{"report_id":"ab8b5ec2-363c-43f8-ab9b-930692232024","version":6,"status":"done","tags":[],"date":"2025-10-06T15:35:41Z","url":{"schema":"http","addr":"redporn.me/","fqdn":"redporn.me","domain":"redporn.me","tld":"me"},"ip":{"addr":"104.21.34.12","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"redporn.me/","fqdn":"redporn.me","domain":"redporn.me","tld":"me"},"title":"RedPorn: Free Porn Tube, XXX Videos \u0026 Movies"},"submit":{"url":{"schema":"http","addr":"redporn.me/","fqdn":"redporn.me","domain":"redporn.me","tld":"me"},"ip":{"addr":"104.21.34.12","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-10T15:35:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"playhubconnect.com","ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-25","domain_rank":18094,"first_seen":"2024-10-01T12:19:44Z","last_seen":"2025-10-06T03:15:20.384485Z","alert_count":4,"request_count":4,"received_data":2856940,"sent_data":2060,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"go.cdnjs.work","ip":{"addr":"172.66.47.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-11-17","domain_rank":1408468,"first_seen":"2022-07-26T16:50:53Z","last_seen":"2025-08-23T15:11:20.83873Z","alert_count":0,"request_count":3,"received_data":8513,"sent_data":1342,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.addtoany.com","ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-03-10","domain_rank":28267,"first_seen":"2012-05-21T12:58:18Z","last_seen":"2025-10-05T23:01:47.611399Z","alert_count":0,"request_count":11,"received_data":91217,"sent_data":5084,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"clickadu.qwerty24.net","ip":{"addr":"172.67.143.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-09","domain_rank":1492245,"first_seen":"2025-01-06T20:32:00.635737Z","last_seen":"2025-10-06T07:11:38.400003Z","alert_count":0,"request_count":5,"received_data":3631,"sent_data":2375,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sacwumsf.com","ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-01-20","domain_rank":43042,"first_seen":"2025-06-22T21:24:33.672404Z","last_seen":"2025-09-30T13:04:54.852727Z","alert_count":0,"request_count":5,"received_data":7510,"sent_data":2666,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.sacwumsf.com","ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-01-20","domain_rank":1693819,"first_seen":"2025-06-23T06:33:06.200958Z","last_seen":"2025-09-30T13:04:54.853544Z","alert_count":0,"request_count":4,"received_data":2856022,"sent_data":2104,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mc.yandex.com","ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-24","domain_rank":45494,"first_seen":"2014-03-01T13:57:52Z","last_seen":"2025-10-06T04:07:08.199179Z","alert_count":35,"request_count":35,"received_data":50336,"sent_data":37235,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aa.qwerty24.net","ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-09","domain_rank":1388587,"first_seen":"2022-08-08T01:14:39Z","last_seen":"2025-10-06T07:11:38.414806Z","alert_count":0,"request_count":15,"received_data":122486,"sent_data":6949,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.bncloudfl.com","ip":{"addr":"172.67.214.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-20","domain_rank":67815,"first_seen":"2021-06-01T15:03:04Z","last_seen":"2025-10-06T07:11:37.545545Z","alert_count":0,"request_count":1,"received_data":499898,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"redporn.me","ip":{"addr":"172.67.195.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-21","domain_rank":1346802,"first_seen":"2025-10-06T15:35:45.053782Z","last_seen":"2025-10-06T15:35:45.053782Z","alert_count":0,"request_count":6,"received_data":296974,"sent_data":2881,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"evocdn.net","ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-10-24","domain_rank":61343,"first_seen":"2021-10-24T03:14:27Z","last_seen":"2025-10-06T07:11:37.74422Z","alert_count":0,"request_count":41,"received_data":504426,"sent_data":19766,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"divisiondrearilyunfiled.com","ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2024-05-21","domain_rank":53089,"first_seen":"2024-08-08T10:52:35Z","last_seen":"2025-10-06T07:11:37.545536Z","alert_count":0,"request_count":25,"received_data":887521,"sent_data":22396,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"go.redporn.me","ip":{"addr":"172.67.195.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-21","domain_rank":0,"first_seen":"2025-10-06T15:35:45.040261Z","last_seen":"2025-10-06T15:35:45.040261Z","alert_count":0,"request_count":2,"received_data":4503,"sent_data":937,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.2.18","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aa.beeg.porn","ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-07-13","domain_rank":1476060,"first_seen":"2024-03-03T12:23:43Z","last_seen":"2025-10-06T07:11:38.333027Z","alert_count":0,"request_count":10,"received_data":52631,"sent_data":4885,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mc.webvisor.org","ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2009-08-25","domain_rank":99131,"first_seen":"2017-08-16T02:40:17Z","last_seen":"2025-10-06T02:38:05.780031Z","alert_count":0,"request_count":6,"received_data":1511382,"sent_data":2521,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-05T22:12:07.052692Z","alert_count":0,"request_count":1,"received_data":423113,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"metrics.cdnjs.work","ip":{"addr":"104.21.68.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-11-17","domain_rank":1448353,"first_seen":"2023-04-02T12:29:57Z","last_seen":"2025-08-23T15:11:21.055336Z","alert_count":0,"request_count":1,"received_data":841,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"go.cdnjs.work/tube/extra.js","fqdn":"go.cdnjs.work","domain":"cdnjs.work","tld":"work"},"ip":{"addr":"172.66.47.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3176730df87ccba0e2576f817781da0c","sha1":"633fb8b024c19e560a77e680e4e97df753defa8a","sha256":"99d3b6546bd6081a9965e5af5157b697b34bd148f3b2b4ae73bf13b2ceb1d964","sha512":"39129d5fa6ac27e6c3c477022950fc43050703d1e576a2b39128fe70d3e3a36609ea0dc669036eb53ddc412bab3a824f25c8339a1423284231303ae4a1c2dcbd","ssdeep":"","tlshash":"c5e0d82a0ce5c86995255cc75375f124f5e2383b1d91f009abd9c89d5b60ef50844d95","size":369,"data":"","first_seen":"2025-10-06T15:35:52.017422Z","last_seen":"2026-06-13T13:33:32.318892Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d56c716dd226c2666c2ce9876d615203","sha1":"45231a1fad548b7fdbfd8036de3bb23f616c9998","sha256":"ce144ebd3542bd1fd1c5b5043554b5b97f6f2712314187bac78ec5ee30678dd2","sha512":"ae1fd459f873714df5c9b66d48ddecd956e77b7ee5888b20153cf7002a855397d57fa3000346edf099e6cf4ec2a1c6f39e9ebf87a2509b91701d73e172f60596","ssdeep":"192:oHcJARhLDVLiHwwZM2xdMrmutAo2iMIwGbwJaEgeHL9TI+:oeAjoHwW/ODt12iwGbwULmO+","tlshash":"6ad117797353baa603e544d280ff5960c47a5a247141c498f5edac8338a66c5e2b1f3f","size":6634,"data":"","first_seen":"2025-03-26T00:10:13.558293Z","last_seen":"2025-11-03T11:18:26.160894Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de863ff71cda9966f88a591c240af7ff","sha1":"f1a3330a009ab9bed8a42d4d53e59765c26dc917","sha256":"e9fe70a95c20aea990ca96fa135fa1e6aab252367ff567ab88973ddc40a078f6","sha512":"285b472b18129b3efe3b4e4e158206f3982725aba495d060e028a4004eceffe7621029f0dbd5a94e6a8c9d44bf8833944b5293193d1645df698c9a27c7ed3a78","ssdeep":"","tlshash":"e98004544541c0d434444141511d400014505533044cd141304cf0430f0544404340c5","size":36,"data":"","first_seen":"2025-03-29T16:56:08.535683Z","last_seen":"2026-05-20T20:05:38.068814Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_msh_1\u0026jp=_cluojxsvlbncocbnavsmse\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=CuJcXOJaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=6YOiMSXaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=7715152324938240\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"923ac785bb6d9579608e5a16b141773a","sha1":"ee78aa91de9b9c4312e3b3655b5a714dfaa6ba6e","sha256":"7da451b39795919fc818077fa036832d64261b8c829a0fed49e01290d7f6f161","sha512":"480ba270cd017759d387641b0599bd75e737fba55d4958f7f41212a3b319c65c779a25166654725fef99dfa1d0c2564ea6ad847b9390f9d87c583a54f943ef9e","ssdeep":"","tlshash":"e7f054616a41c5c840d2170c5efd2bc20ac4b304993710bb1728054cd284d371b9750b","size":489,"data":"","first_seen":"2025-10-06T15:35:52.086715Z","last_seen":"2025-10-06T15:35:52.086715Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/bn.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a99b6ae09058e72bb15a7e541194fe23","sha1":"9bc1863d3ecb11e580aa119ed2366c251a1f01b6","sha256":"50f0b51e2005ee15e4ee9baddd4672b994a42994719717e513f92634b3b92a02","sha512":"8026616a897ffe0929c64750b76298f602a48b3f70ba66f9f298881d8f6843dd29643a64fed71ecda57accac31fd5f8211535253e775999dbb3e831481481f95","ssdeep":"1536:eZNgud5QeZYZKHURgeYJEJc+iq5A1E1PCGGOc7d07Db0gyylZE8kO1i2BaOFBA4j:eZR5QeZ3hoOqk8PDI8Xt7Tk3d0x","tlshash":"f5f384ceafd664356153e329093f6931edbadcd2e1df0113e837d1a41a68805e332b69","size":165817,"data":"","first_seen":"2025-10-06T14:48:53.289351Z","last_seen":"2025-10-07T04:44:54.485701Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redporn.me/","fqdn":"redporn.me","domain":"redporn.me","tld":"me"},"ip":{"addr":"172.67.195.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0390fa918baf59995ea74c46a5e826be","sha1":"73d07c27be49c694bc800e4e42a7faf787d68a92","sha256":"5f026d7c22f4b49c778e6587772c30b4c9a76ddd2952e587de8cd9aa34c3df74","sha512":"a6cf6ed4581c3928ea39afeaad65eddf97cb54155988652c62be330f0e61d222beb8fada7ffbfe1bb18c4ad56b171cc5f6f5da844565f469fe0d7d1b43c7acdb","ssdeep":"384:oyqFg2kNdcC9J6co91qwLcI6KgkixbdjqBFPvAxOo2SLoOWV0kosquCmMEPbTEP5:olFg2kc8scaTLcI6Kgxb9qjPvAvLkose","tlshash":"c782a7be791561b32d9330b0591f324a577222735e82d812b16de4909f3cc9e6a36eec","size":18033,"data":"","first_seen":"2025-10-06T15:35:52.200866Z","last_seen":"2025-10-06T15:35:52.200866Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/foot.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecdd125b787b38a8665818be133336c1","sha1":"c6ae3f4eeb1e0417b0d0d24c3c875c2ea51333a8","sha256":"f0d824e5dd12c91d12dafcc7f76c0d3a0e6978c2138f730448f480c0f8cfe26f","sha512":"d4a1beecf39c7c23e1a5c254f9473141bcb1717cb6606e434bed7ecc6d4598af5e35aed178bac792076bec878f0944077d44904916aa2dd71412d932475630de","ssdeep":"","tlshash":"1431e7594c2700705cf7a37c7a6a6509fa73b5b37d42e6007a0c96218ff9e188966fdc","size":1866,"data":"","first_seen":"2025-03-29T16:56:08.545439Z","last_seen":"2026-05-14T19:17:03.460635Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/desktop/?type=tube_index","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0df4d1a43caccaa1bd028eb7b67391f","sha1":"64c46a61ff77a7167767f37eb848050fd8f96152","sha256":"510ee988d816eb4055cce473c643768a8c7192ec40e3847be5a7af8b10a72819","sha512":"c525b320920a36112fcf43c6d8c8d516f39ad4184aabb2c49a6015a48390d531b3cab9fe5efe458c36aebe342a71567b3924092cfea000f00632e878dd655d06","ssdeep":"","tlshash":"a4518548f89ba8b3661fe13c3a7f554479305c438408d6a1b51c89049fc285b82bfbfc","size":2996,"data":"","first_seen":"2024-06-11T20:33:33Z","last_seen":"2026-05-14T19:17:03.564026Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fb72ce77e0d06ebd7397afd1cf7eae75","sha1":"2d2f1ae00996c0c64506771a46f4c6b7524dd645","sha256":"2f4fa335f61fc68e72092f6b1a0451d27cdd9be30ed554bc9a18f7c01c8be444","sha512":"23e5ec22c64d81ec17233afe70d18bffdc71b381c1e4e57cc4c96d0a4b120071ec8e021cbabd2a01b0c1fc45124c20c50f939bf35aee21a52b2d45790d7395c4","ssdeep":"","tlshash":"f250000c00c0c00c0000000300000003000c03300000030030003033000c0c00000000","size":11,"data":"","first_seen":"2025-03-26T00:10:13.553146Z","last_seen":"2025-11-03T11:18:26.164306Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacwumsf.com/en/oqwobr?jx=3\u0026ws=_kqerjlzqftlvsxcjvcvqpq\u0026uar=1\u0026id=1975997\u0026vvwqiipgh=msum\u0026nrtb=951997\u0026gwarotu=jmlv\u0026pvk=rp\u0026rehjpa=om","fqdn":"sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f626dd25ac65e645f62b0d1ba21011d3","sha1":"42cecfb573870b585ac6d21cc00a78dec382d3aa","sha256":"3d30b2242136a91e529493d44efb435c6d4b1430eb86bae0dc85ffaaa7447134","sha512":"74d31e1b08c6d952ec7a873855b8fa7461cce125d090162edb8ecd2cbc0595f8d8e78f5e95c3571a306a222a831e78a647362bcae78a5e28e8ed3b567fa32238","ssdeep":"","tlshash":"9ef0555f72c694faa821e30da3ab998469f0f47a5e131467badc5c50453e0e1c59f381","size":465,"data":"","first_seen":"2025-10-06T15:35:52.16799Z","last_seen":"2025-10-06T15:35:52.16799Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/x.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"885be296b72c01b844a2addc97be03db","sha1":"0696c38c7746aa5c930b4a679282a156fc69784f","sha256":"122ed4db2019348aef89a605e3eb79c6004f5727f16144dc46b61f31ee131764","sha512":"d498e95238c70940c277188c7aba66f260e721daeb220386a80424d5bd4641854019f6c797fb920ed8ebb9ce0b14d2e9b04689671cb2d492edbaa88e18d6256e","ssdeep":"","tlshash":"6ee0c28125115a418d230367db2f104f7332707a715c14d662ad99fde4d506e885bb13","size":297,"data":"","first_seen":"2023-09-17T09:47:27Z","last_seen":"2026-06-15T22:49:28.565161Z","times_seen":13771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba419a0f92f4a89df14179a6bf4370ed","sha1":"093bf7a549553a8beaf209f5f2bcacfb9a798cb6","sha256":"109ce4e4004068e86e24ed810841c23c45fafe0c3fece9c7ca99f09702015fd5","sha512":"6f928138ec712c2bdfec1b694dffe321a48f1a4d63f8da3a7159d46bebc35382280d8cd7495ba10615d38bb4527b2efd0a76dea8950b5d3b94f38ffb24b47a08","ssdeep":"","tlshash":"0121e4d25190427606f7022aad267364513e4b5f2d4b80d7532d8a52301db9fe7b6dc5","size":1164,"data":"","first_seen":"2025-05-14T00:26:22.006045Z","last_seen":"2026-01-17T11:40:22.180873Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacwumsf.com/en/oqwobr?sy=476633\u0026wmr=497504\u0026kubm=224581\u0026vpzf=989552\u0026id=1975997\u0026zp=_pnaczfjbjkcscmcagabcnp\u0026mly=1\u0026hx=qnnd\u0026ag=782171\u0026oyrk=149224\u0026rch=604416\u0026tksxec=705443\u0026an=3","fqdn":"sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6e451c6c559c4f8b3bf49831f4d1c4d","sha1":"bcf77aaedc61a4a9f78e983837df249703af62dd","sha256":"715f6f7a2e20ac1889e9a94d01b384eac2cc96eb3eb37f13cc188800da252179","sha512":"c1a8459e18d521e83f72329c459d3b9a1fd1eb604e2bddb5c98c94d99d52db8186132890337283058d9a3499b1474563ffe4639fbdb4a1a841c1b9a981b8c6dd","ssdeep":"","tlshash":"f7f0dcf179e7c0b0e69618c35e62ac994985b93c0f03d1129c4704c1a3ea9004c92d10","size":465,"data":"","first_seen":"2025-10-06T15:35:52.083556Z","last_seen":"2025-10-06T15:35:52.083556Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_ocz_1\u0026jp=_clslthafwjhaawtanzstpz\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=aC71vf6aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=hEYad4uaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=7715152324953600\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd4c35221c5c3208c22c672a36850239","sha1":"e1c89ee71329c6f2e153d93b05f817297243434a","sha256":"4f15b80027e195313798cb4647978a9702f26be976381c6890ab1f2643967623","sha512":"d37fd9a71711de0677535237f659710a52f6e6cd2e9f9d24d4e2076f04eafdaf8fb6ff99aad8d253ea53b9554fd93913ced82851782c7784cef3b63d66b3a1e3","ssdeep":"96:6IrM2BKk/kMM2BKk/w/M2BKk/0LKM2BKk/nLs4w336VQn6o:6I9BKfMBK55BKzLCBKSa336Vdo","tlshash":"f6d14c307a84c553209f6c43c2bedd7f548457f51c9a833c8e674aa7d623a2bc0db80a","size":6439,"data":"","first_seen":"2025-10-06T15:35:52.10641Z","last_seen":"2025-10-06T15:35:52.10641Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/foot.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecdd125b787b38a8665818be133336c1","sha1":"c6ae3f4eeb1e0417b0d0d24c3c875c2ea51333a8","sha256":"f0d824e5dd12c91d12dafcc7f76c0d3a0e6978c2138f730448f480c0f8cfe26f","sha512":"d4a1beecf39c7c23e1a5c254f9473141bcb1717cb6606e434bed7ecc6d4598af5e35aed178bac792076bec878f0944077d44904916aa2dd71412d932475630de","ssdeep":"","tlshash":"1431e7594c2700705cf7a37c7a6a6509fa73b5b37d42e6007a0c96218ff9e188966fdc","size":1866,"data":"","first_seen":"2025-03-29T16:56:08.545439Z","last_seen":"2026-05-14T19:17:03.460635Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/desktop/?type=tube_index","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58a2229561601e46c55162ecb159d2f3","sha1":"712098a64b8ac9adc5ea9d888427a385cc596dbf","sha256":"ff8b03e3de95228fb4b3c8d4440206df67aa7a38562f97cf804f9577e889e21c","sha512":"077fe8732c3a7730c500687dfcfa1248367a3c4aa57a1316ebdfb9d93bab25eb270b2f35d1bef10eddb9909a229cd39f87d876b4b4575214cda41559e642f400","ssdeep":"96:ritOFsPiL8JzyCyYoqF2NtL6tIi7Cyhe1AGERag8Z1ZzYqNA+pJp6Ka4e:COqiL81yCyYos2Nh637CCe1AGqag8ZEH","tlshash":"c6c1fd1dacfb10687263b07e5fbf50413860e9170606dd027d2cd3259f81928cab6afd","size":5639,"data":"","first_seen":"2025-03-29T16:56:08.539928Z","last_seen":"2026-01-17T13:48:46.845439Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/snapchat.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a4d847b67e9e40969a36f4ae9ee3432","sha1":"b635361780b4523d7089ea29b94d217e5e7b8c12","sha256":"48c4b36e799293f5c7d58b3a6fccfa0c9418c8a98f8d3f0731ee00b63f20c403","sha512":"95d312f519be751a736dfcde05824e5a94b373d00c25e91839348d5f407f966e44fd50ab8114423f477e07af4695cdd32d3aa79d12b69fd5f83bba7e6d097ba5","ssdeep":"","tlshash":"be2141cb324446dc98c2e22ec75bc88d531eb06c70bad9c08d6fc79c544e549f706820","size":1367,"data":"","first_seen":"2024-05-21T04:01:04Z","last_seen":"2026-06-14T19:09:08.367307Z","times_seen":288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/mobile/?type=tube_index","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a48d7612fe6021ee7fc650c5dc1de945","sha1":"27301392e20b8366cba25f0229ce2ae17392c8d9","sha256":"f6d3507f63a5b4124602eaec3bb830dbb2e7c2c5361ececdf5b73bf37d9799bf","sha512":"87b980493d33ade40f6c72dd084aa8e65aa4deae49c16f9662cd865259321db9fc2ea21b479080f680a0a50ea3b9556e717a033f9364ad941824a0744c53849d","ssdeep":"","tlshash":"4d517488f89ba8b3661fe16c397b5544793458438409d6a1b91c89049fc285b85bfbfc","size":2939,"data":"","first_seen":"2024-06-11T20:33:33Z","last_seen":"2025-12-05T23:43:00.981167Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d56c716dd226c2666c2ce9876d615203","sha1":"45231a1fad548b7fdbfd8036de3bb23f616c9998","sha256":"ce144ebd3542bd1fd1c5b5043554b5b97f6f2712314187bac78ec5ee30678dd2","sha512":"ae1fd459f873714df5c9b66d48ddecd956e77b7ee5888b20153cf7002a855397d57fa3000346edf099e6cf4ec2a1c6f39e9ebf87a2509b91701d73e172f60596","ssdeep":"192:oHcJARhLDVLiHwwZM2xdMrmutAo2iMIwGbwJaEgeHL9TI+:oeAjoHwW/ODt12iwGbwULmO+","tlshash":"6ad117797353baa603e544d280ff5960c47a5a247141c498f5edac8338a66c5e2b1f3f","size":6634,"data":"","first_seen":"2025-03-26T00:10:13.558293Z","last_seen":"2025-11-03T11:18:26.160894Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-TTRS8J3R9V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0869eb0651b2d41eb300ac8bf68f0168","sha1":"b09145c51876ccfeda728b41839853cb05cb2fcd","sha256":"2b4a29bf95da9323dc3b1c50a157b49947c2a5110f6cdb5ec7c584c18be04b88","sha512":"c0cac3e1d0e7552314ec3a64663699f1c3f2a4f7130b9737f54b31d9dc04be3cd22a8b3715ec4e7ee622844a4360baf0ac307f8de1a92c1fea4d90f2db14c92b","ssdeep":"6144:xBzZTP5DyYvRC1cZwtgk6dSLd6gZg1X+6RVt:/9bdtvIcZwhGt","tlshash":"57941ace73d674665396e478903f018ba5bb28a2f44cc899f189cce42d74a9a4137f7c","size":422509,"data":"","first_seen":"2025-10-06T15:35:52.103059Z","last_seen":"2025-10-06T15:35:52.103059Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/foot.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecdd125b787b38a8665818be133336c1","sha1":"c6ae3f4eeb1e0417b0d0d24c3c875c2ea51333a8","sha256":"f0d824e5dd12c91d12dafcc7f76c0d3a0e6978c2138f730448f480c0f8cfe26f","sha512":"d4a1beecf39c7c23e1a5c254f9473141bcb1717cb6606e434bed7ecc6d4598af5e35aed178bac792076bec878f0944077d44904916aa2dd71412d932475630de","ssdeep":"","tlshash":"1431e7594c2700705cf7a37c7a6a6509fa73b5b37d42e6007a0c96218ff9e188966fdc","size":1866,"data":"","first_seen":"2025-03-29T16:56:08.545439Z","last_seen":"2026-05-14T19:17:03.460635Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/reddit.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"408cc755e613b4f00fbe10d7411ed087","sha1":"14341990ed687477b3addbdd1a3b50ae8a98589b","sha256":"68ed9b82b62d45cf5d12587a7e9566a4ddeb94d69bcb225e9e3c7268c76b3cbb","sha512":"713379c452034896501703ce09391f7ddfb3b0053276ff0dd1a499eeb3c99ebed97ce8fd77e4910d962ba4ef4d8f1d23dfe7c51a0b7d0537baabd5be5cf05a01","ssdeep":"","tlshash":"891125fe471c94ec0ea36ae9af168059531fd875359b07b01a6fdbf92543008c407a92","size":893,"data":"","first_seen":"2024-04-16T17:58:32Z","last_seen":"2026-06-14T21:38:20.480656Z","times_seen":3006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fb72ce77e0d06ebd7397afd1cf7eae75","sha1":"2d2f1ae00996c0c64506771a46f4c6b7524dd645","sha256":"2f4fa335f61fc68e72092f6b1a0451d27cdd9be30ed554bc9a18f7c01c8be444","sha512":"23e5ec22c64d81ec17233afe70d18bffdc71b381c1e4e57cc4c96d0a4b120071ec8e021cbabd2a01b0c1fc45124c20c50f939bf35aee21a52b2d45790d7395c4","ssdeep":"","tlshash":"f250000c00c0c00c0000000300000003000c03300000030030003033000c0c00000000","size":11,"data":"","first_seen":"2025-03-26T00:10:13.553146Z","last_seen":"2025-11-03T11:18:26.164306Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/metrika/tag_ww.js","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e58cae18b3ef726b4b1bd099e9f0438","sha1":"5467d148ea0f4585c75c8a43ff13fd0272d47acf","sha256":"4385e1b284b60ab5400677455c34e21d7fe12cec554b822e50a1a05b815d4c84","sha512":"f41609fa97eed07700ec6f8c5a92c5912cfb8f3984f87a2ecaadc6568640cca93fe69fbde242ef76fbf4897521c307d2b6d6253072d3dae7af085e2a21e3ec51","ssdeep":"3072:2WjN+Rla8qz3Oph8msTVdBRQhB35+v5COAH8w6hjWpBF2tSR:2WjN+RB8Opams5dB+z35OS8wMWnFlR","tlshash":"8534e8d976827472937334b4a03f000bb1be6c96f14c8965e186e9d57e389ac9237f6c","size":251054,"data":"","first_seen":"2025-10-03T16:02:45.521856Z","last_seen":"2025-10-13T08:52:45.356463Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/metrika/tag_ww.js","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e58cae18b3ef726b4b1bd099e9f0438","sha1":"5467d148ea0f4585c75c8a43ff13fd0272d47acf","sha256":"4385e1b284b60ab5400677455c34e21d7fe12cec554b822e50a1a05b815d4c84","sha512":"f41609fa97eed07700ec6f8c5a92c5912cfb8f3984f87a2ecaadc6568640cca93fe69fbde242ef76fbf4897521c307d2b6d6253072d3dae7af085e2a21e3ec51","ssdeep":"3072:2WjN+Rla8qz3Oph8msTVdBRQhB35+v5COAH8w6hjWpBF2tSR:2WjN+RB8Opams5dB+z35OS8wMWnFlR","tlshash":"8534e8d976827472937334b4a03f000bb1be6c96f14c8965e186e9d57e389ac9237f6c","size":251054,"data":"","first_seen":"2025-10-03T16:02:45.521856Z","last_seen":"2025-10-13T08:52:45.356463Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redporn.me/","fqdn":"redporn.me","domain":"redporn.me","tld":"me"},"ip":{"addr":"172.67.195.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"48a86b33cc116c5b6f044fd54a250c41","sha1":"ad5cdd9261905635b6edb05abefe3fc8a36a83e3","sha256":"5c275c27801cbe07db520e80fd1d7b2c8be04c026d2b71ee95d08aff6b37bf2d","sha512":"424c7d37ea67ea14a1e9fc98a43db09a27ae3604eb345e0d1ad2ca79b93a0e4c2bb5130bd1cbf8bdad6e1ec85590f1b409630dd21459947897f09aab8aae96d6","ssdeep":"768:V1DVoawsZsteYLo9M1pixbr7hhuxoBYs5oy:bKsZstNo96ixOxoBYs5oy","tlshash":"f4d2a46e69f71c321267703a2baf92cc357084039504ed043eacba845fd8d9295e7bf9","size":29008,"data":"","first_seen":"2025-10-06T15:35:52.210808Z","last_seen":"2025-10-06T15:35:52.210808Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/page.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57b268c32627d8d13671f43be7c47b84","sha1":"0eebe8bc9958922a2a354b4abdca2f4d326f49e9","sha256":"53d16f311b01e5f9b5e7dcb2ec11b11e5ed23e155ed05727a7a42472d608118f","sha512":"72f220c33c49e4cf58f9fdd8d1f56e835e6b7f33c50d0eb754b9e7868f788c9f8705d83f06419f1191b9a528397a5ce6637df84fc232daea844410ed7027ed4a","ssdeep":"","tlshash":"bd61b74b774ea8734a5736bac19fb60f2223331f9c6589048914e4d849bcec6501fa7e","size":3179,"data":"","first_seen":"2025-04-25T03:57:25.57786Z","last_seen":"2026-06-08T22:53:42.709604Z","times_seen":9245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_msh_1\u0026jp=_cluojxsvlbncocbnavsmse\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=CuJcXOJaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=ltFIcAwaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=1241227860635136\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e16645cc5e6f74244dcafa1c8ee8515c","sha1":"d595a0f311a76c4ca8a0ea49e06681638f08f398","sha256":"a265bc641dbda0592da1da381103c6277404538dfef52b0f3c4c9f9869416215","sha512":"67b07b9593e79f171617befc4cd99f56c78bf7e8cb9a403e37b7261a27f4025b25f6623993c4c4d9e1e1d5f032422b79c32f1bfffd37b12847a33dec5d639025","ssdeep":"96:VSLGX2ea3+8H/ITv0GX2ea3+8H/I0GX2ea3+8H/IiGX2ea3+8H/I1G7FdjGzWJo:g6X8HgTvDX8HgDX8HglX8HgI7FdSEo","tlshash":"6bd11bc0720fb84a941254be5da97e340eb2ced51fcec376b985ec56883882c4922d2f","size":6518,"data":"","first_seen":"2025-10-06T15:35:52.088449Z","last_seen":"2025-10-06T15:35:52.088449Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/foot.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecdd125b787b38a8665818be133336c1","sha1":"c6ae3f4eeb1e0417b0d0d24c3c875c2ea51333a8","sha256":"f0d824e5dd12c91d12dafcc7f76c0d3a0e6978c2138f730448f480c0f8cfe26f","sha512":"d4a1beecf39c7c23e1a5c254f9473141bcb1717cb6606e434bed7ecc6d4598af5e35aed178bac792076bec878f0944077d44904916aa2dd71412d932475630de","ssdeep":"","tlshash":"1431e7594c2700705cf7a37c7a6a6509fa73b5b37d42e6007a0c96218ff9e188966fdc","size":1866,"data":"","first_seen":"2025-03-29T16:56:08.545439Z","last_seen":"2026-05-14T19:17:03.460635Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/desktop/?type=tube_index","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ac6503000310c70b039f977c18372f9","sha1":"e1b5ceaaa218ee80b4f755dcbe6c6e4203a52ba8","sha256":"431e46812a29046097bc7a603f51061684f2c35728b0f7d8801495b113d60506","sha512":"0f68566030089c2034562ebd6ac294596e21aefb36930a8c80a16fb2749422a407ba7276b30e00d02981a65a2ea930208bbaf3fabcfd9dc87b7590be37cb622b","ssdeep":"192:S8RwieqS6e6MqQ4AwYW8nCK/HkaB2W2wlSDzdfJ29g/9N9kx98rDWI:S8JSiMq0CeHghiS9fJ2m/P6xyrDX","tlshash":"8cf1400832e4b62ad447f0b2b45fcd49b638b5de16c641056a0ec4e9da74838db36cec","size":7737,"data":"","first_seen":"2024-06-11T20:33:33Z","last_seen":"2026-01-17T13:48:46.846403Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/a2a.