{"report_id":"9f2d4e61-e6ce-43ef-95cc-c6b2b38a65fc","version":6,"status":"done","tags":[],"date":"2025-10-16T19:29:52Z","url":{"schema":"http","addr":"meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"title":"Nothing found for"},"submit":{"url":{"schema":"http","addr":"meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-20T19:29:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"origunix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"vmuid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"meumundogay.sexoral.net","ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-09-16","domain_rank":0,"first_seen":"2025-09-09T08:25:07.373654Z","last_seen":"2025-09-22T09:00:12.143436Z","alert_count":0,"request_count":16,"received_data":921773,"sent_data":8680,"comment":"","tags":null,"fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Yoast SEO:26.1.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":1472,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"directlycascade.com","ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-09-10","domain_rank":0,"first_seen":"2025-09-10T21:14:18.585097Z","last_seen":"2025-10-13T08:43:36.057371Z","alert_count":6,"request_count":2,"received_data":210369,"sent_data":920,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"origunix.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-30","domain_rank":343993,"first_seen":"2021-11-30T12:40:27Z","last_seen":"2025-10-14T07:09:35.692921Z","alert_count":1,"request_count":1,"received_data":64560,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"msdoj.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-07-01","domain_rank":211684,"first_seen":"2025-07-02T02:58:17.140394Z","last_seen":"2025-10-13T05:04:06.501077Z","alert_count":0,"request_count":1,"received_data":64515,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vmuid.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2018-10-22","domain_rank":182910,"first_seen":"2019-07-09T14:53:12Z","last_seen":"2025-10-14T12:10:14.086384Z","alert_count":1,"request_count":1,"received_data":10466,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-16T19:29:27.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /hairyandraw-ing-time-dax-librastic-and-harper-davis/ HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:30 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:30 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0z3flJpRvk%2BfMBd5GFQv9RnAvaHLCJIyBWoRKiEUGo6M%2Fu81YBHVqxNAPtV0fahLJioX910FKSadPFcCgmKODhRBt1owdVD%2Bye6KcCpPqitgjB85HQ%3D%3D\"}]}\r\ncf-ray: 98f9f718f87456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Yoast SEO:26.1.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":45992,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"5b1d2a8c024f756b7a5e3cd4c37585d3","sha1":"58385fa46d642afd7ccf7f730a5923bc271b4ad5","sha256":"52c586f782b6dbc692e0b334626c1360a4716d9d32a109a4f5cf2378f781f8b8","sha512":"c5bbe8b28bac364d43b784bc6583102bc1a88ecec2f5d21cfe863612006658bf054b86e80f6b2f40b9a09643c5d3c1f2f2de1378743bbe074fa6a948b9d7669a","ssdeep":"768:fcH0aZdapzxinE0Kb0ZHk+qqNZYRccrfF7u3yElZOPyz4HiK+VkPWR:f0ap1inE0C0ZHk+q+YJzHiEq","tlshash":"cf2309b5285c403f130a27b6916ab21df3bbc825ce055e66f3f4a1dc9640eb654f623c","first_seen":"2025-10-16T19:29:53.962281Z","last_seen":"2025-10-16T19:29:53.962281Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3199,"timings":{"blocked":568,"dns":27,"connect":1,"send":0,"wait":2063,"receive":0,"ssl":536},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-content/themes/sahifa/style.css","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-content/themes/sahifa/style.css HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:31 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:31 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXBIYbv0MOJI1vhkNVGBp2VhP%2FCYbzEkB0TaMfhnH3mHJ20pbUKAvk%2FzREbnP%2BiI5pGifeDi%2BkukK0XZe%2BUVgSJBF%2BTD7FLlubG1MAcRVho9wPg%2FCw%3D%3D\"}]}\r\ncf-ray: 