb52f990d9bce539ab","ssdeep":"192:PKVKkUI4rMTfy7XK/WckV096HDlLjGrPNLZ/RQCk+pL7+76ZCRVNL8lvb8Wf1ech:PKT4YTZev9P++CW6ZCZL8Vbl1lXh","tlshash":"2462df9969808a1a13bd5c4b8faa3026342327dfac7dc062da0c7d1c2526e0e09372df","first_seen":"2025-11-23T22:10:53.129485Z","last_seen":"2025-11-23T22:10:53.129485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.foo/","fqdn":"hdking.foo","domain":"hdking.foo","tld":"foo"},"ip":{"addr":"172.67.143.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T22:10:14.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 17:13:47 GMT","end":"Tue, 17 Feb 2026 18:11:09 GMT"},"fingerprint":{"sha1":"39:7A:E7:C6:2D:06:9A:65:05:8B:E6:41:8C:55:5B:F0:BC:4A:E7:A5","sha256":"C6:FD:92:2F:E2:39:8E:05:CE:AA:E1:50:4E:04:9D:1A:A7:3E:08:E6:D2:37:24:6E:9C:15:86:E2:B5:7A:57:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hdking.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 23 Nov 2025 22:10:14 GMT\r\ncontent-length: 0\r\nlocation: https://hdking.cymru/\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TfXAwaKJqUbRjQKlYJ5J4dMlivhFlIi6S0zTTV1NWD2NRaqlZt%2FqfjJc%2Bc%2BWwO4jPaAbzVkm0MBX6E5RL13eueE6dmQjZ%2B29Q%2BY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfEdge;dur=2,cfOrigin;dur=0\r\nserver: cloudflare\r\ncf-ray: 9a33fed8bcfc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101037,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":53,"dns":35,"connect":1,"send":0,"wait":4,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hdking.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/css/fbc2e081e7c59dc91a239c2b4f5266f9.css?ver=266f9","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/css/fbc2e081e7c59dc91a239c2b4f5266f9.css?ver=266f9 HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 35122\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:00 GMT\r\nlast-modified: Thu, 20 Nov 2025 15:19:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283815\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1fuUM36cH%2BiDoXpV4zdQbVDC%2BhJ0XCLoCh2%2B6zfuiWjLOezbw0AifbgZxZb4YqP%2F7UKBynlD5WtRAzujF0ELlvBTRJXVK9QbetOtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a33fee5ad2b75ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59064,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59029)","md5":"2d1c614b02d0998148b4d7046c05c3e8","sha1":"8bd147714db84164398149c5b91c767cfbe67a33","sha256":"a8a1fc277bf08af6608721b901a834b9a5984f9ba737e9e359c09e0edd786987","sha512":"6b8d3db0429614c72b461f435a4096ad94eec46a5d78a63a4d02cc5434936eed4de0a7490481f4e8fd1aa09dc63514300028425a3ff5d270328c50cfb0f1b891","ssdeep":"768:Iey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5nJq:Ix/ZvB/qPWMiquqioMUXQSJYIMW+nJq","tlshash":"0d43c2b1e64a40d677b0c843af65b27a5582bd7df8409cdaf40b821c1af3635069dfb8","first_seen":"2023-04-13T14:10:48Z","last_seen":"2026-06-21T10:50:11.730213Z","times_seen":1126,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0RCNW0TGGZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-0RCNW0TGGZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\nexpires: Sun, 23 Nov 2025 22:10:16 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143227\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":431395,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"125c335f2505ef5ab8d179d72ebaabcd","sha1":"1d0b436c4b6dd9d5c00232e21491f44cc92cfc01","sha256":"21c2e4d7007e5ddb5dd318bbb6a34537263d66043c643cd6b95136ffa81bef04","sha512":"78523475a4003dc273ab15767affaebacb0d6ef1266705930fb77c8787c52f1f365861f46ec2f5e61af32cf087b866a8d94c627bc6d41f04d3aa37814c821802","ssdeep":"6144:zJKiBUKCtJeUI2XVUULUVWo6O7GQEO7QZ2ElVFBoOr+Lu:lK2DC2UnVUUtO7QZ/","tlshash":"21941ace73d674225396f078502f018ba57b28a2b45cc896f1c9cde42e74a9a4277f7c","first_seen":"2025-11-23T22:10:53.1315Z","last_seen":"2025-11-23T22:10:53.1315Z","times_seen":1,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":273,"dns":45,"connect":15,"send":0,"wait":29,"receive":31,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.media-amazon.com/images/M/MV5BZDJiZWVjNDUtNjJmYS00ZGQ1LWExMjUtMjg4ZTI0MDZiNTBjXkEyXkFqcGc@._V1_FMjpg_UX1000_.jpg","fqdn":"m.media-amazon.com","domain":"media-amazon.com","tld":"com"},"ip":{"addr":"54.230.82.146","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images-na.ssl-images-amazon.com","organization":""},"issuer":{"commonName":"DigiCert Global CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 18 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:0D:CF:DE:F2:93:23:20:46:F0:30:29:8B:56:72:A6:26:4E:DB:F7","sha256":"CA:0E:B9:BB:95:AF:A5:13:88:90:C9:A7:04:E6:C5:06:D6:F0:58:F3:82:35:C7:CF:F9:EA:8C:42:A0:0A:7F:5C"}}},"request":{"raw":"GET /images/M/MV5BZDJiZWVjNDUtNjJmYS00ZGQ1LWExMjUtMjg4ZTI0MDZiNTBjXkEyXkFqcGc@._V1_FMjpg_UX1000_.jpg HTTP/1.1\r\nHost: m.media-amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 124430\r\ndate: Sun, 23 Nov 2025 12:16:37 GMT\r\naccept-ranges: bytes\r\nserver: Server\r\nx-amz-ir-id: 1041381d-34b0-4f91-9eb8-6ff0ada2b4c2\r\ncache-control: max-age=630720000,public\r\nlast-modified: Thu, 25 Nov 2021 04:48:40 GMT\r\naccess-control-allow-origin: *\r\nedge-cache-tag: x-cache-075,/images/M/MV5BZDJiZWVjNDUtNjJmYS00ZGQ1LWExMjUtMjg4ZTI0MDZiNTBjXkEyXkFqcGc@\r\nexpires: Sat, 09 Sep 2045 03:29:34 GMT\r\nsurrogate-key: x-cache-075 /images/M/MV5BZDJiZWVjNDUtNjJmYS00ZGQ1LWExMjUtMjg4ZTI0MDZiNTBjXkEyXkFqcGc@\r\nx-nginx-cache-status: HIT\r\nvia: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 35619\r\naccept-ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT\r\nserver-timing: provider;desc=\"cf\"\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 0j69AStLuOQO2QnHfPhVYzbs7gEKtick0PobqWYq_cQTJvI96631NA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":124430,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1247, components 3","md5":"b12de8bf4649083009aeab374b5b5cbe","sha1":"e0accb216f0a8c34ecbbf60590d3fe051dbab610","sha256":"900072c8c6cdc004a45f13e3803522beea954b7e47dc0f1f7edbfdee56a15a30","sha512":"04f2fa0dfdc7f641c2c5b6b0abac8440d4f760f7155b6d9205e6ae1d7f5a6cc4433cfe4b6717c7ceb6bd1f5b5f39912a5d068c02fb22765c72cee6cee1e4b4e4","ssdeep":"3072:ONFcmKwjGfT8JqspsLqzOTyp1ZZHD1drTazx5HuqG0nlNo9:ONlbGLqqksuOunv1dW5OqGQW","tlshash":"cfc312e4803062639a5f3178457bb06e534b63b7ed25bee1bb3f6c611f74cae2464188","first_seen":"2025-11-23T22:10:53.132537Z","last_seen":"2025-11-23T22:10:53.132537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":287,"dns":0,"connect":2,"send":0,"wait":30,"receive":6,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.ltrbxd.com/resized/film-poster/1/1/1/1/1/2/2/1111122-mastiii-4-0-1000-0-1500-crop.jpg?v=dcdbb3607b","fqdn":"a.ltrbxd.com","domain":"ltrbxd.com","tld":"com"},"ip":{"addr":"172.66.144.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltrbxd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 17:36:44 GMT","end":"Wed, 11 Feb 2026 18:36:33 GMT"},"fingerprint":{"sha1":"05:71:8A:8D:87:FC:BC:E2:97:F2:88:E8:8E:AE:5A:9D:1A:BB:FC:31","sha256":"3A:DA:CB:61:84:24:55:FF:A7:9E:16:2C:24:D2:73:26:CA:3E:06:3C:51:D6:0B:1C:72:DD:F4:4D:51:26:85:69"}}},"request":{"raw":"GET /resized/film-poster/1/1/1/1/1/2/2/1111122-mastiii-4-0-1000-0-1500-crop.jpg?v=dcdbb3607b HTTP/1.1\r\nHost: a.ltrbxd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 381360\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=402464, status=vary_header_present\r\nage: 205666\r\ncontent-security-policy: default-src 'none'; font-src 'self'; image-src 'self' data:\r\netag: \"0b7e696db123131e20eea4ced8462db6-1\"\r\nexpires: Fri, 20 Nov 2026 18:25:30 GMT\r\nlast-modified: Mon, 17 Nov 2025 05:47:23 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin, accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-cache-status: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: HIT\r\ncf-ray: 9a33fee93e0f2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":381360,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1500, components 3","md5":"b1502d223e15d4e695eb9e911f43c1b9","sha1":"84e5c8cea8daa5d92c5932b3aa619da072c55a2a","sha256":"11ed1f11a604bd3329da0289716af1c3498e2d27faeebbd1e56223d8db208cf0","sha512":"c109dbea1b9fca59963d5659e14186a0cc21681630583923dbcc91a6b0b5b0b1be64d79fd8616a44eca6d9c452a5558da517b55fa3a7b77d9bb6bc9ed0826ed2","ssdeep":"6144:9q86cduPocIONWpFYuj9NSg0AUeVBxhBQTFju2aCzq6Mt7czTfumM3DZuwiRv6Bz:eOuPDdNWpFYuRNd0EVBx6Tbq66I5MzZZ","tlshash":"7d8423418ae45700fde87a73fe319f2eeae709d5abe469d11ac3fc695ca942100d720d","first_seen":"2025-11-23T22:10:53.133606Z","last_seen":"2025-11-23T22:10:53.133606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.ltrbxd.com/resized/film-poster/1/4/5/2/0/5/2/1452052-akin-ang-gabi-0-1000-0-1500-crop.jpg?v=68df7fc3db","fqdn":"a.ltrbxd.com","domain":"ltrbxd.com","tld":"com"},"ip":{"addr":"172.66.144.