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"baf0595a19bdc7f7497b74731d2166c4","sha1":"fd5714384c52fc0338083574434d12328313896c","sha256":"3dab93242ee573bbcfc22c9d15acd47794e500ed44e6bd48a35400b39d65aa43","sha512":"da0e15a709b3d043e8cd9e4f97cf70d8c1addc2a7d90b6bb11d71cd72aba9133e5b9388528691cf6a354a6aaa346045f64d82b947883057471e1f1a2fdbd1901","ssdeep":"","tlshash":"74c01291501575418c1342fb475e500b167120bd015c14ca36a881f9595613f8c42fc3","size":182,"data":"","first_seen":"2023-03-08T14:25:33Z","last_seen":"2026-06-15T22:56:28.439444Z","times_seen":16703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f18400998413e6ea8bb1acc1f6cdad38","sha1":"4d05dfdfdf634d9f7c7895e77377d3dbc935f7b5","sha256":"a53270754a96dd8c013b65c83058b1362a332b8eef704b2b8d1e38a0bfaa1b1d","sha512":"1651a7018ba9c12cef7f7ca5855d645c9879e33e3667e63318b60a98ddb58283321b191aa5381f6c39e5ea6e882887bb7fcb5e22120473f15910661db861a3e2","ssdeep":"","tlshash":"238000e88a02c0ec38888082a22a820828a0a823888ce282b08cf0820f02880003a0ca","size":36,"data":"","first_seen":"2025-06-06T07:37:21.346056Z","last_seen":"2025-12-05T23:43:00.981988Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fb72ce77e0d06ebd7397afd1cf7eae75","sha1":"2d2f1ae00996c0c64506771a46f4c6b7524dd645","sha256":"2f4fa335f61fc68e72092f6b1a0451d27cdd9be30ed554bc9a18f7c01c8be444","sha512":"23e5ec22c64d81ec17233afe70d18bffdc71b381c1e4e57cc4c96d0a4b120071ec8e021cbabd2a01b0c1fc45124c20c50f939bf35aee21a52b2d45790d7395c4","ssdeep":"","tlshash":"f250000c00c0c00c0000000300000003000c03300000030030003033000c0c00000000","size":11,"data":"","first_seen":"2025-03-26T00:10:13.553146Z","last_seen":"2025-11-03T11:18:26.164306Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_kbc_1\u0026jp=_cltfbeyidprfsyizzdrkqa\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=2pzJRY5aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=U8iaaGwaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=8559577255058944\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a7802136b3dde29d128b083d9ee8a11","sha1":"1778c42fca564ab3f1df1e6a688ed2a6021dd788","sha256":"a4b902ecd9533ec851bc9630ef03e2b064b487bbb8f85f807e54d81bc799976d","sha512":"fed453f71751cf3e89bcf8397f28b37fbbd5564776c2ec692cf02b906de9128d0b43ae52b3d8f6f189bc00082d7ee39297c5af3f228122813bda2714ef0db0dc","ssdeep":"","tlshash":"85f0dc981d71d898a7c1b82f16a35d4b303471e52e5b782f342102c1402c0bbd4d7cc3","size":489,"data":"","first_seen":"2025-10-06T15:35:52.19152Z","last_seen":"2025-10-06T15:35:52.19152Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/metrika/tag_ww.js","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e58cae18b3ef726b4b1bd099e9f0438","sha1":"5467d148ea0f4585c75c8a43ff13fd0272d47acf","sha256":"4385e1b284b60ab5400677455c34e21d7fe12cec554b822e50a1a05b815d4c84","sha512":"f41609fa97eed07700ec6f8c5a92c5912cfb8f3984f87a2ecaadc6568640cca93fe69fbde242ef76fbf4897521c307d2b6d6253072d3dae7af085e2a21e3ec51","ssdeep":"3072:2WjN+Rla8qz3Oph8msTVdBRQhB35+v5COAH8w6hjWpBF2tSR:2WjN+RB8Opams5dB+z35OS8wMWnFlR","tlshash":"8534e8d976827472937334b4a03f000bb1be6c96f14c8965e186e9d57e389ac9237f6c","size":251054,"data":"","first_seen":"2025-10-03T16:02:45.521856Z","last_seen":"2025-10-13T08:52:45.356463Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_kbc_1\u0026jp=_cltfbeyidprfsyizzdrkqa\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=2pzJRY5aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=IpNeSkMaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=8559577255051264\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dc56ab04e5eb198e84bd2b1500ddffa","sha1":"70117d44eff008ed91ee23f27649681968dc6e55","sha256":"324bca45200789addd4258d3cf8c7cc2468362492a101dd1fcb144c8336c5ed3","sha512":"58c9825bf413ed739930d85e142f6cee3f2eccc4e786f0890f29e8eb853039d559fd09dfd293428f57783e58f47b207884d8cc8cf5cb8da37c87751e0a167181","ssdeep":"96:4BxEsCcXQzKFgq5HjhWXATBxEsCcXQzKFgq5HjhWXeBxEsCcXQzKFgq5HjhWX2Bv:GucTZFWwjucTZFWIucTZFWQucTZFWRLo","tlshash":"d4d1b8112043c5c92edd78ed6017ddcb84213b80c7cb18069bfc6a39f6dba99f5ea195","size":6429,"data":"","first_seen":"2025-10-06T15:35:52.114862Z","last_seen":"2025-10-06T15:35:52.114862Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba419a0f92f4a89df14179a6bf4370ed","sha1":"093bf7a549553a8beaf209f5f2bcacfb9a798cb6","sha256":"109ce4e4004068e86e24ed810841c23c45fafe0c3fece9c7ca99f09702015fd5","sha512":"6f928138ec712c2bdfec1b694dffe321a48f1a4d63f8da3a7159d46bebc35382280d8cd7495ba10615d38bb4527b2efd0a76dea8950b5d3b94f38ffb24b47a08","ssdeep":"","tlshash":"0121e4d25190427606f7022aad267364513e4b5f2d4b80d7532d8a52301db9fe7b6dc5","size":1164,"data":"","first_seen":"2025-05-14T00:26:22.006045Z","last_seen":"2026-01-17T11:40:22.180873Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975998?id=1975998\u0026pid=__clb-spot_1975998_adj_1\u0026jp=_clmjuertkdufnshhtjuasv\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=nQrsmzLaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=VPHmrmCaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDEwMC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=3211552697610240\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"014c046130eecf05a70729ff30958c2c","sha1":"3a9f5f9cbea3c3eb73a41b4e92aeed0e5ec42c4b","sha256":"58e5c58f718ab0cac394ef00e31c3cfc5c214215933e902720f2f093409e7ce9","sha512":"41bd45a9ac94e6a55e12972c384e696a8a27cff5816891be3fe6cdb461036a52ebbc6d7a8d98d35896e61734dc69dd183294b2b7252cb488d263f30ed9b5aeb2","ssdeep":"","tlshash":"a4f0dce992b98ce04883505d1ba52ac608a271849f274e26309807c0276473681bb9b1","size":489,"data":"","first_seen":"2025-10-06T15:35:52.131669Z","last_seen":"2025-10-06T15:35:52.131669Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_ftv_1\u0026jp=_cligettuzsdnmlhlkejkyf\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=vxZ6ZB7aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=1Fp6kchaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=4618927581153280\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a42dc23e2ff9b0a3f233b477d8c823e","sha1":"284cd78e46c3464dd20d0148f43a3d2bf99f4af2","sha256":"050a8b768ac84b8a2840bb1d00ad36daadce4a28381d9fbcd03b54da1a498334","sha512":"e7db5920cca285fc96b9d254699119fdaa2c0beebb41904edb285fe2beb2eaa4578d8f3f117dabdb5fbea8b351f3bd3dfdf1df05b34302294f86f581b3eb7ff1","ssdeep":"","tlshash":"27f05c35a8cafe684cb4d94a127f6dc736c4534d9f175a699a9083e0c004e71e773d0b","size":489,"data":"","first_seen":"2025-10-06T15:35:52.143995Z","last_seen":"2025-10-06T15:35:52.143995Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.redporn.me/ftt2/js.php","fqdn":"go.redporn.me","domain":"redporn.me","tld":"me"},"ip":{"addr":"172.67.195.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00c5b4e10b407e048b4f1d69ab2a7218","sha1":"115fe888d45e0e5cee992c51adde7a5a9dfecaec","sha256":"7fe7249e3ca5406405872213ec143a0b2b9bee89b69f31964017ee25ba33b465","sha512":"48d7669721708752598d7c563ccd583a50603d05af5f6bb0776e84487759766f634fbc93d7d924f357429e8f050493a5913fa7bc545522c784583579a0d97435","ssdeep":"","tlshash":"0351f05e4cda80b0c35370999e7f9609f062e1673d1a9da6390c52904f11b7bc2e9fed","size":3162,"data":"","first_seen":"2025-10-06T15:35:52.188973Z","last_seen":"2025-10-06T15:35:52.188973Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/libs.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc9614070357853b50c7c52422e80ee9","sha1":"a5a353d8a81630ad02e585914e106da95b0b0fda","sha256":"a4387c06cd8e863daead916951e528d69f16be2efa295a5256339a5023c2134f","sha512":"08854f0c6bf47d1fa57760b3a8682f95a7053866d874aa034f9c9913e9ff5dbb65c70a3936014497b6092801e1c5e98cf39c3b5dd0b79b4b4c772597fa5d66ab","ssdeep":"","tlshash":"d82186882c4aa019c3f333249b576555fc5612063601ccd6fc6cca405fbdd98c4bbd4c","size":1431,"data":"","first_seen":"2025-03-29T16:56:08.532528Z","last_seen":"2026-01-17T13:48:46.716722Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"107e713ee1be819b72679a9b20d1b704","sha1":"1d4a8f1f9af8ae391110851b0c5df66d50a1d8dd","sha256":"8eb57361472f7fa5e3b2def7d28f9a03330413fd300a2223ee2ca3291782a41f","sha512":"503b1a4d5d8ff0a9b6caf23041156bf016983c5243d3c129aa6da4a26b947dc73b4ca76400f3d0bed5b7e67c721948a6f77d4720eec763e78268718e4524ac3e","ssdeep":"","tlshash":"a7f0204ff21e393c86730615309a3c86e43e93708c003230a64fa38306d8b9b574af51","size":552,"data":"","first_seen":"2025-03-02T13:21:48.338565Z","last_seen":"2026-06-07T08:02:58.605901Z","times_seen":40475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/libs.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc9614070357853b50c7c52422e80ee9","sha1":"a5a353d8a81630ad02e585914e106da95b0b0fda","sha256":"a4387c06cd8e863daead916951e528d69f16be2efa295a5256339a5023c2134f","sha512":"08854f0c6bf47d1fa57760b3a8682f95a7053866d874aa034f9c9913e9ff5dbb65c70a3936014497b6092801e1c5e98cf39c3b5dd0b79b4b4c772597fa5d66ab","ssdeep":"","tlshash":"d82186882c4aa019c3f333249b576555fc5612063601ccd6fc6cca405fbdd98c4bbd4c","size":1431,"data":"","first_seen":"2025-03-29T16:56:08.532528Z","last_seen":"2026-01-17T13:48:46.716722Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/link.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2612b308f45d0aeddbd8540f3cf792f8","sha1":"6c6a34a46b238ae0372b7f6126c8686a3c6b91d7","sha256":"1b1e450814698cfd54d68f041c25c741d2adbde4e8e31a256db1be23d413d96c","sha512":"be13c24e01fa0fcd3796eada128e6b74680d433a553524c5671f97ab8e62e9c24e24ec00710cd28db8088e9743ed35f38a801a464131435a2d58f3b9d31fe50c","ssdeep":"","tlshash":"c22110c1931597dc189621899f308969222f30f6f6bf84d180edc3bca4d2699e807e11","size":1437,"data":"","first_seen":"2024-05-01T00:16:35Z","last_seen":"2026-06-15T19:50:35.389582Z","times_seen":2490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_ocz_1\u0026jp=_clslthafwjhaawtanzstpz\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=aC71vf6aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=iebjH4IaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=4337452604412928\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"508d728891472742f17f168095307d39","sha1":"a822bb2213691f23e39d5f79cd2739cd0ff9c095","sha256":"4844c99a209730203773c89e52d48e5817b2a5b4bbb420d544a3816958e712d9","sha512":"a19000f211857df59b4c262a2af92514b0b137da6f0c172eae5e51ca71ddd53aa8d57015806f7e2c16d6eb217d5ae55f1ad12fcdeb29362abefc9bacfd146e64","ssdeep":"","tlshash":"26f00752b633e2a0bed8861d423a3c0a38c814280833e310a628e0358ec80e66a6a803","size":489,"data":"","first_seen":"2025-10-06T15:35:52.03648Z","last_seen":"2025-10-06T15:35:52.03648Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/telegram.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48f25c508c92c3601cf047609318001f","sha1":"59117e825084c63a0dda48edec82c14a60e16f23","sha256":"6415561e892cf9d614e7179f71353af4ceadfd641d71c42fe54c9420eb0d0138","sha512":"32ca9e672cb26c5cc9370d32a2739ad99a933a700250e310955b68ca4a974964f22095179d1a56f8f57c160ee6ab4d3ff659b4bba5838879472289b06bf53a42","ssdeep":"","tlshash":"66e02077611084814c2a54bbda1e614f5434f069529d65d3436ac4f754d726f5c12d8b","size":360,"data":"","first_seen":"2023-03-08T15:33:09Z","last_seen":"2026-06-15T22:49:28.619173Z","times_seen":11853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/email.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"452a9a6a280379512ab5764a1d42bae1","sha1":"61e0f75ff25c554dbf65743f1f6bf9d003ddc905","sha256":"d432ad1988efa5b258294f52dae3d1b4c10660aec15e49017e21a1ee74bfd453","sha512":"886b316d47a86f624f9eb9746ba2441b7508678c9bae9a17f26b4e0c8665b9dd3d641a6a6bc26e57fd7881031d7b826975d517e133ff2fee0704f0a45088cb6f","ssdeep":"","tlshash":"b2e02bd21160d7450f3307aacf6d22cb763e21bde0dc058142258af5d4d74dd4b05c23","size":415,"data":"","first_seen":"2024-04-12T16:11:45Z","last_seen":"2026-06-15T22:56:28.464913Z","times_seen":4982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/bn.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a99b6ae09058e72bb15a7e541194fe23","sha1":"9bc1863d3ecb11e580aa119ed2366c251a1f01b6","sha256":"50f0b51e2005ee15e4ee9baddd4672b994a42994719717e513f92634b3b92a02","sha512":"8026616a897ffe0929c64750b76298f602a48b3f70ba66f9f298881d8f6843dd29643a64fed71ecda57accac31fd5f8211535253e775999dbb3e831481481f95","ssdeep":"1536:eZNgud5QeZYZKHURgeYJEJc+iq5A1E1PCGGOc7d07Db0gyylZE8kO1i2BaOFBA4j:eZR5QeZ3hoOqk8PDI8Xt7Tk3d0x","tlshash":"f5f384ceafd664356153e329093f6931edbadcd2e1df0113e837d1a41a68805e332b69","size":165817,"data":"","first_seen":"2025-10-06T14:48:53.289351Z","last_seen":"2025-10-07T04:44:54.485701Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/bn.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a99b6ae09058e72bb15a7e541194fe23","sha1":"9bc1863d3ecb11e580aa119ed2366c251a1f01b6","sha256":"50f0b51e2005ee15e4ee9baddd4672b994a42994719717e513f92634b3b92a02","sha512":"8026616a897ffe0929c64750b76298f602a48b3f70ba66f9f298881d8f6843dd29643a64fed71ecda57accac31fd5f8211535253e775999dbb3e831481481f95","ssdeep":"1536:eZNgud5QeZYZKHURgeYJEJc+iq5A1E1PCGGOc7d07Db0gyylZE8kO1i2BaOFBA4j:eZR5QeZ3hoOqk8PDI8Xt7Tk3d0x","tlshash":"f5f384ceafd664356153e329093f6931edbadcd2e1df0113e837d1a41a68805e332b69","size":165817,"data":"","first_seen":"2025-10-06T14:48:53.289351Z","last_seen":"2025-10-07T04:44:54.485701Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/metrika/tag_ww.js","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e58cae18b3ef726b4b1bd099e9f0438","sha1":"5467d148ea0f4585c75c8a43ff13fd0272d47acf","sha256":"4385e1b284b60ab5400677455c34e21d7fe12cec554b822e50a1a05b815d4c84","sha512":"f41609fa97eed07700ec6f8c5a92c5912cfb8f3984f87a2ecaadc6568640cca93fe69fbde242ef76fbf4897521c307d2b6d6253072d3dae7af085e2a21e3ec51","ssdeep":"3072:2WjN+Rla8qz3Oph8msTVdBRQhB35+v5COAH8w6hjWpBF2tSR:2WjN+RB8Opams5dB+z35OS8wMWnFlR","tlshash":"8534e8d976827472937334b4a03f000bb1be6c96f14c8965e186e9d57e389ac9237f6c","size":251054,"data":"","first_seen":"2025-10-03T16:02:45.521856Z","last_seen":"2025-10-13T08:52:45.356463Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacwumsf.com/en/oqwobr?jojk=gaocfc\u0026id=1975997\u0026ldqx=jabkdq\u0026gusp=612632\u0026ksssf=163283\u0026rf=_skvrbuggfqtnsvhxkuafju\u0026pmdxeubr=692345\u0026lweuf=cncraii\u0026fajsr=595977\u0026tt=3\u0026hhp=1","fqdn":"sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6229f31ac315a756502539d40a3db2a4","sha1":"f7d75dff7526d3275670d8c2819770edaf595654","sha256":"3f159cdee17e319f20f9165daa047620a40e1c4f9746ce95e9bc056d06dfdd8b","sha512":"71918de002a673e4fc09ae08c739433c84ffcfcde39dec77123fd2710de5be5b9d744f32eaa72574d017b53427bd249705ab86347146bdf23fabf81e1f6704d5","ssdeep":"","tlshash":"8ff0dce46c9064f4d6005faa82f7ac0b23e020eb837353051b200706d00c10be48b852","size":465,"data":"","first_seen":"2025-10-06T15:35:52.043579Z","last_seen":"2025-10-06T15:35:52.043579Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/metrika/tag_ww.js","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e58cae18b3ef726b4b1bd099e9f0438","sha1":"5467d148ea0f4585c75c8a43ff13fd0272d47acf","sha256":"4385e1b284b60ab5400677455c34e21d7fe12cec554b822e50a1a05b815d4c84","sha512":"f41609fa97eed07700ec6f8c5a92c5912cfb8f3984f87a2ecaadc6568640cca93fe69fbde242ef76fbf4897521c307d2b6d6253072d3dae7af085e2a21e3ec51","ssdeep":"3072:2WjN+Rla8qz3Oph8msTVdBRQhB35+v5COAH8w6hjWpBF2tSR:2WjN+RB8Opams5dB+z35OS8wMWnFlR","tlshash":"8534e8d976827472937334b4a03f000bb1be6c96f14c8965e186e9d57e389ac9237f6c","size":251054,"data":"","first_seen":"2025-10-03T16:02:45.521856Z","last_seen":"2025-10-13T08:52:45.356463Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/bn.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a99b6ae09058e72bb15a7e541194fe23","sha1":"9bc1863d3ecb11e580aa119ed2366c251a1f01b6","sha256":"50f0b51e2005ee15e4ee9baddd4672b994a42994719717e513f92634b3b92a02","sha512":"8026616a897ffe0929c64750b76298f602a48b3f70ba66f9f298881d8f6843dd29643a64fed71ecda57accac31fd5f8211535253e775999dbb3e831481481f95","ssdeep":"1536:eZNgud5QeZYZKHURgeYJEJc+iq5A1E1PCGGOc7d07Db0gyylZE8kO1i2BaOFBA4j:eZR5QeZ3hoOqk8PDI8Xt7Tk3d0x","tlshash":"f5f384ceafd664356153e329093f6931edbadcd2e1df0113e837d1a41a68805e332b69","size":165817,"data":"","first_seen":"2025-10-06T14:48:53.289351Z","last_seen":"2025-10-07T04:44:54.485701Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_ftv_1\u0026jp=_cligettuzsdnmlhlkejkyf\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=vxZ6ZB7aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=EVqFPNraHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=4618927581125632\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1e054b6bf546a2099cb735783dc09b8","sha1":"6ceb419619896981290b620e38cfa30722b4b161","sha256":"478c32ca6d0c0b22bdd34779e2fc5f99a0774e5f58e211ed810cd1677f821cd1","sha512":"c47a728bf84005dd489e019804dde71e8d534a550aa5d6c454bac08ed9b9a90ceb8613c8ba69466c2e98e50c379299c7b42d0e631fffa574a64a412dc27e94a8","ssdeep":"192:a7ijYH3m7ijYH3C7ijYH3o7ijYH3WMAVijQo:amUXmmUXCmUXomUXkVi8o","tlshash":"50d1c937eadcda534af430d879618e04199d51003698b8e5c1cd517f60ec0a77ebef99","size":6440,"data":"","first_seen":"2025-10-06T15:35:52.062709Z","last_seen":"2025-10-06T15:35:52.062709Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/mobile/?type=tube_index","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc443a30b66461c526bf5ebcece7ed94","sha1":"50dc180582dbb047a02172f0391fbe92fd63768b","sha256":"200f578aa6aa6fd62cd929691a3975f93e644003d35337960cfeac68c1171056","sha512":"d131fb42c6c35321044165ab23e33383ba4819d27f1afd5791b3849c7e422bfa2c34389a69ac53ebbdd3423a9195c4fbfc67e3ccafbaa7cb148cefb8612a9c90","ssdeep":"96:9sPiLritJ2CyY3ZeitL6tI3jk8s1AGERag8Z1ZzYqh+xJp6KM4e:iiLCoCyYJeih6qjk8s1AGqag8ZEqYxJM","tlshash":"0db10e1dacfb10687263b03e5fbf50413960e9170646de427d2cd3659f82828cab6afd","size":5390,"data":"","first_seen":"2025-06-06T07:37:21.336534Z","last_seen":"2025-12-05T23:43:00.985473Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fb72ce77e0d06ebd7397afd1cf7eae75","sha1":"2d2f1ae00996c0c64506771a46f4c6b7524dd645","sha256":"2f4fa335f61fc68e72092f6b1a0451d27cdd9be30ed554bc9a18f7c01c8be444","sha512":"23e5ec22c64d81ec17233afe70d18bffdc71b381c1e4e57cc4c96d0a4b120071ec8e021cbabd2a01b0c1fc45124c20c50f939bf35aee21a52b2d45790d7395c4","ssdeep":"","tlshash":"f250000c00c0c00c0000000300000003000c03300000030030003033000c0c00000000","size":11,"data":"","first_seen":"2025-03-26T00:10:13.553146Z","last_seen":"2025-11-03T11:18:26.164306Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacwumsf.com/en/oqwobr?dbn=ajsu\u0026jt=_perntblzjnwkwpvlpfbqou\u0026kbj=1\u0026fqge=rst\u0026cwbz=761699\u0026oyk=gvah\u0026qo=3\u0026znvk=742981\u0026id=1975998\u0026iisb=kxjcs","fqdn":"sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1cf4f73c2299ddd95df54640957851c","sha1":"8842dcb6f057736144f9d5b2dd3ac6194e0c0265","sha256":"8a386d53ecb1b665f4affa942550a213f65ce6299284f642027b9836d69b8eec","sha512":"e8811b996ce2d2c10b853266efabbfddc51d7615fc759a9c5c51c5ab7624781e09ac6f38050c14a869e0734865876361a9f190804a8b319ecfa4edfe66587c19","ssdeep":"","tlshash":"32f05c66b8e6f8d7511c5d08253f3c96ab8012de4e27436712fc9d08c4d03077cdb404","size":465,"data":"","first_seen":"2025-10-06T15:35:52.123634Z","last_seen":"2025-10-06T15:35:52.123634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975998?id=1975998\u0026pid=__clb-spot_1975998_adj_1\u0026jp=_clmjuertkdufnshhtjuasv\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=nQrsmzLaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=kdA9G7AaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDEwMC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=7715152324958720\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b660d1a2c68905760accd282bd309a25","sha1":"18f66a007b6d1b5efa1045b521c7d10f8b7b014e","sha256":"af3d1fddb019d93914376add6c2a56245c8c9616ff96a0772e3cbe2c647adb6b","sha512":"98e329d9db76f59b1c594540791ea2baefac302456dee54b76b0d3ed2e0ee4c002f7cbe93cafbe4dc5e77d5d333e9758659bf10442a9c22bfbc516f35cbe7c21","ssdeep":"192:0CqIqT5UeCqIqT5UfCqIqT5U9hCqIqT5UqgMo:KuAutuFuqRo","tlshash":"1ed1f9f4387c672f1ca8698c414848757681298a3ee7d91cff224fd38c85865dabb0d5","size":6450,"data":"","first_seen":"2025-10-06T15:35:52.096473Z","last_seen":"2025-10-06T15:35:52.096473Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/mobile/?type=tube_index","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ac6503000310c70b039f977c18372f9","sha1":"e1b5ceaaa218ee80b4f755dcbe6c6e4203a52ba8","sha256":"431e46812a29046097bc7a603f51061684f2c35728b0f7d8801495b113d60506","sha512":"0f68566030089c2034562ebd6ac294596e21aefb36930a8c80a16fb2749422a407ba7276b30e00d02981a65a2ea930208bbaf3fabcfd9dc87b7590be37cb622b","ssdeep":"192:S8RwieqS6e6MqQ4AwYW8nCK/HkaB2W2wlSDzdfJ29g/9N9kx98rDWI:S8JSiMq0CeHghiS9fJ2m/P6xyrDX","tlshash":"8cf1400832e4b62ad447f0b2b45fcd49b638b5de16c641056a0ec4e9da74838db36cec","size":7737,"data":"","first_seen":"2024-06-11T20:33:33Z","last_seen":"2026-01-17T13:48:46.846403Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fb72ce77e0d06ebd7397afd1cf7eae75","sha1":"2d2f1ae00996c0c64506771a46f4c6b7524dd645","sha256":"2f4fa335f61fc68e72092f6b1a0451d27cdd9be30ed554bc9a18f7c01c8be444","sha512":"23e5ec22c64d81ec17233afe70d18bffdc71b381c1e4e57cc4c96d0a4b120071ec8e021cbabd2a01b0c1fc45124c20c50f939bf35aee21a52b2d45790d7395c4","ssdeep":"","tlshash":"f250000c00c0c00c0000000300000003000c03300000030030003033000c0c00000000","size":11,"data":"","first_seen":"2025-03-26T00:10:13.553146Z","last_seen":"2025-11-03T11:18:26.164306Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/libs.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc9614070357853b50c7c52422e80ee9","sha1":"a5a353d8a81630ad02e585914e106da95b0b0fda","sha256":"a4387c06cd8e863daead916951e528d69f16be2efa295a5256339a5023c2134f","sha512":"08854f0c6bf47d1fa57760b3a8682f95a7053866d874aa034f9c9913e9ff5dbb65c70a3936014497b6092801e1c5e98cf39c3b5dd0b79b4b4c772597fa5d66ab","ssdeep":"","tlshash":"d82186882c4aa019c3f333249b576555fc5612063601ccd6fc6cca405fbdd98c4bbd4c","size":1431,"data":"","first_seen":"2025-03-29T16:56:08.532528Z","last_seen":"2026-01-17T13:48:46.716722Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/libs.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc9614070357853b50c7c52422e80ee9","sha1":"a5a353d8a81630ad02e585914e106da95b0b0fda","sha256":"a4387c06cd8e863daead916951e528d69f16be2efa295a5256339a5023c2134f","sha512":"08854f0c6bf47d1fa57760b3a8682f95a7053866d874aa034f9c9913e9ff5dbb65c70a3936014497b6092801e1c5e98cf39c3b5dd0b79b4b4c772597fa5d66ab","ssdeep":"","tlshash":"d82186882c4aa019c3f333249b576555fc5612063601ccd6fc6cca405fbdd98c4bbd4c","size":1431,"data":"","first_seen":"2025-03-29T16:56:08.532528Z","last_seen":"2026-01-17T13:48:46.716722Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/foot.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecdd125b787b38a8665818be133336c1","sha1":"c6ae3f4eeb1e0417b0d0d24c3c875c2ea51333a8","sha256":"f0d824e5dd12c91d12dafcc7f76c0d3a0e6978c2138f730448f480c0f8cfe26f","sha512":"d4a1beecf39c7c23e1a5c254f9473141bcb1717cb6606e434bed7ecc6d4598af5e35aed178bac792076bec878f0944077d44904916aa2dd71412d932475630de","ssdeep":"","tlshash":"1431e7594c2700705cf7a37c7a6a6509fa73b5b37d42e6007a0c96218ff9e188966fdc","size":1866,"data":"","first_seen":"2025-03-29T16:56:08.545439Z","last_seen":"2026-05-14T19:17:03.460635Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/metrika/tag_ww.js","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e58cae18b3ef726b4b1bd099e9f0438","sha1":"5467d148ea0f4585c75c8a43ff13fd0272d47acf","sha256":"4385e1b284b60ab5400677455c34e21d7fe12cec554b822e50a1a05b815d4c84","sha512":"f41609fa97eed07700ec6f8c5a92c5912cfb8f3984f87a2ecaadc6568640cca93fe69fbde242ef76fbf4897521c307d2b6d6253072d3dae7af085e2a21e3ec51","ssdeep":"3072:2WjN+Rla8qz3Oph8msTVdBRQhB35+v5COAH8w6hjWpBF2tSR:2WjN+RB8Opams5dB+z35OS8wMWnFlR","tlshash":"8534e8d976827472937334b4a03f000bb1be6c96f14c8965e186e9d57e389ac9237f6c","size":251054,"data":"","first_seen":"2025-10-03T16:02:45.521856Z","last_seen":"2025-10-13T08:52:45.356463Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/libs.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc9614070357853b50c7c52422e80ee9","sha1":"a5a353d8a81630ad02e585914e106da95b0b0fda","sha256":"a4387c06cd8e863daead916951e528d69f16be2efa295a5256339a5023c2134f","sha512":"08854f0c6bf47d1fa57760b3a8682f95a7053866d874aa034f9c9913e9ff5dbb65c70a3936014497b6092801e1c5e98cf39c3b5dd0b79b4b4c772597fa5d66ab","ssdeep":"","tlshash":"d82186882c4aa019c3f333249b576555fc5612063601ccd6fc6cca405fbdd98c4bbd4c","size":1431,"data":"","first_seen":"2025-03-29T16:56:08.532528Z","last_seen":"2026-01-17T13:48:46.716722Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/tumblr.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69da5ce7bc12ff6a3574b419e52cc5bb","sha1":"49f624343a8f70e504397e152d4d4002c1d81e30","sha256":"2babafd803a9de8606d0b04be90894c4bd3c69b7788380e644f3eaa3722aaead","sha512":"2b713e2e0ebb3e0fd1be067177100d779dbc934888fb3b5eda2c51115a3f3e15006887fbaa5272e0ad16b17219547992c7eabd9f2284f55660031fd4cbc90a4b","ssdeep":"","tlshash":"19e026a81664edc4cf7306bb871e21cf623a74ae21cd8ac29ab848b95c764399487507","size":358,"data":"","first_seen":"2024-04-25T14:16:00Z","last_seen":"2026-06-14T21:38:20.564119Z","times_seen":546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/core.pt5ow5lr.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e998bb147b26903e88f08f39c0e2cfc","sha1":"6c93ab9cb3371591d4031dc60b9c3ae571c3329e","sha256":"ef39bcc03d88448d0d38aba3dc609e9c9c444d037aebec926e6715e1cf956674","sha512":"ed4bb35effa05b85d02fffbd65abdb28b1d88cf573475dc02c2c5b744914f09d06df2dd3f0928ec921e5e7e52f57d4898e58feeae3c139e36c5fb61e7a982431","ssdeep":"1536:h8fE77gdDGstI0AjiVG1COcfs6SngvUy4JfU8xAaj1rxv6G6zMDfPMUEqdb:2fqgPdvUJ1xlj1rxvV6zPub","tlshash":"09636c9f37056937aa1b30e8a8efa508a036275eaf080954f5a5d4b511fdecd3067f2c","size":71871,"data":"","first_seen":"2025-04-25T03:57:25.562762Z","last_seen":"2026-06-11T22:32:13.517237Z","times_seen":9412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.cdnjs.work/tube/metrics_tube.js","fqdn":"go.cdnjs.work","domain":"cdnjs.work","tld":"work"},"ip":{"addr":"172.66.47.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f5ca76aaeb5736c4d88d884211c297f","sha1":"a4d7c85361f45fdf6119fc374b92a10ea69ab6c6","sha256":"2f3689e248c979e7ec8559a6d1211ae6c739700d02bbf35497d9b613be9ed11c","sha512":"babf576886ba7e215ab5cb8df2c0368f304ff45a123450478fa9a851d3715026db55b87d715952f02cc4b134ceb2a9fc8db749729add1cea7333f229a39e95f7","ssdeep":"96:MqxNLSjWeZVnh5ZRRQzsQJyperecceSrOdyiBhBOucLxUFkHWHyqix/bxcDK5HHD:tNmjpzRRQzsQJyp/L1rOdAxtUFkHYyZl","tlshash":"7ec19529389e543912cb3a72f99e1d4a30e57f1e509980804dadad7d25dcd8e2c3b6bc","size":5664,"data":"","first_seen":"2025-10-06T15:35:52.109175Z","last_seen":"2026-01-03T20:39:35.170311Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/bn.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a99b6ae09058e72bb15a7e541194fe23","sha1":"9bc1863d3ecb11e580aa119ed2366c251a1f01b6","sha256":"50f0b51e2005ee15e4ee9baddd4672b994a42994719717e513f92634b3b92a02","sha512":"8026616a897ffe0929c64750b76298f602a48b3f70ba66f9f298881d8f6843dd29643a64fed71ecda57accac31fd5f8211535253e775999dbb3e831481481f95","ssdeep":"1536:eZNgud5QeZYZKHURgeYJEJc+iq5A1E1PCGGOc7d07Db0gyylZE8kO1i2BaOFBA4j:eZR5QeZ3hoOqk8PDI8Xt7Tk3d0x","tlshash":"f5f384ceafd664356153e329093f6931edbadcd2e1df0113e837d1a41a68805e332b69","size":165817,"data":"","first_seen":"2025-10-06T14:48:53.289351Z","last_seen":"2025-10-07T04:44:54.485701Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacwumsf.com/en/oqwobr?jx=3\u0026xn=955586\u0026vkwwxjok=hv\u0026nsiiadvex=yiivja\u0026stqykxh=248876\u0026bhwo=fu\u0026njuiiq=fmnpl\u0026asz=1\u0026id=1975997\u0026lw=_zrxoxsczxutjobwsljrfhd","fqdn":"sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"831864c5dc2c98fa9790b2af7a481604","sha1":"80cafbc861292450a3f193df78f2d7ce4a4f41c6","sha256":"26a1374e0352a50c23dbfb2431a77301a590f8cca3d07da003cf4e7b4c3a4a08","sha512":"cc2c54321aa85a7c4056ca0f7ca71ee9c613bfb191ba3c3347f4f54144b0740020b6043fb6e22682bca4a4b25bb27db61633165338fca322fe2449526454255d","ssdeep":"","tlshash":"65f0dcaeb858dc9980d16c0e055dfdcf2eea2018ad17f528c750205051584b9397750f","size":465,"data":"","first_seen":"2025-10-06T15:35:52.161966Z","last_seen":"2025-10-06T15:35:52.161966Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"redporn.me/i/bg/288x162.svg","fqdn":"redporn.me","domain":"redporn.me","tld":"me"},"ip":{"addr":"172.67.195.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redporn.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 01:12:32 GMT","end":"Thu, 11 Dec 2025 02:11:12 GMT"},"fingerprint":{"sha1":"E9:3B:B6:27:06:E5:0B:32:2F:C2:AF:E4:36:CA:D4:93:D0:04:63:88","sha256":"F6:43:72:FF:5E:8B:16:F9:CF:AB:D8:60:01:84:36:83:F5:D8:E8:23:A5:7D:75:2F:8B:B4:0F:B2:26:B3:D2:56"}}},"request":{"raw":"GET /i/bg/288x162.svg HTTP/1.1\r\nHost: redporn.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Mon, 06 Oct 2025 15:35:18 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFcnSITXCIM0tA4ZWPPShMBxKUy6lMd9OAGOR5d530ytiTUTcVAWVx3f3w1CpzJ%2BDYJRyl3gEQZhnjbI4tP3yGtkYxPDAzhJ\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98a63a5518e056c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f822f9410bac956ea66245f23ee0b888","sha1":"ed953c249017c533f2e6da3c63bcda0c3f51d2a8","sha256":"03fa4e90fcf7529e62c66befdc8fd48bf8cc5779d7b7d3459ebe502771f36913","sha512":"896de9653c6261587e0a47cfea984456d6b61c0f9d10c5d6f95a694f357317426f31139ac47be3b22232c22c1ddf8adc02f2c2f573486ffa5fd6c7a400d55675","ssdeep":"","tlshash":"3bb092aea1afad2cfa0b8405147065158455b0a6468d455de9e27836d0628926c225be","first_seen":"2023-11-02T06:47:57Z","last_seen":"2026-06-13T13:33:32.31175Z","times_seen":21,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A14140482%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A407550031%3Arqn%3A2%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C123%2C1%2C698%2C698%2C0%2C235%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918680%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29aw%281%29cdl%28na%29eco%2883952128%29w2s%280%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A14140482%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A407550031%3Arqn%3A2%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C123%2C1%2C698%2C698%2C0%2C235%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918680%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29aw%281%29cdl%28na%29eco%2883952128%29w2s%280%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aa.qwerty24.net\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 622\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0c3583bc0905c6815a5b0afc9330242e","sha1":"4d4d1357d3c8a51549621ad56245efcd29df4354","sha256":"7c85016dff1be922468266e328062763be79e5119698626b40d596443ca5237a","sha512":"152c35ab22e900198cad350c54d8634f23ae4f9b2ba8b62f47fc0337321777a316a79344933a3bd4e98265543d8ecc28df3c00622074289fbf9d0677caaeca9d","ssdeep":"","tlshash":"5ef0084948584e758e979e10555f3e1200d97056ccc023d49e9ad3145ddfe71330eee1","first_seen":"2025-10-06T15:35:52.013518Z","last_seen":"2025-10-06T15:35:52.013518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.cdnjs.work/tube/extra.js","fqdn":"go.cdnjs.work","domain":"cdnjs.work","tld":"work"},"ip":{"addr":"172.66.47.