98f9f727480e56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202260,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (30070), with CRLF line terminators","md5":"a4f66d19a98515a142254e71b578cf86","sha1":"752da8ac75c2ecd5c8f42fba1944a92d1f33f9a6","sha256":"9c5119f90de52f5e930f35c3170b5045612c6248241ea87c9d015a5a350b690b","sha512":"f9efd67a3b19de8ddb5a971e4f013114506f82388a148f84cf57877d0038aad84c76b91d558083234ca267fa20372678abac54abcb97f429b1a53ea2c78cac9f","ssdeep":"1536:tCl7c5VUYIlofUvs3JW1rftWj9O5b7D3OnURL5u0+wdgUJRIkdFVDVbCdZ89IEoi:tClsVtIlmQs3E1Aj9O5b7BFVDVWE2mz","tlshash":"721485a8de0910ca6313c79efbb0b774dfa4a135db0a0cacf4d92a1c52c556415aebdc","first_seen":"2025-08-19T06:33:45.783213Z","last_seen":"2025-10-19T21:38:17.612572Z","times_seen":6,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-content/themes/sahifa/css/ilightbox/dark-skin/skin.css","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-content/themes/sahifa/css/ilightbox/dark-skin/skin.css HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:30 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:30 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2Fp7JMDZXADgOzyCfbNMqm7BgwoQXbNO2cjdvGrx34rywiD6luuYd5iX10MRiMxUVq%2FMReT8FzIxmKPDs3UlD1FsRN8NFlqz7gXO71V5jSYeH1L1XA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98f9f727481256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7289,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"c6c8dd7d8442da53c139aa69213155ce","sha1":"98c3106cec36aeb3a3558b78d760867df1b9dd76","sha256":"949448840982c267cbacb0aadde067218f404646e15e92b72991715a2988d1f0","sha512":"55178de431b4c3596dd3546835bedaa3915536c34a5948633d7a470df53e5eceee33505dc7692a4d3d06cb519401af5f2fe74530caa55ac6ed5b6ebbd32a57aa","ssdeep":"96:EkFvFMFvFO4xxbvVTpwoqDIsRdQBE0IZln4sfZeJxR/MqO/noLpCVIeOFJ63Zrym:LdEdOCbvUdQB/I/ceIeOFJ6UU4u","tlshash":"c9e1cc54a3b625c632538a577770cba15b1f0172ed01b5fb71d8b0a0a3d26d82c67ed8","first_seen":"2023-04-05T11:23:33Z","last_seen":"2026-04-03T07:34:13.456604Z","times_seen":943,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Droid+Sans%3Aregular%2C700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css?family=Droid+Sans%3Aregular%2C700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 16 Oct 2025 19:29:30 GMT\r\ndate: Thu, 16 Oct 2025 19:29:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":786,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8fbff18d11bd386bda615f1ff724fbc2","sha1":"b2f86de9dbe53e992544d36c5f4bc3267d86cd99","sha256":"28f7aa294f5c3f0d9af179eb6c87b06fb5afe7285fb86d8ae4ce7c93372cf12b","sha512":"56d359ca83e7d3148fac9e0e8bf395d12e9979aa60dcee0f944e2c87136a27d3b2d8366104abeed3127b188e7e9462658c3f0652a89f7b324457e2cad5aac756","ssdeep":"","tlshash":"19016d81083ab514e6932cc553cd7931df0fe15464849964eafe14d4fc41c5b63a2b5d","first_seen":"2025-09-09T01:52:26.474541Z","last_seen":"2026-04-03T22:37:54.824671Z","times_seen":4117,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":58,"dns":0,"connect":7,"send":0,"wait":18,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-content/s/2025/10/Igor-Miller-ivo-com-Xavi-Aragon-300x165.jpg","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-content/s/2025/10/Igor-Miller-ivo-com-Xavi-Aragon-300x165.jpg HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:33 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:33 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQGQdv54p%2Bw7rg0knerGYl6kknuGRkNVQamCx1W3DbLUf1KmeGxD5bxgyFnijcPzHunkFhsGs72x8HPuJdti2nE%2FEypiGGXQCQ1g2AQKLKu7O4GKUg%3D%3D\"}]}\r\ncf-ray: 98f9f727581e56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46251,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":2963,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2963,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directlycascade.com/1b/8a/d1/1b8ad19e5b8faa97b5af717e65b0bdee.js","fqdn":"directlycascade.com","domain":"directlycascade.