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltrbxd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 17:36:44 GMT","end":"Wed, 11 Feb 2026 18:36:33 GMT"},"fingerprint":{"sha1":"05:71:8A:8D:87:FC:BC:E2:97:F2:88:E8:8E:AE:5A:9D:1A:BB:FC:31","sha256":"3A:DA:CB:61:84:24:55:FF:A7:9E:16:2C:24:D2:73:26:CA:3E:06:3C:51:D6:0B:1C:72:DD:F4:4D:51:26:85:69"}}},"request":{"raw":"GET /resized/film-poster/1/4/5/2/0/5/2/1452052-akin-ang-gabi-0-1000-0-1500-crop.jpg?v=68df7fc3db HTTP/1.1\r\nHost: a.ltrbxd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 313327\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=325734, status=vary_header_present\r\nage: 16944\r\ncontent-security-policy: default-src 'none'; font-src 'self'; image-src 'self' data:\r\netag: \"ddb68b1d88faec4d4d40aa5ae0e01f03-1\"\r\nexpires: Thu, 19 Nov 2026 22:54:38 GMT\r\nlast-modified: Tue, 18 Nov 2025 04:54:43 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin, accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-cache-status: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: HIT\r\ncf-ray: 9a33fee64e462efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":313327,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1500, components 3","md5":"2635d420a94c27b6f9521ce7cb585a6f","sha1":"345efa9034f4ea161b2f7fee1a4199fa6860436b","sha256":"84fb5c4baabf4489ec92a9178c8e5a13565f4b6164400d2aa675c9c1ddd871e5","sha512":"10e116e241e42abf167f9fc098d058051773da284207b2b25d320a8ee88f7f43968ddfafd3fc3e41d474fb074c8ed5d50e4ceda30f2093085c1612c1e7f62f52","ssdeep":"6144:VVduLACSDqR3oNuraeF2L5YdSweeNn/+2ETm/FBCNPH2XS9jT:VVwLBSq1xlA6dSaG2ECFQhQSF","tlshash":"376423320436ffd2fe0260b3154d4fdeeb04a17b4096e71422c4baf854a7699fd6991b","first_seen":"2025-11-23T22:10:53.135491Z","last_seen":"2025-11-23T22:10:53.135491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":12,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.media-amazon.com/images/I/81t06R68RyL._AC_UF894,1000_QL80_.jpg","fqdn":"m.media-amazon.com","domain":"media-amazon.com","tld":"com"},"ip":{"addr":"54.230.82.146","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images-na.ssl-images-amazon.com","organization":""},"issuer":{"commonName":"DigiCert Global CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 18 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:0D:CF:DE:F2:93:23:20:46:F0:30:29:8B:56:72:A6:26:4E:DB:F7","sha256":"CA:0E:B9:BB:95:AF:A5:13:88:90:C9:A7:04:E6:C5:06:D6:F0:58:F3:82:35:C7:CF:F9:EA:8C:42:A0:0A:7F:5C"}}},"request":{"raw":"GET /images/I/81t06R68RyL._AC_UF894,1000_QL80_.jpg HTTP/1.1\r\nHost: m.media-amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 118848\r\ndate: Fri, 21 Nov 2025 20:28:23 GMT\r\naccept-ranges: bytes\r\nserver: Server\r\nx-amz-ir-id: 9f12f739-33e0-49a6-93c0-f5e0ee9b523a\r\ncache-control: max-age=630720000,public\r\nlast-modified: Tue, 14 Oct 2025 08:38:28 GMT\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: https://www.amazon.in, https://www.amazon.com\r\nedge-cache-tag: x-cache-034,/images/I/81t06R68RyL\r\nexpires: Thu, 12 Oct 2045 21:02:35 GMT\r\nsurrogate-key: x-cache-034 /images/I/81t06R68RyL\r\nx-nginx-cache-status: HIT\r\nvia: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 178914\r\naccept-ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT\r\nserver-timing: provider;desc=\"cf\"\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 029l_pUh8uTn7MlG7eJH7sC9AlZHPkEj02se7niaTDYyCTOPJqDIUg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":118848,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 783x1000, components 3","md5":"e7f36d5f7c946b72d5391d833d1c8036","sha1":"ad6ca52ab2cb7a50c75240ba5b34efb8e08722f1","sha256":"471bd09e42a50d896183e777228a17fc1b4cee5d6503bbb95a9d9e0d2b1f3d94","sha512":"b7fd5c1eabd3d4a327cccfa8cc12427f34a527e857de470150bfcdf8884351fac0074c515adad0fb96de6288d28918132b6159fddd55c5d2138f46369445907a","ssdeep":"3072:AqO7Sh1N1+8TxBn737xNbTjgOImQ7uyyWEhNM:XO7Sh1j+8TxV7xNbTj9bLMEbM","tlshash":"3fc312b9718a6180f39be47e685364ff3f624a710790f53c332e0f4a915095f5b991ca","first_seen":"2025-11-23T22:10:53.13683Z","last_seen":"2025-11-23T22:10:53.13683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.ltrbxd.com/resized/film-poster/8/8/4/0/2/1/884021-deiva-machan-0-1000-0-1500-crop.jpg?v=240d657e0d","fqdn":"a.ltrbxd.com","domain":"ltrbxd.com","tld":"com"},"ip":{"addr":"172.66.144.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltrbxd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 17:36:44 GMT","end":"Wed, 11 Feb 2026 18:36:33 GMT"},"fingerprint":{"sha1":"05:71:8A:8D:87:FC:BC:E2:97:F2:88:E8:8E:AE:5A:9D:1A:BB:FC:31","sha256":"3A:DA:CB:61:84:24:55:FF:A7:9E:16:2C:24:D2:73:26:CA:3E:06:3C:51:D6:0B:1C:72:DD:F4:4D:51:26:85:69"}}},"request":{"raw":"GET /resized/film-poster/8/8/4/0/2/1/884021-deiva-machan-0-1000-0-1500-crop.jpg?v=240d657e0d HTTP/1.1\r\nHost: a.ltrbxd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 183462\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=189193, status=vary_header_present\r\nage: 16946\r\ncontent-security-policy: default-src 'none'; font-src 'self'; image-src 'self' data:\r\netag: \"01789e563e087d238f98dc4e7c7334a3-1\"\r\nexpires: Mon, 23 Nov 2026 09:55:47 GMT\r\nlast-modified: Tue, 02 May 2023 06:10:35 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin, accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-cache-status: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: HIT\r\ncf-ray: 9a33fee93e1c2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":183462,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1500, components 3","md5":"e390ed47dab257172fbf2b9a3ee44a4c","sha1":"750fede848a0727cbf1cdbe14f935d271ab7de88","sha256":"144b21d280a92adf128170ec2219bb952e5d6102e775602c11904639aa012b66","sha512":"0111b65068f809390fa4891aef1c187626ba5235ec8dc240bab9d7fd1a32bc7719531a16147deb5165c911d617363f37c50007a3ee1f91ac0aced876940b58bd","ssdeep":"3072:+NOYNp96wr/HVQsCQgeu4t2cGSM4LN+S5bK+aJDMrCsp+VEw0FT0V:+NOYN/7O8LLscGSMyN55GnuBpEELFTi","tlshash":"9804124fbeaf33dcd88848bdc5689cbbdd8631d2793ea192de1b4d21e3065465858f08","first_seen":"2025-11-23T22:10:53.137735Z","last_seen":"2025-11-23T22:10:53.137735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.42.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:18.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:18 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9a33fef0ae765690-OSL\r\naccess-control-allow-origin: https://hdking.cymru\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":31,"dns":22,"connect":1,"send":0,"wait":14,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T22:10:16.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-dns-prefetch-control: on\r\nx-ua-compatible: IE=edge\r\nlink: \u003chttps://hdking.cymru/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://hdking.cymru/wp-json/wp/v2/pages/53291\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://hdking.cymru/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNt%2FfMcuMjYWbms1RkwQfj3GDAoPa0OiObRtmmYci5c4fG9K7m5Tq%2FhhgHEr%2FxQBV2KI84SJIlU%2BPzUWx48NpNjvREqAGotzTgWzPQ%3D%3D\"}]}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9a33fee37ebbdfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"GenerateBlocks","description":"GenerateBlocks is a small collection of lightweight WordPress blocks for the WordPress Block Editor.","website":"https://generateblocks.com","common_platform_enumeration":"","icon":"GenerateBlocks.svg","categories":["WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":86613,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27318)","md5":"c758116c56d8e4bb5838d25ac3a1cf76","sha1":"484c3487b91c97c7b77aa43aa9b56b7408cb60fd","sha256":"d346aef9683c1dff75ba2c654e5c0f057580579b7cfbfe51495196ad81a95e24","sha512":"62a44d450efea65a441da6c9a619d5d9032ae074fa0f0a6660b2d129a87f9c923e1bfef693cb0e5be8136cbca669627b1ed1dc0d34a8375cbdcdf65f43b033bf","ssdeep":"1536:9piappmkHDzCQmU3jmYJZ2lw89yDMcZAWSpViJv7:9nyQmUTgw89yf/D","tlshash":"5e830970d690623a7a6f47ecd681b336fe92c117de1616d9b2fcd1c8439ade3483a418","first_seen":"2025-11-23T22:10:53.138716Z","last_seen":"2025-11-23T22:10:53.138716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":20,"dns":5,"connect":1,"send":0,"wait":315,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/css/0c2e7d33ecc4180487a076b5a25b6a71.css?ver=b6a71","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/css/0c2e7d33ecc4180487a076b5a25b6a71.css?ver=b6a71 HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 370\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:00 GMT\r\nlast-modified: Thu, 20 Nov 2025 15:19:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283815\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FZE%2BNt1J6Lidoh8QBKwT1Oe1%2F74nt45svtaQiRA96fsaDOh6vGqQ%2F60zRnkqdp%2FiHn0uiAIpbNP8mxv6DxvbHqEEwGeWqntDN%2F7hJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a33fee5ad2d75ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1058,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1058), with no line terminators","md5":"6f71106c7a6d664e95df0b3381ab7a53","sha1":"3aa8ddcec63fdd455bd8a4ccb34da371dc17b10b","sha256":"0d585aebb9cb31821fbcc6b030e0d882b5639e17bb403f8eb5ce7b3b19f4a1c9","sha512":"0f399b5d008380ad0ddef3328e344b23711dfc88817bfd3a303aec684263ceb4fa4c6ca92b48f0f20d6257f0924f441efa3d90e6a6389759d9c8ba49b00a38a0","ssdeep":"","tlshash":"6911893d8221b408b33f870a25cd66451835264360b21a8dffd2b901e7275de3555796","first_seen":"2024-06-21T17:31:29Z","last_seen":"2026-06-21T04:03:01.943144Z","times_seen":4224,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/uploads/2022/01/HK.png","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/HK.png HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28; _ga_WEZ6Z72NKX=GS2.1.s1763935817$o1$g0$t1763935817$j60$l0$h0; _ga=GA1.1.1214480444.1763935817; _ga_T6BJMK9YM9=GS2.1.s1763935817$o1$g0$t1763935817$j60$l0$h0; _ga_0RCNW0TGGZ=GS2.1.s1763935817$o1$g0$t1763935817$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 3090\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 22 Nov 2026 20:40:10 GMT\r\nlast-modified: Thu, 06 Jan 2022 14:21:24 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 113406\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6YSZcUs22lJkt%2FBlTBXSxsTvyeBZ6wC2D%2FklzwUclMCR8pMmCxhQxV6wp0mWO0KYPx6uPFjtaL1HGFZ%2BIDc6uGAFNShW29gMuZb9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a33feec8dae75ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 41, 8-bit/color RGBA, non-interlaced","md5":"42b828acc929cbfe5f4b7ef81f78d44b","sha1":"d599ba0baf45d03aed5df06fd57af471090fa44a","sha256":"fca78fe7a2a4aad7e16fa16b7412fb5a850e174e5a7b83faf1a5b00c92b5afa6","sha512":"efe6aa6cf5be851a60df9da6eb25ef919e6ffeb490e5d5541d7ce3d099618a7e15a6260730fad20d663260754c78668c477c9cc21c312551ec680bbefe4291c4","ssdeep":"","tlshash":"be517e655df83e7fda0230cf5c4da3d0e4a7fe2162c921407b68dc2431ac5b36e84245","first_seen":"2023-10-15T23:32:36Z","last_seen":"2025-11-23T22:10:53.140246Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/interstitial.php?r=10610610\u0026srs=d1e6ce681432d34fe95874a3d84e855e\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fhdking.cymru%2F\u0026atv=71.2\u0026cbref=\u0026atag=1\u0026czid=enp4lwbjv8\u0026aggr=2\u0026ppv=1","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:30.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 20:14:35 GMT","end":"Tue, 06 Jan 2026 21:12:18 GMT"},"fingerprint":{"sha1":"7C:B6:62:0F:43:12:2D:86:DD:92:D1:44:95:36:24:C7:2F:BA:B0:B6","sha256":"06:21:18:21:3A:A8:90:A4:4D:D0:A6:7B:7B:C8:4A:3B:31:47:C3:5D:48:A5:94:AC:08:75:A0:A1:DF:D6:B9:3C"}}},"request":{"raw":"GET /script/interstitial.php?r=10610610\u0026srs=d1e6ce681432d34fe95874a3d84e855e\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fhdking.cymru%2F\u0026atv=71.2\u0026cbref=\u0026atag=1\u0026czid=enp4lwbjv8\u0026aggr=2\u0026ppv=1 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdking.cymru/\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sun, 23 Nov 2025 22:10:30 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kgXv6GqzqERm8hRY0B7TWebI1MURrcxNNhx6l7KuTsSapx0kW0PvIEZS%2Fy6ojXFrn3b%2FCa7ky%2FDM75VhtmELHpiMEB2rFpTzprgCHIa3LIrs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a33ff3d5f65569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.104Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betteradsystem.com/yyniqynwokozufxck?UOAXmynk=BQOCAAAAAAAACZUAAkNsJRFRN_8mscXzYmo-gCgCb9Bx9iD66KeDJ06kNB9gmTQrBN40QxzhH9UkK2_hTf7Q50ebxVeI9LNIGmvntA5gBYmmfUw0R4b6QSJbE6r_OGWlqE8s83DrNVL4FPlz3t5h0lggEX5N3hsWlU6BV_uB14k9eXCxdYwoz3qHFPw-Ap0IvWAHUk2UFa0Im8ffHjGwMFwzYwHVCLjdAm2GJpsZKO8FhDHnRrNS2-lzUp9CxTLGlF6pNCdd0rEdjaNBYNHbWT--hBiCM10Wf9fiKJGazberWYUbr5xs5_BQZgm5YV5oogDedQ_sW_4XjDZf5FB_SNnnWmf6Lxcn15yeZ5i4c7cPSOBo3QSK6eRvPURbPm-12CoSssz5RdgIytweAsGuTuZXVv1nTJtY9w1pb7RUywuAtijYnigIvQUkDYaQgh1qm6uIUElWv6Ix0Rhhw5vt5bB8InctWEhhPDUJhnHMniyYUXGdKvuVj6FeWHzhUryTkGUF03kM-GW3z6190decoTlEDW41Sl7s0sgNO7f-81ApI25l8XFmPPn4DYNQ99daKWyJejIrZy9FlL9D7xjjwy8rdTnWIx5N8z4IEDxESIVbqan9eRxvb-pKYQCoe4qNxq2s2QTjL-1DHgEaz0eXRbWcOIAVFtAuV2mvt7SVWv25PrNhZH4zqEdKQND695YsCU3YvjV2Bh77m1bZoKGqoS6Q89LzOslFmkoIFhlcW65mxCw97W5z1VI8bDy65TzBnh5q4ltS5WqdjkoE7E3GvFGVGVhdQqClfPJX6Z7z92mKbS_hZT9lRB5_iV8CbVV3wHXjEGgD-RUpdq5TZgGbGrol_r5Qz7c3rBp5MIowilVf61RyvOkyfjV2AUWeP2Uk6o4563e6huvc5ud1cROgs8a7Fgi9Dt6hX1LPghbA7RgmXYLRGB_H_o4Y2YRHyEu_Xumdo5MRdlJgIPBXJBKo7XtxW22Xhtq0FVWuRc8Mz3Qc2FSQ2lVemxUlNROKeH7SsuyLcmC-up70rr2zIMrTKAkfRIzMZ0PEN5fSoytIi-q8Z2tbRiM3Jx-ZoXLbBi_Cp_E2UEJQV6tlooQTtSyFEmzVt0XkNywPvabqo-8tIyTSCgY-eAE8epKro32RNoseNjeRq5dwP1OgdBh6yadrQrA_lNMsmoq77T3j063h6gjMgWVqqG2i1gcnaKB_\u0026qCVGEPTh=4\u0026nGdXJUlz=5255933\u0026XADlOJEo=\u0026iNvUOBjx=0,0\u0026KxSMgmbT=\u0026PYgeBmKC=\u0026TCfhlAFR=1280,1024,1,1280,1024,0","fqdn":"betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"162.252.213.208","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:19.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betteradsystem.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"29:D5:01:0D:84:B1:3A:6E:02:EB:59:F2:DF:E2:63:E9:58:AF:A1:F5","sha256":"AB:3A:88:05:75:BF:A5:4F:5E:42:5A:7C:45:3C:10:A5:08:40:8E:2A:B2:89:38:57:A6:D8:BA:96:21:91:F2:61"}}},"request":{"raw":"GET /yyniqynwokozufxck?UOAXmynk=BQOCAAAAAAAACZUAAkNsJRFRN_8mscXzYmo-gCgCb9Bx9iD66KeDJ06kNB9gmTQrBN40QxzhH9UkK2_hTf7Q50ebxVeI9LNIGmvntA5gBYmmfUw0R4b6QSJbE6r_OGWlqE8s83DrNVL4FPlz3t5h0lggEX5N3hsWlU6BV_uB14k9eXCxdYwoz3qHFPw-Ap0IvWAHUk2UFa0Im8ffHjGwMFwzYwHVCLjdAm2GJpsZKO8FhDHnRrNS2-lzUp9CxTLGlF6pNCdd0rEdjaNBYNHbWT--hBiCM10Wf9fiKJGazberWYUbr5xs5_BQZgm5YV5oogDedQ_sW_4XjDZf5FB_SNnnWmf6Lxcn15yeZ5i4c7cPSOBo3QSK6eRvPURbPm-12CoSssz5RdgIytweAsGuTuZXVv1nTJtY9w1pb7RUywuAtijYnigIvQUkDYaQgh1qm6uIUElWv6Ix0Rhhw5vt5bB8InctWEhhPDUJhnHMniyYUXGdKvuVj6FeWHzhUryTkGUF03kM-GW3z6190decoTlEDW41Sl7s0sgNO7f-81ApI25l8XFmPPn4DYNQ99daKWyJejIrZy9FlL9D7xjjwy8rdTnWIx5N8z4IEDxESIVbqan9eRxvb-pKYQCoe4qNxq2s2QTjL-1DHgEaz0eXRbWcOIAVFtAuV2mvt7SVWv25PrNhZH4zqEdKQND695YsCU3YvjV2Bh77m1bZoKGqoS6Q89LzOslFmkoIFhlcW65mxCw97W5z1VI8bDy65TzBnh5q4ltS5WqdjkoE7E3GvFGVGVhdQqClfPJX6Z7z92mKbS_hZT9lRB5_iV8CbVV3wHXjEGgD-RUpdq5TZgGbGrol_r5Qz7c3rBp5MIowilVf61RyvOkyfjV2AUWeP2Uk6o4563e6huvc5ud1cROgs8a7Fgi9Dt6hX1LPghbA7RgmXYLRGB_H_o4Y2YRHyEu_Xumdo5MRdlJgIPBXJBKo7XtxW22Xhtq0FVWuRc8Mz3Qc2FSQ2lVemxUlNROKeH7SsuyLcmC-up70rr2zIMrTKAkfRIzMZ0PEN5fSoytIi-q8Z2tbRiM3Jx-ZoXLbBi_Cp_E2UEJQV6tlooQTtSyFEmzVt0XkNywPvabqo-8tIyTSCgY-eAE8epKro32RNoseNjeRq5dwP1OgdBh6yadrQrA_lNMsmoq77T3j063h6gjMgWVqqG2i1gcnaKB_\u0026qCVGEPTh=4\u0026nGdXJUlz=5255933\u0026XADlOJEo=\u0026iNvUOBjx=0,0\u0026KxSMgmbT=\u0026PYgeBmKC=\u0026TCfhlAFR=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: betteradsystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb3\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Sun, 23 Nov 2025 22:10:19 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-06-21T14:06:16.948125Z","times_seen":25127,"resource_available":true,"data":null}},"time_used":761,"timings":{"blocked":325,"dns":27,"connect":93,"send":0,"wait":110,"receive":1,"ssl":203},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Nov 2025 22:10:16 GMT\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67176,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"5f82b7d5b96a577198378ffe84f6bca8","sha1":"e8f0a55a35215b9cddc393cb2e5c34214e185b2c","sha256":"5541515e21bb5289ea0397f7cd51f3fde8fcca12cf8f052c10e36f00b8cf7563","sha512":"0d11de9cc6a0561754374121cbd263f1ed5bbcb226aafe9d6e6b073a6179369319a6b8901f3796328d7fae7d8c15025d44815703673265e114d5c31491d41182","ssdeep":"768:yDcDaDvDcDzBDFKDeDOD14KF4zLFa+OgN7wNzaFLXnnGE3GzhFUQgx8uB8zXF+aq:z5YRdvI0rAwyl","tlshash":"ae630ea1041b5040ab834ce223cfbe34fe1f92507151d0b9abfd9b6baddbc66526835c","first_seen":"2025-11-19T00:37:42.03991Z","last_seen":"2026-02-19T19:51:21.580458Z","times_seen":6121,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":268,"dns":0,"connect":23,"send":0,"wait":44,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.ltrbxd.com/resized/film-poster/1/4/5/3/0/9/8/1453098-next-room-affair-0-1000-0-1500-crop.jpg?v=ef9840e325","fqdn":"a.ltrbxd.com","domain":"ltrbxd.com","tld":"com"},"ip":{"addr":"172.66.144.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltrbxd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 17:36:44 GMT","end":"Wed, 11 Feb 2026 18:36:33 GMT"},"fingerprint":{"sha1":"05:71:8A:8D:87:FC:BC:E2:97:F2:88:E8:8E:AE:5A:9D:1A:BB:FC:31","sha256":"3A:DA:CB:61:84:24:55:FF:A7:9E:16:2C:24:D2:73:26:CA:3E:06:3C:51:D6:0B:1C:72:DD:F4:4D:51:26:85:69"}}},"request":{"raw":"GET /resized/film-poster/1/4/5/3/0/9/8/1453098-next-room-affair-0-1000-0-1500-crop.jpg?v=ef9840e325 HTTP/1.1\r\nHost: a.ltrbxd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 384419\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=401937, status=vary_header_present\r\nage: 16942\r\ncontent-security-policy: default-src 'none'; font-src 'self'; image-src 'self' data:\r\netag: \"41ea244af40f0f9c6c1059f7b088f046-1\"\r\nexpires: Sat, 21 Nov 2026 05:24:39 GMT\r\nlast-modified: Tue, 18 Nov 2025 05:30:17 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin, accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-cache-status: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: HIT\r\ncf-ray: 9a33fee64e472efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":384419,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1500, components 3","md5":"fbe60915382d291ec525a43ca8bce540","sha1":"c61db8c35bf6d7e4de6a4038e9388738e83ef3e2","sha256":"30bb062397f913ddae22a7765c021a0fdd2c249393fd6e1e29972bc9beda5267","sha512":"12266f3eb46e138ac9da94229643be56eda91596345b41461f9d6b43cdda7a57cef1b335a8527d8b592f7769f0987792df8e65660d59641e331650c648c6c2ad","ssdeep":"6144:Q2QRhpNvh+lh/lFcgS7+drYzQ/1diZL9yOe6BxoyTuFsrgjKrQM3CbKfWYCxX6gR:QnpWh/ldyQWbtHR8jIQM3YKfWYCxNS0N","tlshash":"548423465e62cfaa74732a8bb460de6069fc807e754debcd67e5dc09ec1088d8b57304","first_seen":"2025-11-23T22:10:53.1423Z","last_seen":"2025-11-23T22:10:53.1423Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":12,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/inpagepush.