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.cdnjs.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 02:07:37 GMT","end":"Sun, 23 Nov 2025 03:07:28 GMT"},"fingerprint":{"sha1":"2B:32:41:49:9B:92:3B:87:11:C2:D0:AC:95:45:6F:2C:4F:D0:34:C9","sha256":"09:58:66:C9:6E:37:00:7F:FA:73:15:E4:03:1E:A6:28:23:C1:31:60:CC:21:59:5A:62:3B:F3:9F:36:C5:7F:AC"}}},"request":{"raw":"GET /tube/extra.js HTTP/1.1\r\nHost: go.cdnjs.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JmlwRFugs%2F74qGNdXv%2BiCugNGasE1pQGLduLFtYMdpE593u1zbRYkTPWFZskxwY3UEMWNDpK2Y3gFitg5BL%2FoR4pCMrLl5aJwZw%2BobU%3D\"}]}\r\netag: W/\"df46420017c9c81ead021bff00ec1f0c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98a63a564ac3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":369,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"3176730df87ccba0e2576f817781da0c","sha1":"633fb8b024c19e560a77e680e4e97df753defa8a","sha256":"99d3b6546bd6081a9965e5af5157b697b34bd148f3b2b4ae73bf13b2ceb1d964","sha512":"39129d5fa6ac27e6c3c477022950fc43050703d1e576a2b39128fe70d3e3a36609ea0dc669036eb53ddc412bab3a824f25c8339a1423284231303ae4a1c2dcbd","ssdeep":"","tlshash":"c5e0d82a0ce5c86995255cc75375f124f5e2383b1d91f009abd9c89d5b60ef50844d95","first_seen":"2025-10-06T15:35:52.017422Z","last_seen":"2026-06-13T13:33:32.318892Z","times_seen":14,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":69,"dns":16,"connect":3,"send":0,"wait":11,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/tumblr.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/svg/icons/tumblr.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\netag: W/\"e16b8a825507e00526e7b57d10724eae\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pJc6BjNc%2FT2hDs3M2nXVspnKD8I5clcE65EwBFAhsi42sUwknBfjYkhEgwbu6yE0CIGTtfiz1o5C6pZ7UdcosoBRDPOGvHVGn%2BPqBy4cuP%2FYK0YyZRe8V6n8hSC%2B8Y%2F6XcHWNldP9MQYFWux0twObXrV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 21781\r\ncf-ray: 98a63a575c6f56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":358,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (358), with no line terminators","md5":"69da5ce7bc12ff6a3574b419e52cc5bb","sha1":"49f624343a8f70e504397e152d4d4002c1d81e30","sha256":"2babafd803a9de8606d0b04be90894c4bd3c69b7788380e644f3eaa3722aaead","sha512":"2b713e2e0ebb3e0fd1be067177100d779dbc934888fb3b5eda2c51115a3f3e15006887fbaa5272e0ad16b17219547992c7eabd9f2284f55660031fd4cbc90a4b","ssdeep":"","tlshash":"19e026a81664edc4cf7306bb871e21cf623a74ae21cd8ac29ab848b95c764399487507","first_seen":"2024-04-25T14:16:00Z","last_seen":"2026-06-14T21:38:20.564119Z","times_seen":546,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/13/files/f8b6/4cd8/347b/96d8/c870/63e7/3387/7ed3/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/13/files/f8b6/4cd8/347b/96d8/c870/63e7/3387/7ed3/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12037\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5JxFlpMPOz8cDx1JwV4aF0PeV7U8pMkMtypU%2B6rMsTMrmgNk3QkTl3bv%2B%2BH5RUSmYmm%2BdoHx%2F8PQ0mJDlM37OKDKYfFRl0%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=12245, status=webp_bigger\r\netag: \"681d2efa-2fd5\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Thu, 08 May 2025 22:23:54 GMT\r\ncf-cache-status: HIT\r\nage: 211299\r\nvary: accept-encoding\r\ncf-ray: 98a63a56ac6556c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12037,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"27b1851c991e658fbd20bb1b0992505a","sha1":"b118b93820d15d4b5cf281acef8a42db34a97d3a","sha256":"1f8505354645bb38a04ccbb0c44f55338f1e32962280f54d1b3e952cec4ed35d","sha512":"73c7157224b808dcf0aac4fd9a8bab1b5003af7f251af5445fa2c50f7f1a3dbb14c50b7f748ab71dbe4aa19a134c75969b1ae437b9a884048f733d45ba37cda1","ssdeep":"192:4AMVwL2J1R48lBpywdVKM2phpNUS1jOUJylNXXggq58zzdwERTzKCNMPrFxsj:1MY2HX5ywdVKM2b7xRdedfOgTeCNsrF0","tlshash":"6042d033805e0840fb96acb1f4bfe7d4034d6025b1a191673de27eebcaf74958e61525","first_seen":"2025-10-06T15:35:52.023174Z","last_seen":"2025-10-06T15:35:52.023174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/12/files/32d2/c072/3e8d/42e8/197e/76cb/4e7d/6ae2/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/12/files/32d2/c072/3e8d/42e8/197e/76cb/4e7d/6ae2/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8398\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k0m20vfnzl77bZtzA4IhUEj2dpMmReDtPZPVlTuqPwcNTL10bXMBqnSEQuWDe5VpvaBRyxOsSWoFw0MohJVcDSiXFypjskI%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=8633\r\netag: \"675fd772-21b9\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Mon, 16 Dec 2024 07:32:02 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 211299\r\ncf-ray: 98a63a56ac6d56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8398,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"98d821ef4a03e05109886b5f2e7600a5","sha1":"7e1da1854941d692fa8359a2c5bf57e24ebae00e","sha256":"0a4ab9ad1ad5185e4fb0a0f8e3b0f6de4d9cc43150fef523db6f69f69a6fce18","sha512":"940e5e55d4b3403ebcb214a84c72b97f2b332ac2188f4bde1237c7f0d76003ac4070e5300b050d52b613b724fa470ac4db70b7b5c982eceb99e93e07db93d63c","ssdeep":"192:5Hhkri5hHQh6fGHglkz8xlI1sR5LTDa5wrJuc262vMu0:Y2g6+Alf4G5HDaQJq62vMu0","tlshash":"8802af8beb3dc7e42daee67220b982bbcd4074e6f48b4252494531eb45e00d3c681109","first_seen":"2025-10-06T15:35:52.025785Z","last_seen":"2025-10-06T15:35:52.025785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/foot.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /foot.js?v=202503291755 HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Et6FP6G7JrnbqSvwC%2BuZaayAbNB6NLE7lcnW6iviciWvadM7KpC4QvapwDjcv2y43kZ4v%2F0Qp9a9ECuqK8E5aMuSLtveTKnpmTrxYkpBEpRdknSEA7fjYGCKMA%3D%3D\"}]}\r\netag: W/\"86dc648d35a3d8fd72876c7150e07267\"\r\ncontent-encoding: br\r\ncf-ray: 98a63a56dbb60883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ecdd125b787b38a8665818be133336c1","sha1":"c6ae3f4eeb1e0417b0d0d24c3c875c2ea51333a8","sha256":"f0d824e5dd12c91d12dafcc7f76c0d3a0e6978c2138f730448f480c0f8cfe26f","sha512":"d4a1beecf39c7c23e1a5c254f9473141bcb1717cb6606e434bed7ecc6d4598af5e35aed178bac792076bec878f0944077d44904916aa2dd71412d932475630de","ssdeep":"","tlshash":"1431e7594c2700705cf7a37c7a6a6509fa73b5b37d42e6007a0c96218ff9e188966fdc","first_seen":"2025-03-29T16:56:08.545439Z","last_seen":"2026-05-14T19:17:03.460635Z","times_seen":260,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fmobile%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A526123533%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A621697945%3Arqn%3A1%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C138%2C1%2C%2C%2C%2C239%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918685%3Arqnl%3A1%3Ast%3A1759764919%3At%3AAds\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(1)re(1)aw(1)cdl(na)eco(83952128)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/mobile/?type=tube_index","date":"2025-10-06T15:35:19.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/100522608?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fmobile%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A526123533%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A621697945%3Arqn%3A1%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C138%2C1%2C%2C%2C%2C239%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918685%3Arqnl%3A1%3Ast%3A1759764919%3At%3AAds\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(1)re(1)aw(1)cdl(na)eco(83952128)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nx-xss-protection: 1; mode=block\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nlocation: /watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fmobile%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A526123533%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A621697945%3Arqn%3A1%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C138%2C1%2C%2C%2C%2C239%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918685%3Arqnl%3A1%3Ast%3A1759764919%3At%3AAds\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29re%281%29aw%281%29cdl%28na%29eco%2883952128%29ti%281%29\u0026redirnss=1\r\nset-cookie: yabs-sid=2432406431759764919; Path=/; SameSite=None; Secure\ni=R6zdYbr6dFhsLAkLReaRvBlkbe5kUNBAXiArPR2Mnnrek7B322l8zJi/yvd2lbYjihykRs1gxPq537FCI8Dy2afYcbE=; Expires=Thu, 04-Oct-2035 15:35:15 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=7298302981759764919; Expires=Thu, 04-Oct-2035 15:35:15 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=7298302981759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1791300919.yrts.1759764919#1791300919.yrtsi.1759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\npragma: no-cache\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A14140482%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764920%3Ac%3A1%3Arn%3A516225017%3Arqn%3A8%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918680%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764920\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)cdl(na)eco(83952128)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22ad_type%22%3A%22tube_index%22%2C%22ad_type_details%22%3A%22tube_index_main_banner%22%2C%22ad_domain_show%22%3A%22beeg.porn%22%2C%22ad_domain_referer%22%3A%22redporn.me%22%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:20.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A14140482%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764920%3Ac%3A1%3Arn%3A516225017%3Arqn%3A8%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918680%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764920\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)cdl(na)eco(83952128)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22ad_type%22%3A%22tube_index%22%2C%22ad_type_details%22%3A%22tube_index_main_banner%22%2C%22ad_domain_show%22%3A%22beeg.porn%22%2C%22ad_domain_referer%22%3A%22redporn.me%22%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\nlast-modified: Mon, 06-Oct-2025 15:35:20 GMT\r\naccess-control-allow-credentials: true\r\ncontent-type: image/gif\r\nset-cookie: bh=YLjDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:20 GMT; SameSite=None; Secure\r\npragma: no-cache\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\nexpires: Mon, 06-Oct-2025 15:35:20 GMT\r\nstrict-transport-security: max-age=31536000\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/12/files/ccf0/9ce4/082d/0669/4466/bc2a/04e9/7941/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/12/files/ccf0/9ce4/082d/0669/4466/bc2a/04e9/7941/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23412\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bDcaaONQPVVa79P5eCk8ZSgaPrPvyh4YRDweo%2BaiKjdGQY%2BAqoXMkhQcquLLBt7LUxWkWLzU4bGAAQe7%2FrYu7xMPtxBQsGo%3D\"}]}\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=29206\r\netag: \"ccf09ce4082d06694466bc2a04e97941\"\r\nlast-modified: Sat, 24 Feb 2024 03:17:34 GMT\r\nvary: accept\r\nx-amz-id-2: Pxh6Pm2IkmwBXv/qt4GRLQ8AH2tkrAP14nO9e55xxoB9nz9V12j5ei8dkp9tk2mxqq5e4kU4fhHn\r\nx-amz-request-id: 9697400C318C92B2:B\r\nx-wasabi-cm-reference-id: 1758769398597 130.117.252.107 ConID:1715371022/EngineConID:16423392/Core:81\r\ncf-cache-status: HIT\r\nage: 995520\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\ncache-control: public, max-age=31536000\r\ncf-ray: 98a63a56ac6956c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":23412,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3","md5":"c92e248dcc1b0f9bedb5c03843243c00","sha1":"dd0f9a4d761f90857d6086510b774ea2fbd19279","sha256":"aa8a6d5f1ad65ed060f36186c9a943786a0c4d63faddeacaf25c5e38e043d1b6","sha512":"136b49229fd0a6fec6b127bdd999f058e7c19ebaf797ce1775f603bd0b376149e5ec792dfd0f61bc866d167610d7406cde669e621bda0bef5dab1d3366647ede","ssdeep":"384:/yLutPvpsQsZH566TFXm7ZLQcnDOn1A601wKVgLaB8HvQtlOSV3/U+y13HoF:/yLutPvp+H5BFXqnDeAB1wKVgzHofOSp","tlshash":"f0b2df17d44998b5f7ff298fe877a5c6c5906b27a1a0cb2c04ee468036ac41522a5b8a","first_seen":"2025-10-06T15:35:52.030326Z","last_seen":"2025-10-06T15:35:52.030326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/foot.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /foot.js?v=202503291755 HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Et6FP6G7JrnbqSvwC%2BuZaayAbNB6NLE7lcnW6iviciWvadM7KpC4QvapwDjcv2y43kZ4v%2F0Qp9a9ECuqK8E5aMuSLtveTKnpmTrxYkpBEpRdknSEA7fjYGCKMA%3D%3D\"}]}\r\netag: W/\"86dc648d35a3d8fd72876c7150e07267\"\r\ncontent-encoding: br\r\ncf-ray: 98a63a56cbb20883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ecdd125b787b38a8665818be133336c1","sha1":"c6ae3f4eeb1e0417b0d0d24c3c875c2ea51333a8","sha256":"f0d824e5dd12c91d12dafcc7f76c0d3a0e6978c2138f730448f480c0f8cfe26f","sha512":"d4a1beecf39c7c23e1a5c254f9473141bcb1717cb6606e434bed7ecc6d4598af5e35aed178bac792076bec878f0944077d44904916aa2dd71412d932475630de","ssdeep":"","tlshash":"1431e7594c2700705cf7a37c7a6a6509fa73b5b37d42e6007a0c96218ff9e188966fdc","first_seen":"2025-03-29T16:56:08.545439Z","last_seen":"2026-05-14T19:17:03.460635Z","times_seen":260,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.beeg.porn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 08:48:46 GMT","end":"Sat, 15 Nov 2025 09:48:35 GMT"},"fingerprint":{"sha1":"8A:BF:7B:5C:A2:97:2E:37:4F:52:46:2F:49:23:79:93:5F:AA:53:AD","sha256":"94:33:17:BB:F7:2A:44:30:D6:0E:55:A0:78:A3:7E:A3:73:63:A3:40:1B:FF:E0:E2:B7:57:AC:8D:9B:D4:D8:16"}}},"request":{"raw":"GET /ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me HTTP/1.1\r\nHost: aa.beeg.porn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cSHU7%2Fv2%2BmmWtxkcT3jbybtmlC%2F1pWRI3wmK2127tSpyKa759AUcgrX65MNgm%2Fb0GkvVT2LsOjwRbN8FonfASypI35Lsxw9WFo4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 98a63a576aff569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9001,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6678), with CRLF line terminators","md5":"722c63d30506ffdf40db6a351ea2e835","sha1":"36f69088ded2059a940f79536490e7d83a5bbd3e","sha256":"8cb0781959fccfce24e8feccb49a33a4ae26173df1b596a24cfa90946157fee8","sha512":"71c6d76c3239737616a510d5a2ee8351310064f41a4d2651f83bb6b3a684cf8992d661c81ea363d8202dfe49f924ea2f791a7710eb8e6e26c520b260d9cd4f09","ssdeep":"192:7gyHcJARhLDVLiHwwZM2xdMrmutAo2iMIwGbwJaEgeHL9TIEiKbJoYrS7wMg:7teAjoHwW/ODt12iwGbwULmOEPbDrSo","tlshash":"00023c757282aa6603f241d280ffb550d43e5a167545c488f1ec68833aa67c9d1f3f7e","first_seen":"2025-05-14T00:26:21.923674Z","last_seen":"2025-10-24T13:32:44.576587Z","times_seen":9,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":41,"dns":0,"connect":2,"send":0,"wait":57,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/status.js","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.beeg.porn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 08:48:46 GMT","end":"Sat, 15 Nov 2025 09:48:35 GMT"},"fingerprint":{"sha1":"8A:BF:7B:5C:A2:97:2E:37:4F:52:46:2F:49:23:79:93:5F:AA:53:AD","sha256":"94:33:17:BB:F7:2A:44:30:D6:0E:55:A0:78:A3:7E:A3:73:63:A3:40:1B:FF:E0:E2:B7:57:AC:8D:9B:D4:D8:16"}}},"request":{"raw":"HEAD /status.js HTTP/1.1\r\nHost: aa.beeg.porn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWOGHvFNQ%2Fx%2FLh36%2Fr%2FNqQjbadR915CiDitLtgXyrE1SelxnGhZdjs10T%2FvKwZIWZlLJk7BlwJ%2BNjvrh%2FwymlOG3S5y4xA3VbAasB6F3VdumiRmaR2GRQw%3D%3D\"}]}\r\netag: W/\"429187bdb4f8ff9e96446629ee3b1e5e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 98a63a576d3949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":41,"dns":0,"connect":2,"send":0,"wait":11,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/reddit.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/svg/icons/reddit.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\netag: W/\"1fe5b5008de689ce6464d7bcb07e742c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gRqz82cRydjmLOftb8UCQlm4BPjUniMHshTX1aWwfV9YH8xfPwfyEuPb53PJNTG%2B28B7a%2FSR%2BAL%2FnE%2BN9j5a0XFHem4j%2Bi3f83r2cL4sUbs2jzYQ4UUs19BHGRnDSW3XYrfJCOLg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 21781\r\ncf-ray: 98a63a575c7056ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":893,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (893), with no line terminators","md5":"408cc755e613b4f00fbe10d7411ed087","sha1":"14341990ed687477b3addbdd1a3b50ae8a98589b","sha256":"68ed9b82b62d45cf5d12587a7e9566a4ddeb94d69bcb225e9e3c7268c76b3cbb","sha512":"713379c452034896501703ce09391f7ddfb3b0053276ff0dd1a499eeb3c99ebed97ce8fd77e4910d962ba4ef4d8f1d23dfe7c51a0b7d0537baabd5be5cf05a01","ssdeep":"","tlshash":"891125fe471c94ec0ea36ae9af168059531fd875359b07b01a6fdbf92543008c407a92","first_seen":"2024-04-16T17:58:32Z","last_seen":"2026-06-14T21:38:20.480656Z","times_seen":3006,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/email.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/svg/icons/email.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\netag: W/\"eb2119ad4221a9d01abc336e06962867\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pp3wPndvKsy%2B%2Fy7kp8JBTDHsm5F%2F0t01jeOpKQXHfWPdrp9yPOiHj73PsCh0BVLB8RNRKTrKDUa1cd3hjc%2Fna44HCbnf0BJGoZxvaIB7gVh1GlI6vQeqVGtQP517bHNIO%2BsLUocD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 21781\r\ncf-ray: 98a63a575c7456ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (415), with no line terminators","md5":"452a9a6a280379512ab5764a1d42bae1","sha1":"61e0f75ff25c554dbf65743f1f6bf9d003ddc905","sha256":"d432ad1988efa5b258294f52dae3d1b4c10660aec15e49017e21a1ee74bfd453","sha512":"886b316d47a86f624f9eb9746ba2441b7508678c9bae9a17f26b4e0c8665b9dd3d641a6a6bc26e57fd7881031d7b826975d517e133ff2fee0704f0a45088cb6f","ssdeep":"","tlshash":"b2e02bd21160d7450f3307aacf6d22cb763e21bde0dc058142258af5d4d74dd4b05c23","first_seen":"2024-04-12T16:11:45Z","last_seen":"2026-06-15T22:56:28.464913Z","times_seen":4982,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.beeg.porn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 08:48:46 GMT","end":"Sat, 15 Nov 2025 09:48:35 GMT"},"fingerprint":{"sha1":"8A:BF:7B:5C:A2:97:2E:37:4F:52:46:2F:49:23:79:93:5F:AA:53:AD","sha256":"94:33:17:BB:F7:2A:44:30:D6:0E:55:A0:78:A3:7E:A3:73:63:A3:40:1B:FF:E0:E2:B7:57:AC:8D:9B:D4:D8:16"}}},"request":{"raw":"GET /ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me HTTP/1.1\r\nHost: aa.beeg.porn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Eddm1noHNw8BTDCq1%2B1msAp%2F7couIwKK688xDIbyAPeQZyKFl%2BsPGqbGcRTKEv7zNPQgMKxzkm52VD1zZXuorCPXopTR4%2B4RV4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 98a63a576b04569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9001,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6678), with CRLF line terminators","md5":"722c63d30506ffdf40db6a351ea2e835","sha1":"36f69088ded2059a940f79536490e7d83a5bbd3e","sha256":"8cb0781959fccfce24e8feccb49a33a4ae26173df1b596a24cfa90946157fee8","sha512":"71c6d76c3239737616a510d5a2ee8351310064f41a4d2651f83bb6b3a684cf8992d661c81ea363d8202dfe49f924ea2f791a7710eb8e6e26c520b260d9cd4f09","ssdeep":"192:7gyHcJARhLDVLiHwwZM2xdMrmutAo2iMIwGbwJaEgeHL9TIEiKbJoYrS7wMg:7teAjoHwW/ODt12iwGbwULmOEPbDrSo","tlshash":"00023c757282aa6603f241d280ffb550d43e5a167545c488f1ec68833aa67c9d1f3f7e","first_seen":"2025-05-14T00:26:21.923674Z","last_seen":"2025-10-24T13:32:44.576587Z","times_seen":9,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/check.html","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 06:11:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d0e8af-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/check.html","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 06:11:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d0e8af-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_ocz_1\u0026jp=_clslthafwjhaawtanzstpz\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=aC71vf6aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=iebjH4IaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=4337452604412928\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /get/1975997?id=1975997\u0026pid=__clb-spot_1975997_ocz_1\u0026jp=_clslthafwjhaawtanzstpz\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=aC71vf6aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=iebjH4IaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=4337452604412928\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nUID=251006103524d5f861c09c4bb88b9a7e0f7c; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":489,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (489), with no line terminators","md5":"508d728891472742f17f168095307d39","sha1":"a822bb2213691f23e39d5f79cd2739cd0ff9c095","sha256":"4844c99a209730203773c89e52d48e5817b2a5b4bbb420d544a3816958e712d9","sha512":"a19000f211857df59b4c262a2af92514b0b137da6f0c172eae5e51ca71ddd53aa8d57015806f7e2c16d6eb217d5ae55f1ad12fcdeb29362abefc9bacfd146e64","ssdeep":"","tlshash":"26f00752b633e2a0bed8861d423a3c0a38c814280833e310a628e0358ec80e66a6a803","first_seen":"2025-10-06T15:35:52.03648Z","last_seen":"2025-10-06T15:35:52.03648Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redporn.me/","fqdn":"redporn.me","domain":"redporn.me","tld":"me"},"ip":{"addr":"172.67.195.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-06T15:35:17.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redporn.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 01:12:32 GMT","end":"Thu, 11 Dec 2025 02:11:12 GMT"},"fingerprint":{"sha1":"E9:3B:B6:27:06:E5:0B:32:2F:C2:AF:E4:36:CA:D4:93:D0:04:63:88","sha256":"F6:43:72:FF:5E:8B:16:F9:CF:AB:D8:60:01:84:36:83:F5:D8:E8:23:A5:7D:75:2F:8B:B4:0F:B2:26:B3:D2:56"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: redporn.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Mon, 06 Oct 2025 15:35:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cqPgBShg9vJagRoCVm%2F9Qkt6gmdxkKMmB8bgQpejFSvvXlugG5Ak%2FVSS%2FTYaVN%2BTmpULn3RAtUCQ2JEt5yT75gMyjm%2B%2BBmEC\"}]}\r\ncf-ray: 98a63a523d7b56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265544,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2056)","md5":"94924ee94a83288ca738ea6ce5e7936d","sha1":"3021269165cfaa1527cf67109aac77b545d38935","sha256":"129b2769974aa1547445bdbaf17711ad8dc11c3cea57bb3b95caf6e4bdc84126","sha512":"dee89a73f5e83977eb0904a77d54ef8a9968c7ed2de17df65e2d906d7c1192c4171b87595245fb1ee49c0929f0e07c715c5b8eeef95efb17a6d59bcf64a3ca21","ssdeep":"1536:aa0SYh5UHlbTKp3WmVorWvhYphdUYTWYicAlFg2P8sUKgxb9qzYvip0vDeR4MzE3:KHlFJabo97746n6o96v1","tlshash":"6d44a51576e1c42dae73b6a627e5262abb6760c7f180389878cf4911cfd2f60ac734d1","first_seen":"2025-10-06T15:35:52.038459Z","last_seen":"2025-10-06T15:35:52.038459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":176,"dns":0,"connect":3,"send":0,"wait":405,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/13/files/2524/6e73/bc05/7f63/dbc7/cb39/e332/4c0e/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/13/files/2524/6e73/bc05/7f63/dbc7/cb39/e332/4c0e/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9510\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 23 Apr 2025 17:06:57 GMT\r\netag: \"68091e31-2526\"\r\nexpires: Tue, 06 Oct 2026 15:35:19 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FasBUbVMIDaPJc8zjVGl6LC7p%2FnCkmNTZ%2FGCnyyK9lE7Me43k6mcMFyxW0AqXBSP7IPNBTpg86JLi%2FWfP3g%2FHp0iDGRZVZk%3D\"}]}\r\ncf-ray: 98a63a56eccf56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9510,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 288x162, components 3","md5":"25246e73bc057f63dbc7cb39e3324c0e","sha1":"627c31dc8476e775365a34fef38972ca2c5a183e","sha256":"8af9ebd31ace3123b350a41e101a4020b7e6262f414ceac6539e6e01dbd17cd0","sha512":"9f218fa657dc061ad58b261e410f9b3bef7f350f18a97869b1261f2161a48b70fd2fbf4d68e19cab90e6c69c1b9a44f13e79f994ae60ef21544458ff7912376b","ssdeep":"192:Ntn11NCzv9aVk/tb3yXsbF2pdIdr8KcvEnMYf0eSoYFJBMIVkMymM:NPC9aVszos4pdI5WvhYE7vBrM","tlshash":"2d12af77f78c6e89f623ec332ad94f42b3d2bf24d5140e0ead5592519e392416e85072","first_seen":"2025-10-06T15:35:52.040537Z","last_seen":"2025-10-06T15:35:52.040537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickadu.qwerty24.net/?c=track\u0026zone_id=1975997\u0026t=1759764919\u0026rf=0","fqdn":"clickadu.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"172.67.143.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:11:30 GMT","end":"Thu, 01 Jan 2026 21:10:05 GMT"},"fingerprint":{"sha1":"2B:F1:86:15:26:34:BB:D0:75:87:8A:BC:CB:26:1D:B2:3C:7F:D1:CB","sha256":"88:90:CA:7F:05:95:2D:02:FE:D1:7D:0E:94:C4:9B:EA:36:EB:29:3F:F9:27:60:5C:69:C3:A9:C3:E3:9E:3C:31"}}},"request":{"raw":"GET /?c=track\u0026zone_id=1975997\u0026t=1759764919\u0026rf=0 HTTP/1.1\r\nHost: clickadu.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aa.beeg.porn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.16\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-header-sub: Master\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FQ5ZJBcHdcSSAQkle6m%2Bqewcfz8mHNXC362yFFOsvazORh9Ft9oYS8GtufmoPY2CJLqp3Gmafm9so3CseKmohg0KxXGYCUZHJ0equSjM5okvdZ%2BbQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98a63a58aa9c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c79da15f422df09e108feabd68f9ea3","sha1":"4415c5cd125e889b721d74c7823afba47f7e8179","sha256":"b19b74974ece6f590f4a95bbbcc33b9e7c7e141feef38486df10037ef843b8d2","sha512":"c3d9a9e59e7671b77af1978fb449cd45abbdd59c18a6d46ecf6304893e9b3cc65200226db411942eae51e5f6cc788ae0a65cba6c8f8c746a680dfc338299876c","ssdeep":"","tlshash":"1f8000a0030088ef30e2a3e0f80ab0c38a2bea328c0c830000008a0b380f20c0323202","first_seen":"2025-05-14T00:26:21.944464Z","last_seen":"2026-01-26T08:51:06.43815Z","times_seen":18,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":24,"dns":0,"connect":3,"send":0,"wait":26,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacwumsf.com/en/oqwobr?jojk=gaocfc\u0026id=1975997\u0026ldqx=jabkdq\u0026gusp=612632\u0026ksssf=163283\u0026rf=_skvrbuggfqtnsvhxkuafju\u0026pmdxeubr=692345\u0026lweuf=cncraii\u0026fajsr=595977\u0026tt=3\u0026hhp=1","fqdn":"sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Thu, 03 Jul 2025 23:17:13 GMT","end":"Tue, 30 Dec 2025 22:59:00 GMT"},"fingerprint":{"sha1":"BE:0F:B3:AB:65:72:6D:3D:A7:A8:5D:51:50:DC:FF:DA:02:74:0F:AD","sha256":"79:64:10:CC:73:5F:CE:C0:5D:BB:D7:95:7F:2D:4C:BC:A1:BD:04:10:0F:9B:14:3A:A1:91:8F:7F:3B:E4:EC:83"}}},"request":{"raw":"GET /en/oqwobr?jojk=gaocfc\u0026id=1975997\u0026ldqx=jabkdq\u0026gusp=612632\u0026ksssf=163283\u0026rf=_skvrbuggfqtnsvhxkuafju\u0026pmdxeubr=692345\u0026lweuf=cncraii\u0026fajsr=595977\u0026tt=3\u0026hhp=1 HTTP/1.1\r\nHost: sacwumsf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nUID=251006103536120424bbf448b9b57e9241d4; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":465,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (465), with no line terminators","md5":"6229f31ac315a756502539d40a3db2a4","sha1":"f7d75dff7526d3275670d8c2819770edaf595654","sha256":"3f159cdee17e319f20f9165daa047620a40e1c4f9746ce95e9bc056d06dfdd8b","sha512":"71918de002a673e4fc09ae08c739433c84ffcfcde39dec77123fd2710de5be5b9d744f32eaa72574d017b53427bd249705ab86347146bdf23fabf81e1f6704d5","ssdeep":"","tlshash":"8ff0dce46c9064f4d6005faa82f7ac0b23e020eb837353051b200706d00c10be48b852","first_seen":"2025-10-06T15:35:52.043579Z","last_seen":"2025-10-06T15:35:52.043579Z","times_seen":1,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sacwumsf.com/static/video/bn/4d8/94c/85d/4d894c85da1d68db9dc4e32939323db8a5aa7c0c.mp4","fqdn":"www.sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","date":"2025-10-06T15:35:19.