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"directlycascade.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 11:12:27 GMT","end":"Tue, 09 Dec 2025 11:12:26 GMT"},"fingerprint":{"sha1":"76:17:4A:20:73:64:94:52:3B:6A:50:E2:7C:F7:F5:73:52:38:47:A4","sha256":"66:CD:95:7F:5E:D7:56:27:7A:6F:3B:80:CB:84:DC:89:A0:F0:BB:44:49:55:B4:81:76:24:2E:38:E3:FC:78:29"}}},"request":{"raw":"GET /1b/8a/d1/1b8ad19e5b8faa97b5af717e65b0bdee.js HTTP/1.1\r\nHost: directlycascade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Thu, 16 Oct 2025 19:29:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32751\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: directlycascade.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8a9dd650e29e0e7a69e747db108b99f4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84220,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"369042c4b8fc50d51400c2c5cd02ffa2","sha1":"e1621fbe25ccdda06a8225b49a97502b72e83c53","sha256":"979e978460da694900b498b9aba1395084024e5a9321c5ded617787da7ed4634","sha512":"dcb78575c3e68d6a5e64259bb78316db321320256d1cc7dbd0821b8f1e71fa4238b2afb0633a43eb304c31d7497498cad7c693820b72b3a791d6c0aab4e33df0","ssdeep":"1536:UOzsDEFAkM9IWf3pDTf0zpxftTgA4VEIaU44Ru37oIXDWeGXMtb4cnSzB:wDxk4+BgA4VEIaU44McBeGXMtb4/","tlshash":"4983f848bb82b869425630ba332ff01af15a4d421de8d454dc47f8d96fb8b1de637e24","first_seen":"2025-10-16T15:09:23.503727Z","last_seen":"2025-10-17T03:46:30.513567Z","times_seen":4,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":270,"dns":1,"connect":96,"send":0,"wait":98,"receive":94,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"origunix.com/sdk.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0","fqdn":"origunix.com","domain":"origunix.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"origunix.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 00:54:40 GMT","end":"Mon, 15 Dec 2025 00:54:39 GMT"},"fingerprint":{"sha1":"EA:4D:52:7B:A7:DC:EC:8E:C0:40:42:81:FA:8B:F0:41:1A:8A:06:B9","sha256":"D2:C4:BB:C0:BC:07:5E:9C:EA:13:D3:33:59:AD:22:BA:79:E4:4D:F0:C5:B5:9E:48:3B:85:95:0C:1F:60:60:82"}}},"request":{"raw":"GET /sdk.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0 HTTP/1.1\r\nHost: origunix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Thu, 16 Oct 2025 19:29:30 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://msdoj.com/sdk.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64155,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":89,"dns":1,"connect":35,"send":0,"wait":35,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"origunix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msdoj.com/sdk.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0","fqdn":"msdoj.com","domain":"msdoj.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"msdoj.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 00:32:12 GMT","end":"Fri, 28 Nov 2025 00:32:11 GMT"},"fingerprint":{"sha1":"A8:56:C4:4B:26:AD:D5:72:31:67:E8:75:28:D7:6C:F5:D6:A1:E2:B5","sha256":"65:DA:95:54:55:5B:C8:18:65:43:99:33:52:5B:EF:99:EF:5E:0F:AC:FB:6E:F7:6A:27:0B:3B:6A:69:3C:78:C7"}}},"request":{"raw":"GET /sdk.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0 HTTP/1.1\r\nHost: msdoj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meumundogay.sexoral.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 16 Oct 2025 19:29:31 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 64155\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64155,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64155), with no line terminators","md5":"d451690c667d2d92c1299d1987978ddd","sha1":"8b6063687d3787a1591b202222d40496a76e9a6f","sha256":"c0673688491464b4863983f345c9ee4bacf8ae890705cd38ba6c89ae368559ad","sha512":"6b3a47b715061da4ff5419f273bb88c2da14a08b0fefd5e552542fec6e2a5a87eb7f2c69b1fc50e6d17c03482c7b3c730150fe6e7b49781eca6ea83a36f4cc19","ssdeep":"768:hCflSCRC8w0RCX+4D+R8WyX+86wA6C8Cflqu4sTJ+zaXeXgtA9zk4sTJ+HXJpZ6d:qvVw0gPowAzqfTqn9","tlshash":"f053d698b5d2f1a102c370b8543f6106b2366929248dc098f7b5ded5ad78d6ea633f3c","first_seen":"2025-10-16T19:29:53.98597Z","last_seen":"2025-10-16T19:29:53.98597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":108,"dns":1,"connect":34,"send":0,"wait":68,"receive":36,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:30 