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:18.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 00:40:27 GMT","end":"Thu, 05 Feb 2026 01:40:22 GMT"},"fingerprint":{"sha1":"76:9A:7C:2F:34:DA:E3:06:23:B8:73:B7:95:32:FC:FF:34:88:AB:1A","sha256":"F0:CF:B6:C8:DE:7A:81:6A:9A:D8:3E:43:29:D0:90:4D:7B:2A:8F:21:F6:9C:91:59:EA:FF:0E:B5:7E:07:E4:91"}}},"request":{"raw":"GET /script/inpagepush.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:18 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AOCedOF0maZNCIBqTpNfp7XVJM50AlbWdOqtN2yOj_BjfA1xqVBSEhB1E25Tj331VrGMQs7Tin4txq8\r\nx-goog-generation: 1763022355535507\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 16292\r\nx-goog-hash: crc32c=XyVsvA==, md5=k7uH8NTy3iFDjhbL5IiawA==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nexpires: Sun, 23 Nov 2025 23:10:18 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 13 Nov 2025 08:25:55 GMT\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 3470\r\ncf-cache-status: HIT\r\netag: W/\"93bb87f0d4f2de21438e16cbe4889ac0\"\r\ncontent-encoding: gzip\r\ncf-ray: 9a33fef0be73b4ff-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16292,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16291)","md5":"93bb87f0d4f2de21438e16cbe4889ac0","sha1":"38cd3905a1e6a35553d485d6f79ecf628164612b","sha256":"494bdbc51663f7381d3390c951bf61351f1a5c0adbd129e52984459b57a8852e","sha512":"5e027fd5c2a3f7828e5e94e5a5de72de057470d334d17cdcdb87813661e7e5383e9c8a5a79851f6d808703b37c2e2ab8a0db3d6a3c1c0f2b1336490b4640ec16","ssdeep":"384:oeu7RnyUklMtlAZ9VKNrD9iDuXXY3ja7LuyfSxZywC2KyTsypUxxV4MQon2YXr6N:obMUklMtlAZfKNr5sunWGnmZywC2KyTP","tlshash":"ac72d9762123033539e581dbfc74aa81a6216168b956c42cb1ec8cf6a35fcda3c74f78","first_seen":"2025-11-14T04:21:34.969848Z","last_seen":"2025-11-24T05:54:03.309371Z","times_seen":38,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:18.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Nov 2025 22:10:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://hdking.cymru\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":104,"dns":23,"connect":25,"send":0,"wait":28,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/css/efb763d8046aed070a51d9ef0500d99a.css?ver=0d99a","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/css/efb763d8046aed070a51d9ef0500d99a.css?ver=0d99a HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 780\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:00 GMT\r\nlast-modified: Thu, 20 Nov 2025 15:19:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283815\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DX5wczSENN1zNs%2BHoo6AfhrZnLW%2FrUdNhKNY7yCv2WYAFNuQpJMLCgA4cnuVsAyFJ8LUAYrMPfjW9yggc6KJ4vfyEfgpbHSNZvT20g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a33fee5ad2a75ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2413,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2413), with no line terminators","md5":"be04df56711e114aae60fa2d8cb825fa","sha1":"1d69c0b5b03ace9804daf4ba4e10515e0122fd8d","sha256":"a3a04d7bf3d6b75ed03b1882e75414faa3fca8fde79ee82937a62360e0bf6f34","sha512":"dadefe1f0900fa2d5ef04eba47844e5b6693e4eccdb4993d83bbaed0c66007b5d563a83db59c72ccbaf24de41f9f25dc442a47bc9b58f44fc03110c1687ddeec","ssdeep":"","tlshash":"11411fa1868810254bf382f7aae1af4a73359892c427e76ab0da17784d7c7451623f0f","first_seen":"2025-06-26T12:17:55.2988Z","last_seen":"2026-06-21T17:40:50.724478Z","times_seen":11276,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 00:02:01 GMT\r\nexpires: Thu, 19 Nov 2026 00:02:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 425296\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-21T18:28:31.674148Z","times_seen":361350,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":119,"dns":5,"connect":29,"send":0,"wait":15,"receive":1,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Nov 2025 23:52:35 GMT\r\nexpires: Wed, 18 Nov 2026 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 425862\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-21T18:31:41.595923Z","times_seen":891342,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":146,"dns":3,"connect":37,"send":0,"wait":14,"receive":11,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/ad/czcf.php?cz=enp4lwbjv8\u0026atv=71.2","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 20:14:35 GMT","end":"Tue, 06 Jan 2026 21:12:18 GMT"},"fingerprint":{"sha1":"7C:B6:62:0F:43:12:2D:86:DD:92:D1:44:95:36:24:C7:2F:BA:B0:B6","sha256":"06:21:18:21:3A:A8:90:A4:4D:D0:A6:7B:7B:C8:4A:3B:31:47:C3:5D:48:A5:94:AC:08:75:A0:A1:DF:D6:B9:3C"}}},"request":{"raw":"GET /ad/czcf.php?cz=enp4lwbjv8\u0026atv=71.2 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdking.cymru/\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwx8mKEPrf8CFjAN2sQPDQlaY0al%2FZGEh1ZM%2B2l3eT%2BjioGd79NFPiphhvKT2BKyeCYT8a7ToUzjnJ00nzxNU5wj9BRJM%2FbbkDGU3vSUvCFRCy0%3D\"}]}\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a33feeb2dec120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":394,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"6fb928886afdaceddfd1f660abad6bbc","sha1":"0d6308d964694e65c046d127c6474f40ff8603c7","sha256":"43290ceb38ab7375faf46aa070d2571f5266e4ca3d93221eae11153e391151b5","sha512":"b15fd804ecba981bf7ec6a731146a4038d323dbaf26af352f6b69dbdf66f93b1150038972c8c22dce1e6b6756d3af4ce5cb734768976a58a1e22bd231abb25b4","ssdeep":"","tlshash":"34e0f1f02252e8acefe6df100dd444c7826694f63cb641f010f28013d686a073464130","first_seen":"2025-11-23T22:10:53.145235Z","last_seen":"2025-11-23T22:10:53.145235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":52,"dns":35,"connect":1,"send":0,"wait":160,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c8utedu9yk3f.l4.adsco.re/","fqdn":"c8utedu9yk3f.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:18.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:30 GMT","end":"Wed, 11 Feb 2026 09:14:29 GMT"},"fingerprint":{"sha1":"44:4A:2D:C5:7F:AC:E8:4E:70:9B:91:5D:F6:AE:99:5F:66:18:51:46","sha256":"3B:1C:F2:20:1E:BC:6C:00:04:8F:3E:30:B9:AC:DE:26:B1:D4:73:CB:C2:6F:2F:F4:1C:E8:C4:A5:FD:38:8D:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c8utedu9yk3f.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:18 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":126,"dns":52,"connect":25,"send":0,"wait":26,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/uploads/2025/11/Your-Lovely-Stripchat-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Your-Lovely-Stripchat-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33555\r\ncache-control: public, max-age=31557600\r\nexpires: Tue, 24 Nov 2026 04:10:16 GMT\r\nlast-modified: Sun, 23 Nov 2025 18:39:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BufcvGMbqY2AJUWKkQyFxEgCRLePv0m9AXabwrg8G37Pkb%2BB7fUmwNnM2RQVhD270IqQFG7dKoHfO2c110zPiyujpzLoKyAYxKcOIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a33fee5cd3475ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":33555,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x533, components 3","md5":"e9f76be4fa8ebe78fbfb8d6889e3024b","sha1":"3360c2a75e040f7314c8b10a61924ac93253eafc","sha256":"21529625d04ed30ff1fd0ab642796e99183213d651db9b7716a4a1361c197026","sha512":"f120121e55ca635946879d20c6cf7f48efbbb1d9668614f37f5145f5f2fddcedcefb99a8d7d177fd25eb89cea08acafb7451cf4872613bc56ddd2d64ff315c07","ssdeep":"768:DVHt6gBk2zemEtC5wjhqkmYk0CLCtLP8ahgwuzRXiEfk/:DVHYrsey5CoJBvL8LlhgwuzBZfk/","tlshash":"31e2e013dce292119ab0d9f7340b2e9497d173271027a32f28b156b1df780d015f0ee6","first_seen":"2025-11-23T22:10:53.146765Z","last_seen":"2025-11-23T22:10:53.146765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/uploads/2025/11/Cute-Young-Girl-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Cute-Young-Girl-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37844\r\ncache-control: public, max-age=31557600\r\nexpires: Tue, 24 Nov 2026 04:10:16 GMT\r\nlast-modified: Sun, 23 Nov 2025 19:03:33 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhY7tc43KiAU%2F2n9hRPUOQqWk0bEnK7UYr1JNEmmKATuLZJCORMZE9z1E8mqOQfRbaLCuybK%2BlrdFL%2Fevy5q2Vu0%2BEsOhR70kH5CNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a33fee5cd3375ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37844,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x510, components 3","md5":"96b44ea737eb7575ab34a99701515d32","sha1":"a292a1ea0ff8a948f134b9d5bc6c7f124dc8c854","sha256":"98eb8b203ebcabaad4195426c9df26759f641fb10ab320ee1d7267b80c6e1a8a","sha512":"f8dbcd39e5c148f67f5c246fe1665fb807d62d887605f2227d18f7fe744878476758989e9159b4707468244ae7d9790e668192a89dea599b3550ced8eb52bd35","ssdeep":"768:Ig4cRNl/S7QvREsHSMe2spPWuPaRdOnBHzOOmq6rcvMjqFNTdC:7bl0Qv2sHve20PqoJzOV8JFNTdC","tlshash":"d903f145b5e1290afad5d33288f60238e28f7c6f4e60af2f107b155f271b28d249794b","first_seen":"2025-11-23T22:10:53.148016Z","last_seen":"2025-11-23T22:10:53.148016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/uploads/2025/11/Tanya-Bhabhi-Stripchat-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Tanya-Bhabhi-Stripchat-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37604\r\ncache-control: public, max-age=31557600\r\nexpires: Tue, 24 Nov 2026 04:10:16 GMT\r\nlast-modified: Sun, 23 Nov 2025 17:24:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=72jU%2FKJasdOKR9pz7du1rzheLnfUSXB6If0ud6zUmYNuBQWkrPSre62k4Cp0VC8Y9AO5AtXVvxOUhM4OuLXPzOEtzGZbHL4PFEjfXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a33fee5cd3775ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37604,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x510, components 3","md5":"979104ca8a174ca84939eb148cdf0d64","sha1":"dd0097a73f777882b6bf8a39c617ef55c58611e5","sha256":"f8a62bee3ee91e226f740886e5de0758f9f9e87b0afea5d2c172c2202ed39f1a","sha512":"9956faf68a47eb983b58cf7d117addedb1f627cb19c1e95b37fdbfc4f90a9411bce39c85fd53e711ffc94e9c4279429e0d1ca0e62af9c31e255d6b30501f2f9f","ssdeep":"768:juFZrfGFTJA/QBuUEBN5AoKty3/6Sxq66luDthVbrX0sPBv:6rfMtyrXAo8IqWdrXjZ","tlshash":"e8f2f1de3625aad2de43cf7ecc1924753180f1b125f2320de697d4bd424696f4a5132a","first_seen":"2025-11-23T22:10:53.149239Z","last_seen":"2025-11-23T22:10:53.149239Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/uploads/2025/11/Reena450-Show-Couple-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Reena450-Show-Couple-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24459\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 22 Nov 2026 19:16:28 GMT\r\nlast-modified: Sat, 22 Nov 2025 08:58:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 118427\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uLMpdCpzkFnD65%2F4dkAjPu%2BmaT4Ey1bgbAHwZRXCH%2FjBUNA%2BTlpSjv%2F2o3B4U7aRxGx26Pt5AjyAyASig8pX4gbOV%2FjFzcBnwLCxuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a33fee60d3c75ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24459,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x535, components 3","md5":"e20e1ae753f2e9fd06a7e6d8e1c2267b","sha1":"80c43368db1a2dea017fae5368c860fed2da004d","sha256":"efcda51af7800bae7ba9601a44d0010c0d367eb3fcfddbeffe315acf33c47bca","sha512":"27862ffb5b26876b51a658a123ce2c4ebcc8bbc3ef7766f2e1e5f10e1a5107130832264fb88f86ef7d58246e9b51b0bfc1cb70e0c9af36cbf6ffdfb3178a01e1","ssdeep":"384:+bT3Mdttedt+cI189fN0FCp3Zy6KOJHse2ESscFRhLvcnfABSKuVT:+bT3MdttC0cI+kCFV1JHsePcFzLvOYBM","tlshash":"cbb2e1e5b7715fa9f612cd3498160183375c847a69963bcfa7007d7aec2aca73ca6048","first_seen":"2025-11-23T22:10:53.150255Z","last_seen":"2025-11-23T22:10:53.150255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.betteradsystem.com/a/fnumbers.min.js","fqdn":"www.betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:15.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1285643437.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 16:38:13 GMT","end":"Tue, 10 Feb 2026 16:38:12 GMT"},"fingerprint":{"sha1":"EA:E4:C9:AE:61:81:6F:11:4B:72:3C:2A:46:18:ED:C4:47:6A:00:25","sha256":"C4:02:72:06:98:CF:DB:E4:B2:89:0B:79:BB:F3:E0:5E:5C:18:99:7E:B8:7A:94:20:38:B7:12:52:2A:86:05:BE"}}},"request":{"raw":"GET /a/fnumbers.min.js HTTP/1.1\r\nHost: www.betteradsystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb8\r\nexpires: Sun, 30 Nov 2025 04:44:44 GMT\r\naccess-control-allow-origin: https://hdking.cymru\r\nlink: \u003chttps://betteradsystem.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwwBX63NDQH32lcAAAwBuUwKAQH3CZgAAAwBJRPCMQG3KQUAAA\r\nx-77-nzt-ray: 2a494a15d25a93fc6d862369bf01df02\r\nx-77-cache: HIT\r\nx-77-age: 22490\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41943,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"f2ffb70a2dfc54bbf3e672dfbfde29de","sha1":"3f293b5901c38eec954dc7724020beaaab393988","sha256":"4453a5f19789fb6b55d5d965d78be6db6d24b7f204b39a253823706678e8804a","sha512":"1b272305bfd6a60ac670929b196cb4131bcd12256b01badbc71014e8cc4c3d4921a936aacff2a62907ebe4de965cd7cca109ee957daddf3a4313999c912fc936","ssdeep":"768:bt9rqAYKKuZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCfRCntlqonr:bbNZzFQ9JsTgZvfzmMzhYrTscpJZp","tlshash":"31132aaab286282601e741ba503eb316b23305167912d458fcb9cdf96e3ddc6117b7fc","first_seen":"2025-11-23T22:10:53.106322Z","last_seen":"2025-11-23T22:10:53.106322Z","times_seen":1,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":85,"dns":63,"connect":4,"send":0,"wait":8,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C300%2C300italic%2Cregular%2Citalic%2C500%2C500italic%2C700%2C700italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2Cregular%2Citalic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=auto\u0026ver=3.5.1","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Roboto%3A100%2C100italic%2C300%2C300italic%2Cregular%2Citalic%2C500%2C500italic%2C700%2C700italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2Cregular%2Citalic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=auto\u0026ver=3.5.1 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Nov 2025 22:10:16 GMT\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85271,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"3ce9a9ce7cef658c5d2ca2eb435655ac","sha1":"e9312e1af476f15b085667244eb52f156db8676d","sha256":"cfb2543012f941c466b2fc6660ded9094aaa7c8900d22773f2203e61ae4a7c64","sha512":"903d951d5094fca405ea0a50b0876dc81e9c73c499acdc05f561a09360b18fa5ff65d40935f508a0951ba94a704631346550d71c294c23101a5adbfc94e61614","ssdeep":"768:XqG1QCMFcFaFvFcFzBFFKFeFOFDmUzmz9FEoY+LNuLzEF95ppAiZAzfFSO+Pq4/l:d76n3tSCJiWE1","tlshash":"96831da1082ba044ab831ce223cf7e35ee0f92547141d075abfd5babadd7c66527436c","first_seen":"2025-11-19T19:46:54.272049Z","last_seen":"2026-02-08T06:42:55.53764Z","times_seen":25,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":288,"dns":0,"connect":24,"send":0,"wait":37,"receive":0,"ssl":285},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenfox.ink/d/asyncjs.php","fqdn":"greenfox.ink","domain":"greenfox.ink","tld":"ink"},"ip":{"addr":"104.21.92.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greenfox.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 13:58:31 GMT","end":"Sat, 03 Jan 2026 14:57:08 GMT"},"fingerprint":{"sha1":"E1:4C:DE:6E:CA:D2:AB:87:E9:18:4D:E4:FF:24:D9:B0:6F:33:4C:36","sha256":"21:CF:32:7A:13:75:D2:49:08:71:AD:D4:1B:1D:48:EF:78:88:5A:6F:39:55:45:5C:FA:16:1D:4A:3B:8A:39:D2"}}},"request":{"raw":"GET /d/asyncjs.php HTTP/1.1\r\nHost: greenfox.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: no-cache, max-age=0\r\ncontent-disposition: inline; filename=404.html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ov7BUaeNveQOwEwmUkn%2B1oJxneT1Pp1Sv86kXIbTEO4AUSwxb9rAHGJE9Ajs189agr9tUK1luXl6eN2gUxe%2BsU8HaOVpwMzcPG69Ug%3D%3D\"}]}\r\nexpires: Sun, 23 Nov 2025 22:10:16 GMT\r\nlast-modified: Wed, 20 Nov 2024 23:59:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: ALLOWALL\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a33fee649761525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":67,"dns":28,"connect":6,"send":0,"wait":106,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"movie.shineads.org/wp-content/uploads/2023/09/Untitled-design-49-150x150.png","fqdn":"movie.shineads.org","domain":"shineads.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.684Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2023/09/Untitled-design-49-150x150.png HTTP/1.1\r\nHost: movie.shineads.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/css/9391f58aa1411c4fdb283e27aca094ee.css?ver=9b4f8","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:15.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/css/9391f58aa1411c4fdb283e27aca094ee.css?ver=9b4f8 HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:15 GMT\r\ncontent-type: text/css\r\ncontent-length: 56502\r\ncache-control: public, max-age=31557600\r\nexpires: Tue, 24 Nov 2026 04:10:15 GMT\r\nlast-modified: Sun, 23 Nov 2025 20:07:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JU6aDV5ZZzS1jE65P4Q6v3nm8e%2F%2Ff9wnsbQoM%2BiMxn3S8qpbCXJk%2Bq1HeGt96vCOsDexl3ysyAN1LG39kJJa8%2FhG%2BEgwqU1xhtu2iw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a33fedeff59b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":213458,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"9391f58aa1411c4fdb283e27aca094ee","sha1":"e0882aca2bfd752480a369371f979020b58c6e49","sha256":"3463bec9ce37c035e4125c63ce90c731fc604e36e6c130a19b060c7041e6d323","sha512":"57d023c9fc2362bbdd3473ba9b2ef9225a5234e5bea443831035cff6928aa95692938f49c7c22be245ffc76481d0f3f010c4024900e62a2f0a84a61c4c6d54c9","ssdeep":"3072:PeeJu1iQg5MG7x+qehvP0x2pck2qkA3PLtBE1MUU9W+tUjBP:Q1iQg5MG7x+qehvP0x2pck2lAhKd+a","tlshash":"d924e56007b49cf937fbd72bae4df258a102b901c64a9beaf026d15461cda550de3b0f","first_seen":"2025-11-23T22:10:53.152125Z","last_seen":"2025-11-23T22:10:53.152125Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-T6BJMK9YM9","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-T6BJMK9YM9 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\nexpires: Sun, 23 Nov 2025 22:10:16 