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Thu, 03 Jul 2025 23:17:13 GMT","end":"Tue, 30 Dec 2025 22:59:00 GMT"},"fingerprint":{"sha1":"BE:0F:B3:AB:65:72:6D:3D:A7:A8:5D:51:50:DC:FF:DA:02:74:0F:AD","sha256":"79:64:10:CC:73:5F:CE:C0:5D:BB:D7:95:7F:2D:4C:BC:A1:BD:04:10:0F:9B:14:3A:A1:91:8F:7F:3B:E4:EC:83"}}},"request":{"raw":"GET /static/video/bn/4d8/94c/85d/4d894c85da1d68db9dc4e32939323db8a5aa7c0c.mp4 HTTP/1.1\r\nHost: www.sacwumsf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 573379\r\nlast-modified: Mon, 15 Sep 2025 18:49:29 GMT\r\netag: \"68c85fb9-8bfc3\"\r\nexpires: Fri, 05 Dec 2025 15:35:19 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-573378/573379\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":573379,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"ed2f0a4ef2942d73ba176cc96e20fff3","sha1":"4d894c85da1d68db9dc4e32939323db8a5aa7c0c","sha256":"19711450f604d797417762b024d34151711f5a8cbe503ded96742eddc7851697","sha512":"95a05129c934e0954866eba18f0b2adafecaa39d7cce6a3aacc4d70277a40263b3e7143aa903a1ae3e71d641af2cb8522accaf9791b61f5d688d71a58aa1990f","ssdeep":"6144:9q/CzsYvxCCM1BFerXUJD0Q+hZxmBmUAPMt0atU50rUaNOJW5JhS15kjE:gCzssM1BFoywZItP75/dE","tlshash":"45c402f392e04c2aed7d1a7a5ce726560684cd0a03794bd7394c36a96f78ad60f1fd80","first_seen":"2025-10-06T15:35:52.045841Z","last_seen":"2025-10-12T10:00:30.902436Z","times_seen":7,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/12/files/37c2/7bc0/043f/2d95/eb2f/c460/d80d/4a05/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:20.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/12/files/37c2/7bc0/043f/2d95/eb2f/c460/d80d/4a05/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13258\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 14 Feb 2025 16:21:40 GMT\r\netag: \"67af6d94-33ca\"\r\nexpires: Tue, 06 Oct 2026 15:35:20 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RvU6lH%2BmNBy2Z2NAJQiu%2FVivjFJ7uzzQEtJ3bS44L8Ysg%2BnFmCSvknO9%2B9Il0o0pjVUlxrINUY8dZYtcD2sWlNc8pq8Me34%3D\"}]}\r\ncf-ray: 98a63a60ff4c56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13258,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 288x162, components 3","md5":"37c27bc0043f2d95eb2fc460d80d4a05","sha1":"e2e29b04cb61020115ce1e3994cefebb3ffd04d6","sha256":"ff0f7ec413bb1dc3cc174f9d397ae1211f0d11e68b07c2aeb2073ca5ecb9c329","sha512":"1c67cb1c787506f1663a1c4e669b37d8a855809543f22582a47d2b6b4c3a066f862e7cb88cf85492b442ccf2354b7699bd0a97d6be9e66c4ecea0343aa85e1e2","ssdeep":"384:Nt8uGLeTlXV3hmVaxXnkaCEvQqtapbNg0Z6RNr9KKou0:nrGLeBXlhmYxXnk1TqtapbDZ6RN9LQ","tlshash":"6152bf2536408d9bc9a2e3bd49de1193434a87156c806eee67cac1ae94b01670ef7716","first_seen":"2025-10-06T15:35:52.049185Z","last_seen":"2025-10-06T15:35:52.049185Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/foot.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /foot.js?v=202503291755 HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Et6FP6G7JrnbqSvwC%2BuZaayAbNB6NLE7lcnW6iviciWvadM7KpC4QvapwDjcv2y43kZ4v%2F0Qp9a9ECuqK8E5aMuSLtveTKnpmTrxYkpBEpRdknSEA7fjYGCKMA%3D%3D\"}]}\r\netag: W/\"86dc648d35a3d8fd72876c7150e07267\"\r\ncontent-encoding: br\r\ncf-ray: 98a63a56cbb00883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ecdd125b787b38a8665818be133336c1","sha1":"c6ae3f4eeb1e0417b0d0d24c3c875c2ea51333a8","sha256":"f0d824e5dd12c91d12dafcc7f76c0d3a0e6978c2138f730448f480c0f8cfe26f","sha512":"d4a1beecf39c7c23e1a5c254f9473141bcb1717cb6606e434bed7ecc6d4598af5e35aed178bac792076bec878f0944077d44904916aa2dd71412d932475630de","ssdeep":"","tlshash":"1431e7594c2700705cf7a37c7a6a6509fa73b5b37d42e6007a0c96218ff9e188966fdc","first_seen":"2025-03-29T16:56:08.545439Z","last_seen":"2026-05-14T19:17:03.460635Z","times_seen":260,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/foot.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /foot.js?v=202503291755 HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Et6FP6G7JrnbqSvwC%2BuZaayAbNB6NLE7lcnW6iviciWvadM7KpC4QvapwDjcv2y43kZ4v%2F0Qp9a9ECuqK8E5aMuSLtveTKnpmTrxYkpBEpRdknSEA7fjYGCKMA%3D%3D\"}]}\r\netag: W/\"86dc648d35a3d8fd72876c7150e07267\"\r\ncontent-encoding: br\r\ncf-ray: 98a63a56cbad0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ecdd125b787b38a8665818be133336c1","sha1":"c6ae3f4eeb1e0417b0d0d24c3c875c2ea51333a8","sha256":"f0d824e5dd12c91d12dafcc7f76c0d3a0e6978c2138f730448f480c0f8cfe26f","sha512":"d4a1beecf39c7c23e1a5c254f9473141bcb1717cb6606e434bed7ecc6d4598af5e35aed178bac792076bec878f0944077d44904916aa2dd71412d932475630de","ssdeep":"","tlshash":"1431e7594c2700705cf7a37c7a6a6509fa73b5b37d42e6007a0c96218ff9e188966fdc","first_seen":"2025-03-29T16:56:08.545439Z","last_seen":"2026-05-14T19:17:03.460635Z","times_seen":260,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/11/files/7034/eed5/d447/28c1/4077/039e/07c7/35ee/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:19.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/11/files/7034/eed5/d447/28c1/4077/039e/07c7/35ee/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9150\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 28 Jul 2024 00:33:17 GMT\r\netag: \"66a591cd-23be\"\r\nexpires: Tue, 06 Oct 2026 15:35:19 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2s2DXWDQeSe%2FJ%2BuuIYE%2BgBiybRyjjSyT2%2BZisLQQgLXymKdq2DiHKa31dt%2BUOqCkG59M7h1xejjm6f%2FxpufsuseZJxcRAZ4%3D\"}]}\r\ncf-ray: 98a63a57edb056c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9150,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 288x162, components 3","md5":"7034eed5d44728c14077039e07c735ee","sha1":"180e0fbe847d07a70445e959c73f2ee741dc49dd","sha256":"ac1198257fb7e87e4b76ba52889dd98c623b4866eeddab1048e3bdb6f4212b4a","sha512":"0dc5cf1f5bb877247b2b4a6fd6c3411e4907dd888599c2d2d641d45d9043d3ccf90e474c49606aa39b517628e4ac9f4a91fe28d067453b9aea1a61970c761b6a","ssdeep":"192:NT6c/gOopHwq5zUwlghx9GC4JURYpk4tyRZ2VYsi8Xxo:NT6D9pbZuhx9oURYpkYyT2m+ho","tlshash":"e512afaa7e058679e94ec53d5ddb8157a588cdc32204633f0b1940493e1f8ee5c33a56","first_seen":"2025-10-06T15:35:52.051401Z","last_seen":"2025-10-06T15:35:52.051401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A312851241%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A649704075%3Arqn%3A5%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C137%2C2%2C687%2C687%2C0%2C253%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918684%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29re%281%29aw%281%29cdl%28na%29eco%2883952128%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A312851241%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A649704075%3Arqn%3A5%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C137%2C2%2C687%2C687%2C0%2C253%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918684%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29re%281%29aw%281%29cdl%28na%29eco%2883952128%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aa.qwerty24.net\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 622\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nstrict-transport-security: max-age=31536000\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3a40fc7cefc29aeeff9dbaabca569edd","sha1":"59f7f11f6dd1c135e3bbd9913d44edfbb6eaee7f","sha256":"1b691ef66b10dcbb8543887085e33f49f8a161ea9154d7b39692fd8067a87163","sha512":"9923e580ca88146ec1dc4ae8af63dac76b6ab8c3fc4c61e0d0064dece6e55fd629b5a7805dd17c3e8da813d6a2eab74005f5a5395ae2e7ee3d5c1ef33eb58602","ssdeep":"","tlshash":"53f0dd08d8984db50a4b4e20d42f3713104d304988c5579c9d82e185084ff6233095a8","first_seen":"2025-10-06T15:35:52.052917Z","last_seen":"2025-10-06T15:35:52.052917Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.605\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Faa.beeg.porn%2Fad%2Fclickadu%2Fbeeg.porn%2Fmain%2F300x250%2F%3Fdomain%3Dredporn.me","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.605\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Faa.beeg.porn%2Fad%2Fclickadu%2Fbeeg.porn%2Fmain%2F300x250%2F%3Fdomain%3Dredporn.me HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2; UID=2510061035a62b2a1801194ac2bdb2e6e6be; CHCK=1; PTS=; OAICAP=AEmX1wAAAAAAAAAB; OAIBLOCK=AEmX1wAAAABo40zQ; OACICAP=ADbqJAAAAAAAAAAB; OACIBLOCK=ADbqJAAAAABo40zQ; BCAI=ADbqJAAAAAAAAAAB; BMI=AEmX1wAAAAAAAAAB; BCRI=EvpY9wAAAAAAAAAB; IMC_52=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/13/files/c5f3/b90a/ce50/30f0/9dba/a3d7/5900/5a57/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:20.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/13/files/c5f3/b90a/ce50/30f0/9dba/a3d7/5900/5a57/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11095\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 16 Aug 2025 19:30:29 GMT\r\netag: \"68a0dc55-2b57\"\r\nexpires: Tue, 06 Oct 2026 15:35:20 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q9mzZOBQ6Ozv2dstkINGT2TsCqKTxocMBnUUEJ0qp9B28XnR21KXx7N6MT6KDl6VqcotFSIeaUS3ms0QT4NVV%2BIFSl9EOag%3D\"}]}\r\ncf-ray: 98a63a60ff4a56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11095,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 288x162, components 3","md5":"c5f3b90ace5030f09dbaa3d759005a57","sha1":"fc2aec7d9f1fc3050ba55de51d0d015adc24ce24","sha256":"1e2eb09c37dd07f379a9a72c7523f508fa5981f4a2285422c283be66093e4b0f","sha512":"8624ef1327d080f1b8503dfce0f3f36f6fe7250fe1e99a27ce4fa875fe454a0d77245643d46fd4641264b580efbfa97865461353e5be0d410dcc3ede475846a3","ssdeep":"192:tBz2obqGEKePj5mFPJPLFW3u5EK/TWUAmeV8/xaJdZC2fONAPt8jv1:tBzDbqGter5UFLY3u57LWUleVixkZONX","tlshash":"33328fe3bfa41302e5fbc6745851c757f7a23da15294a5df1282700848989f14eff642","first_seen":"2025-10-06T15:35:52.054479Z","last_seen":"2025-10-06T15:35:52.054479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/snapchat.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/svg/icons/snapchat.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=01%2FnNzfbQ93ogxvhy4UwyUHt3wakjMY9ZoQyxQ2SFe%2B2I00mHjq8vrD8PRI7INaEY7BuABACr7gvwfXUxoIN%2F92CuXXZ%2B%2FiDcXV%2B9VWiPVWhqfCkkE996PXewvDw\"}]}\r\netag: W/\"17147353a178d9fd6b4d4582b423568a\"\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 21781\r\ncf-ray: 98a63a575c7156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1367,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1367), with no line terminators","md5":"4a4d847b67e9e40969a36f4ae9ee3432","sha1":"b635361780b4523d7089ea29b94d217e5e7b8c12","sha256":"48c4b36e799293f5c7d58b3a6fccfa0c9418c8a98f8d3f0731ee00b63f20c403","sha512":"95d312f519be751a736dfcde05824e5a94b373d00c25e91839348d5f407f966e44fd50ab8114423f477e07af4695cdd32d3aa79d12b69fd5f83bba7e6d097ba5","ssdeep":"","tlshash":"be2141cb324446dc98c2e22ec75bc88d531eb06c70bad9c08d6fc79c544e549f706820","first_seen":"2024-05-21T04:01:04Z","last_seen":"2026-06-14T19:09:08.367307Z","times_seen":288,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/2/files/0767/ba57/9ece/b817/0cb6/ab97/8b22/c7b2/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/2/files/0767/ba57/9ece/b817/0cb6/ab97/8b22/c7b2/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13227\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 08 Sep 2023 09:29:11 GMT\r\netag: \"64fae967-33ab\"\r\nexpires: Tue, 06 Oct 2026 15:35:19 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMxpxZehdlMG%2Fkz1QlqVfBuxkkRSIFBrtm0S2%2BC%2B22uhcDCzlHk%2B1%2B9g%2F%2BenkNfK3sj%2BInRztJf8mjihL2LUG8%2Feezm0EKs%3D\"}]}\r\ncf-ray: 98a63a57ad6a56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13227,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x180, components 3","md5":"0767ba579eceb8170cb6ab978b22c7b2","sha1":"4cc69750b9c22bb8fb159d6aeb0182dab32a02de","sha256":"ee8ff1eb2a083c221be462cff55253c663ff6d76cbd88194dc63417f9d341283","sha512":"54ee1bc954cd5de747636bf462943ba5689697110b4430f1630c1a40881e77ad65d33ad62fa6b534d5cfe64aeed7b109cea0585ad8a5aafe45262c25a5c9f15e","ssdeep":"384:tAfh0LVspbSVfsbmEof9nqvhhp+FRYfnV1RUsW2zJYv3H3v:tTZspbcfamLgp+FRYfRU9v","tlshash":"a252df8278a0cbb2f4a7db3c8ed481f3c474c52895041a0ec9592ccd12b5eba8b59f5f","first_seen":"2025-10-06T15:35:52.05751Z","last_seen":"2025-10-06T15:35:52.05751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/metrika/tag_ww.js","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /metrika/tag_ww.js HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 83693\r\netag: \"68de5a06-146ed\"\r\ncache-control: max-age=3600\r\ntiming-allow-origin: *\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\nexpires: Mon, 06 Oct 2025 16:35:19 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:55:02 GMT\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251057,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"4e58cae18b3ef726b4b1bd099e9f0438","sha1":"5467d148ea0f4585c75c8a43ff13fd0272d47acf","sha256":"4385e1b284b60ab5400677455c34e21d7fe12cec554b822e50a1a05b815d4c84","sha512":"f41609fa97eed07700ec6f8c5a92c5912cfb8f3984f87a2ecaadc6568640cca93fe69fbde242ef76fbf4897521c307d2b6d6253072d3dae7af085e2a21e3ec51","ssdeep":"3072:2WjN+Rla8qz3Oph8msTVdBRQhB35+v5COAH8w6hjWpBF2tSR:2WjN+RB8Opams5dB+z35OS8wMWnFlR","tlshash":"8534e8d976827472937334b4a03f000bb1be6c96f14c8965e186e9d57e389ac9237f6c","first_seen":"2025-10-03T16:02:45.521856Z","last_seen":"2025-10-13T08:52:45.356463Z","times_seen":82,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":186,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/bn.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","date":"2025-10-06T15:35:19.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 06 Oct 2025 12:27:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e3b5c9-287b9\"\r\nexpires: Mon, 13 Oct 2025 15:35:19 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":165817,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a99b6ae09058e72bb15a7e541194fe23","sha1":"9bc1863d3ecb11e580aa119ed2366c251a1f01b6","sha256":"50f0b51e2005ee15e4ee9baddd4672b994a42994719717e513f92634b3b92a02","sha512":"8026616a897ffe0929c64750b76298f602a48b3f70ba66f9f298881d8f6843dd29643a64fed71ecda57accac31fd5f8211535253e775999dbb3e831481481f95","ssdeep":"1536:eZNgud5QeZYZKHURgeYJEJc+iq5A1E1PCGGOc7d07Db0gyylZE8kO1i2BaOFBA4j:eZR5QeZ3hoOqk8PDI8Xt7Tk3d0x","tlshash":"f5f384ceafd664356153e329093f6931edbadcd2e1df0113e837d1a41a68805e332b69","first_seen":"2025-10-06T14:48:53.289351Z","last_seen":"2025-10-07T04:44:54.485701Z","times_seen":11,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":77,"dns":19,"connect":23,"send":0,"wait":78,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/foot.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/mobile/?type=tube_index","date":"2025-10-06T15:35:18.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /foot.js?v=202503291755 HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Et6FP6G7JrnbqSvwC%2BuZaayAbNB6NLE7lcnW6iviciWvadM7KpC4QvapwDjcv2y43kZ4v%2F0Qp9a9ECuqK8E5aMuSLtveTKnpmTrxYkpBEpRdknSEA7fjYGCKMA%3D%3D\"}]}\r\netag: W/\"86dc648d35a3d8fd72876c7150e07267\"\r\ncontent-encoding: br\r\ncf-ray: 98a63a56dbb40883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ecdd125b787b38a8665818be133336c1","sha1":"c6ae3f4eeb1e0417b0d0d24c3c875c2ea51333a8","sha256":"f0d824e5dd12c91d12dafcc7f76c0d3a0e6978c2138f730448f480c0f8cfe26f","sha512":"d4a1beecf39c7c23e1a5c254f9473141bcb1717cb6606e434bed7ecc6d4598af5e35aed178bac792076bec878f0944077d44904916aa2dd71412d932475630de","ssdeep":"","tlshash":"1431e7594c2700705cf7a37c7a6a6509fa73b5b37d42e6007a0c96218ff9e188966fdc","first_seen":"2025-03-29T16:56:08.545439Z","last_seen":"2026-05-14T19:17:03.460635Z","times_seen":260,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/13/files/5b51/7d7e/7849/f4a3/c1a4/2f61/f7ce/0eeb/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/13/files/5b51/7d7e/7849/f4a3/c1a4/2f61/f7ce/0eeb/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10293\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uzKVCQe4tf%2FzpOC0Dtgj0xXI%2BjcwEs%2BSKgWBWdBhqK4Z8ia5eQzlAAceEwpUpp94DP8OHWCrjtHmflZsJnC1nKgnsPLi7rc%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=10976\r\netag: \"68b5f3cb-2ae0\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Mon, 01 Sep 2025 19:28:11 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 21781\r\ncf-ray: 98a63a57ad6656c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10293,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"9ebe9e21733544ad3a93767db748604b","sha1":"35a1adfd32a81bf2a89f196219fafe5b593b0beb","sha256":"4a10ec7e60c0be16b0523c3711aa96053a5116b3ce47dd110e97b3dcbe4efcc9","sha512":"e602993f0c24b5dfb497fafcdca66ae0665a3d5ae6ebade0371386a9a2af873378000c4b48af1a757746cbc61678188f8bfb9ebb4ff16721e77a42034f95c806","ssdeep":"192:wMHatJ/yzRrEp1ecqVC3nzDc0Sv7OIr5L28nYG67VBYqpdC:/6PYraeHC3zDSv7Oil28YZ7O","tlshash":"c322af953a98d943dc39c931f6a34341a31d09fa18afa49763833a331f6a09db0d4b87","first_seen":"2025-10-06T15:35:52.061257Z","last_seen":"2025-10-06T15:35:52.061257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickadu.qwerty24.net/?c=track\u0026zone_id=1975997\u0026t=1759764919\u0026rf=0","fqdn":"clickadu.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"172.67.143.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:11:30 GMT","end":"Thu, 01 Jan 2026 21:10:05 GMT"},"fingerprint":{"sha1":"2B:F1:86:15:26:34:BB:D0:75:87:8A:BC:CB:26:1D:B2:3C:7F:D1:CB","sha256":"88:90:CA:7F:05:95:2D:02:FE:D1:7D:0E:94:C4:9B:EA:36:EB:29:3F:F9:27:60:5C:69:C3:A9:C3:E3:9E:3C:31"}}},"request":{"raw":"GET /?c=track\u0026zone_id=1975997\u0026t=1759764919\u0026rf=0 HTTP/1.1\r\nHost: clickadu.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aa.beeg.porn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.16\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-header-sub: Master\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z56I62txxAALDbTZELJRLNzl%2Badqbj3x9sqxU0LyA1GWsHjIMSxCiXHrCRENGqYJw%2BTwkTgNzID6yZvRk0isBc%2FEfCXcLuX45PS%2FSRK0rOljc9UxYQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98a63a589a7b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c79da15f422df09e108feabd68f9ea3","sha1":"4415c5cd125e889b721d74c7823afba47f7e8179","sha256":"b19b74974ece6f590f4a95bbbcc33b9e7c7e141feef38486df10037ef843b8d2","sha512":"c3d9a9e59e7671b77af1978fb449cd45abbdd59c18a6d46ecf6304893e9b3cc65200226db411942eae51e5f6cc788ae0a65cba6c8f8c746a680dfc338299876c","ssdeep":"","tlshash":"1f8000a0030088ef30e2a3e0f80ab0c38a2bea328c0c830000008a0b380f20c0323202","first_seen":"2025-05-14T00:26:21.944464Z","last_seen":"2026-01-26T08:51:06.43815Z","times_seen":18,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/check.html","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","date":"2025-10-06T15:35:19.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 06:11:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d0e8af-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_ftv_1\u0026jp=_cligettuzsdnmlhlkejkyf\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=vxZ6ZB7aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=EVqFPNraHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=4618927581125632\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /get/1975997?id=1975997\u0026pid=__clb-spot_1975997_ftv_1\u0026jp=_cligettuzsdnmlhlkejkyf\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=vxZ6ZB7aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=EVqFPNraHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=4618927581125632\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2; UID=2510061035a62b2a1801194ac2bdb2e6e6be; CHCK=1; PTS=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6440,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6440), with no line terminators","md5":"e1e054b6bf546a2099cb735783dc09b8","sha1":"6ceb419619896981290b620e38cfa30722b4b161","sha256":"478c32ca6d0c0b22bdd34779e2fc5f99a0774e5f58e211ed810cd1677f821cd1","sha512":"c47a728bf84005dd489e019804dde71e8d534a550aa5d6c454bac08ed9b9a90ceb8613c8ba69466c2e98e50c379299c7b42d0e631fffa574a64a412dc27e94a8","ssdeep":"192:a7ijYH3m7ijYH3C7ijYH3o7ijYH3WMAVijQo:amUXmmUXCmUXomUXkVi8o","tlshash":"50d1c937eadcda534af430d879618e04199d51003698b8e5c1cd517f60ec0a77ebef99","first_seen":"2025-10-06T15:35:52.062709Z","last_seen":"2025-10-06T15:35:52.062709Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bncloudfl.com/bn/7a5/da6/688/7a5da66884080f86879b3a7b1ca9bfada6546ef0.gif","fqdn":"cdn.bncloudfl.com","domain":"bncloudfl.com","tld":"com"},"ip":{"addr":"172.67.214.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.bncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 Aug 2025 19:01:20 GMT","end":"Tue, 11 Nov 2025 20:01:17 GMT"},"fingerprint":{"sha1":"29:44:DD:AF:32:F6:C2:7D:47:0F:40:7F:BD:76:2B:A9:42:9C:5C:25","sha256":"48:1B:19:EC:B5:73:A1:32:49:53:BE:64:6B:18:D7:AE:08:D1:81:82:7F:71:5A:D0:74:62:2C:9F:96:F9:72:1C"}}},"request":{"raw":"GET /bn/7a5/da6/688/7a5da66884080f86879b3a7b1ca9bfada6546ef0.gif HTTP/1.1\r\nHost: cdn.bncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/gif\r\ncontent-length: 498838\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: status=not_needed\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 5bd05f05f28b36e14afb1bff2417439c\r\nexpires: Wed, 08 Oct 2025 04:03:12 GMT\r\nlast-modified: Mon, 29 Sep 2025 12:11:13 GMT\r\nx-cdn-host-id: DS5951,DS5833\r\nx-openstack-request-id: txf3563701e9ec47078dcbf-0068da7769\r\nx-proxy-cache: HIT\r\nx-timestamp: 1759147872.34766\r\nx-trans-id: txf3563701e9ec47078dcbf-0068da7769\r\ncf-cache-status: HIT\r\nage: 41527\r\ncf-ray: 98a63a5c0ed60b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498838,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"5bd05f05f28b36e14afb1bff2417439c","sha1":"7a5da66884080f86879b3a7b1ca9bfada6546ef0","sha256":"a7dc59450aff3120d4e5b1ae67eb1cf198a575f9cb19f88968129377a9b434a6","sha512":"9184afc54dcff19cab78bc6032c3843a188b09dd078dea1697f03dc627b5696e37b299f31009a4bb2a56a3ea538a02a4e90cab90479cecce0e2cdc0957758987","ssdeep":"12288:um4JJxfmppwMPwMW12G08Vlcua9zakqryJGWJM7:um4ThmpM/zlcuA617","tlshash":"f5b423bc6305b216b8f4856a43e679183cd4a637f1280dc7a6bae207192fc7650d61bf","first_seen":"2025-10-01T09:43:14.267921Z","last_seen":"2025-10-08T03:33:54.000424Z","times_seen":10,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":36,"dns":3,"connect":2,"send":0,"wait":10,"receive":41,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/10/files/2e29/70c1/0ee8/200f/5e25/d313/f4e7/87af/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:20.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/10/files/2e29/70c1/0ee8/200f/5e25/d313/f4e7/87af/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11487\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 04 Nov 2023 12:02:23 GMT\r\netag: \"654632cf-2cdf\"\r\nexpires: Tue, 06 Oct 2026 15:35:20 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RmtJ1zOAVvpQTIM1Sr4rsGg62OWuyCQHKFckDBGfarHzgYXbG70e28xXqnPCK9wwUGIObJyfDG3hUH3MgfQE6J0%2Bc4HsaPs%3D\"}]}\r\ncf-ray: 98a63a60ff4556c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11487,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x180, components 3","md5":"2e2970c10ee8200f5e25d313f4e787af","sha1":"69b38014d349c84852aa720a3e7b8c413dccb0a8","sha256":"1d10f773dd9e4d914183b0d8cba419ca3145c489434a447f25e681522ec6ab6c","sha512":"59eaeffebbb736c03af5560a04b606ce9840eb253100d32309dbfe0a4e024edf973279d93e0c8ae8a9c4ed5291a81f6fc482ec6bd96364d8bebaa71b88e784de","ssdeep":"192:T7rof0WuKUgfnAcnwOsRqDXc5qZKi1jo+oAUZYIXUb5UrSMcRkH/KB:T7rR0UGAcEYg5qkiJoND3eMcRA/KB","tlshash":"0a32bfd338876472fc28c97f44b9009bab3e0744b98e0f6ead5b54342436c253b52ed6","first_seen":"2025-10-06T15:35:52.065294Z","last_seen":"2025-10-06T15:35:52.065294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/libs.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /libs.js?v=202503291755 HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"36baa79fb8a6a7de3d0af63ae01c8c55\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8z9s2vK24%2FtFGguoSzm%2FmVNOqyUHlyffbJVxeB5nVwBAbX0%2BWtLkPBfisQJkNSLJtfBPsv%2BHhEOMa5ijM0LWYSU6JGp9YDoo2M5XG4I%2FfrDAm5clyU2OrCWd%2F4hQBTT2AtYW2o%2FsOfnyPhHNKbQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 98a63a56cbaf0883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1431,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"cc9614070357853b50c7c52422e80ee9","sha1":"a5a353d8a81630ad02e585914e106da95b0b0fda","sha256":"a4387c06cd8e863daead916951e528d69f16be2efa295a5256339a5023c2134f","sha512":"08854f0c6bf47d1fa57760b3a8682f95a7053866d874aa034f9c9913e9ff5dbb65c70a3936014497b6092801e1c5e98cf39c3b5dd0b79b4b4c772597fa5d66ab","ssdeep":"","tlshash":"d82186882c4aa019c3f333249b576555fc5612063601ccd6fc6cca405fbdd98c4bbd4c","first_seen":"2025-03-29T16:56:08.532528Z","last_seen":"2026-01-17T13:48:46.716722Z","times_seen":257,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/11/files/09e9/6f99/b21c/2e18/6035/9ca6/ba3d/2d09/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/11/files/09e9/6f99/b21c/2e18/6035/9ca6/ba3d/2d09/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8634\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=93JBD%2Fo831tl91gQSaR28kxqVFX825ZtpYqEC90t1WvHsDUw76ZjpHXunhWw1UeL42yUY9Or9llorhTXEjGMZxBmO6FhObA%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=17463\r\netag: \"66c39c0d-4437\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Mon, 19 Aug 2024 19:25:01 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 547577\r\ncf-ray: 98a63a57ad6556c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8634,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"298e74ba9645dd76358f982ab93a146f","sha1":"96e33bb9511217c6d4b9b80afdad4801fc26619c","sha256":"229259602f70c27972522f83a961e7a00c47ad27cde64b6f50ce3ac6a83f2496","sha512":"3a0d9e68bf900aab6cca7f5adaa0da5fe0fa30e8f151db8db61152a49ea3cb49c938ddea3dc0725adb7c8edbda812d8f7e0296b996bc6638cc1441de771b9ee5","ssdeep":"192:hSzwyWh03zkQxpp3VMbtmYax6NLqII2fUo2nSlgn8dRmCzmPWOuo:n0AQxv85co2igE+WOuo","tlshash":"48028eb3ef1042e7d8fe07fc03a886d23666c0882da6974a7e1079604bf694d879574a","first_seen":"2025-10-06T15:35:52.067251Z","last_seen":"2025-10-06T15:35:52.067251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/12/files/cbe7/a8ee/a8b3/5f50/c571/70d6/b9c8/02a4/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/12/files/cbe7/a8ee/a8b3/5f50/c571/70d6/b9c8/02a4/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10568\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YkxIPwKbIAzdy2ZF4nWa4nw05nJl0ImTVaTSp5%2FLFTzc9PQAsVTYMaN%2F%2BsGnF61VmYF%2B2DcLspA4qMMK4PQbFGbU22l%2FCfg%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=10823\r\netag: \"673d4095-2a47\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Wed, 20 Nov 2024 01:51:17 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 261197\r\ncf-ray: 98a63a57ad6d56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10568,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"44506b14822921d24f868304a323e2c8","sha1":"b17dfb164ceeec85c41df9e2ef34d4ec86e494c6","sha256":"8db37fe1e62827e3d57ecb6d0cf48c64c0c5f0a4f87bca11f078c9faaf5af842","sha512":"d99067666272ecf865b37ffa104717b52b4f4cd5fe459678d83f3d4c3b239266f9e51a01d2594a4302d7be6df047d5fc1b3655669417daa6a3e9ad48112beb68","ssdeep":"192:eSECalaraZqQWZviTLRxktQ+ua28KMWzYP4qThJry2MSebPejWhPA:erdUJiQiva2mW8QeJwPbJA","tlshash":"f922d005737ef1a6a856507c49cc301ca36824f5be6790e94f566f0314fc3cee689a2c","first_seen":"2025-10-06T15:35:52.06931Z","last_seen":"2025-10-06T15:35:52.06931Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/metrika/tag_ww.js","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /metrika/tag_ww.js HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 83693\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncache-control: max-age=3600\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\nexpires: Mon, 06 Oct 2025 16:35:19 GMT\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\netag: \"68de5a06-146ed\"\r\nlast-modified: Thu, 02 Oct 2025 10:55:02 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251057,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"4e58cae18b3ef726b4b1bd099e9f0438","sha1":"5467d148ea0f4585c75c8a43ff13fd0272d47acf","sha256":"4385e1b284b60ab5400677455c34e21d7fe12cec554b822e50a1a05b815d4c84","sha512":"f41609fa97eed07700ec6f8c5a92c5912cfb8f3984f87a2ecaadc6568640cca93fe69fbde242ef76fbf4897521c307d2b6d6253072d3dae7af085e2a21e3ec51","ssdeep":"3072:2WjN+Rla8qz3Oph8msTVdBRQhB35+v5COAH8w6hjWpBF2tSR:2WjN+RB8Opams5dB+z35OS8wMWnFlR","tlshash":"8534e8d976827472937334b4a03f000bb1be6c96f14c8965e186e9d57e389ac9237f6c","first_seen":"2025-10-03T16:02:45.521856Z","last_seen":"2025-10-13T08:52:45.356463Z","times_seen":82,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":224,"receive":58,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /metrika/advert.gif HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\ntiming-allow-origin: *\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nstrict-transport-security: max-age=31536000\r\ncontent-type: image/gif\r\ncache-control: max-age=3600\r\naccept-ranges: bytes\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\naccess-control-allow-origin: *\r\netag: \"68de5a06-2b\"\r\nexpires: Mon, 06 Oct 2025 16:35:19 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:55:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":102,"dns":0,"connect":44,"send":0,"wait":45,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:19.