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:30 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqDm7LGFtx3ghbg0NBQfKRMTHNXmXwKS9vzlPikIKw3p8aVjLihPn48mDIxrpMw4ESeFvNBdfXoVbFR2eRZplnkqoehXqlG62epgDTaJ2%2BYnqjY2eA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98f9f727481856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13575,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13475), with CRLF line terminators","md5":"f6019bde04ba4cb6164860c93ecdc0f2","sha1":"41ed3cbe759d70e59c348ac9fc6922ede9f52787","sha256":"78b9ca46dabbe531e8fac49021f829445e2728daf181c6543424dc89231aa3a0","sha512":"b0dea52e2572448527f821e3814e7fc21cd121b7340bfeeea1853f075b7c2b2e1acd29d855c3039e82ef8579b8bff1029dbfa5e70967bbdd1d5c12b932c05941","ssdeep":"192:5mprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORd:5mprxaefKI0LP19m4q1WW+h4Mjg","tlshash":"7752c86db56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dcae812bf78","first_seen":"2025-08-19T06:33:45.777104Z","last_seen":"2025-10-19T21:38:17.567945Z","times_seen":6,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/user.php","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:31.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"POST /user.php HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 39\r\nOrigin: https://meumundogay.sexoral.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 19:29:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6linautaf5mRdCJgpnjbzUwsEw0c4LWlajUa8JT%2BamA0IhWe2MKnYf6ymS65f%2FqRaJmsxFgCh6acHTQQOI1HAlVp5CecUDf%2Fk1FHAKbQzm5eAMDshQ%3D%3D\"}]}\r\ncf-ray: 98f9f72a6d0556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-includes/css/dist/block-library/style.min.css","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:31 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:31 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KOHDyOVBz9Vivt7o2Lgpaiq2Ryv9Lb7MZhzZhXoDNca6cf3rcGxl5CwM4Pe43c6bDd4Nh35I%2FLWhgcI9jcDlaQd1%2FUhlbyUXHEfyvONJUPk%2F925%2Bdw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98f9f727480a56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116256,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (55627)","md5":"1e8c0f3db04a3fbad124e4680db68b56","sha1":"086583663d8eb1f0c9bfa3faa7c4a8a0ed478848","sha256":"e194cd6a5a4d563f5b93abcc878dbabd54071386d02c2fa7e3111fda9724bd76","sha512":"83e7aa9a70e9c08111b4bacc84f12772e50042d6a27d009795a8d0eaa400192e690cfbda8679b0f907435274920fd1e3461f2ce74d975f0f03ea6ad6e5000ca5","ssdeep":"3072:seeJAG3Qg5MG7x+qehvP0x2pckcqbA3PZ:7G3Qg5MG7x+qehvP0x2pckcEAB","tlshash":"9ab3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-25T07:53:27.437051Z","last_seen":"2026-03-10T10:32:39.764059Z","times_seen":115,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-includes/js/jquery/jquery.min.js","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:30 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:30 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PR5r0hToxiqYzrEzfyck997%2B3%2BoiO4nl%2BIyABIFF6uFu5iP5moTWCw65NdHNTzrYxqCim2cBQh6ZBRwyrZOtmh8IfSLcUUSB0ft5rBVI0XTOj4JV1g%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98f9f727481456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72102,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"d474fc527cce2b4aad34de4e4959ba09","sha1":"e9ae84b22e6af7f9c3d9bb259c57f74910d9b90b","sha256":"75b418e39d800f22b7969c0132041ef7dc8e08bb1f491de1284342f34c2c9532","sha512":"a3bc235cc57ba8c849451cc0a47c6181a304e26631254b48fe7dc88002e00281541ba2cd0efb6e74f6e67eee64b00b06c5f065c3020d4623f222866bae85dc06","ssdeep":"1536:uRUXNuDgwxcyqntBNwchN6SLaHEU2BSrBASp+a/IEk4uD:rfNwcv9FBQpLa","tlshash":"6f63e8df73cab02257a720ba006f650bf276099d684d4400f259d8e9fc7894a827bf7d","first_seen":"2025-08-19T06:33:45.790975Z","last_seen":"2025-10-19T21:38:17.564172Z","times_seen":6,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-content/s/2025/10/Milionario-ivo-com-Masterdam-300x165.jpg","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-content/s/2025/10/Milionario-ivo-com-Masterdam-300x165.jpg HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:32 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:32 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PSZHE8Lz5pMURJCGFxwPWnO1zcF1keMO03NrpDX9GWkZemO5930KzYzZ4Zf1g%2FFoV0gjNNi94C9StAxwtDYDZfuV8hTVof%2BH%2B0YeqlBxg4sKlHC5pQ%3D%3D\"}]}\r\ncf-ray: 98f9f727581b56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46251,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":1924,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1924,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-content/s/2025/10/Derek-Spears-e-Jack-Valor-300x165.jpg","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-content/s/2025/10/Derek-Spears-e-Jack-Valor-300x165.jpg HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:35 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:35 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zSSwiF2WHuivlruIHJDmUxwNff2uuwOF16Q4ktZtSsfZCktshYuFeN7dcRRlabdXgJP72I2aV4dGq%2F2o3aTLM6d3WQbNI0HYIUclkk6jBzWeqogROA%3D%3D\"}]}\r\ncf-ray: 98f9f727582156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46251,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":4640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-content/s/2025/10/Incident-428-Time-To-Change-His-Tune-%E2%80%93-Ian-Novak-300x165.jpg","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-content/s/2025/10/Incident-428-Time-To-Change-His-Tune-%E2%80%93-Ian-Novak-300x165.jpg HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:34 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:34 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LF%2Fe1ndZgkTx6zzTZST%2BqZjO1KDi0L8A%2FMgytB0KFb0QgJVtqynxfzHyu02Ptq5QyXOPzfCvmAu4K6yvvYHZBIJbSp2%2BwOMVc8zqJiqGWww%2Byk7Dng%3D%3D\"}]}\r\ncf-ray: 98f9f727582456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46251,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":3780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-content/themes/sahifa/js/ilightbox.packed.js","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-content/themes/sahifa/js/ilightbox.packed.js HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:31 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:31 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sw9fN%2B%2B3d4dIVs8u9UZB4Pp3IjURr0Zgv2SKFXkGjpEr939OgEyDJzimT1oQ06547GbYTVNDqxmPAIZdR4%2F218P6nlsOLd5EZiKlMwYk0dx9kx5FNA%3D%3D\"}]}\r\ncf-ray: 98f9f727582956a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79762,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2026), with CRLF line terminators","md5":"baff0fe33b7c1b0c9663ff3e4a70c061","sha1":"1954bcfd539a7dec7bfd5411c8681f3eda2a0b5a","sha256":"6f74aadd175123c3b6b5742b7023a81b4383fa862704b3ab70403bb728fa1e55","sha512":"7cb3ca037c1d918110df420c79cd8f8279dba4dca02a2a68e0180e63d136b7947b45c3c4ea266ec05204b5410fa0d1c1ce8c1668a7668d7af222b1dcdcc5a78a","ssdeep":"1536:9/C6DRFAyUXV4r/q/h/1V/v/x/SSa9ITd3ybBviK39TS6DOdV1acqf9UN+3Rpc:hGWciKK39ede9Uupc","tlshash":"0a733be8b3503a62c5b325e6401f424e6236cb36f9099416b06cd9d99cf4d8d22b7fbd","first_seen":"2025-08-19T06:33:45.771172Z","last_seen":"2025-10-19T21:38:17.59177Z","times_seen":6,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directlycascade.com/22/49/27/2249275d1dd0a7f849bb75250a781e51.js","fqdn":"directlycascade.com","domain":"directlycascade.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"directlycascade.