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143145\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":431392,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"265de703a054a15fc9c0f8ffbc8472bf","sha1":"7981e05188240a3bbad73d0ff99d4a75aa23a0cc","sha256":"06ff355851ffb3c0667c2ea8afc41ed2080db75a16a5d483aded9998a05e2a89","sha512":"fa0e1846a531fea9e723a819f771613c1c47fc29a1b922b9fd454ef8a7762dcfd95446a64743e747878f22b17f119b907ed103024c699a1263745c7780d5b4f0","ssdeep":"6144:TJp5BUKitJeUI2XVUULUVWo6O7GQEO7QZ2ElVFBoOr+Lu:FpbDi2UnVUUtO7QZ/","tlshash":"a9941ace73d674225396f078502f018ba57b28a2b44cc896f1c9cde12e74a9a4277f7c","first_seen":"2025-11-23T22:10:53.152907Z","last_seen":"2025-11-23T22:10:53.152907Z","times_seen":1,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":290,"dns":43,"connect":27,"send":0,"wait":46,"receive":14,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.media-amazon.com/images/M/MV5BZDkzNzkyNTktYzNhMi00YjhiLWI5YmUtZjliMTY0ZDc5NmMyXkEyXkFqcGc@._V1_FMjpg_UX1000_.jpg","fqdn":"m.media-amazon.com","domain":"media-amazon.com","tld":"com"},"ip":{"addr":"54.230.82.146","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images-na.ssl-images-amazon.com","organization":""},"issuer":{"commonName":"DigiCert Global CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 18 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:0D:CF:DE:F2:93:23:20:46:F0:30:29:8B:56:72:A6:26:4E:DB:F7","sha256":"CA:0E:B9:BB:95:AF:A5:13:88:90:C9:A7:04:E6:C5:06:D6:F0:58:F3:82:35:C7:CF:F9:EA:8C:42:A0:0A:7F:5C"}}},"request":{"raw":"GET /images/M/MV5BZDkzNzkyNTktYzNhMi00YjhiLWI5YmUtZjliMTY0ZDc5NmMyXkEyXkFqcGc@._V1_FMjpg_UX1000_.jpg HTTP/1.1\r\nHost: m.media-amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 190917\r\ndate: Wed, 08 Oct 2025 19:04:28 GMT\r\naccept-ranges: bytes\r\nserver: Server\r\nx-amz-ir-id: 6cf403c7-948f-4671-bf53-6f93ea24d979\r\ncache-control: max-age=630720000,public\r\nlast-modified: Wed, 08 Oct 2025 17:03:31 GMT\r\naccess-control-allow-origin: *\r\nedge-cache-tag: x-cache-404,/images/M/MV5BZDkzNzkyNTktYzNhMi00YjhiLWI5YmUtZjliMTY0ZDc5NmMyXkEyXkFqcGc@\r\nexpires: Tue, 03 Oct 2045 18:32:55 GMT\r\nsurrogate-key: x-cache-404 /images/M/MV5BZDkzNzkyNTktYzNhMi00YjhiLWI5YmUtZjliMTY0ZDc5NmMyXkEyXkFqcGc@\r\nx-nginx-cache-status: HIT\r\nvia: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 3985549\r\naccept-ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT\r\nserver-timing: provider;desc=\"cf\"\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 5gJ9vqcjuovheMjYBIRpoO1l80scyqX4FaTz9GuJLihPpc0uvfHtAA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":190917,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1481, components 3","md5":"a250f2aa5fbef7a5449f737162124c00","sha1":"6bb0854b3eff842c0811b44960c0be4fcc9fd16b","sha256":"72e24286292d703d1929ee5d6857c891bfdc9395c87c2e726b9daf274a549db0","sha512":"d0293f726a794f80c61b2f77ca30c36df9f51933ba89256d1d0784e0295e4b2c1326ef9d5cce5679c2789d3d13d2719aa367c58113019cbd64074208f94aaac4","ssdeep":"3072:v9GVaWQnBw6pIMohNCW8OYgXw2cdptO79eW4TSKkxUbcO6VISTKENa0DOistH:vwMWt6B6NCW8OvXw2u4JePTSKpbwkDF","tlshash":"1714124ee27dda59f194d9b833de01501803493bb0db7be97d849d3a6918b900fbe6e0","first_seen":"2025-11-23T02:45:43.416177Z","last_seen":"2025-11-23T22:10:53.15362Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greenfox.ink/d/asyncjs.php","fqdn":"greenfox.ink","domain":"greenfox.ink","tld":"ink"},"ip":{"addr":"104.21.92.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greenfox.ink","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 13:58:31 GMT","end":"Sat, 03 Jan 2026 14:57:08 GMT"},"fingerprint":{"sha1":"E1:4C:DE:6E:CA:D2:AB:87:E9:18:4D:E4:FF:24:D9:B0:6F:33:4C:36","sha256":"21:CF:32:7A:13:75:D2:49:08:71:AD:D4:1B:1D:48:EF:78:88:5A:6F:39:55:45:5C:FA:16:1D:4A:3B:8A:39:D2"}}},"request":{"raw":"GET /d/asyncjs.php HTTP/1.1\r\nHost: greenfox.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: no-cache, max-age=0\r\ncontent-disposition: inline; filename=404.html\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 23 Nov 2025 22:10:17 GMT\r\npriority: u=3,i=?0\r\nexpires: Sun, 23 Nov 2025 22:10:17 GMT\r\nlast-modified: Wed, 20 Nov 2024 23:59:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: ALLOWALL\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otIo6s9zT1DqBcBydHeA%2FGERq1ep4vr1JiDojj5E3cOkFl5AYdHbzeCAyRse4d5aFSY6d6rwBdBSZNALaULoK4RKNoQawJj3DCSBCg%3D%3D\"}]}\r\ncf-ray: 9a33fee91f3549c5-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.ltrbxd.com/resized/film-poster/1/4/2/4/1/0/0/1424100-cats-hair-0-1000-0-1500-crop.jpg?v=4c6d52a0eb","fqdn":"a.ltrbxd.com","domain":"ltrbxd.com","tld":"com"},"ip":{"addr":"172.66.144.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltrbxd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 17:36:44 GMT","end":"Wed, 11 Feb 2026 18:36:33 GMT"},"fingerprint":{"sha1":"05:71:8A:8D:87:FC:BC:E2:97:F2:88:E8:8E:AE:5A:9D:1A:BB:FC:31","sha256":"3A:DA:CB:61:84:24:55:FF:A7:9E:16:2C:24:D2:73:26:CA:3E:06:3C:51:D6:0B:1C:72:DD:F4:4D:51:26:85:69"}}},"request":{"raw":"GET /resized/film-poster/1/4/2/4/1/0/0/1424100-cats-hair-0-1000-0-1500-crop.jpg?v=4c6d52a0eb HTTP/1.1\r\nHost: a.ltrbxd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 379166\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=398281, status=vary_header_present\r\nage: 16945\r\ncontent-security-policy: default-src 'none'; font-src 'self'; image-src 'self' data:\r\netag: \"637e2d67b466f0a9be765000449bf1f3-1\"\r\nexpires: Fri, 20 Nov 2026 05:15:31 GMT\r\nlast-modified: Thu, 20 Nov 2025 04:45:21 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin, accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nx-cache-status: MISS\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: HIT\r\ncf-ray: 9a33fee64e442efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":379166,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1500, components 3","md5":"d4ec651a66b1861102206f79ecdd1bc7","sha1":"37867ada3cbb01199bd40f2bc2fe12d95e4f5696","sha256":"b448b2a732ca6fb006678282c8364eb5fe56608bf425a7813ef740a3d0a54dca","sha512":"e2be71bf1fa1dfad1e81a911a491b163a26770eeb0ac647789b57226b5b0353a5062c27dcfdef68a621b4372af3f53e0a6496dc6a163470c43455d429041008c","ssdeep":"6144:QqA+rk9xd+IStz6tsXByJ3w7PAjW5WalZoNmGYnWHzAy0gIY5BFdjzD:QqZuUpOtsRySrAWka6mvcznIY5BHD","tlshash":"51842311ac3b8fda94e659bb345ebb48f199fd7911dc78f4908e9ac4e2d42308990fc1","first_seen":"2025-11-23T22:10:53.154478Z","last_seen":"2025-11-23T22:10:53.154478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":21,"dns":4,"connect":6,"send":0,"wait":7,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/uploads/2025/11/Resmi-Nair-Live-30-Min-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Resmi-Nair-Live-30-Min-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30931\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 23:27:54 GMT\r\nlast-modified: Sat, 22 Nov 2025 16:55:32 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 16941\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efTZynMh5ZyTCsDrFBV7B7j4ry3K%2FOE2jC9Ow5lqOFIaY1zDlZkx%2BhOSpii9pJWDICbli20086YguQX6i%2BfUw6l57Ymq5YTLHKbxyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a33fee60d3d75ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30931,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x510, components 3","md5":"497fc8ad6dbe0871f39f680e872c0803","sha1":"f0e12c232fd4898b520dacbe77549e9dbac9235c","sha256":"e9a68deb0da01a67bd64081ea523cedb54255b52c9dd71c2147e1ca171b173fa","sha512":"7ef737fc7d0466ae4475bf72c0ac8364edab4d2ad6262ad22539d10b6f249400635ecdb6f1ff40798659a038569de63d2b83e008dd4fbc2dda1d246fe8fb1259","ssdeep":"768:Or731D4T3DQVaRRsko9D6+N2w8oQ0oo6X0YwHZM02aUyf0:q73hE3Dsa7sko92WQTNwHZMDaUyf0","tlshash":"92d2e108b806b515d22653f35becfc27637ab6709316ae6e28c4ec11a546f885d382de","first_seen":"2025-11-23T22:10:53.155255Z","last_seen":"2025-11-23T22:10:53.155255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/js/816e5ba9a494bb6a1b8a45b167e4ee73.js?ver=4ee73","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/js/816e5ba9a494bb6a1b8a45b167e4ee73.js?ver=4ee73 HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4011\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:04 GMT\r\nlast-modified: Thu, 20 Nov 2025 15:19:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283812\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rTk1CWBo3NkYTmcEC0d5dIxhvDJMgGRyPPWY2bZJ0vrX1sXVuo9cdXYue07Fmeb95AyvWUrCj5GKxvwiLTfpeBFQeicpCHvkSvpaPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a33fee61d4375ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13453,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13451)","md5":"84da02f41d9c61dec95f05d41236d497","sha1":"2bb978916e29e01050ea71d2c68a299fc61f90d3","sha256":"9d8c33c2fb6efb6c3e9778edd19c6c60bf61e327c1132787e14f66cb7cba9726","sha512":"8fb2072d48ed3c279ea005d758d64467384ff0efa72e5ffbe547dda86a6cdd3aa28741a2d342ca28d9e98cb8ee8a0c8d05fad75455d47eb858d7f4101b81e40c","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5D:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjZ","tlshash":"ab52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-03T23:01:56.192803Z","last_seen":"2026-06-21T18:12:29.247735Z","times_seen":9625,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c8utedu9yk3f.s4.adsco.re/","fqdn":"c8utedu9yk3f.