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /metrika/advert.gif HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\ncontent-type: image/gif\r\nlast-modified: Thu, 02 Oct 2025 10:55:02 GMT\r\ncache-control: max-age=3600\r\naccess-control-allow-origin: *\r\netag: \"68de5a06-2b\"\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\nexpires: Mon, 06 Oct 2025 16:35:19 GMT\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A672673805%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A847310888%3Arqn%3A4%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C104%2C1%2C727%2C727%2C0%2C193%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918683%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(1)re(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/100522608?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A672673805%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A847310888%3Arqn%3A4%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C104%2C1%2C727%2C727%2C0%2C193%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918683%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(1)re(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nx-xss-protection: 1; mode=block\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nlocation: /watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A672673805%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A847310888%3Arqn%3A4%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C104%2C1%2C727%2C727%2C0%2C193%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918683%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29re%281%29aw%281%29cdl%28na%29eco%2883952128%29w2s%280%29ti%281%29\u0026redirnss=1\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\nset-cookie: yabs-sid=2568965661759764919; Path=/; SameSite=None; Secure\ni=0t73qC1oFrYCzLmT3oU1FVljcg3WxQozkWZZs4F5oqpn7tu63OEQRbJaC3bvyoOKK8MuGugvGdKFoLsL+5g6ejG6WhY=; Expires=Thu, 04-Oct-2035 15:35:17 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=6204413381759764919; Expires=Thu, 04-Oct-2035 15:35:17 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=6204413381759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1791300919.yrts.1759764919#1791300919.yrtsi.1759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A85886605%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A82900324%3Arqn%3A3%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C165%2C0%2C703%2C703%2C0%2C262%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918682%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29re%281%29aw%281%29cdl%28na%29eco%2883952128%29w2s%280%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A85886605%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A82900324%3Arqn%3A3%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C165%2C0%2C703%2C703%2C0%2C262%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918682%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29re%281%29aw%281%29cdl%28na%29eco%2883952128%29w2s%280%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aa.qwerty24.net\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 622\r\nx-xss-protection: 1; mode=block\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e7b2067ed39426a2ad3c36bd13fd956d","sha1":"51325c42c092ed2a6768d520bd7b44b6019b26ca","sha256":"12c3156cc1fa6b0c490762d64a54969e90fff0de6cdef1c173eb07caba3d8560","sha512":"15bad818eeeb463ce8bf45cb22ffb1b01f0566991d7a7853548eb71d0e921d308ce04028c4a5f7a0bc4791a77705ee4c758a5c916e23459d9c4510cf1754f078","ssdeep":"","tlshash":"f5f06206d8400df9054f1e60d59fb562204d30358cf073842c97e1e04e4fe323a07af5","first_seen":"2025-10-06T15:35:52.071642Z","last_seen":"2025-10-06T15:35:52.071642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/status.gif?nocache=1759764918679g69gow","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /status.gif?nocache=1759764918679g69gow HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 19 Jan 2025 09:31:57 GMT\r\netag: \"678cc68d-2b\"\r\ncf-cache-status: MISS\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s9aq9aGlXis1JrGJDSddmBbMYoNetPk4u4%2FPQhPyFOuB0UteCiAHMQTsDoxgVM3IkoeHnHkwfyR28dbTVXh%2FLDB%2Fjok%2F8jg%3D\"}]}\r\ncf-ray: 98a63a55ebbb56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 1 x 1","md5":"2c5f182a5005cfdeec4bd4071fad0e39","sha1":"f2ef139bca889c3e15449656ed65992de2deada1","sha256":"52aa9dc78b0daa1ea5bdec0d17e8acd7a4ea0c237d5c5a2398fcf530a62e9ff0","sha512":"c4b1584f8091c8900b2e175c362c5da40d28f374df0501f2b3ecc6b3049d6b980c39b536d6145d374f6a273d472e44fc8ee7c8b2578a3f0d1a6cb32be0df2c88","ssdeep":"","tlshash":"4890000bc2a00208c222c0b08888ab2a032a8022002a0b02000002aaae0ebb82e22800","first_seen":"2025-10-06T15:35:52.073533Z","last_seen":"2026-06-13T13:33:32.32618Z","times_seen":14,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":16,"dns":2,"connect":3,"send":0,"wait":58,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/desktop/?type=tube_index","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /desktop/?type=tube_index HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WTLW%2Bn6vi%2BEndcyZ3jYrcFtVYcd%2BYyxqusda60MyJziCsIRnJzdmDVZgiPEGZF4i0REblZRVd49Za%2F5qQ01qJhH1%2B%2Fbw%2BCdbirGWpDhV7g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 98a63a561d0d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19349,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7538), with CRLF line terminators","md5":"c867ea255534b7d2682f7bdeecc73c3f","sha1":"35e66adbbfb162b76d55804f568ef0b9f71cd872","sha256":"518426cd8379f0618f8bf1b72b78f273661ef7649c8bdca74a82343c9a6d7af0","sha512":"1826782f41f94a22fef50e59f4f1039dae9913089e834e298efb82d79507c0367ffc40fbab1aa8daedf26520bd0c719d36e746e953c3da837aa7e433e79d6a58","ssdeep":"384:7oRN1vHNbi0wJCL0nIxv7Qhs6Ofyjx8JSiMq0CeHghiS9fJ2m/P6xPEf:7oRN1TV7Qhu080iMq0CFhiS9fJ2m/P6U","tlshash":"c792a40c766675299133f275ae6f8908fb31a9db128281057d5cc0999f70829c777efc","first_seen":"2025-03-29T16:56:08.42811Z","last_seen":"2026-01-17T13:48:46.732975Z","times_seen":18,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":34,"dns":4,"connect":1,"send":0,"wait":40,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/8/files/be4c/4a5d/df3b/bf34/42db/e675/e004/dd3d/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/8/files/be4c/4a5d/df3b/bf34/42db/e675/e004/dd3d/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6478\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zni3OXtgJs1ZJD0j4%2FmJgzNwcud8E90eyy2ecPDwV2%2B%2B1mdq8yqK%2F9iZ9KgSmtE8SfocRvpReolpxFwT3IQNgoThkDuObcQ%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=7566\r\netag: \"651c5e38-1d8e\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Tue, 03 Oct 2023 18:32:24 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 694471\r\ncf-ray: 98a63a56ac6856c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6478,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x175, components 3","md5":"c0232f521e061a030b70718fcfe281ba","sha1":"2c8c1d35e783948554dc65f01de93ca28429aa70","sha256":"8b8c22cd0be749d80e260e186959d964353434d083274375d0a0b4b1d69f1ac9","sha512":"1fc4fcc419360f425bb0eae1a0242bd524f1b2ec81aaba539722dc074415a6b6035fc651e99e7668266039b9fd3638e05f552a772ed305a402179f72ee5ee7c2","ssdeep":"96:emoe781v6gf6GKPKr4rLIxVGW36aHFFMCK9dYj9jswdn2OFgWx+udJ5kxgt5FJ:/QoC6GKCr4r8vpxsCedYjRznrTKgbFJ","tlshash":"94d18f06afb9d3cee2a4d6f869cc0375a25d44fe79b822ad5a5430601f2e47107d164c","first_seen":"2025-10-06T15:35:52.077101Z","last_seen":"2025-10-06T15:35:52.077101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/12/files/69bf/6e5a/007d/b394/ab6f/d5bf/b60c/aaba/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/12/files/69bf/6e5a/007d/b394/ab6f/d5bf/b60c/aaba/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6538\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kMG%2BOiuvkpgSa%2Furw6TKWJJ752onWB4klPoLgvxrXIGw2qowYTy1fgsoJWoS958iK%2BovKEyOBzh1XFgHzVoGum3MjyI57jQ%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=17859\r\netag: \"6722d5d0-45c3\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Thu, 31 Oct 2024 00:56:48 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 9376\r\ncf-ray: 98a63a56ecbf56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6538,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"74a20cc259a973e6e2f2e2b9237daa08","sha1":"9e4fa66f794b4e94ab3d1bdc815f32156affe259","sha256":"b58433f92178c453ba872090368ffe03852687416126fe4d7c663d8823851976","sha512":"5bd5b31a2f53e4b9fce9e04807de451d9309519da8129a69cf91d20ed7d8c6f546fca94c43a8b5e5327f379dd36fb9ab461b54c77e137d26229933a54b9a9d32","ssdeep":"192:zZhYtLv8TNNUgw/+vHQksg54b48fQ1Pp7ApT:04TNNdf8fcxkt","tlshash":"04d17d87af3b8392cd3c65b063261e7c21c56d1ec252708857d1548069be8c2cf436be","first_seen":"2025-10-06T15:35:52.079258Z","last_seen":"2025-10-06T15:35:52.079258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/sm.25.html#type=core\u0026event=load","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/sm.25.html HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Emc%2BU3n8jv9OG8rGhzXki9iXMSWQpubu9DmTXz%2FBpFdj%2BQ3AGb%2BpZVoqyAMCBgbnDJWOgCyi7obXGhTVI%2BzTW6ydt2j63kw11Vb%2FrNyUYxC%2BtKkqTGImcEuIXQ%3D%3D\"}]}\r\netag: W/\"551efc5187c9f500b4e394155ba03720\"\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 5423\r\ncf-ray: 98a63a571c3b56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":716,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (624)","md5":"41b7ed0cbe240173eea85148fcba633e","sha1":"39acd5fe099974486a1c9ba11ba0fe7be6bc97ca","sha256":"274d4116239b63097bb7c16e56e27cbb5a77be20392fb8e2317c0a0235185cad","sha512":"1ee1d21b138a9f55f823b93d809b3bc58453ddfc3b3ee4d00a1010bbd4ec296546277c6777819cfb744c393ba93fe7578b60ccf0259fd17901f4542714d6c06f","ssdeep":"","tlshash":"c701448bf415382d9673172434e93d89d87e93609c402730b28f62e746c47e75b07b95","first_seen":"2024-01-05T10:14:09Z","last_seen":"2026-06-16T01:20:16.725068Z","times_seen":45148,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/status.js","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.beeg.porn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 08:48:46 GMT","end":"Sat, 15 Nov 2025 09:48:35 GMT"},"fingerprint":{"sha1":"8A:BF:7B:5C:A2:97:2E:37:4F:52:46:2F:49:23:79:93:5F:AA:53:AD","sha256":"94:33:17:BB:F7:2A:44:30:D6:0E:55:A0:78:A3:7E:A3:73:63:A3:40:1B:FF:E0:E2:B7:57:AC:8D:9B:D4:D8:16"}}},"request":{"raw":"HEAD /status.js HTTP/1.1\r\nHost: aa.beeg.porn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWOGHvFNQ%2Fx%2FLh36%2Fr%2FNqQjbadR915CiDitLtgXyrE1SelxnGhZdjs10T%2FvKwZIWZlLJk7BlwJ%2BNjvrh%2FwymlOG3S5y4xA3VbAasB6F3VdumiRmaR2GRQw%3D%3D\"}]}\r\netag: W/\"429187bdb4f8ff9e96446629ee3b1e5e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 98a63a575af3569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/metrika/tag_ww.js","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /metrika/tag_ww.js HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 83693\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\ncontent-type: application/javascript\r\nexpires: Mon, 06 Oct 2025 16:35:19 GMT\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\netag: \"68de5a06-146ed\"\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ntiming-allow-origin: *\r\nlast-modified: Thu, 02 Oct 2025 10:55:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251057,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"4e58cae18b3ef726b4b1bd099e9f0438","sha1":"5467d148ea0f4585c75c8a43ff13fd0272d47acf","sha256":"4385e1b284b60ab5400677455c34e21d7fe12cec554b822e50a1a05b815d4c84","sha512":"f41609fa97eed07700ec6f8c5a92c5912cfb8f3984f87a2ecaadc6568640cca93fe69fbde242ef76fbf4897521c307d2b6d6253072d3dae7af085e2a21e3ec51","ssdeep":"3072:2WjN+Rla8qz3Oph8msTVdBRQhB35+v5COAH8w6hjWpBF2tSR:2WjN+RB8Opams5dB+z35OS8wMWnFlR","tlshash":"8534e8d976827472937334b4a03f000bb1be6c96f14c8965e186e9d57e389ac9237f6c","first_seen":"2025-10-03T16:02:45.521856Z","last_seen":"2025-10-13T08:52:45.356463Z","times_seen":82,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":90,"dns":0,"connect":49,"send":0,"wait":230,"receive":42,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /metrika/advert.gif HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nexpires: Mon, 06 Oct 2025 16:35:19 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:55:02 GMT\r\ncache-control: max-age=3600\r\nstrict-transport-security: max-age=31536000\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\netag: \"68de5a06-2b\"\r\ncontent-type: image/gif\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/status.js","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/mobile/?type=tube_index","date":"2025-10-06T15:35:18.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.beeg.porn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 08:48:46 GMT","end":"Sat, 15 Nov 2025 09:48:35 GMT"},"fingerprint":{"sha1":"8A:BF:7B:5C:A2:97:2E:37:4F:52:46:2F:49:23:79:93:5F:AA:53:AD","sha256":"94:33:17:BB:F7:2A:44:30:D6:0E:55:A0:78:A3:7E:A3:73:63:A3:40:1B:FF:E0:E2:B7:57:AC:8D:9B:D4:D8:16"}}},"request":{"raw":"HEAD /status.js HTTP/1.1\r\nHost: aa.beeg.porn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWOGHvFNQ%2Fx%2FLh36%2Fr%2FNqQjbadR915CiDitLtgXyrE1SelxnGhZdjs10T%2FvKwZIWZlLJk7BlwJ%2BNjvrh%2FwymlOG3S5y4xA3VbAasB6F3VdumiRmaR2GRQw%3D%3D\"}]}\r\netag: W/\"429187bdb4f8ff9e96446629ee3b1e5e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 98a63a576d4449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/metrika/tag_ww.js","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/mobile/?type=tube_index","date":"2025-10-06T15:35:18.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /metrika/tag_ww.js HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 83693\r\ncontent-type: application/javascript\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\nexpires: Mon, 06 Oct 2025 16:35:19 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ntiming-allow-origin: *\r\ncache-control: max-age=3600\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 02 Oct 2025 10:55:02 GMT\r\ncontent-encoding: br\r\netag: \"68de5a06-146ed\"\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251057,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"4e58cae18b3ef726b4b1bd099e9f0438","sha1":"5467d148ea0f4585c75c8a43ff13fd0272d47acf","sha256":"4385e1b284b60ab5400677455c34e21d7fe12cec554b822e50a1a05b815d4c84","sha512":"f41609fa97eed07700ec6f8c5a92c5912cfb8f3984f87a2ecaadc6568640cca93fe69fbde242ef76fbf4897521c307d2b6d6253072d3dae7af085e2a21e3ec51","ssdeep":"3072:2WjN+Rla8qz3Oph8msTVdBRQhB35+v5COAH8w6hjWpBF2tSR:2WjN+RB8Opams5dB+z35OS8wMWnFlR","tlshash":"8534e8d976827472937334b4a03f000bb1be6c96f14c8965e186e9d57e389ac9237f6c","first_seen":"2025-10-03T16:02:45.521856Z","last_seen":"2025-10-13T08:52:45.356463Z","times_seen":82,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":186,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/13/files/b771/258d/c484/b467/82a8/be65/42e2/dc12/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/13/files/b771/258d/c484/b467/82a8/be65/42e2/dc12/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7313\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 29 Jun 2025 19:25:04 GMT\r\netag: \"68619310-1c91\"\r\nexpires: Tue, 06 Oct 2026 15:35:19 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPMIfbvXx4Oyc1tE7DSHbpzCkgiJO%2FJOzB6egZGQAy%2FkntUD04S43x0SJGIKwNMv0mPpo%2BmR4ui4vIyy%2BLv%2BxPQucKlGCgg%3D\"}]}\r\ncf-ray: 98a63a57ad6c56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7313,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 288x162, components 3","md5":"b771258dc484b46782a8be6542e2dc12","sha1":"7368f90f4ad4192c897406ef7c9c2fcfb33eeb4e","sha256":"71f37937005ae56a4b580217d8f36c03dbb69e3e5bba84f05f1b122f34d9004e","sha512":"3f178d42016f610f61eaeba1d4d757ec8fb73ee5c2b7296f8f2023ca61325a57fe8c2a2381b72df557d8c88d23cf275550d283dfbaf59bfe544bcce2e768df77","ssdeep":"192:NoqcBwu58/EYNPQEqII6vaIPd/ZkQswzCMkIDAt:N03ANPo6vD/4wmMlAt","tlshash":"5de19fa63e6406e3d9ebf83c446e226705045c6bfac9031f09a953bf1da75519be80f8","first_seen":"2025-10-06T15:35:52.081631Z","last_seen":"2025-10-06T15:35:52.081631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A312851241%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A649704075%3Arqn%3A5%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C137%2C2%2C687%2C687%2C0%2C253%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918684%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(1)re(1)aw(1)cdl(na)eco(83952128)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/100522608?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A312851241%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A649704075%3Arqn%3A5%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C137%2C2%2C687%2C687%2C0%2C253%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918684%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(1)re(1)aw(1)cdl(na)eco(83952128)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nset-cookie: yabs-sid=2671133671759764919; Path=/; SameSite=None; Secure\ni=U38OtpdhhE5K5cgseu8mYAhUHPaGDju0czsXC2bKz0OxKhv6NlUlXTaw9o4O7kalLLHzMApRmg4R4HjgWx56BopPdyU=; Expires=Thu, 04-Oct-2035 15:35:17 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=7879700011759764919; Expires=Thu, 04-Oct-2035 15:35:17 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=7879700011759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1791300919.yrts.1759764919#1791300919.yrtsi.1759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\nstrict-transport-security: max-age=31536000\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nlocation: /watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A312851241%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A649704075%3Arqn%3A5%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C137%2C2%2C687%2C687%2C0%2C253%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918684%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29re%281%29aw%281%29cdl%28na%29eco%2883952128%29ti%281%29\u0026redirnss=1\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sacwumsf.com/en/oqwobr?sy=476633\u0026wmr=497504\u0026kubm=224581\u0026vpzf=989552\u0026id=1975997\u0026zp=_pnaczfjbjkcscmcagabcnp\u0026mly=1\u0026hx=qnnd\u0026ag=782171\u0026oyrk=149224\u0026rch=604416\u0026tksxec=705443\u0026an=3","fqdn":"sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Thu, 03 Jul 2025 23:17:13 GMT","end":"Tue, 30 Dec 2025 22:59:00 GMT"},"fingerprint":{"sha1":"BE:0F:B3:AB:65:72:6D:3D:A7:A8:5D:51:50:DC:FF:DA:02:74:0F:AD","sha256":"79:64:10:CC:73:5F:CE:C0:5D:BB:D7:95:7F:2D:4C:BC:A1:BD:04:10:0F:9B:14:3A:A1:91:8F:7F:3B:E4:EC:83"}}},"request":{"raw":"GET /en/oqwobr?sy=476633\u0026wmr=497504\u0026kubm=224581\u0026vpzf=989552\u0026id=1975997\u0026zp=_pnaczfjbjkcscmcagabcnp\u0026mly=1\u0026hx=qnnd\u0026ag=782171\u0026oyrk=149224\u0026rch=604416\u0026tksxec=705443\u0026an=3 HTTP/1.1\r\nHost: sacwumsf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nUID=251006103575513f9615844955935c1549f0; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":465,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (465), with no line terminators","md5":"e6e451c6c559c4f8b3bf49831f4d1c4d","sha1":"bcf77aaedc61a4a9f78e983837df249703af62dd","sha256":"715f6f7a2e20ac1889e9a94d01b384eac2cc96eb3eb37f13cc188800da252179","sha512":"c1a8459e18d521e83f72329c459d3b9a1fd1eb604e2bddb5c98c94d99d52db8186132890337283058d9a3499b1474563ffe4639fbdb4a1a841c1b9a981b8c6dd","ssdeep":"","tlshash":"f7f0dcf179e7c0b0e69618c35e62ac994985b93c0f03d1129c4704c1a3ea9004c92d10","first_seen":"2025-10-06T15:35:52.083556Z","last_seen":"2025-10-06T15:35:52.083556Z","times_seen":1,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":85,"dns":0,"connect":21,"send":0,"wait":20,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/67973812/1?page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1759764919_c141e4fdb146cb7e35415e962a26758388b14a062167c862bc51ef506e1d8f1a\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A2%3Adp%3A0%3Als%3A1038502051864%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A285073402%3Arqn%3A2%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1545%2C1545%2C0%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)cdl(na)eco(83953156)oms(0)prs(2)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22web_type%22%3A%22tube%22%2C%22web_type_detail%22%3A%22tube_index%22%2C%22web_domain%22%3A%22redporn.me%22%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:20.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/67973812/1?page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1759764919_c141e4fdb146cb7e35415e962a26758388b14a062167c862bc51ef506e1d8f1a\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A2%3Adp%3A0%3Als%3A1038502051864%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A285073402%3Arqn%3A2%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1545%2C1545%2C0%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)cdl(na)eco(83953156)oms(0)prs(2)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22web_type%22%3A%22tube%22%2C%22web_type_detail%22%3A%22tube_index%22%2C%22web_domain%22%3A%22redporn.me%22%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\naccess-control-allow-credentials: true\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: bh=YLjDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:20 GMT; SameSite=None; Secure\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nlast-modified: Mon, 06-Oct-2025 15:35:20 GMT\r\naccess-control-allow-origin: https://redporn.me\r\nexpires: Mon, 06-Oct-2025 15:35:20 GMT\r\ncontent-type: image/gif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aa.qwerty24.net/mobile/?type=tube_index","date":"2025-10-06T15:35:18.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.beeg.porn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 08:48:46 GMT","end":"Sat, 15 Nov 2025 09:48:35 GMT"},"fingerprint":{"sha1":"8A:BF:7B:5C:A2:97:2E:37:4F:52:46:2F:49:23:79:93:5F:AA:53:AD","sha256":"94:33:17:BB:F7:2A:44:30:D6:0E:55:A0:78:A3:7E:A3:73:63:A3:40:1B:FF:E0:E2:B7:57:AC:8D:9B:D4:D8:16"}}},"request":{"raw":"GET /ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me HTTP/1.1\r\nHost: aa.beeg.porn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjAyeKWfCjP2uQD4JBKS1p2xXprMK2Srsm1fquDtBU4T2%2FhS8sfz4Hw8Rwg6h6vRI8Xun8q9G4AOhmep4GIa8OUsFjoLpmdX3es%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 98a63a574ae5569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9001,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6678), with CRLF line terminators","md5":"2da426f5fe922b77164525adf0393b28","sha1":"d8cdc93a03cfb24ddf36486089650da755fe65e6","sha256":"f22c3988cd0ccad6b65dc26cb7ef5a15cce29f93f8d332a1cd9d9583a6232a62","sha512":"71ebca89d61c9b7f5bda574bdaa76c93078630cee4233aa2fbe3cfa3514e444585b0715f40c00f5810ffdb36e76c3feb4b46711533ac2c33b043898a9e5ca0e8","ssdeep":"192:7gyHcJARhLDVLiHwwZM2xdMrmutAo2iMIwGbwJaEgeHL9TIdKbJoYrS7wMg:7teAjoHwW/ODt12iwGbwULmOwbDrSo","tlshash":"e8023c757282aa6a03f240d280ffb550d43e5a167545c488f1ec68833aa67c5d1f3f7e","first_seen":"2025-06-06T07:37:21.24014Z","last_seen":"2025-10-24T13:32:44.585733Z","times_seen":3,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/desktop/?type=tube_index","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /desktop/?type=tube_index HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NSeTOR%2F0WcfGScdA9P6EwYMx964xR4HARhrYdjmZ2g8V0c%2BaFxUvR3yU6yVZfMqy2vuSA2u7vTvk%2F7%2B6a0Hk6Fq2pa%2BF%2B0GrS5I1OHfb6w%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 98a63a563d728be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19349,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7538), with CRLF line terminators","md5":"c867ea255534b7d2682f7bdeecc73c3f","sha1":"35e66adbbfb162b76d55804f568ef0b9f71cd872","sha256":"518426cd8379f0618f8bf1b72b78f273661ef7649c8bdca74a82343c9a6d7af0","sha512":"1826782f41f94a22fef50e59f4f1039dae9913089e834e298efb82d79507c0367ffc40fbab1aa8daedf26520bd0c719d36e746e953c3da837aa7e433e79d6a58","ssdeep":"384:7oRN1vHNbi0wJCL0nIxv7Qhs6Ofyjx8JSiMq0CeHghiS9fJ2m/P6xPEf:7oRN1TV7Qhu080iMq0CFhiS9fJ2m/P6U","tlshash":"c792a40c766675299133f275ae6f8908fb31a9db128281057d5cc0999f70829c777efc","first_seen":"2025-03-29T16:56:08.42811Z","last_seen":"2026-01-17T13:48:46.732975Z","times_seen":18,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":55,"dns":1,"connect":2,"send":0,"wait":26,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/desktop/?type=tube_index","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /desktop/?type=tube_index HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FM2o2s8DbVlzRcSWhGw52x%2BlF2STCw1mbStWVHHYkAOw08FO4%2FYpyYotZy1tJhoIWDC%2Faf4oNI5L%2BggN%2Bax2Wxur0H4TNpT2EiHePZkvRw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 98a63a563d868be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19349,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7538), with CRLF line terminators","md5":"c867ea255534b7d2682f7bdeecc73c3f","sha1":"35e66adbbfb162b76d55804f568ef0b9f71cd872","sha256":"518426cd8379f0618f8bf1b72b78f273661ef7649c8bdca74a82343c9a6d7af0","sha512":"1826782f41f94a22fef50e59f4f1039dae9913089e834e298efb82d79507c0367ffc40fbab1aa8daedf26520bd0c719d36e746e953c3da837aa7e433e79d6a58","ssdeep":"384:7oRN1vHNbi0wJCL0nIxv7Qhs6Ofyjx8JSiMq0CeHghiS9fJ2m/P6xPEf:7oRN1TV7Qhu080iMq0CFhiS9fJ2m/P6U","tlshash":"c792a40c766675299133f275ae6f8908fb31a9db128281057d5cc0999f70829c777efc","first_seen":"2025-03-29T16:56:08.42811Z","last_seen":"2026-01-17T13:48:46.732975Z","times_seen":18,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":57,"dns":1,"connect":2,"send":0,"wait":27,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_msh_1\u0026jp=_cluojxsvlbncocbnavsmse\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=CuJcXOJaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=6YOiMSXaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=7715152324938240\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /get/1975997?id=1975997\u0026pid=__clb-spot_1975997_msh_1\u0026jp=_cluojxsvlbncocbnavsmse\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=CuJcXOJaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=6YOiMSXaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=7715152324938240\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: UID=251006103552a4e981c1ad4f60ac9b8a6cf7; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":489,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (489), with no line terminators","md5":"923ac785bb6d9579608e5a16b141773a","sha1":"ee78aa91de9b9c4312e3b3655b5a714dfaa6ba6e","sha256":"7da451b39795919fc818077fa036832d64261b8c829a0fed49e01290d7f6f161","sha512":"480ba270cd017759d387641b0599bd75e737fba55d4958f7f41212a3b319c65c779a25166654725fef99dfa1d0c2564ea6ad847b9390f9d87c583a54f943ef9e","ssdeep":"","tlshash":"e7f054616a41c5c840d2170c5efd2bc20ac4b304993710bb1728054cd284d371b9750b","first_seen":"2025-10-06T15:35:52.086715Z","last_seen":"2025-10-06T15:35:52.086715Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_msh_1\u0026jp=_cluojxsvlbncocbnavsmse\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=CuJcXOJaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=ltFIcAwaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=1241227860635136\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /get/1975997?id=1975997\u0026pid=__clb-spot_1975997_msh_1\u0026jp=_cluojxsvlbncocbnavsmse\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=CuJcXOJaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=ltFIcAwaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=1241227860635136\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2; UID=2510061035a62b2a1801194ac2bdb2e6e6be; CHCK=1; PTS=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6518,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6518), with no line terminators","md5":"e16645cc5e6f74244dcafa1c8ee8515c","sha1":"d595a0f311a76c4ca8a0ea49e06681638f08f398","sha256":"a265bc641dbda0592da1da381103c6277404538dfef52b0f3c4c9f9869416215","sha512":"67b07b9593e79f171617befc4cd99f56c78bf7e8cb9a403e37b7261a27f4025b25f6623993c4c4d9e1e1d5f032422b79c32f1bfffd37b12847a33dec5d639025","ssdeep":"96:VSLGX2ea3+8H/ITv0GX2ea3+8H/I0GX2ea3+8H/IiGX2ea3+8H/I1G7FdjGzWJo:g6X8HgTvDX8HgDX8HglX8HgI7FdSEo","tlshash":"6bd11bc0720fb84a941254be5da97e340eb2ced51fcec376b985ec56883882c4922d2f","first_seen":"2025-10-06T15:35:52.088449Z","last_seen":"2025-10-06T15:35:52.088449Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/556/116/bfa/556116bfa96d6b796350549740e616cb73ed2aba.