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 11:12:27 GMT","end":"Tue, 09 Dec 2025 11:12:26 GMT"},"fingerprint":{"sha1":"76:17:4A:20:73:64:94:52:3B:6A:50:E2:7C:F7:F5:73:52:38:47:A4","sha256":"66:CD:95:7F:5E:D7:56:27:7A:6F:3B:80:CB:84:DC:89:A0:F0:BB:44:49:55:B4:81:76:24:2E:38:E3:FC:78:29"}}},"request":{"raw":"GET /22/49/27/2249275d1dd0a7f849bb75250a781e51.js HTTP/1.1\r\nHost: directlycascade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Thu, 16 Oct 2025 19:29:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 46836\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: directlycascade.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3c7c627dc8fc4b21e923f59461e66397\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124527,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"beb88961eca59faf64cf8023a050186a","sha1":"e2f4a2c62248748ac6e9e8e3e74b1388473f5c82","sha256":"7f3e4a466c7e681244f52adbfbbaa925807a0582bd8d5f127d7ba9acf4df4d61","sha512":"21cb54a646f67a07dd45836e6ca7c100c59513e9527c59b2e402f83edc0d3874a7e5fc95acc527f341dff94f206c8f971214568fe69b1eef5201d7ce4e1ae5b5","ssdeep":"1536:956doHMFHl2/7YTFMNImK2Ck31Cp9mWUEiTY/j/cNcb0KLfgtrkO4firsLXjB:nMMQFebCnis2cb1YyXfirsLN","tlshash":"58c3d9893f41f55f035650ba266f902ef0ae0d119088d5ace647f9f42efa60fe13a674","first_seen":"2025-10-16T17:53:45.188468Z","last_seen":"2025-10-17T01:16:00.128975Z","times_seen":4,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":263,"dns":1,"connect":92,"send":0,"wait":94,"receive":183,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vmuid.com/script.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0","fqdn":"vmuid.com","domain":"vmuid.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vmuid.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Sep 2025 01:59:37 GMT","end":"Mon, 15 Dec 2025 01:59:36 GMT"},"fingerprint":{"sha1":"84:BD:C5:EF:9D:1D:34:8C:A0:22:2D:D2:FB:A2:D3:F5:74:5F:7A:90","sha256":"30:7E:44:EB:16:94:91:A3:8A:D6:C1:32:D3:2D:D0:B9:A7:40:77:14:44:AB:8F:B5:EE:45:E6:8B:43:50:B5:55"}}},"request":{"raw":"GET /script.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0 HTTP/1.1\r\nHost: vmuid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 16 Oct 2025 19:29:30 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 10178\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10178,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10178), with no line terminators","md5":"dedd352338543b137f608adc8d0d4aa8","sha1":"100edb4e8fef9b6da043d51135077e68d2a61b22","sha256":"b338a91ba1d2ab7c3a7a0dd659426f5ffa4cd699be38e2bed5075c4d3e773a48","sha512":"e2fab4d95d5baa013a7c248945156524478341282dcffc462fb2de318f55ba29dcafba0db3abcfb6399c6164f6f630f06d48a7323b73f8ea05d5978cd60a4c5c","ssdeep":"192:ATn+ip4qxJ/gzuvu3fo8idwqnOqgStYc1qRP44+PHlCXXZE7904AxF:YbRJYz3oe+3tYGGx+NGXZCAn","tlshash":"2b22b5c9b2d2f06443d77161942f2007f23b2869b54dc498eb66e8d3bcb045ea227f79","first_seen":"2024-01-26T05:18:07Z","last_seen":"2025-12-29T12:17:25.567723Z","times_seen":3656,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":87,"dns":1,"connect":33,"send":0,"wait":33,"receive":1,"ssl":73},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"vmuid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-content/s/2018/08/Logo-Meu-Mundo-Gay-1.jpg","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-content/s/2018/08/Logo-Meu-Mundo-Gay-1.jpg HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:30 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:30 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=azHWUxC7un7m8g0PsKRtiqHSEP6OKrPvLenv%2BEe2nfwikzhEgr7MJ6YWurwAEI0Ai1vSeP2IUr53PddnjgaSEvdiAEzx2NURydwJjviVdvQPrdSLQQ%3D%3D\"}]}\r\ncf-ray: 98f9f727481956a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46362,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-content/themes/sahifa/js/tie-scripts.js","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:30.