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:18.327Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: c8utedu9yk3f.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":352,"connect":184,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/css/24591456d2a123942dd8a8d0bb60e60c.css?ver=0e60c","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/css/24591456d2a123942dd8a8d0bb60e60c.css?ver=0e60c HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 4410\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:00 GMT\r\nlast-modified: Thu, 20 Nov 2025 15:19:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283815\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kiA%2BJ2ZAsKCSCLSEOjxQonOarp%2F%2ByjTdqsprukytDb3eqk%2FA%2BAh4rKbyNHA1WJdXP5NT2%2B42FLzOP%2FIf4IrQdFPFWo2aJlOQJOxxEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a33fee5ad2e75ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19512,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19512), with no line terminators","md5":"b7e067012db6249774c29e4c56b4f2c0","sha1":"7523574074e98d492a8da515f0daf7446cc504e0","sha256":"c839222ec3a5037179749a843610820436bf575a591a3e0b45404f1970a2cc56","sha512":"c77b609b39ddf4ab8b6a89aba1b8daa2e8824312b1032eed8270c82167794dd438ec9878dc5e5e19853565f3f95c24315e3f164b5919cbed8c772e84f7078bba","ssdeep":"384:sk1JAWvwWZ34igipTh3dGr5PL3NatuylxQp9svaQW4M+ght5NsKa4TqSD6CE:hAWvwWZ34igipTh3dGr5PL3NatuylxQo","tlshash":"3f9209a2aaf1242cb177831ffbd0e16c3565d522d30b95dab897d700c9cab67026379c","first_seen":"2024-08-28T15:41:57Z","last_seen":"2026-06-21T17:49:21.972394Z","times_seen":14072,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/js/c8b60bda24d2583fb278c653ade8249d.js?ver=8249d","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/js/c8b60bda24d2583fb278c653ade8249d.js?ver=8249d HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3544\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:04 GMT\r\nlast-modified: Thu, 20 Nov 2025 15:19:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283812\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BgjaeQ5jLHzBJKPpFN%2Bl2HyZGbdawIV8G3c6ho93Mx2tyJMnOf%2BwIF1IMJq4T38JuiDmjpUzRTf0sJ4h8%2BXlFVyg%2FIAr8J0KzB57Jg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a33fee61d4275ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9143,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"b22fbb896057aca38ff589ae652d5e51","sha1":"d7c80ad48aaa92283cee16b0ae35f5753f05c74a","sha256":"0b4a5bdce233322bbe51815709234569a6a1b925d4d130aa7319e9d02e411935","sha512":"08f46cffee943afdfda956bfcb88d29823563f6c054eb2ee6d67b4586acba5ad09f2b73811b9ee051b6063978ed18df829d0b70f67e6a2d553ba70f6077da327","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+0:s6Udn3LzoJphH8uClD2tFtJ7byTwt0","tlshash":"4d12d9ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-07T17:24:00Z","last_seen":"2026-06-21T16:06:12.000494Z","times_seen":4751,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/uploads/2022/01/cropped-HD-King-1-e1642066363852.png","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/cropped-HD-King-1-e1642066363852.png HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 14767\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 21 Nov 2026 19:02:30 GMT\r\nlast-modified: Tue, 26 Mar 2024 11:23:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 205666\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ofg1TrTA1NazsDrDztNJaplVGb8IHPPrx7cy1nQy1grtsbFkSv2jNnUU22yPQ%2FJ98QgBoJQNCBS28f%2BWCkUeD8u3q%2Fw2Knhx7uCJgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a33fee91d7275ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":14767,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 48, 8-bit/color RGBA, non-interlaced","md5":"134a62f6f6d5685b05b3fadf93ede3d8","sha1":"6177cd0d70fc2e1a60700efb98e8ef32c5259103","sha256":"4d5363daddd520df988f3bb7d1ad4b5e71734d7dda3da185ade13b788f800963","sha512":"65346840e5f58c70d699bb50756e30c24b8f2d1ab5214685c9f0755a857a6bf42aa280d6f6d069d23c50610c2ca95263fa4fab6e8230aecb52f990d9bce539ab","ssdeep":"192:PKVKkUI4rMTfy7XK/WckV096HDlLjGrPNLZ/RQCk+pL7+76ZCRVNL8lvb8Wf1ech:PKT4YTZev9P++CW6ZCZL8Vbl1lXh","tlshash":"2462df9969808a1a13bd5c4b8faa3026342327dfac7dc062da0c7d1c2526e0e09372df","first_seen":"2025-11-23T22:10:53.129485Z","last_seen":"2025-11-23T22:10:53.129485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"movie.shineads.org/wp-content/uploads/2023/09/Untitled-design-49-150x150.png","fqdn":"movie.shineads.org","domain":"shineads.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.154Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2023/09/Untitled-design-49-150x150.png HTTP/1.1\r\nHost: movie.shineads.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T18:29:49.364404Z","times_seen":16614593,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T22:10:14.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-dns-prefetch-control: on\r\nx-ua-compatible: IE=edge\r\nlink: \u003chttps://hdking.cymru/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://hdking.cymru/wp-json/wp/v2/pages/53291\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://hdking.cymru/\u003e; rel=shortlink\r\nx-litespeed-cache-control: public,max-age=604800\r\nx-litespeed-tag: af2_front,af2_URL.6666cd76f96956469e7be39d750cc7d9,af2_F,af2_Po.53291,af2_PGS,af2_guest,af2_,af2_MIN.9391f58aa1411c4fdb283e27aca094ee.css,af2_MIN.0e99411a989017d7a562694d305b7f59.js\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: miss\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VC6FFKWL46jIpZ1duWPPio9LIBiE%2B9io%2Fsrlf7saYQ5%2BtWC3dlFkKrxv93%2FnyPdUx%2F%2FMC1tdInaG7BfU9iydncCyZ6ULxW9353Q%3D\"}]}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9a33fed8fd9d569b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":101037,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29066)","md5":"569bbe6fe95dce7de4adfcfbe8ba5d1c","sha1":"08b5ef747e328e8ba7cbfccc16cf17bb6534c2ca","sha256":"563261696a176b159da58c7aa0dbfaed94681c3bc5c92ab6c2cc305380f90a7d","sha512":"d78898bc0bfddccc37a5f7d252781da4ad7750a1863fc1027b1a3dc32f407d6506de19700765b3d5543873d5fdb0e9173ef5ba8ec76c1ea20a09085442d0490a","ssdeep":"1536:9q8aprQmUFNmYJZv0w89yfbLjEWSpViJmF2otrri:9MtQmUPAw89yjzq2f","tlshash":"d1a30970e550523e7a2f47edd596b232b991d227cd0716d5f2fce2c8829adf3183a428","first_seen":"2025-11-23T22:10:53.157421Z","last_seen":"2025-11-23T22:10:53.157421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":40,"dns":22,"connect":1,"send":0,"wait":770,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/uploads/2025/11/Super-Horny-Collection-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Super-Horny-Collection-2025-Hindi-720p-HEVC-UNRATED-HDRip-x265-AAC-Short-Film.jpg HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20524\r\ncache-control: public, max-age=31557600\r\nexpires: Tue, 24 Nov 2026 04:10:16 GMT\r\nlast-modified: Sun, 23 Nov 2025 19:59:39 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cd0Zc8vRqpYZ62ufE0uo8FQvyUQAFTb4XjfuLE%2F%2FiP%2FmeBm1%2FVMLf9So7Oqn1VpdO%2BtdWE8ztr6GYLrlkNKSiR3h50gQBjYw%2BZus%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a33fee5bd3275ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20524,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x510, components 3","md5":"73edc78f6d707511551d4b8df186bcba","sha1":"d7d60503146722bc5c0a2cfc3bb89cae143d7295","sha256":"7ac04296cba20f0d45fda30bf5a3a8b6457848b9074839eac634ce6c70a58d58","sha512":"c64c03a7aab87a33d290f0f2128675c3481d599558be710e7dbcabefca13d2f6d0de661b69a8788f5f6d72d62a6d55b933d5c3be19bfa83326f04d643930f3cb","ssdeep":"384:2U1ywxWBuzRhcQ9DrCs/+8Dbp2B5LK3uGT1n2kN2+4/:29QNjJ65WeGJm/","tlshash":"c892e0b737b40564c6e9f77a81b0036efb36b530749fb7ee5d60890228ab1e244d51ac","first_seen":"2025-11-23T22:10:53.158091Z","last_seen":"2025-11-23T22:10:53.158091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/suurl5.php?r=10610642\u0026cbur=0.48985580283562713\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=HDKing%20%7C%20Jalshamoviez%20All%20New%20Movies%20Free%20Download%20HD%20King%20%E2%80%93%20HDKing%20%7C%20Jalshamoviez%20Hollywood%20%26%20Bollywood%20New%20Hindi%2C%20South%20Indian%2C%20Hollywood%20in%20Hindi%20Dubbed%20Movies%20Watch%20Online%20Free%20Mobile%20720%20%2C%201080p%20Download%20%E2%80%93%20HD%20King\u0026cbpage=https%3A%2F%2Fhdking.cymru%2F\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1763935817441\u0026srs=d1e6ce681432d34fe95874a3d84e855e\u0026atv=71.2-a","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"172.67.223.