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/556/116/bfa/556116bfa96d6b796350549740e616cb73ed2aba.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 756510\r\ncf-ray: 98a63a5c0c0b56a4-OSL\r\nx-amz-id-2: ob8Acb61oatk6SjK6Py+Bw4g2/RfjBxOm3tryDm9BGDzuKL3OYcrmfn0Fpi5VShDFpS/YoJKijZuY1twUJymM6eN/GTP+HLYFOza23ibe58=\r\nx-amz-request-id: 9TWSCVDVXRSYCVD2\r\nlast-modified: Wed, 25 Jun 2025 13:28:33 GMT\r\netag: \"f4b92fbf335b4b867319d40ff6201279\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 489\r\ncontent-range: bytes 0-756509/756510\r\nexpires: Thu, 06 Nov 2025 15:35:19 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":756510,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"f4b92fbf335b4b867319d40ff6201279","sha1":"556116bfa96d6b796350549740e616cb73ed2aba","sha256":"f3f9d4c032218a6e1c0de3a18c20bbd88f3ed479d5fb85c3f2ed2010b414856e","sha512":"b56f8773f825cf7b17265798a8a2b286fa82d6c827d84f08acf564658a8688473e02967dd9cffb48abf50d6069889b18fcf45a6374a6eff2a4d7db068f0613fb","ssdeep":"12288:hWHNQuL0ldiNq+04LpcO0ICd+GDSK/qrEE1ZG16tSBNHSYGaxFmV6F/eyKd/D:6NQuL0Huq+04SXXb43SkwNHJGazm0vOL","tlshash":"e5f423b609aa38a3f884583b74db511e544d8a13a7fcc6973bbd68b18f745c30f19c86","first_seen":"2025-10-06T15:35:52.090084Z","last_seen":"2025-10-12T08:33:18.553601Z","times_seen":11,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":11,"receive":22,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/6/files/37b3/5a39/ab85/4fe9/c631/c566/b1c5/97bb/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:20.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/6/files/37b3/5a39/ab85/4fe9/c631/c566/b1c5/97bb/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8572\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 26 Sep 2023 23:26:33 GMT\r\netag: \"651368a9-217c\"\r\nexpires: Tue, 06 Oct 2026 15:35:20 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fspta%2FQ7WllFd3UT61DS5CGtZ4QjryMQwIoaf1DTSW2%2BOjT8G9W1tpsrbaos4bGdyfRvvPO2RB2e0I34at4WAhzKa%2FvZWYw%3D\"}]}\r\ncf-ray: 98a63a60ff4956c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8572,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 288x162, components 3","md5":"37b35a39ab854fe9c631c566b1c597bb","sha1":"d0a498f2970ec7477eb4287d24a3ad21058ff4f7","sha256":"ec5b94540a9c950ef4cb623c228bae5bbef5cc162504d33d9ceb01be982c5023","sha512":"cf30cccda4c5248b645e4f216239d841e7105a661007f184fdf3e5130b17cb16e5544e08e4cbb7df42c2c86be07a75471c6277723b40e54279dd1e1d5e070a68","ssdeep":"192:N4048VbzLMcefoaVF0d3DhLYiBnN31KMiM3:N4uVbzLM3xVF0jLY4MML3","tlshash":"7602ae177c172e4cd85fe63240aaea5b6781b8f2374042efd6f099b679038062d76571","first_seen":"2025-10-06T15:35:52.091787Z","last_seen":"2025-10-06T15:35:52.091787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/1/files/d4f9/2a1d/e931/fa6f/6137/4bb0/e1b9/2d8c/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/1/files/d4f9/2a1d/e931/fa6f/6137/4bb0/e1b9/2d8c/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12303\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1h3ItBVX7o%2FOKxWDeF%2FDvNw%2FtN2ndqDNPDI0ktVWEhaJ5hxKv3vfuEi81YD%2Bvv1Bobh3qm5Ted4VpHiNwJ2IR%2BhQyf72erE%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=12532\r\netag: \"6530d68c-30f4\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Thu, 19 Oct 2023 07:11:08 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 9376\r\ncf-ray: 98a63a56ac6b56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12303,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"26d9ab4ac5761e954958a2314cb3fa9d","sha1":"598528ec490f8985444240ad329f659a5b11ecc1","sha256":"db5ff55ed3b0ab04d231991974315c08cdbbf38e3249de56d723c64e18485969","sha512":"e022bb0fc387bbc1548867281bc85c964e9efd8e680f62ff9bbae761d1f5cc628d14e381d3bb5ed2ec32c617f64601b167ef1cd80f26d75f9d9c484888fd0d96","ssdeep":"192:IFDmTiVqSzKc0O5GEygJwwVmTcrxdNJJyRxC84ZiRDmQxq0/PB:INfxbwwj9dNJeM84Zp+","tlshash":"6b42d03c4b19754e5a2d17b68f3e361bbf0e66cb22da10304340d845b8ed906cbc46b7","first_seen":"2025-10-06T15:35:52.09326Z","last_seen":"2025-10-06T15:35:52.09326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/12/files/49ac/b161/c9a0/2feb/79df/e046/817b/89f1/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/12/files/49ac/b161/c9a0/2feb/79df/e046/817b/89f1/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17184\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xBwgEniFKCv058LNWY9ed04ir6W9hZW6qfipqpgQtvDG0290WLSQOFikmRbXuuxBGzNWY1jYqVKGy00ymFf%2BfxkZKQuwaKI%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=63664\r\netag: \"67367284-f8b0\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Thu, 14 Nov 2024 21:58:28 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 9376\r\ncf-ray: 98a63a56ecc956c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17184,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x225, components 3","md5":"7842166f36c11e33e49db07a0caa6123","sha1":"4a4843676834e46542cb287c2306f762e0cc33e0","sha256":"21b502498b0afba7ec0d7f9caa656a1572abfebb2beffb8d2951b5caa67070ce","sha512":"cb36a73986a7a102e2b135c735c0bf303ae9926c9c4b04fb97842b4c94613423d45b0e84c400e5018c0d6d824be78550a15358137bf293397acd01bb6519c9b0","ssdeep":"384:Cz044DBglOccCcYfl8Dtn7sCMLTPMkCSN+FtmdoaL:Cz0jVglOccCcGsnQNLwkCe/L","tlshash":"3772d0cfed62c0570e441525e9641a0a130f9b1bef580aa5dfd43db0adf93d24fa4964","first_seen":"2025-10-06T15:35:52.094749Z","last_seen":"2025-10-06T15:35:52.094749Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A85886605%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A82900324%3Arqn%3A3%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C165%2C0%2C703%2C703%2C0%2C262%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918682%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(1)re(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/100522608?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A85886605%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A82900324%3Arqn%3A3%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C165%2C0%2C703%2C703%2C0%2C262%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918682%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(1)re(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\nset-cookie: yabs-sid=1872385031759764919; Path=/; SameSite=None; Secure\ni=J8C5ESoixnV70fE1lmkwT6ukQkgLuPvK7lIbBCmZVb98pPnmkwqBiK1YbxK4d+FIp7xGWhRcmppvg6uCkxKUTOZVQjU=; Expires=Thu, 04-Oct-2035 15:35:17 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=6581499151759764919; Expires=Thu, 04-Oct-2035 15:35:17 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=6581499151759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1791300919.yrts.1759764919#1791300919.yrtsi.1759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\nlocation: /watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A85886605%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A82900324%3Arqn%3A3%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C165%2C0%2C703%2C703%2C0%2C262%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918682%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29re%281%29aw%281%29cdl%28na%29eco%2883952128%29w2s%280%29ti%281%29\u0026redirnss=1\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/97686631/1?page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026hittoken=1759764919_ed62be7925961f89c4c63398ab81c7f1e432dc3a3f456e2fd91a01c4ec7d4ead\u0026browser-info=nb%3A1%3Acl%3A135%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A971747173601%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A167894277%3Arqn%3A2%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1545%2C1545%2C0%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)cdl(na)eco(83953156)oms(0)prs(1)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:34.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/97686631/1?page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026hittoken=1759764919_ed62be7925961f89c4c63398ab81c7f1e432dc3a3f456e2fd91a01c4ec7d4ead\u0026browser-info=nb%3A1%3Acl%3A135%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A971747173601%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A167894277%3Arqn%3A2%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1545%2C1545%2C0%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)cdl(na)eco(83953156)oms(0)prs(1)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\nset-cookie: bh=YMbDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:34 GMT; SameSite=None; Secure\r\npragma: no-cache\r\nlast-modified: Mon, 06-Oct-2025 15:35:34 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nstrict-transport-security: max-age=31536000\r\ncontent-type: image/gif\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://redporn.me\r\nexpires: Mon, 06-Oct-2025 15:35:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975998?id=1975998\u0026pid=__clb-spot_1975998_adj_1\u0026jp=_clmjuertkdufnshhtjuasv\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=nQrsmzLaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=kdA9G7AaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDEwMC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=7715152324958720\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","date":"2025-10-06T15:35:19.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /get/1975998?id=1975998\u0026pid=__clb-spot_1975998_adj_1\u0026jp=_clmjuertkdufnshhtjuasv\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=nQrsmzLaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=kdA9G7AaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDEwMC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=7715152324958720\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2; UID=2510061035a62b2a1801194ac2bdb2e6e6be; CHCK=1; PTS=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6450,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6450), with no line terminators","md5":"b660d1a2c68905760accd282bd309a25","sha1":"18f66a007b6d1b5efa1045b521c7d10f8b7b014e","sha256":"af3d1fddb019d93914376add6c2a56245c8c9616ff96a0772e3cbe2c647adb6b","sha512":"98e329d9db76f59b1c594540791ea2baefac302456dee54b76b0d3ed2e0ee4c002f7cbe93cafbe4dc5e77d5d333e9758659bf10442a9c22bfbc516f35cbe7c21","ssdeep":"192:0CqIqT5UeCqIqT5UfCqIqT5U9hCqIqT5UqgMo:KuAutuFuqRo","tlshash":"1ed1f9f4387c672f1ca8698c414848757681298a3ee7d91cff224fd38c85865dabb0d5","first_seen":"2025-10-06T15:35:52.096473Z","last_seen":"2025-10-06T15:35:52.096473Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=nb%3A1%3Acl%3A198%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A312851241%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A1039035041%3Arqn%3A15%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764918684%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(3)re(1)aw(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:34.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=nb%3A1%3Acl%3A198%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A312851241%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A1039035041%3Arqn%3A15%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764918684%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(3)re(1)aw(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\ncontent-type: image/gif\r\nlast-modified: Mon, 06-Oct-2025 15:35:34 GMT\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\naccess-control-allow-credentials: true\r\nset-cookie: bh=YMbDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:34 GMT; SameSite=None; Secure\r\nstrict-transport-security: max-age=31536000\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\nexpires: Mon, 06-Oct-2025 15:35:34 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickadu.qwerty24.net/?c=track\u0026zone_id=1975998\u0026t=1759764919\u0026rf=0","fqdn":"clickadu.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"172.67.143.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","date":"2025-10-06T15:35:19.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:11:30 GMT","end":"Thu, 01 Jan 2026 21:10:05 GMT"},"fingerprint":{"sha1":"2B:F1:86:15:26:34:BB:D0:75:87:8A:BC:CB:26:1D:B2:3C:7F:D1:CB","sha256":"88:90:CA:7F:05:95:2D:02:FE:D1:7D:0E:94:C4:9B:EA:36:EB:29:3F:F9:27:60:5C:69:C3:A9:C3:E3:9E:3C:31"}}},"request":{"raw":"GET /?c=track\u0026zone_id=1975998\u0026t=1759764919\u0026rf=0 HTTP/1.1\r\nHost: clickadu.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aa.beeg.porn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.16\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-header-sub: Master\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q94bGmB4dWNr2VgWsIRYH7aercoWPmbJylaq43gjwvz3KtfPfjYc%2FD6Y0RfAULpSy85jvXySyUMeB6Ozkr2hnjDx9i8HyAVcLXw654G5RZHYWqlEKg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98a63a589a7d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b46adfe15d5f8c62a7e2d77ad11d5d14","sha1":"31a4e6db4111546402e1fda9d43e772af916f3f3","sha256":"ce5f79e192db6282056e14dc64c226ce1187cd829a1d8785a4ab29e09739c434","sha512":"6c4c7d64315482965766130be63aa5aca03a4a7a8e5fa6638b969e4e677fb8a236a501f8c967711179bb3f499546a39c8dfbcf99fc2a3f78da871468e42c516e","ssdeep":"","tlshash":"558000e0030008ef30e2a2e0f808b0ca8a2bea22ac0c830080088a0b3c0f2082323203","first_seen":"2025-10-06T15:35:52.098314Z","last_seen":"2025-12-05T23:43:00.974752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sacwumsf.com/static/video/bn/7d1/f95/cd0/7d1f95cd0c31764ea9e7d368ca9d952eca2c6166.mp4","fqdn":"www.sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Thu, 03 Jul 2025 23:17:13 GMT","end":"Tue, 30 Dec 2025 22:59:00 GMT"},"fingerprint":{"sha1":"BE:0F:B3:AB:65:72:6D:3D:A7:A8:5D:51:50:DC:FF:DA:02:74:0F:AD","sha256":"79:64:10:CC:73:5F:CE:C0:5D:BB:D7:95:7F:2D:4C:BC:A1:BD:04:10:0F:9B:14:3A:A1:91:8F:7F:3B:E4:EC:83"}}},"request":{"raw":"GET /static/video/bn/7d1/f95/cd0/7d1f95cd0c31764ea9e7d368ca9d952eca2c6166.mp4 HTTP/1.1\r\nHost: www.sacwumsf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 767707\r\nlast-modified: Mon, 15 Sep 2025 18:49:47 GMT\r\netag: \"68c85fcb-bb6db\"\r\nexpires: Fri, 05 Dec 2025 15:35:19 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-767706/767707\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":767707,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"b039a860bbf83a2fa338da3d46dcb440","sha1":"7d1f95cd0c31764ea9e7d368ca9d952eca2c6166","sha256":"0cb364528375cb297222e4647669d557f2ddb97583f80af4701cd2d78279e8e2","sha512":"7fe8478f186789664185af49e49f70033a3ca866d9c4f6e7a236241eddcae234f22e3e4c7b65069adb91b8de7125510f78c7ef8cdaf3fe488449442b9378073b","ssdeep":"12288:ZkO5CctvMCCFjeNPDLlYEn6c8aI4JVF2caTypYk09Zxq9O8a6gDhFkO:ZkOcclMCCFGPjnr8kJV01TypYk09rqdQ","tlshash":"7af4233792890433e4917371f7d4b6832f3ded9526b81ee33b9ccb62ab4e10959689d0","first_seen":"2025-10-06T15:35:52.099838Z","last_seen":"2025-10-14T09:50:18.872389Z","times_seen":12,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/14/files/7f1a/2447/731f/71df/9357/8263/f7c1/f99b/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/14/files/7f1a/2447/731f/71df/9357/8263/f7c1/f99b/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8179\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RmiucwbPQsgeFC7uvIgd8FsWvCZe2O5O7PLni1gvhrbAayeiUMFwpeDf3HkFMJX4mLwHiiHRjkxMQ4AW%2BBH0YB6URa7cnvs%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=9014\r\netag: \"68d2f3f9-2336\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Tue, 23 Sep 2025 19:24:41 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 9377\r\ncf-ray: 98a63a56ac6a56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8179,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"0f52159abd2aa21a9173ec2c1f67755c","sha1":"22f85056d5ff74b0a01ed1f620d47c448357fbf6","sha256":"1dd695d9321e69061accad06d8a95bed03f31fc096fde17fc2127e930cef1bc0","sha512":"f99f7b674e87f82d5dd6eb70fdbe05cdb9e31c62d00c78e598f19689a2d8b5e72c7e22dd19e96b17926263030dd6202ea671d5874c8deb4184902004d0ca7ff8","ssdeep":"192:TZd0unhwgJmwxJeejOYhnCt/TKUQZDtYRakcAuHCu:TZeuOgJXJe7t7BQFtQjmHCu","tlshash":"1cf1a01adb59a5a6c0fed13f1344e19e226471b3df3457c1754a76402a60483db8d5f3","first_seen":"2025-10-06T15:35:52.101413Z","last_seen":"2025-10-06T15:35:52.101413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/libs.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /libs.js?v=202503291755 HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"36baa79fb8a6a7de3d0af63ae01c8c55\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8z9s2vK24%2FtFGguoSzm%2FmVNOqyUHlyffbJVxeB5nVwBAbX0%2BWtLkPBfisQJkNSLJtfBPsv%2BHhEOMa5ijM0LWYSU6JGp9YDoo2M5XG4I%2FfrDAm5clyU2OrCWd%2F4hQBTT2AtYW2o%2FsOfnyPhHNKbQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 98a63a56cbae0883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1431,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"cc9614070357853b50c7c52422e80ee9","sha1":"a5a353d8a81630ad02e585914e106da95b0b0fda","sha256":"a4387c06cd8e863daead916951e528d69f16be2efa295a5256339a5023c2134f","sha512":"08854f0c6bf47d1fa57760b3a8682f95a7053866d874aa034f9c9913e9ff5dbb65c70a3936014497b6092801e1c5e98cf39c3b5dd0b79b4b4c772597fa5d66ab","ssdeep":"","tlshash":"d82186882c4aa019c3f333249b576555fc5612063601ccd6fc6cca405fbdd98c4bbd4c","first_seen":"2025-03-29T16:56:08.532528Z","last_seen":"2026-01-17T13:48:46.716722Z","times_seen":257,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-TTRS8J3R9V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-TTRS8J3R9V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\nexpires: Mon, 06 Oct 2025 15:35:19 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140745\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":422509,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"0869eb0651b2d41eb300ac8bf68f0168","sha1":"b09145c51876ccfeda728b41839853cb05cb2fcd","sha256":"2b4a29bf95da9323dc3b1c50a157b49947c2a5110f6cdb5ec7c584c18be04b88","sha512":"c0cac3e1d0e7552314ec3a64663699f1c3f2a4f7130b9737f54b31d9dc04be3cd22a8b3715ec4e7ee622844a4360baf0ac307f8de1a92c1fea4d90f2db14c92b","ssdeep":"6144:xBzZTP5DyYvRC1cZwtgk6dSLd6gZg1X+6RVt:/9bdtvIcZwhGt","tlshash":"57941ace73d674665396e478903f018ba5bb28a2f44cc899f189cce42d74a9a4137f7c","first_seen":"2025-10-06T15:35:52.103059Z","last_seen":"2025-10-06T15:35:52.103059Z","times_seen":1,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":73,"dns":1,"connect":8,"send":0,"wait":32,"receive":24,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/13/files/7bba/6613/78d3/7410/03ff/0be2/c49b/c0c4/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/13/files/7bba/6613/78d3/7410/03ff/0be2/c49b/c0c4/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6392\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 09 Apr 2025 07:25:11 GMT\r\netag: \"67f620d7-18f8\"\r\nexpires: Tue, 06 Oct 2026 15:35:19 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3MDcqvkrVyVymdsitS9MEY7yIUvdBq1zDAFveHFUYWY13eW%2FqsTtjo6%2BlE5wtTTkCWYsMOlkRKHAS4UM6Grmr47ZqupTD6g%3D\"}]}\r\ncf-ray: 98a63a57ad6b56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6392,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"7bba661378d3741003ff0be2c49bc0c4","sha1":"f34d15a2b95d4be286e88c97c5da0e5011a8125c","sha256":"efb794afb94f16f1bc874510a5749ca014e29a45aab37eb1d04281f0ef57a23b","sha512":"eb0f845add50810ae6eb8f1f63fad495a675d2d6ed29100d61e9c5f99b66e8d258519c13810d2b6d4438ebf03dc01cbaaf906b485803b09101b13b388bf106e4","ssdeep":"192:gBG6lq3rWEJ6zhvebG+cOkgJr8cfTvIbjQvz:iGbbvUzxaGZOVN8sTvAjg","tlshash":"53d19e40ffc41359d021eab4296ca13eba0cb4ac2e7062ff4a545e141d79176acf1d7c","first_seen":"2025-10-06T15:35:52.104716Z","last_seen":"2025-10-06T15:35:52.104716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/check.html","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 06:11:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d0e8af-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A14140482%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A407550031%3Arqn%3A2%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C123%2C1%2C698%2C698%2C0%2C235%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918680%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/100522608?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A14140482%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A407550031%3Arqn%3A2%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C123%2C1%2C698%2C698%2C0%2C235%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918680%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\nx-xss-protection: 1; mode=block\r\nlocation: /watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A14140482%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A407550031%3Arqn%3A2%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C123%2C1%2C698%2C698%2C0%2C235%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918680%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29aw%281%29cdl%28na%29eco%2883952128%29w2s%280%29ti%281%29\u0026redirnss=1\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\nset-cookie: yabs-sid=2613693281759764919; Path=/; SameSite=None; Secure\ni=x5B2SQXfQ29Hf3XKlDNQQPbJ60Yu02wXZUTcqFGrO1X4zh3SVS8yP5KGLJLjVEogTc31nFGYNOhRQGFnzgpRv8gvvkE=; Expires=Thu, 04-Oct-2035 15:35:18 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=1813092481759764919; Expires=Thu, 04-Oct-2035 15:35:18 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=1813092481759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1791300919.yrts.1759764919#1791300919.yrtsi.1759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_ocz_1\u0026jp=_clslthafwjhaawtanzstpz\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=aC71vf6aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=hEYad4uaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=7715152324953600\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /get/1975997?id=1975997\u0026pid=__clb-spot_1975997_ocz_1\u0026jp=_clslthafwjhaawtanzstpz\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=aC71vf6aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=hEYad4uaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=7715152324953600\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2; UID=2510061035a62b2a1801194ac2bdb2e6e6be; CHCK=1; PTS=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6439,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6439), with no line terminators","md5":"bd4c35221c5c3208c22c672a36850239","sha1":"e1c89ee71329c6f2e153d93b05f817297243434a","sha256":"4f15b80027e195313798cb4647978a9702f26be976381c6890ab1f2643967623","sha512":"d37fd9a71711de0677535237f659710a52f6e6cd2e9f9d24d4e2076f04eafdaf8fb6ff99aad8d253ea53b9554fd93913ced82851782c7784cef3b63d66b3a1e3","ssdeep":"96:6IrM2BKk/kMM2BKk/w/M2BKk/0LKM2BKk/nLs4w336VQn6o:6I9BKfMBK55BKzLCBKSa336Vdo","tlshash":"f6d14c307a84c553209f6c43c2bedd7f548457f51c9a833c8e674aa7d623a2bc0db80a","first_seen":"2025-10-06T15:35:52.10641Z","last_seen":"2025-10-06T15:35:52.10641Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/chicken.gif?z=1975997\u0026pid=__clb-spot_1975997_msh_1\u0026pb=75562f2394b1b87a5f8dc1c5122e64581759772119\u0026pbc=L9FoAORGXw_X_eNo\u0026pbi=qZi3XyyyvQ3X_eNo\u0026pbu=zWr-eF8zzRDX_eNo\u0026psp=0znQpDJBRaPZcym1mDJ-uBZhaXD3d9yZ5yTYuOaOi99f9HXZwOgfG0Vk7wqWj9aO1hblNwmYOfKx92pURK3j3NGilclet5PrEqvTyxh0K1ORFJv808cVdwOZABSbuERSyBxTQo8hWNwEF9N9BnObUOE7g5rhIV1agotmwt8jF6F5g8zV0mp8Txqg5cHBU5ArYMhH4kLjkUEe3pICoPDVqxWevHu3mXeHWRLhQC01Sbn7vss6kQR6v1fcJJDA9bx-tYNDGQIOsjcdGO7HIAMwH5xGarb5Ayrdxq_YY2OUbOPS9py2q9OhTTa_ZsSOgJ7ENK_qK-Bb5Ov1ESx3BTrii3Iw6tBmeGFLQeZn02IjMYeOmFo-6wEqLKDIZglJUC6GpogA3raLQq-P-LBW5TYdqIl2pNp_WOy_tLijM4V2EpKB-XjuAZxRKGE_zYmJ2DGO_TDX-eJZJZQOZ3rq1mO5lUvicIvFdgJzlm4pQWT9Mt0kV0XNawGET_qZeWigVzbFGcda3BvhEQq7hAvwU1XWGWe4cCWJcnIifEwK4SVOX7w-7PLfojQa3Ah_vE3JZLdhwT77_3MwxWNN5snkYLuOKXlWv9KmkFWVyIdDzlRyQLgqmnEx-raMvAO__8cQ1g0yUVurr7jeTy3FcVtiEvklvoHgtNZoAtcIoiidHO5t90Rw_VXpJhF9XKu9e_h_aGe35whpZEiOxv5VfsHQRMxzjWO_Gc43GLmdYTKtZMhBZ3Lbe3V3tLhopYcT_NkS-W_lk-dIDUjUI38f-CySKOBdK78sP9a1tjLPEeF5KHNEW2w0-5j7GvR3mks6CrDd2MixKb-vwm8xdDyvBpBzbEEmzarXHcKbWRPAK-pAM7GeELx4Nfl5a5uPubckxfZs8KBG_BfBBhl1RRJEgyHYZIzWQUc8ac4c3m44xkMHdUX1AFrJlY49lioe6enwQGOCErPt-oqRZy4SwHaolptbWskjn56Jng7L9U3C7p3cn20mxuo0p1mpT4Tx5SUJQLPLpHGfKoogufLm-uUDPuFDx6l5VBpI9UFtZJDXwvqyHS-JIz9VUWN9Z5nL4lUlKdpFzG6I0U09otfQ8l2H-RJQSyj3jz4IJ2Jn3TSf3uYrspaFD9jbWafSyV9K8ua5WTY=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=CuJcXOJaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=TPAaBsmaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=678277907155456\u0026caifrq=ADbqJAAAAAAAAAAB\u0026mtifrq=AEmX1wAAAAAAAAAB\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026tp=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026pload=95\u0026bp=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /chicken.gif?z=1975997\u0026pid=__clb-spot_1975997_msh_1\u0026pb=75562f2394b1b87a5f8dc1c5122e64581759772119\u0026pbc=L9FoAORGXw_X_eNo\u0026pbi=qZi3XyyyvQ3X_eNo\u0026pbu=zWr-eF8zzRDX_eNo\u0026psp=0znQpDJBRaPZcym1mDJ-uBZhaXD3d9yZ5yTYuOaOi99f9HXZwOgfG0Vk7wqWj9aO1hblNwmYOfKx92pURK3j3NGilclet5PrEqvTyxh0K1ORFJv808cVdwOZABSbuERSyBxTQo8hWNwEF9N9BnObUOE7g5rhIV1agotmwt8jF6F5g8zV0mp8Txqg5cHBU5ArYMhH4kLjkUEe3pICoPDVqxWevHu3mXeHWRLhQC01Sbn7vss6kQR6v1fcJJDA9bx-tYNDGQIOsjcdGO7HIAMwH5xGarb5Ayrdxq_YY2OUbOPS9py2q9OhTTa_ZsSOgJ7ENK_qK-Bb5Ov1ESx3BTrii3Iw6tBmeGFLQeZn02IjMYeOmFo-6wEqLKDIZglJUC6GpogA3raLQq-P-LBW5TYdqIl2pNp_WOy_tLijM4V2EpKB-XjuAZxRKGE_zYmJ2DGO_TDX-eJZJZQOZ3rq1mO5lUvicIvFdgJzlm4pQWT9Mt0kV0XNawGET_qZeWigVzbFGcda3BvhEQq7hAvwU1XWGWe4cCWJcnIifEwK4SVOX7w-7PLfojQa3Ah_vE3JZLdhwT77_3MwxWNN5snkYLuOKXlWv9KmkFWVyIdDzlRyQLgqmnEx-raMvAO__8cQ1g0yUVurr7jeTy3FcVtiEvklvoHgtNZoAtcIoiidHO5t90Rw_VXpJhF9XKu9e_h_aGe35whpZEiOxv5VfsHQRMxzjWO_Gc43GLmdYTKtZMhBZ3Lbe3V3tLhopYcT_NkS-W_lk-dIDUjUI38f-CySKOBdK78sP9a1tjLPEeF5KHNEW2w0-5j7GvR3mks6CrDd2MixKb-vwm8xdDyvBpBzbEEmzarXHcKbWRPAK-pAM7GeELx4Nfl5a5uPubckxfZs8KBG_BfBBhl1RRJEgyHYZIzWQUc8ac4c3m44xkMHdUX1AFrJlY49lioe6enwQGOCErPt-oqRZy4SwHaolptbWskjn56Jng7L9U3C7p3cn20mxuo0p1mpT4Tx5SUJQLPLpHGfKoogufLm-uUDPuFDx6l5VBpI9UFtZJDXwvqyHS-JIz9VUWN9Z5nL4lUlKdpFzG6I0U09otfQ8l2H-RJQSyj3jz4IJ2Jn3TSf3uYrspaFD9jbWafSyV9K8ua5WTY=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=CuJcXOJaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=TPAaBsmaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=678277907155456\u0026caifrq=ADbqJAAAAAAAAAAB\u0026mtifrq=AEmX1wAAAAAAAAAB\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026tp=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026pload=95\u0026bp=0 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; UID=2510061035a62b2a1801194ac2bdb2e6e6be; CHCK=1; PTS=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: OAICAP=AEmX1wAAAAAAAAAB; Path=/; Expires=Wed, 05 Nov 2025 15:35:19 GMT; Secure; SameSite=None\nOAIBLOCK=AEmX1wAAAABo40zQ; Path=/; Expires=Wed, 05 Nov 2025 15:35:19 GMT; Secure; SameSite=None\nOACICAP=ADbqJAAAAAAAAAAB; Path=/; Expires=Wed, 05 Nov 2025 15:35:19 GMT; Secure; SameSite=None\nOACIBLOCK=ADbqJAAAAABo40zQ; Path=/; Expires=Wed, 05 Nov 2025 15:35:19 GMT; Secure; SameSite=None\nBCAI=ADbqJAAAAAAAAAAB; Path=/; Expires=Tue, 07 Oct 2025 15:35:19 GMT; Secure; SameSite=None\nBMI=AEmX1wAAAAAAAAAB; Path=/; Expires=Tue, 07 Oct 2025 15:35:19 GMT; Secure; SameSite=None\nBCRI=EvpY9wAAAAAAAAAB; Path=/; Expires=Tue, 07 Oct 2025 15:35:19 GMT; Secure; SameSite=None\nIMC_52=1; Path=/; Expires=Tue, 07 Oct 2025 15:35:19 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-06-16T00:05:45.870087Z","times_seen":22379,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/x.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/svg/icons/x.