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-content/themes/sahifa/js/tie-scripts.js HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 19:29:31 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:31 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EP7pE7%2FXnZrtLWBS3sVKPV5i8NfPtFhyE5TX1dbz9xziCsz%2By5WyLOdJeaC2QLL64kHiEVgd6a%2BG5jfn5tKU5X5fB%2BDXhUaiufmBEy9nOBv3zgyilA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98f9f727582656a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73996,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20143), with CRLF line terminators","md5":"394be3d385d1be0cf8a679cd27731006","sha1":"91f8c7941a6bb49ecc451eb52cefcf7afc6f29be","sha256":"8c31cc40205bb377f16f2958ebbd176bd735a6ddbcb0b6b575d26e3771fabfd7","sha512":"e506cffa47243466b058fba3f78248c431c856a4fcd67e05dd8e20475b0996f22305d4e2c519ef47ce18a0ea3f7af205a57179af3ab697a2235e51acc1edd474","ssdeep":"1536:14SU6lR/KiCKrWypVHTky/JqcV6QPW0JwaD5YhzJv1Um/TlyXqUIS+kIg+sih3f7:14SU6lR/K4wh5","tlshash":"e9730849b301b175d9e722ad743f4209b576ca22a407a57cf1b8c1d87cb0a451bb3eee","first_seen":"2025-08-19T06:33:45.793493Z","last_seen":"2025-10-19T21:38:17.604071Z","times_seen":6,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-content/themes/sahifa/images/patterns/body-bg7.png","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:31.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-content/themes/sahifa/images/patterns/body-bg7.png HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/wp-content/themes/sahifa/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 19:29:31 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KjrKTSXAFT9FhlP%2B%2BnSyQz3Vmfc6lWXuQvArJ2T9MESyda8buRv6vF5mHEk1QikI3O7qBLi0%2BT58RZu1WKrBXfBzM1BFZHsEkpzNqYwuf1lYkhS3kg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: MISS\r\nlast-modified: Thu, 16 Oct 2025 19:29:31 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98f9f7298cfe56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 264 x 264, 8-bit colormap, non-interlaced","md5":"b40e39a8e3747e74f4dfcf6d88ecc535","sha1":"17e825efe06f1d04a8a3c398329d51b0ddf14b53","sha256":"7a6ac6e588a725241e6f43feaad46fb36de9682576f5f29c570edc3ec5247477","sha512":"032145c7a2b9dde541f1e81c5f6025a66bd443a35651db7d6d861544b1b1716f0610cd8e17cac800f8f4d778f53fbcfa1584c41dbc14d0a41f2d212fc3a91775","ssdeep":"384:oJ+wEzLHUY0t184pZJf7HOSWovDwLL2gdom2jmnenf48kkFYIBO4eX0161:oMLUYG84JfCSn4Lbom25f/PYIBOF0+","tlshash":"3492d027c1965bfc8fa75dcf4b0ef787a425065b945f8e59294960a0cd62c3384b20e5","first_seen":"2023-05-01T15:12:34Z","last_seen":"2026-04-01T17:21:21.10158Z","times_seen":3062,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meumundogay.sexoral.net/wp-content/s/2018/08/Logo-Meu-Mundo-Gay-1.jpg","fqdn":"meumundogay.sexoral.net","domain":"sexoral.net","tld":"net"},"ip":{"addr":"104.21.33.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/","date":"2025-10-16T19:29:31.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexoral.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 01:34:09 GMT","end":"Fri, 19 Dec 2025 02:34:07 GMT"},"fingerprint":{"sha1":"32:E6:AA:12:8E:D3:BF:A3:74:D5:61:F7:CE:B4:7A:8E:2C:D7:DE:C2","sha256":"0E:4F:17:10:E8:5D:71:A7:B7:F8:3C:DC:FA:C1:3F:7A:D2:7A:E5:E3:FC:52:67:2E:79:BB:C6:31:85:51:95:B4"}}},"request":{"raw":"GET /wp-content/s/2018/08/Logo-Meu-Mundo-Gay-1.jpg HTTP/1.1\r\nHost: meumundogay.sexoral.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meumundogay.sexoral.net/hairyandraw-ing-time-dax-librastic-and-harper-davis/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 19:29:31 GMT\r\ncontent-type: image/jpeg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjGjRRmRQutUDq5yq7e8aUNXXeAmn48b%2BOk5n9fWzl58JNlTTuTPzv1gL9i%2F8gsTrD3eUZZuaqtAuOz2on1S5zKE8%2FQI5yQUk2Qr7cqu%2Bwf1e7wirg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\nage: 0\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 16 Oct 2025 19:29:30 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98f9f7298cff56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46362,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}