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 20:14:35 GMT","end":"Tue, 06 Jan 2026 21:12:18 GMT"},"fingerprint":{"sha1":"7C:B6:62:0F:43:12:2D:86:DD:92:D1:44:95:36:24:C7:2F:BA:B0:B6","sha256":"06:21:18:21:3A:A8:90:A4:4D:D0:A6:7B:7B:C8:4A:3B:31:47:C3:5D:48:A5:94:AC:08:75:A0:A1:DF:D6:B9:3C"}}},"request":{"raw":"GET /script/suurl5.php?r=10610642\u0026cbur=0.48985580283562713\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=HDKing%20%7C%20Jalshamoviez%20All%20New%20Movies%20Free%20Download%20HD%20King%20%E2%80%93%20HDKing%20%7C%20Jalshamoviez%20Hollywood%20%26%20Bollywood%20New%20Hindi%2C%20South%20Indian%2C%20Hollywood%20in%20Hindi%20Dubbed%20Movies%20Watch%20Online%20Free%20Mobile%20720%20%2C%201080p%20Download%20%E2%80%93%20HD%20King\u0026cbpage=https%3A%2F%2Fhdking.cymru%2F\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1763935817441\u0026srs=d1e6ce681432d34fe95874a3d84e855e\u0026atv=71.2-a HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdking.cymru/\r\nOrigin: https://hdking.cymru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzFfGSP8PtOyesvrUxAiYdfibKUiw4VX0etv4LDWF7kH3yufTGGqq%2BcPIabTJLGYTkxuT%2FsXQO7YOGVKgmm47U193PFzf1eUGmIEzMAp3bdkask%3D\"}]}\r\ncf-ray: 9a33feeb3df9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1120,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3bc66396481e8b1eb40e188617ce322c","sha1":"78efe85267c62f87fd45b0bd70c079c29ef9fc03","sha256":"4f3bfff666419a842fb385f483a82caf969fd2c66b5dfdd8e2170616a0aa771b","sha512":"c716c2d255f5a801c114fa0ac57c5cb45b7baaeb6460eba5799410cba16fb623ec6237b235c376c494a7109310ec591f62c3d6c35e18a27ec60d312420da4813","ssdeep":"","tlshash":"6821f9806e6df91dac9c10cc8c2ef4202c113247dea0700277526ce11d346f209dd967","first_seen":"2025-11-23T22:10:53.158965Z","last_seen":"2025-11-23T22:10:53.158965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":30,"dns":2,"connect":4,"send":0,"wait":204,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/uploads/2022/01/HK.png","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:17.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/HK.png HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28; _ga_WEZ6Z72NKX=GS2.1.s1763935817$o1$g0$t1763935817$j60$l0$h0; _ga=GA1.1.1214480444.1763935817; _ga_T6BJMK9YM9=GS2.1.s1763935817$o1$g0$t1763935817$j60$l0$h0; _ga_0RCNW0TGGZ=GS2.1.s1763935817$o1$g0$t1763935817$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 3090\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 22 Nov 2026 20:40:10 GMT\r\nlast-modified: Thu, 06 Jan 2022 14:21:24 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 113406\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R59TcnblgF1mKOCJyJ4Bw06L8tiYR3tF%2Bn%2BZocnfSdgje2b1lcE%2BTL0w1PV6HlqCfeNqjx4uvQGRLGTNqsJgIsx2SvjBIS7oyPsRyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a33feec8dad75ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 41, 8-bit/color RGBA, non-interlaced","md5":"42b828acc929cbfe5f4b7ef81f78d44b","sha1":"d599ba0baf45d03aed5df06fd57af471090fa44a","sha256":"fca78fe7a2a4aad7e16fa16b7412fb5a850e174e5a7b83faf1a5b00c92b5afa6","sha512":"efe6aa6cf5be851a60df9da6eb25ef919e6ffeb490e5d5541d7ce3d099618a7e15a6260730fad20d663260754c78668c477c9cc21c312551ec680bbefe4291c4","ssdeep":"","tlshash":"be517e655df83e7fda0230cf5c4da3d0e4a7fe2162c921407b68dc2431ac5b36e84245","first_seen":"2023-10-15T23:32:36Z","last_seen":"2025-11-23T22:10:53.140246Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/js/ed1551a735ca89a5248d9addfd8f2edd.js?ver=f2edd","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/js/ed1551a735ca89a5248d9addfd8f2edd.js?ver=f2edd HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2671\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:04 GMT\r\nlast-modified: Thu, 20 Nov 2025 15:19:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283812\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pdKXKeTb98%2B7VDL1720zhCGWRTig4Nf%2Fdnk9z1%2FQAVGgEax1Ag1JyTJKA%2BNZ2PswOne%2Bv%2FKXq3X3rDMYfNB7G9WO0xm9G89vExJLAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a33fee60d3f75ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8526,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8524)","md5":"d3903fc6792b30db20d567ac27cb32d7","sha1":"3878ed47da14f29379d385c89b07c7c43e46235a","sha256":"e7802a0072e0400e012d016dfa8fcb77e5bc9d7d86dc5500d502c22b76467eb6","sha512":"c13ef44338efd56a34a0f02c89d246158187ffd6f3fcd78ec88222aac313170422f16b8465ad86c76d6cdcb2a42a9f6e4e040bbb48751f2425981cd0d1f10563","ssdeep":"96:BiLzZp1jH2BKyAWjjp9+1YYE7Aq5l0ok7yyAMGrrAU9gEuqOxVTHjiQzBSw6MCnp:B6jH2cK5IKD0Y3vm17iQz8VBAn06kd","tlshash":"9702d88cf71034b548bfc69e81dba500d1bbc92596439086f69d8c4e1949f6813e7fdd","first_seen":"2023-05-29T23:05:28Z","last_seen":"2026-06-21T09:42:35.797453Z","times_seen":208,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/js/0582711f8cbe8bf5cf245951bea9372f.js?ver=9372f","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/js/0582711f8cbe8bf5cf245951bea9372f.js?ver=9372f HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3372\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:04 GMT\r\nlast-modified: Thu, 20 Nov 2025 15:19:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283812\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h4ED5B2rdfJY2LwM635O5EUA0Hpsct8D0mY6gkWIdIZnOncO4pR4pskU4DNX8D1Y1M45Khf74E7Y8YT63HI5i0olWQQ05rePCdkexA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a33fee61d4475ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12511)","md5":"3e71574fc61389daf15e9585bcc93fe5","sha1":"92394cddb2ae40c7060c709621db86634b25fe1a","sha256":"2f441c962e351ef150f80bda82823c79cbb9ca057e0be5761a3584a3ba89b9e6","sha512":"028551afde3dd00b87ebd86e58888da9a3c317753760af83697602d9796956e687f83e5b1d60e3844d6f9b6acfcbb9cf93088116a6872e72ea6c2fafec85c50f","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O95:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XN","tlshash":"9c4235e16197e0f0c7c338a48816c051f2bf866cb8898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-17T01:59:03.5715Z","last_seen":"2026-06-21T18:12:29.388277Z","times_seen":9350,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/js/c9f49253ebef8ce0d6ff974316d2f5cd.js?ver=2f5cd","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/js/c9f49253ebef8ce0d6ff974316d2f5cd.js?ver=2f5cd HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1573\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:04 GMT\r\nlast-modified: Thu, 20 Nov 2025 15:19:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283811\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDMeaXMuw%2BSJEk6tf2I2Est23k5iO2h0XOpWLuwWWdT%2FuFR6scoFJOz50RYCF34FB982%2Ft0%2BBJcmfEBwXaXltAGwc89ZSg%2BcIfz8qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a33fee60d3e75ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4778,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"3c5fa2d41fdc9a50e55ed927b3aa1028","sha1":"32dd6f3a6959ed35b9cb8db31e733e29eed293c4","sha256":"adb9c4be6a3fe023e91f7952e0e851016582ee2b04794bb4c0d96d05e1b65501","sha512":"d3a85506eddf8ccc83e9583e0f4655aa9bdaa612685dfa5e69b534a3d0e883a3af75c6c38f71b27a5775f272486490c3374065cb66e407256a12caac20ae902d","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRem8:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC3","tlshash":"18a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-19T14:47:18.813848Z","last_seen":"2026-06-21T16:06:12.007891Z","times_seen":4430,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdking.cymru/wp-content/litespeed/js/4c07cd76cc4a64b9725b828777d243a4.js?ver=243a4","fqdn":"hdking.cymru","domain":"hdking.cymru","tld":"cymru"},"ip":{"addr":"104.21.64.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdking.cymru/","date":"2025-11-23T22:10:16.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdking.cymru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 13:09:34 GMT","end":"Wed, 18 Feb 2026 14:05:58 GMT"},"fingerprint":{"sha1":"2C:5F:8C:91:DC:5D:2B:9A:E4:F9:54:A5:A1:D5:F9:A9:69:80:73:9B","sha256":"16:94:24:A3:73:5E:26:C0:ED:EF:CA:E4:35:38:69:34:D1:16:0E:C4:52:41:5C:DD:AC:0F:A8:AA:A7:8B:E6:3B"}}},"request":{"raw":"GET /wp-content/litespeed/js/4c07cd76cc4a64b9725b828777d243a4.js?ver=243a4 HTTP/1.1\r\nHost: hdking.cymru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdking.cymru/\r\nCookie: _lscache_vary=895db534231ac38f4fe9212b423b2f28\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 22:10:16 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1682\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 20 Nov 2026 21:20:04 GMT\r\nlast-modified: Thu, 20 Nov 2025 15:19:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 283812\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=30CboMrD5GO6q0joxGctga%2FaQQ0Z0E4MDNvFdeh%2BlxhM30p1CSotWlXLP6frdKh9FnszPEV2R2vuMwugEmf94MWzEO8IMSn3zTxPAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a33fee62d4575ab-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7335,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7333)","md5":"ab2b109461499404e6308fc102ceba5a","sha1":"3400d0407e06e7746cb7b5b154b76aeebe6f5bb8","sha256":"0d5ef0324954e39c6b7804a30be454deaaed55369bdb76a965eb475e21e98d43","sha512":"f61bff510c3ac17ada29ab53682b03746cb73f6c1edd2ca51243a20f168fe865036f0dfb5312cce5ce1d3bf231e798dff0ad31bd76d47785029e0f738ce3e51c","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvz:bqHngROnvgJUqDi9cNYTnGvTbvz","tlshash":"cfe112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","first_seen":"2024-09-02T16:35:56Z","last_seen":"2026-06-21T18:24:23.869093Z","times_seen":1005,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}