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=864000, stale-while-revalidate=30, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2F0kqnAkk5SCsq0vG0g%2F4vYML0vHg0Llx9aTFQDoJEPkCTLx4aUwqLFRuUxVa4TmeuiezfE0sifBMrIomnBF45GuSVW0V37hIgAvTtiOhtsU\"}]}\r\netag: W/\"7cdbf2d5d94ad6e7bf6e7cc1418dd608\"\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 21781\r\ncf-ray: 98a63a575c7256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":297,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"885be296b72c01b844a2addc97be03db","sha1":"0696c38c7746aa5c930b4a679282a156fc69784f","sha256":"122ed4db2019348aef89a605e3eb79c6004f5727f16144dc46b61f31ee131764","sha512":"d498e95238c70940c277188c7aba66f260e721daeb220386a80424d5bd4641854019f6c797fb920ed8ebb9ce0b14d2e9b04689671cb2d492edbaa88e18d6256e","ssdeep":"","tlshash":"6ee0c28125115a418d230367db2f104f7332707a715c14d662ad99fde4d506e885bb13","first_seen":"2023-09-17T09:47:27Z","last_seen":"2026-06-15T22:49:28.565161Z","times_seen":13771,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aa.qwerty24.net/mobile/?type=tube_index","date":"2025-10-06T15:35:19.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /metrika/advert.gif HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\nlast-modified: Thu, 02 Oct 2025 10:55:02 GMT\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\nexpires: Mon, 06 Oct 2025 16:35:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=3600\r\nstrict-transport-security: max-age=31536000\r\ntiming-allow-origin: *\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\netag: \"68de5a06-2b\"\r\naccept-ranges: bytes\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/gif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/webvisor/97686631?wv-part=1\u0026wv-type=7\u0026wmode=0\u0026wv-hit=119462379\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026rn=37453218\u0026browser-info=bt%3A1%3Awe%3A1%3Aet%3A1759764922%3Aw%3A1280x1024%3Av%3A2210%3Az%3A0%3Ai%3A20251006153522%3Au%3A1759764919269503784%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Ast%3A1759764922\u0026t=gdpr(14)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:22.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /webvisor/97686631?wv-part=1\u0026wv-type=7\u0026wmode=0\u0026wv-hit=119462379\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026rn=37453218\u0026browser-info=bt%3A1%3Awe%3A1%3Aet%3A1759764922%3Aw%3A1280x1024%3Av%3A2210%3Az%3A0%3Ai%3A20251006153522%3Au%3A1759764919269503784%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Ast%3A1759764922\u0026t=gdpr(14)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 359378\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\naccess-control-allow-credentials: true\r\nlast-modified: Mon, 06-Oct-2025 15:35:22 GMT\r\naccess-control-allow-origin: https://redporn.me\r\nset-cookie: bh=YLrDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:22 GMT; SameSite=None; Secure\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ncontent-type: image/gif\r\npragma: no-cache\r\nexpires: Mon, 06-Oct-2025 15:35:22 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":174,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/webvisor/97686631?wv-part=1\u0026wv-type=7\u0026wmode=0\u0026wv-hit=119462379\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026rn=885096819\u0026browser-info=we%3A1%3Aet%3A1759764923%3Aw%3A1280x1024%3Av%3A2210%3Az%3A0%3Ai%3A20251006153522%3Au%3A1759764919269503784%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Ast%3A1759764923\u0026t=gdpr(14)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:22.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /webvisor/97686631?wv-part=1\u0026wv-type=7\u0026wmode=0\u0026wv-hit=119462379\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026rn=885096819\u0026browser-info=we%3A1%3Aet%3A1759764923%3Aw%3A1280x1024%3Av%3A2210%3Az%3A0%3Ai%3A20251006153522%3Au%3A1759764919269503784%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Ast%3A1759764923\u0026t=gdpr(14)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 61\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\nlast-modified: Mon, 06-Oct-2025 15:35:22 GMT\r\nexpires: Mon, 06-Oct-2025 15:35:22 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/gif\r\naccess-control-allow-origin: https://redporn.me\r\nset-cookie: bh=YLrDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:22 GMT; SameSite=None; Secure\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.beeg.porn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 08:48:46 GMT","end":"Sat, 15 Nov 2025 09:48:35 GMT"},"fingerprint":{"sha1":"8A:BF:7B:5C:A2:97:2E:37:4F:52:46:2F:49:23:79:93:5F:AA:53:AD","sha256":"94:33:17:BB:F7:2A:44:30:D6:0E:55:A0:78:A3:7E:A3:73:63:A3:40:1B:FF:E0:E2:B7:57:AC:8D:9B:D4:D8:16"}}},"request":{"raw":"GET /ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me HTTP/1.1\r\nHost: aa.beeg.porn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVBBu4eswG2%2FUGza2KssIPQOOEsrwySONeXnMNRUbbfwppQC77NXjRSUqcvsXuo3HEBmKenOWHH8WkXPTJuMqxb4bQipt94Yf%2F8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 98a63a57ab38569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9001,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6678), with CRLF line terminators","md5":"722c63d30506ffdf40db6a351ea2e835","sha1":"36f69088ded2059a940f79536490e7d83a5bbd3e","sha256":"8cb0781959fccfce24e8feccb49a33a4ae26173df1b596a24cfa90946157fee8","sha512":"71c6d76c3239737616a510d5a2ee8351310064f41a4d2651f83bb6b3a684cf8992d661c81ea363d8202dfe49f924ea2f791a7710eb8e6e26c520b260d9cd4f09","ssdeep":"192:7gyHcJARhLDVLiHwwZM2xdMrmutAo2iMIwGbwJaEgeHL9TIEiKbJoYrS7wMg:7teAjoHwW/ODt12iwGbwULmOEPbDrSo","tlshash":"00023c757282aa6603f241d280ffb550d43e5a167545c488f1ec68833aa67c9d1f3f7e","first_seen":"2025-05-14T00:26:21.923674Z","last_seen":"2025-10-24T13:32:44.576587Z","times_seen":9,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":73,"dns":0,"connect":1,"send":0,"wait":29,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.cdnjs.work/tube/metrics_tube.js","fqdn":"go.cdnjs.work","domain":"cdnjs.work","tld":"work"},"ip":{"addr":"172.66.47.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.cdnjs.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 02:07:37 GMT","end":"Sun, 23 Nov 2025 03:07:28 GMT"},"fingerprint":{"sha1":"2B:32:41:49:9B:92:3B:87:11:C2:D0:AC:95:45:6F:2C:4F:D0:34:C9","sha256":"09:58:66:C9:6E:37:00:7F:FA:73:15:E4:03:1E:A6:28:23:C1:31:60:CC:21:59:5A:62:3B:F3:9F:36:C5:7F:AC"}}},"request":{"raw":"GET /tube/metrics_tube.js HTTP/1.1\r\nHost: go.cdnjs.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2FVxvfaV%2B7%2FUcPUghjroAnjvyEbAqzmG%2BmttJd9uOTsXEBfCYQcJjAGeg89Gfeeh9%2BujTvls%2BJaOdpTAfZXQZ9n6I8G4UzX9wH28ZtA%3D\"}]}\r\netag: W/\"e81322f944efa3e50145b92209927358\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98a63a56abf7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5664,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (616)","md5":"3f5ca76aaeb5736c4d88d884211c297f","sha1":"a4d7c85361f45fdf6119fc374b92a10ea69ab6c6","sha256":"2f3689e248c979e7ec8559a6d1211ae6c739700d02bbf35497d9b613be9ed11c","sha512":"babf576886ba7e215ab5cb8df2c0368f304ff45a123450478fa9a851d3715026db55b87d715952f02cc4b134ceb2a9fc8db749729add1cea7333f229a39e95f7","ssdeep":"96:MqxNLSjWeZVnh5ZRRQzsQJyperecceSrOdyiBhBOucLxUFkHWHyqix/bxcDK5HHD:tNmjpzRRQzsQJyp/L1rOdAxtUFkHYyZl","tlshash":"7ec19529389e543912cb3a72f99e1d4a30e57f1e509980804dadad7d25dcd8e2c3b6bc","first_seen":"2025-10-06T15:35:52.109175Z","last_seen":"2026-01-03T20:39:35.170311Z","times_seen":5,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickadu.qwerty24.net/?c=track\u0026zone_id=1975997\u0026t=1759764919\u0026rf=0","fqdn":"clickadu.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"172.67.143.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:11:30 GMT","end":"Thu, 01 Jan 2026 21:10:05 GMT"},"fingerprint":{"sha1":"2B:F1:86:15:26:34:BB:D0:75:87:8A:BC:CB:26:1D:B2:3C:7F:D1:CB","sha256":"88:90:CA:7F:05:95:2D:02:FE:D1:7D:0E:94:C4:9B:EA:36:EB:29:3F:F9:27:60:5C:69:C3:A9:C3:E3:9E:3C:31"}}},"request":{"raw":"GET /?c=track\u0026zone_id=1975997\u0026t=1759764919\u0026rf=0 HTTP/1.1\r\nHost: clickadu.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aa.beeg.porn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.16\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-header-sub: Master\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9VXKGrO7Rls9BVNy%2FhssODtkd5jlg6shLl9EwtbYEaxR%2B8DCZ1FDM%2By1djCIcfbWf28a%2FTyhgAU8eMcia%2FElxW%2FaqENZZnIlJMDzBtMtQcFyGzvmoQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98a63a58aa8f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c79da15f422df09e108feabd68f9ea3","sha1":"4415c5cd125e889b721d74c7823afba47f7e8179","sha256":"b19b74974ece6f590f4a95bbbcc33b9e7c7e141feef38486df10037ef843b8d2","sha512":"c3d9a9e59e7671b77af1978fb449cd45abbdd59c18a6d46ecf6304893e9b3cc65200226db411942eae51e5f6cc788ae0a65cba6c8f8c746a680dfc338299876c","ssdeep":"","tlshash":"1f8000a0030088ef30e2a3e0f80ab0c38a2bea328c0c830000008a0b380f20c0323202","first_seen":"2025-05-14T00:26:21.944464Z","last_seen":"2026-01-26T08:51:06.43815Z","times_seen":18,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A85886605%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764920%3Ac%3A1%3Arn%3A256457130%3Arqn%3A9%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918682%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764920\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)re(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22ad_type%22%3A%22tube_index%22%2C%22ad_type_details%22%3A%22tube_index_main_banner%22%2C%22ad_domain_show%22%3A%22beeg.porn%22%2C%22ad_domain_referer%22%3A%22redporn.me%22%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:20.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A85886605%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764920%3Ac%3A1%3Arn%3A256457130%3Arqn%3A9%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918682%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764920\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)re(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22ad_type%22%3A%22tube_index%22%2C%22ad_type_details%22%3A%22tube_index_main_banner%22%2C%22ad_domain_show%22%3A%22beeg.porn%22%2C%22ad_domain_referer%22%3A%22redporn.me%22%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncontent-type: image/gif\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 06-Oct-2025 15:35:20 GMT\r\naccess-control-allow-credentials: true\r\nexpires: Mon, 06-Oct-2025 15:35:20 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nset-cookie: _yasc=4T0lbqjd8jF8DhpIV6IhU+Tl7TEnHOt/AQ5Haqj8wSuoHuoHScbeA1lNhrqIHwRo1w==; domain=.yandex.com; path=/; expires=Thu, 04 Oct 2035 15:35:20 GMT; secure\nbh=YLjDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:20 GMT; SameSite=None; Secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/13/files/b647/644f/85b6/5078/3197/9d55/3d26/a97d/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/13/files/b647/644f/85b6/5078/3197/9d55/3d26/a97d/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10148\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fgc3yudEeDdPJQR4ViBFJMzGXKUydkWQD2sbwzZaf4muXlHiTZpdKy0HOIehiz89XQCR%2BaDWSG8nB9iIM8AY7G7Rk7SVTRE%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=11029\r\netag: \"68c9929e-2b15\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Tue, 16 Sep 2025 16:38:54 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 9372\r\ncf-ray: 98a63a56ecd156c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10148,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"6f001fa46cd976cd3c9f428a7de7b7c5","sha1":"b5d656f1a1f81f0b4cedccd9a03119a9a132df16","sha256":"b44218fbdee7cc84af3f591b20b02ab6f1b10894dadcc77975f3602cdbcb0ab0","sha512":"28706e8ad6f02d8b489a7b56078f6a3b0ac96800de92cd919c9190e86a0a32349cf1d67555fee5137ec6691e75e3eba7e6fd34beb1978cea9ca962ee5688f756","ssdeep":"192:MOKOGia6tuP3xNDJprIRC0cGoH9dG+7wdBGscPaHTxp2PDhMKzMHyZbujPt3:MCnhtI/jZGodU+c2ypCzS+ujt3","tlshash":"5e22bf66662b82a46f3916a3c8f8495532bc74e20de92fadb789c3d1d4cc2e9c054256","first_seen":"2025-10-06T15:35:52.110849Z","last_seen":"2025-10-06T15:35:52.110849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/link.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/svg/icons/link.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\netag: W/\"dd9ed66e949db0815ba57f9db1b47951\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iWV0BYifNRR0LJaYnqXt%2B1FdCbJ96FG9dgZ%2FYG0ZQW%2FXjmO45c5yVFTSq0NZ3jxcy%2BqWbyquPBpCyof%2FQaF71rYgXuxRpdUCI1itSvtg485plGqju09dmns5R1ZC%2BQ9BgDXuPXqU7Enlhe7tp2mxV%2FZD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 21781\r\ncf-ray: 98a63a575c7556ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1437,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1437), with no line terminators","md5":"2612b308f45d0aeddbd8540f3cf792f8","sha1":"6c6a34a46b238ae0372b7f6126c8686a3c6b91d7","sha256":"1b1e450814698cfd54d68f041c25c741d2adbde4e8e31a256db1be23d413d96c","sha512":"be13c24e01fa0fcd3796eada128e6b74680d433a553524c5671f97ab8e62e9c24e24ec00710cd28db8088e9743ed35f38a801a464131435a2d58f3b9d31fe50c","ssdeep":"","tlshash":"c22110c1931597dc189621899f308969222f30f6f6bf84d180edc3bca4d2699e807e11","first_seen":"2024-05-01T00:16:35Z","last_seen":"2026-06-15T19:50:35.389582Z","times_seen":2490,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/97686631/1?wmode=7\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A971747173601%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A228092482%3Arqn%3A1%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A679%3Awv%3A2%3Ads%3A0%2C175%2C406%2C0%2C8%2C0%2C%2C171%2C9%2C%2C%2C%2C761%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Arqnl%3A1%3Ast%3A1759764919%3At%3ARedPorn%3A%20Free%20Porn%20Tube%2C%20XXX%20Videos%20%26%20Movies\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29cdl%28na%29eco%2883953156%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:19.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/97686631/1?wmode=7\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A971747173601%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A228092482%3Arqn%3A1%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A679%3Awv%3A2%3Ads%3A0%2C175%2C406%2C0%2C8%2C0%2C%2C171%2C9%2C%2C%2C%2C761%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Arqnl%3A1%3Ast%3A1759764919%3At%3ARedPorn%3A%20Free%20Porn%20Tube%2C%20XXX%20Videos%20%26%20Movies\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29cdl%28na%29eco%2883953156%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 622\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\npragma: no-cache\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://redporn.me\r\nx-xss-protection: 1; mode=block\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bebb30e1e6c8bc5a4c658a6d9c370d34","sha1":"86d9009857f0fb973dc7436eddb8a5c88f0e5462","sha256":"e3f6f07123c01a38ba97cb2101e82b40f95a5db5581057015d356af431932177","sha512":"92a57cfaa42489cb215ac1207ee53f3a695d01fe4fa87fc44af18e310707e0ff24e71beb0ae12d84d360fc481513ce869992de1b5f9a1c317aa88cea9bccfeaf","ssdeep":"","tlshash":"fcf0470f8d148de55e275d20036e26272419341fccce264579e2ddd04c4fba775877a0","first_seen":"2025-10-06T15:35:52.113288Z","last_seen":"2025-10-06T15:35:52.113288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_kbc_1\u0026jp=_cltfbeyidprfsyizzdrkqa\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=2pzJRY5aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=IpNeSkMaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=8559577255051264\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /get/1975997?id=1975997\u0026pid=__clb-spot_1975997_kbc_1\u0026jp=_cltfbeyidprfsyizzdrkqa\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=2pzJRY5aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=IpNeSkMaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=8559577255051264\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pi=UpSpQA\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2; UID=2510061035a62b2a1801194ac2bdb2e6e6be; CHCK=1; PTS=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6429,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6429), with no line terminators","md5":"3dc56ab04e5eb198e84bd2b1500ddffa","sha1":"70117d44eff008ed91ee23f27649681968dc6e55","sha256":"324bca45200789addd4258d3cf8c7cc2468362492a101dd1fcb144c8336c5ed3","sha512":"58c9825bf413ed739930d85e142f6cee3f2eccc4e786f0890f29e8eb853039d559fd09dfd293428f57783e58f47b207884d8cc8cf5cb8da37c87751e0a167181","ssdeep":"96:4BxEsCcXQzKFgq5HjhWXATBxEsCcXQzKFgq5HjhWXeBxEsCcXQzKFgq5HjhWX2Bv:GucTZFWwjucTZFWIucTZFWQucTZFWRLo","tlshash":"d4d1b8112043c5c92edd78ed6017ddcb84213b80c7cb18069bfc6a39f6dba99f5ea195","first_seen":"2025-10-06T15:35:52.114862Z","last_seen":"2025-10-06T15:35:52.114862Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.605\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Faa.beeg.porn%2Fad%2Fclickadu%2Fbeeg.porn%2Fmain%2F300x250%2F%3Fdomain%3Dredporn.me","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.605\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Faa.beeg.porn%2Fad%2Fclickadu%2Fbeeg.porn%2Fmain%2F300x250%2F%3Fdomain%3Dredporn.me HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2; UID=2510061035a62b2a1801194ac2bdb2e6e6be; CHCK=1; PTS=; OAICAP=AEmX1wAAAAAAAAAB; OAIBLOCK=AEmX1wAAAABo40zQ; OACICAP=ADbqJAAAAAAAAAAB; OACIBLOCK=ADbqJAAAAABo40zQ; BCAI=ADbqJAAAAAAAAAAB; BMI=AEmX1wAAAAAAAAAB; BCRI=EvpY9wAAAAAAAAAB; IMC_52=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/10/files/077a/c65a/71c0/e27a/1e30/7871/e0af/0fe3/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/10/files/077a/c65a/71c0/e27a/1e30/7871/e0af/0fe3/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6201\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 May 2024 21:47:28 GMT\r\netag: \"663409f0-1839\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJEeVBiHsJF3%2BMydo3hHl2h3Zjl%2Fkfhpg1qZUUhlgjEXPLF81zs3BkfUik80heyxZdwOiw0BhcTyuzh%2FkBH%2F1UogBG6MMRA%3D\"}]}\r\ncf-ray: 98a63a56ac6c56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6201,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 288x162, components 3","md5":"077ac65a71c0e27a1e307871e0af0fe3","sha1":"e3a0001070abc6d1ebcaf4dc5928f01caa5f459e","sha256":"5889d11d810fa8567934af8e05454605c82ee32aacef81190d28ac2728609cde","sha512":"47c29c99ffe17f61f8f02cd4be735a5770db3ec9c6435a00521627c1c4dabe3e4867e28d3b7b569c0f7a5212e6c1646d492ae84778036210c98d4d58c52f7925","ssdeep":"96:NV7SOfzZpjTVU9Oqn+ys0fFt9c+XL+t3X89BfOb7bb8FFiE9nDa/:NVuOfzZpjq9OH0fFtTiuLCbEFD9I","tlshash":"f1d19e27771a0797e932cf309a2dc340f749ad5c76be0f2f29c054c6de883950ea9a81","first_seen":"2025-10-06T15:35:52.116616Z","last_seen":"2025-10-06T15:35:52.116616Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/13/files/fb22/e672/72f8/ac78/3409/216f/c07c/e59e/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/13/files/fb22/e672/72f8/ac78/3409/216f/c07c/e59e/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7567\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2KMR6ywsVjjLbodJLmHbBMdk5X12UHB5j3GanFTulJ1RRV2Gh7scWWas3OeovLzDGaeICwzv%2FyNdkp%2FsZa4nF978x8VJmvE%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=7868\r\netag: \"687d6b16-1ebc\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Sun, 20 Jul 2025 22:17:58 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 159303\r\ncf-ray: 98a63a56ecce56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7567,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"41613ac76002e14e0a306e4601935dea","sha1":"0b7f0c529d51a7055632065fcfc5689304c92e75","sha256":"433e4e9cffdbf0700f7f2210c45952e47eba5d2c705fab049b5b7d2b8d7a4cdb","sha512":"6a1b26415adde490d7925a0550a91846d3ff94761ef28a9faf0710231d9ece7c396bc87c04257811e623810130b9e59aab4860fbec9058889225dfab20dd5f82","ssdeep":"192:avP+xhXdias66I5jVfkKFAzvrhy8j5E4LfCw3em:EP4Bs6enztbjRfCWD","tlshash":"07f19f24b72465aae9b6022d132d1b7033565d572be0a9d3fa80b94f14a7acc414e7c5","first_seen":"2025-10-06T15:35:52.11832Z","last_seen":"2025-10-06T15:35:52.11832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/11/files/58de/ba8a/2e26/e08e/2238/cb43/4617/4190/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/11/files/58de/ba8a/2e26/e08e/2238/cb43/4617/4190/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7616\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zgm6jIy%2Bma7USvJferwzMaL61%2BvOSBp0Z7xTFRXopjWuBu9O8ZsXoLEqIrfjjKp%2BoC5TUWuC5atzb2VJY8hBpQMNJvJ1FEo%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=7932\r\netag: \"6682dbff-1efc\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Mon, 01 Jul 2024 16:40:31 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 922003\r\ncf-ray: 98a63a56eccd56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7616,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"68757f75be5071a30ed4830bf87b017a","sha1":"d73e22588e1f36acf2f3474e937eb852f1f40de7","sha256":"23dcb4034dbd52e254121bbcdb2cf7cc3f82d51061eeb2041c516b06c28ad0ec","sha512":"8f6dea16d03ab85746f8cf9edf5d0683e411d98e3c0b5eb656352511964456250699f49bafe79a7f69e895205ec45671d52f9e7da0c4507832d73caca93f444a","ssdeep":"192:OdQ3D3D4aSoowAPNriMYE/n80zwBVnvsxkxtq225s:OdwD3JowUkMIjnEivX","tlshash":"8cf1ae5fab8ee98aed64433536854b65ed4dc2c972ee192539c1293362fe30b8f90094","first_seen":"2025-10-06T15:35:52.120127Z","last_seen":"2025-10-06T15:35:52.120127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.cdnjs.work/view/","fqdn":"go.cdnjs.work","domain":"cdnjs.work","tld":"work"},"ip":{"addr":"172.66.47.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.cdnjs.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 02:07:37 GMT","end":"Sun, 23 Nov 2025 03:07:28 GMT"},"fingerprint":{"sha1":"2B:32:41:49:9B:92:3B:87:11:C2:D0:AC:95:45:6F:2C:4F:D0:34:C9","sha256":"09:58:66:C9:6E:37:00:7F:FA:73:15:E4:03:1E:A6:28:23:C1:31:60:CC:21:59:5A:62:3B:F3:9F:36:C5:7F:AC"}}},"request":{"raw":"GET /view/ HTTP/1.1\r\nHost: go.cdnjs.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z3AulgUfSkJFr0BfI8XGFgq1eyBY164j4tt66DUfYeKIktVruwFJcKSdE4fCxKJKFH1vA%2Fm8vcvi8jXPaf6vmwjAArmV%2BiaU8sTHUaQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1bde6fa9a33d48a752bb31e7c3ebe624\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98a63a576e6b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9dfa520f5d4014e9de90367e4e2c4c3f","sha1":"759cedce4d1a63b900fbd6aef5e233b92e04212d","sha256":"d0d17b6c190bb6910bae7ed594f3f062a4b7f49b4bc1f9125c73de4d8374ec77","sha512":"c78e98ae3f008eab3c0d41bbc229012cd1fcf7974b001c3a6a5e3ef9136862cc3aab7ef2b978dcf2f2bd05c3078ab68a6c8707539522536fc6cd42f8222e3905","ssdeep":"","tlshash":"3cd012bb41909e06447061b46cf2b3245862728556215e05b9c470277ff5b99cd93785","first_seen":"2025-06-06T07:37:21.326407Z","last_seen":"2026-01-26T08:51:06.608129Z","times_seen":18,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/status.js","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.beeg.porn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 08:48:46 GMT","end":"Sat, 15 Nov 2025 09:48:35 GMT"},"fingerprint":{"sha1":"8A:BF:7B:5C:A2:97:2E:37:4F:52:46:2F:49:23:79:93:5F:AA:53:AD","sha256":"94:33:17:BB:F7:2A:44:30:D6:0E:55:A0:78:A3:7E:A3:73:63:A3:40:1B:FF:E0:E2:B7:57:AC:8D:9B:D4:D8:16"}}},"request":{"raw":"HEAD /status.js HTTP/1.1\r\nHost: aa.beeg.porn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWOGHvFNQ%2Fx%2FLh36%2Fr%2FNqQjbadR915CiDitLtgXyrE1SelxnGhZdjs10T%2FvKwZIWZlLJk7BlwJ%2BNjvrh%2FwymlOG3S5y4xA3VbAasB6F3VdumiRmaR2GRQw%3D%3D\"}]}\r\netag: W/\"429187bdb4f8ff9e96446629ee3b1e5e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 98a63a57adb449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sacwumsf.com/en/oqwobr?dbn=ajsu\u0026jt=_perntblzjnwkwpvlpfbqou\u0026kbj=1\u0026fqge=rst\u0026cwbz=761699\u0026oyk=gvah\u0026qo=3\u0026znvk=742981\u0026id=1975998\u0026iisb=kxjcs","fqdn":"sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","date":"2025-10-06T15:35:19.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Thu, 03 Jul 2025 23:17:13 GMT","end":"Tue, 30 Dec 2025 22:59:00 GMT"},"fingerprint":{"sha1":"BE:0F:B3:AB:65:72:6D:3D:A7:A8:5D:51:50:DC:FF:DA:02:74:0F:AD","sha256":"79:64:10:CC:73:5F:CE:C0:5D:BB:D7:95:7F:2D:4C:BC:A1:BD:04:10:0F:9B:14:3A:A1:91:8F:7F:3B:E4:EC:83"}}},"request":{"raw":"GET /en/oqwobr?dbn=ajsu\u0026jt=_perntblzjnwkwpvlpfbqou\u0026kbj=1\u0026fqge=rst\u0026cwbz=761699\u0026oyk=gvah\u0026qo=3\u0026znvk=742981\u0026id=1975998\u0026iisb=kxjcs HTTP/1.1\r\nHost: sacwumsf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nUID=2510061035beec365abd0b45d19234fcaa23; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":465,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (465), with no line terminators","md5":"f1cf4f73c2299ddd95df54640957851c","sha1":"8842dcb6f057736144f9d5b2dd3ac6194e0c0265","sha256":"8a386d53ecb1b665f4affa942550a213f65ce6299284f642027b9836d69b8eec","sha512":"e8811b996ce2d2c10b853266efabbfddc51d7615fc759a9c5c51c5ab7624781e09ac6f38050c14a869e0734865876361a9f190804a8b319ecfa4edfe66587c19","ssdeep":"","tlshash":"32f05c66b8e6f8d7511c5d08253f3c96ab8012de4e27436712fc9d08c4d03077cdb404","first_seen":"2025-10-06T15:35:52.123634Z","last_seen":"2025-10-06T15:35:52.123634Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/67973812/1?page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026hittoken=1759764919_c141e4fdb146cb7e35415e962a26758388b14a062167c862bc51ef506e1d8f1a\u0026browser-info=nb%3A1%3Acl%3A143%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A2%3Adp%3A0%3Als%3A1038502051864%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A484951387%3Arqn%3A3%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(3)aw(1)cdl(na)eco(83953156)oms(0)prs(1)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:34.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/67973812/1?page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026hittoken=1759764919_c141e4fdb146cb7e35415e962a26758388b14a062167c862bc51ef506e1d8f1a\u0026browser-info=nb%3A1%3Acl%3A143%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A2%3Adp%3A0%3Als%3A1038502051864%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A484951387%3Arqn%3A3%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(3)aw(1)cdl(na)eco(83953156)oms(0)prs(1)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\naccess-control-allow-origin: https://redporn.me\r\ncontent-type: image/gif\r\nexpires: Mon, 06-Oct-2025 15:35:34 GMT\r\nlast-modified: Mon, 06-Oct-2025 15:35:34 GMT\r\nx-xss-protection: 1; mode=block\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: bh=YMbDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:34 GMT; SameSite=None; Secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/9/files/7a36/74fb/beb3/cb66/b1c3/55e3/0ed9/823c/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/9/files/7a36/74fb/beb3/cb66/b1c3/55e3/0ed9/823c/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7848\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lTTJ0GhbfZge9yr7FT6MpofOwwLlDMIyP7oxlludpiFEj72OnBdUcwcXO5lmQfySJ8ZqfjG3jf8erOI3p%2BUSABuMPYj0FbA%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=20761\r\netag: \"65e42789-5119\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Sun, 03 Mar 2024 07:32:25 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 21781\r\ncf-ray: 98a63a569c6356c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7848,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"70f46c13b01b0b02a192d66798f74116","sha1":"53928cb67d942ff68d31e537658e37f8c142775a","sha256":"409c81792ef0df69b3e1255a8afa03ff0847ad852a5d32612edc5e4cc0d84377","sha512":"b35ca5c96fe853c5f348f87f12b86a202478fda98dd5492a331c53775a5671737bb42b5a499d5cb29ea8e0eefd776173bdb516b8c83330d6a1aa2e640aa2b386","ssdeep":"192:UG1eGjznFTg1rafMkxCCnUucym2wq8e9TRy6srtcA2U:1UGPFTg1mcCnUubmedQXrtLD","tlshash":"68f1aea5f3d246fad814bb7023390a3d8a05a831b1d265d305c0a1e581685f9979cfaf","first_seen":"2025-10-06T15:35:52.12519Z","last_seen":"2025-10-06T15:35:52.12519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/page.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/page.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400, stale-while-revalidate=30, public\r\netag: W/\"060b0026b51016bf08c9d4b4a73b7960\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JX7RsZqxq%2Fs6d0udALGlBN3XMVofooG93MldNL00URU5YstTsdo6awL699lCwEstJ5ukVIpL3nCFkEXvpWM9wvO1lVAOGFxrXltymO7VmDK7sU4QO6uF9adZ1yxtlH0S1SFD%2Bf6OWmBEmQBHwNhL6tAU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 21808\r\ncf-ray: 98a63a56ec1956ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3179,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3179), with no line terminators","md5":"57b268c32627d8d13671f43be7c47b84","sha1":"0eebe8bc9958922a2a354b4abdca2f4d326f49e9","sha256":"53d16f311b01e5f9b5e7dcb2ec11b11e5ed23e155ed05727a7a42472d608118f","sha512":"72f220c33c49e4cf58f9fdd8d1f56e835e6b7f33c50d0eb754b9e7868f788c9f8705d83f06419f1191b9a528397a5ce6637df84fc232daea844410ed7027ed4a","ssdeep":"","tlshash":"bd61b74b774ea8734a5736bac19fb60f2223331f9c6589048914e4d849bcec6501fa7e","first_seen":"2025-04-25T03:57:25.57786Z","last_seen":"2026-06-08T22:53:42.709604Z","times_seen":9245,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":34,"dns":3,"connect":1,"send":0,"wait":9,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/a2a.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/svg/icons/a2a.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\netag: W/\"0aca4ea1e5f8f250126a8e0c597dd969\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BKGYxG2zoHKCdekvY5LOAbzMA3xXwgQj2PAQ%2Bq%2Flpdjc3Z7uTOWByBvBnxEdg1QMPy876DM4pPXWWrL9Rpo%2FX%2Fqg9z1lPbFGzrwcNU0v4J2lhMskeiKe9fEkgqDelfUAh8KfsNTmO%2FXM9N3SvjqbhqCk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 98a63a575c7656ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"baf0595a19bdc7f7497b74731d2166c4","sha1":"fd5714384c52fc0338083574434d12328313896c","sha256":"3dab93242ee573bbcfc22c9d15acd47794e500ed44e6bd48a35400b39d65aa43","sha512":"da0e15a709b3d043e8cd9e4f97cf70d8c1addc2a7d90b6bb11d71cd72aba9133e5b9388528691cf6a354a6aaa346045f64d82b947883057471e1f1a2fdbd1901","ssdeep":"","tlshash":"74c01291501575418c1342fb475e500b167120bd015c14ca36a881f9595613f8c42fc3","first_seen":"2023-03-08T14:25:33Z","last_seen":"2026-06-15T22:56:28.439444Z","times_seen":16703,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/bn.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 06 Oct 2025 12:27:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e3b5c9-287b9\"\r\nexpires: Mon, 13 Oct 2025 15:35:19 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":165817,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a99b6ae09058e72bb15a7e541194fe23","sha1":"9bc1863d3ecb11e580aa119ed2366c251a1f01b6","sha256":"50f0b51e2005ee15e4ee9baddd4672b994a42994719717e513f92634b3b92a02","sha512":"8026616a897ffe0929c64750b76298f602a48b3f70ba66f9f298881d8f6843dd29643a64fed71ecda57accac31fd5f8211535253e775999dbb3e831481481f95","ssdeep":"1536:eZNgud5QeZYZKHURgeYJEJc+iq5A1E1PCGGOc7d07Db0gyylZE8kO1i2BaOFBA4j:eZR5QeZ3hoOqk8PDI8Xt7Tk3d0x","tlshash":"f5f384ceafd664356153e329093f6931edbadcd2e1df0113e837d1a41a68805e332b69","first_seen":"2025-10-06T14:48:53.289351Z","last_seen":"2025-10-07T04:44:54.485701Z","times_seen":11,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":77,"dns":19,"connect":23,"send":0,"wait":79,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=nb%3A1%3Acl%3A243%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A85886605%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A881148733%3Arqn%3A12%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764918682%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(3)re(1)aw(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:34.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=nb%3A1%3Acl%3A243%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A85886605%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A881148733%3Arqn%3A12%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764918682%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(3)re(1)aw(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\npragma: no-cache\r\nx-xss-protection: 1; mode=block\r\nset-cookie: bh=YMbDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:34 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nlast-modified: Mon, 06-Oct-2025 15:35:34 GMT\r\naccess-control-allow-credentials: true\r\nexpires: Mon, 06-Oct-2025 15:35:34 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ncontent-type: image/gif\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/modules/core.pt5ow5lr.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/modules/core.pt5ow5lr.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000, immutable\r\netag: W/\"6e938442141e4680b5bd4187b8d6c216\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bYmr%2BsNjRK657PLb%2FIi9kWttPKcwwZVYCOCXNBrzUMgo57h8X8FMtsf367hMW4uTAEMgkTVqjAL95EdV2rZOY1xsjHkqdGxzAl32lal1u2nEq1j8jZ2t%2BJb6rA6nqn7PQ%2FjtJDP8ziqp4SDNpjFq7xpp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 21781\r\ncf-ray: 98a63a572c4056ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71871,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7e998bb147b26903e88f08f39c0e2cfc","sha1":"6c93ab9cb3371591d4031dc60b9c3ae571c3329e","sha256":"ef39bcc03d88448d0d38aba3dc609e9c9c444d037aebec926e6715e1cf956674","sha512":"ed4bb35effa05b85d02fffbd65abdb28b1d88cf573475dc02c2c5b744914f09d06df2dd3f0928ec921e5e7e52f57d4898e58feeae3c139e36c5fb61e7a982431","ssdeep":"1536:h8fE77gdDGstI0AjiVG1COcfs6SngvUy4JfU8xAaj1rxv6G6zMDfPMUEqdb:2fqgPdvUJ1xlj1rxvV6zPub","tlshash":"09636c9f37056937aa1b30e8a8efa508a036275eaf080954f5a5d4b511fdecd3067f2c","first_seen":"2025-04-25T03:57:25.562762Z","last_seen":"2026-06-11T22:32:13.517237Z","times_seen":9412,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.addtoany.com/menu/svg/icons/telegram.js","fqdn":"static.addtoany.com","domain":"addtoany.com","tld":"com"},"ip":{"addr":"172.66.171.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.addtoany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 08:53:15 GMT","end":"Mon, 24 Nov 2025 09:53:12 GMT"},"fingerprint":{"sha1":"F7:A4:6C:FF:03:AC:D3:2A:92:BA:EC:F2:67:5A:00:B2:0D:40:72:F2","sha256":"89:4B:61:9A:22:6F:77:70:77:50:57:C1:3F:29:21:86:C2:81:9A:36:F7:98:1A:DD:0B:01:71:03:F2:19:AA:EC"}}},"request":{"raw":"GET /menu/svg/icons/telegram.js HTTP/1.1\r\nHost: static.addtoany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.addtoany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7776000, stale-while-revalidate=30, public\r\netag: W/\"fb47b4f6548b6499923a1beed7472419\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=11Vn8q%2FznNRy79jmaGiOUyA0VQLRdNhZ%2Bl4ZdsRwxutX7BmLJb7hsCrCE%2FdGQL2gSQ9TiMcLIun7xSTyMdW1Wl29J9v9%2BqyE4QitnViPBOOw1FGkBm8vE1I2z%2B1xfx%2BECAeFc9crNXUxRfqUVBtd5vx%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 21781\r\ncf-ray: 98a63a575c6d56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":360,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (360), with no line terminators","md5":"48f25c508c92c3601cf047609318001f","sha1":"59117e825084c63a0dda48edec82c14a60e16f23","sha256":"6415561e892cf9d614e7179f71353af4ceadfd641d71c42fe54c9420eb0d0138","sha512":"32ca9e672cb26c5cc9370d32a2739ad99a933a700250e310955b68ca4a974964f22095179d1a56f8f57c160ee6ab4d3ff659b4bba5838879472289b06bf53a42","ssdeep":"","tlshash":"66e02077611084814c2a54bbda1e614f5434f069529d65d3436ac4f754d726f5c12d8b","first_seen":"2023-03-08T15:33:09Z","last_seen":"2026-06-15T22:49:28.619173Z","times_seen":11853,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/11/files/26f1/6373/28de/eab7/cca7/d18b/6f09/877e/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/11/files/26f1/6373/28de/eab7/cca7/d18b/6f09/877e/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11084\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TUxYG3SL0cw64%2BiYKMLgjgXPEqlwsrgRyO0BqJuRVC8P8U2zyqgN4IFXzfYE7WWB8p%2FlI2wP9hiInerBcaB%2FTS5RcaoUtw%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=11297\r\netag: \"67131093-2c21\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Sat, 19 Oct 2024 01:51:15 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 9372\r\ncf-ray: 98a63a56ecd056c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11084,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"a0ca6d1a5cf36c64b7285e6a33864ae6","sha1":"f584f899bac13cb2ff802491a9826cd7a317e3fd","sha256":"d37739953d070578283822f21ffb138b9e4243a9c65b824767bdba60d687ec9f","sha512":"ca035e8c3ce9cbc3a58e5bdac0c99b78762fc0f6cdb763aa555153f94220d1535bf5661bf29e92e96825dfb174f15748d7f6c9917f8438b14c06d81a554d923c","ssdeep":"192:8j5QCe0fh13u9l+HveMTwUyHvoudhA4ep1ZFmLU3XYITpxK0VyGaGPfIK83W6vzy:2mCemV2lQnwRPoqhA4KZsUnYITjr8GoM","tlshash":"8932a05de7eca8c3cd6c823245dd6e424bfabd12053a7ad0dac031659a29db837033d9","first_seen":"2025-10-06T15:35:52.129999Z","last_seen":"2025-10-06T15:35:52.129999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/67973812?wmode=7\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A2%3Adp%3A0%3Als%3A1038502051864%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A374980866%3Arqn%3A1%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A679%3Awv%3A2%3Ads%3A0%2C175%2C406%2C0%2C8%2C0%2C%2C171%2C9%2C%2C%2C%2C761%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Arqnl%3A1%3Ast%3A1759764919%3At%3ARedPorn%3A%20Free%20Porn%20Tube%2C%20XXX%20Videos%20%26%20Movies\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)cdl(na)eco(83953156)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:19.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/67973812?wmode=7\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A2%3Adp%3A0%3Als%3A1038502051864%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A374980866%3Arqn%3A1%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A679%3Awv%3A2%3Ads%3A0%2C175%2C406%2C0%2C8%2C0%2C%2C171%2C9%2C%2C%2C%2C761%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Arqnl%3A1%3Ast%3A1759764919%3At%3ARedPorn%3A%20Free%20Porn%20Tube%2C%20XXX%20Videos%20%26%20Movies\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)cdl(na)eco(83953156)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nx-xss-protection: 1; mode=block\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-origin: https://redporn.me\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: yabs-sid=219042391759764919; Path=/; SameSite=None; Secure\ni=fJ/tsf885dCch/iwb45LDD0Sv3rUIeB4OoaT3lrInKpGCRvNUMH7orrLYDuAG9kgDFKwRM/GLdEHbmKT6DrxqUoNCGY=; Expires=Thu, 04-Oct-2035 15:35:18 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=9843983491759764919; Expires=Thu, 04-Oct-2035 15:35:18 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=9843983491759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1791300919.yrts.1759764919#1791300919.yrtsi.1759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nlocation: /watch/67973812/1?wmode=7\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A2%3Adp%3A0%3Als%3A1038502051864%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A374980866%3Arqn%3A1%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A679%3Awv%3A2%3Ads%3A0%2C175%2C406%2C0%2C8%2C0%2C%2C171%2C9%2C%2C%2C%2C761%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Arqnl%3A1%3Ast%3A1759764919%3At%3ARedPorn%3A%20Free%20Porn%20Tube%2C%20XXX%20Videos%20%26%20Movies\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29cdl%28na%29eco%2883953156%29ti%281%29\u0026redirnss=1\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":615,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/check.html","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 06:11:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d0e8af-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975998?id=1975998\u0026pid=__clb-spot_1975998_adj_1\u0026jp=_clmjuertkdufnshhtjuasv\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=nQrsmzLaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=VPHmrmCaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDEwMC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=3211552697610240\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","date":"2025-10-06T15:35:19.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /get/1975998?id=1975998\u0026pid=__clb-spot_1975998_adj_1\u0026jp=_clmjuertkdufnshhtjuasv\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=nQrsmzLaHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=VPHmrmCaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDEwMC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=3211552697610240\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2; UID=2510061035a62b2a1801194ac2bdb2e6e6be; CHCK=1; PTS=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":489,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (489), with no line terminators","md5":"014c046130eecf05a70729ff30958c2c","sha1":"3a9f5f9cbea3c3eb73a41b4e92aeed0e5ec42c4b","sha256":"58e5c58f718ab0cac394ef00e31c3cfc5c214215933e902720f2f093409e7ce9","sha512":"41bd45a9ac94e6a55e12972c384e696a8a27cff5816891be3fe6cdb461036a52ebbc6d7a8d98d35896e61734dc69dd183294b2b7252cb488d263f30ed9b5aeb2","ssdeep":"","tlshash":"a4f0dce992b98ce04883505d1ba52ac608a271849f274e26309807c0276473681bb9b1","first_seen":"2025-10-06T15:35:52.131669Z","last_seen":"2025-10-06T15:35:52.131669Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/7d1/f95/cd0/7d1f95cd0c31764ea9e7d368ca9d952eca2c6166.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/7d1/f95/cd0/7d1f95cd0c31764ea9e7d368ca9d952eca2c6166.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 767707\r\ncf-ray: 98a63a5bfbfc56a4-OSL\r\nx-amz-id-2: f5srsKUmqRRNh3VFMwSu/7cCi4UMHRqT2v+sZFcHCpmyC3NZO9gYdpR//qAYwWepn3vDgwguITz62tptWnmjFMh8Ku/gnJPKm94yqh+PQxk=\r\nx-amz-request-id: XJJ715JGYCJ96825\r\nlast-modified: Wed, 25 Jun 2025 13:28:06 GMT\r\netag: \"b039a860bbf83a2fa338da3d46dcb440\"\r\nx-amz-server-side-encryption: AES256\r\ncf-cache-status: HIT\r\nage: 1478\r\nexpires: Thu, 06 Nov 2025 15:35:19 GMT\r\ncache-control: public, max-age=2678400\r\ncontent-range: bytes 0-767706/767707\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":767707,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"b039a860bbf83a2fa338da3d46dcb440","sha1":"7d1f95cd0c31764ea9e7d368ca9d952eca2c6166","sha256":"0cb364528375cb297222e4647669d557f2ddb97583f80af4701cd2d78279e8e2","sha512":"7fe8478f186789664185af49e49f70033a3ca866d9c4f6e7a236241eddcae234f22e3e4c7b65069adb91b8de7125510f78c7ef8cdaf3fe488449442b9378073b","ssdeep":"12288:ZkO5CctvMCCFjeNPDLlYEn6c8aI4JVF2caTypYk09Zxq9O8a6gDhFkO:ZkOcclMCCFGPjnr8kJV01TypYk09rqdQ","tlshash":"7af4233792890433e4917371f7d4b6832f3ded9526b81ee33b9ccb62ab4e10959689d0","first_seen":"2025-10-06T15:35:52.099838Z","last_seen":"2025-10-14T09:50:18.872389Z","times_seen":12,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":31,"dns":3,"connect":2,"send":0,"wait":18,"receive":31,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/11/files/9d5d/82bc/6e8f/251e/5b2e/767a/9280/2ed2/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:19.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/11/files/9d5d/82bc/6e8f/251e/5b2e/767a/9280/2ed2/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14881\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Jun 2024 07:55:14 GMT\r\netag: \"665ec862-3a21\"\r\nexpires: Tue, 06 Oct 2026 15:35:19 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=weRWSRHXaTbJ%2BQCa9I9XjoHfJP3jP9Qm9H1S%2FjaGVKAmyN4XVFDbFXiYTNky40b2BpuahaOxjzgzEKDpVE7ClPQhM6a4NPI%3D\"}]}\r\ncf-ray: 98a63a57edaf56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14881,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x180, components 3","md5":"9d5d82bc6e8f251e5b2e767a92802ed2","sha1":"82e29fe4b5c516b6632b15b44a3f7f9adecde82f","sha256":"62beb34bdc1d4fd86f04aff1e30cda4e4180dc5d392ab30a30e2745c5c3a44cc","sha512":"fd298b9d7232b03fd62a302a0c4e42a4c6dcc9069c2e601c94745021d5ca7deaa6b2f83848fbb09c7f6a98619946f5280d0f307aa9025489d7d656ef1bafb724","ssdeep":"384:+6wAe353DPEVfEejyxEkiYxprOcUgLTEQQd:+63s53DPE2eGxxxNDUXv","tlshash":"4b62bf0df7e1aea455da3f3d493a4620831dea1d2621a30df49afad16d0118fdc3247b","first_seen":"2025-10-06T15:35:52.133417Z","last_seen":"2025-10-06T15:35:52.133417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /metrika/advert.gif HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 06 Oct 2025 16:35:19 GMT\r\ncontent-type: image/gif\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\netag: \"68de5a06-2b\"\r\naccess-control-allow-origin: *\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\ncache-control: max-age=3600\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nlast-modified: Thu, 02 Oct 2025 10:55:02 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/4d8/94c/85d/4d894c85da1d68db9dc4e32939323db8a5aa7c0c.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","date":"2025-10-06T15:35:19.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/4d8/94c/85d/4d894c85da1d68db9dc4e32939323db8a5aa7c0c.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 573379\r\ncf-ray: 98a63a5c0c0e56a4-OSL\r\nx-amz-id-2: f1YjssE+VfnlY5vfcYwLARJSkeSILrooEp14eyidPHRsQoRY2mpmG/F5OUvVxhb4r5Rxu8fiR8U=\r\nx-amz-request-id: VGWYBTDT2C8EQ23K\r\nlast-modified: Thu, 17 Oct 2024 11:20:03 GMT\r\netag: \"ed2f0a4ef2942d73ba176cc96e20fff3\"\r\nx-amz-server-side-encryption: AES256\r\ncf-cache-status: HIT\r\nage: 1247\r\nexpires: Thu, 06 Nov 2025 15:35:19 GMT\r\ncache-control: public, max-age=2678400\r\ncontent-range: bytes 0-573378/573379\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":573379,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"ed2f0a4ef2942d73ba176cc96e20fff3","sha1":"4d894c85da1d68db9dc4e32939323db8a5aa7c0c","sha256":"19711450f604d797417762b024d34151711f5a8cbe503ded96742eddc7851697","sha512":"95a05129c934e0954866eba18f0b2adafecaa39d7cce6a3aacc4d70277a40263b3e7143aa903a1ae3e71d641af2cb8522accaf9791b61f5d688d71a58aa1990f","ssdeep":"6144:9q/CzsYvxCCM1BFerXUJD0Q+hZxmBmUAPMt0atU50rUaNOJW5JhS15kjE:gCzssM1BFoywZItP75/dE","tlshash":"45c402f392e04c2aed7d1a7a5ce726560684cd0a03794bd7394c36a96f78ad60f1fd80","first_seen":"2025-10-06T15:35:52.045841Z","last_seen":"2025-10-12T10:00:30.902436Z","times_seen":7,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":31,"dns":0,"connect":1,"send":0,"wait":27,"receive":16,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.605\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Faa.beeg.porn%2Fad%2Fclickadu%2Fbeeg.porn%2Fmain%2F300x100%2F%3Fdomain%3Dredporn.me","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x100/?domain=redporn.me","date":"2025-10-06T15:35:19.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.605\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Faa.beeg.porn%2Fad%2Fclickadu%2Fbeeg.porn%2Fmain%2F300x100%2F%3Fdomain%3Dredporn.me HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2; UID=2510061035a62b2a1801194ac2bdb2e6e6be; CHCK=1; PTS=; OAICAP=AEmX1wAAAAAAAAAB; OAIBLOCK=AEmX1wAAAABo40zQ; OACICAP=ADbqJAAAAAAAAAAB; OACIBLOCK=ADbqJAAAAABo40zQ; BCAI=ADbqJAAAAAAAAAAB; BMI=AEmX1wAAAAAAAAAB; BCRI=EvpY9wAAAAAAAAAB; IMC_52=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/13/files/eb12/6c98/f634/14eb/2338/21d2/37f9/1697/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:20.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/13/files/eb12/6c98/f634/14eb/2338/21d2/37f9/1697/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9572\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 07 Jul 2025 22:25:38 GMT\r\netag: \"686c4962-2564\"\r\nexpires: Tue, 06 Oct 2026 15:35:20 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4lYw04lPf7OVcSb%2FfHfVEgKKx6E1iAIAagSQJ6%2FQIspzU7K11Oa53k5NYtp2GSTzsX%2Bx8haVqgd%2BI7OduGloNeWwZTYOQLY%3D\"}]}\r\ncf-ray: 98a63a60ff4456c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9572,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 288x162, components 3","md5":"eb126c98f63414eb233821d237f91697","sha1":"7cf2f2b0bafddb021d68f0d23d2817b9a1483ccd","sha256":"84940b27587bbf87f5c46f27167367db2720c6c1acef8a586df6306ae8978bab","sha512":"8d39833a346a3a603d217f07981925ce995310145cc323817ac20aa78356e8b0252eb20bc1c6d5610a6e8c06b17717378e54b2f0e5c6ec18ef0965d433063b74","ssdeep":"192:VBzNYouugUA+EFLgSzUfQtj/hwe3zYRiB9kz/AiCnY:VBzNYo9NG4fC/hwroiCY","tlshash":"a6129f113b218719ed3cd53e4068f33ab3025e66b5a27bcfb167364a2a068677ed40d2","first_seen":"2025-10-06T15:35:52.135635Z","last_seen":"2025-10-06T15:35:52.135635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/13/files/27cd/aa24/c258/a397/ac53/7457/caff/fdfc/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/13/files/27cd/aa24/c258/a397/ac53/7457/caff/fdfc/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8674\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=inqx%2BeZ4hJo405uTn3jFZMnam7Yd%2Fdtvx6A3%2BkSMMQ6V8yEJHLfgW2yooMAWjGBBTDCljFH8J1hmaO65LSs9JGDO0BFVHi8%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=9028\r\netag: \"689e0bbb-2344\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Thu, 14 Aug 2025 16:15:55 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 451840\r\ncf-ray: 98a63a569c5e56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8674,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"240741c5d1235561b8322b8871cfd013","sha1":"e780eaa4e4170cd2e999b21e62ffab2f0d1914ce","sha256":"fbdb6283d2afe7dbcd443e42895b107af4f7e01cb39d2f9ef98d0b21473d064b","sha512":"78879b9d94fcf10cc305e6befbb07b9571e9b27319caed50e2e89012639e4fdf50b44bef397f79accb7cbfff9002a3bdf3fc1d823eeb10df2ac45aec06ce4d50","ssdeep":"192:EifTTJmUV1oDzFG0XxO53g4T5iX9kn2Onhf6WHo8wl3KTfs:EwTMU3IzU0XE53P2vOnxfwl3mU","tlshash":"7b029f14ac0e9eeebd682f30d7da3e81fd0a4b540bb7d00554daf78c08fea56611955c","first_seen":"2025-10-06T15:35:52.139156Z","last_seen":"2025-10-06T15:35:52.139156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redporn.me/i/images/sprite.svg","fqdn":"redporn.me","domain":"redporn.me","tld":"me"},"ip":{"addr":"172.67.195.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redporn.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 01:12:32 GMT","end":"Thu, 11 Dec 2025 02:11:12 GMT"},"fingerprint":{"sha1":"E9:3B:B6:27:06:E5:0B:32:2F:C2:AF:E4:36:CA:D4:93:D0:04:63:88","sha256":"F6:43:72:FF:5E:8B:16:F9:CF:AB:D8:60:01:84:36:83:F5:D8:E8:23:A5:7D:75:2F:8B:B4:0F:B2:26:B3:D2:56"}}},"request":{"raw":"GET /i/images/sprite.svg HTTP/1.1\r\nHost: redporn.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://redporn.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Sun, 10 Aug 2025 10:37:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BPxa%2BR6oIP9Jw24wEIU5iFNRR7hd0gpYbIB24fkOL6HwNRjIQsEV93UqBHSEXYrsvj6zwi%2Fe3TRzKdzoQEN7Tux1D3C8%2FEQbgJM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"68987656-439b\"\r\ncf-ray: 98a63a55382649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17307,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c786bc07ee08dd08c7231ba2f9241212","sha1":"fe9621a01bb8ca9ca532c850e9e4d521351a0938","sha256":"8bb281c4ef273b8c6e730416b26aadfd72d53c71eb48c0f1e3b8101b517750e1","sha512":"1b3a2b9838e810ccfbae99ca7a0a38673316a137561e265298883ad903b20b5b8b588dfb46cb16004271b832014e58eb613a2072686f14fb5d6013fb8fea9693","ssdeep":"384:S7yHk5fnGtfivyv4PY7qm/c8OBNXMWYITJ+0kbJ6ua:S7YkxGCg7a80NcRIwZa","tlshash":"8172f836133002f8e0ee87a4cdab7509672478b7315854c8bbbf9e41af674e347b9a45","first_seen":"2025-10-06T15:35:52.140675Z","last_seen":"2025-10-06T15:35:52.140675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/mobile/?type=tube_index","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /mobile/?type=tube_index HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tXdNqIhl4VfAS9ot7Zy9dnSdafDg%2BY37gV7c70H0SUuEI1GegKVS14KHJQmqHeZIE3c18CT35Q0I%2FMaz1Tcxp4SPHk7spYiXQ2jqulon%2BA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 98a63a563d768be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17073,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7538), with CRLF line terminators","md5":"4d1b216f6ef88de8a07d18561d25f0f4","sha1":"c35ca5a2aed4810beff93589299f7f131cdda29e","sha256":"e56c19dd175fe20a1b02fd167444b790c3c6a66d9c3e7ff5a4af34f2dddf526b","sha512":"3d5927d2a08c45aa9f340df7f2a2af27590c4ae3a0b1b5ff1f473f7dbc4db86c1590b5263057bb25a02e52ac608abca53cceafbd665b9731f7325c1fcfeec848","ssdeep":"384:7zRV1vHNmMQhs7OfUjh8JSiMq0CeHghiS9fJ2m/P6xPEf:7zRV1HQhxO80iMq0CFhiS9fJ2m/P6xPm","tlshash":"5372840c35a6712aa537f275be6f9948fa30a4db06828101795cc1a69f70c29c777efc","first_seen":"2025-06-06T07:37:21.091757Z","last_seen":"2025-12-05T23:43:00.970315Z","times_seen":5,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":52,"dns":0,"connect":2,"send":0,"wait":30,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_ftv_1\u0026jp=_cligettuzsdnmlhlkejkyf\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=vxZ6ZB7aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=1Fp6kchaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=4618927581153280\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /get/1975997?id=1975997\u0026pid=__clb-spot_1975997_ftv_1\u0026jp=_cligettuzsdnmlhlkejkyf\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=vxZ6ZB7aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=1Fp6kchaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=4618927581153280\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nUID=2510061035a62b2a1801194ac2bdb2e6e6be; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":489,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (489), with no line terminators","md5":"3a42dc23e2ff9b0a3f233b477d8c823e","sha1":"284cd78e46c3464dd20d0148f43a3d2bf99f4af2","sha256":"050a8b768ac84b8a2840bb1d00ad36daadce4a28381d9fbcd03b54da1a498334","sha512":"e7db5920cca285fc96b9d254699119fdaa2c0beebb41904edb285fe2beb2eaa4578d8f3f117dabdb5fbea8b351f3bd3dfdf1df05b34302294f86f581b3eb7ff1","ssdeep":"","tlshash":"27f05c35a8cafe684cb4d94a127f6dc736c4534d9f175a699a9083e0c004e71e773d0b","first_seen":"2025-10-06T15:35:52.143995Z","last_seen":"2025-10-06T15:35:52.143995Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/67973812/1?wmode=7\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A2%3Adp%3A0%3Als%3A1038502051864%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A374980866%3Arqn%3A1%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A679%3Awv%3A2%3Ads%3A0%2C175%2C406%2C0%2C8%2C0%2C%2C171%2C9%2C%2C%2C%2C761%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Arqnl%3A1%3Ast%3A1759764919%3At%3ARedPorn%3A%20Free%20Porn%20Tube%2C%20XXX%20Videos%20%26%20Movies\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29cdl%28na%29eco%2883953156%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:19.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/67973812/1?wmode=7\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A2%3Adp%3A0%3Als%3A1038502051864%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A374980866%3Arqn%3A1%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A679%3Awv%3A2%3Ads%3A0%2C175%2C406%2C0%2C8%2C0%2C%2C171%2C9%2C%2C%2C%2C761%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Arqnl%3A1%3Ast%3A1759764919%3At%3ARedPorn%3A%20Free%20Porn%20Tube%2C%20XXX%20Videos%20%26%20Movies\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29cdl%28na%29eco%2883953156%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 615\r\nx-xss-protection: 1; mode=block\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\naccess-control-allow-credentials: true\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://redporn.me\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":615,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"66cf549f79d71ca175537c482bfc9fc0","sha1":"fe0682e578f8ed07835d9c73470ef78939530e0d","sha256":"8a6d28c19f956ebc6a5dc91e66031aa4e75c3f5b20053b9cf3e55d9bfccefb54","sha512":"c1c4c39d6c3e9318f358a21d4858207af30e54293964075effb3975a2c27cfce269ce413ff204fd39db915fbfe91df4ef084f9e56a296f370dc0033b9c68c1ff","ssdeep":"","tlshash":"0ef00208691849f9188f4b50556f3af9544cb2044cc6b7ccf5a1f2a54e4fd9332185fe","first_seen":"2025-10-06T15:35:52.145505Z","last_seen":"2025-10-06T15:35:52.145505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A312851241%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764920%3Ac%3A1%3Arn%3A742697258%3Arqn%3A10%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918684%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764920\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)re(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22ad_type%22%3A%22tube_index%22%2C%22ad_type_details%22%3A%22tube_index_main_banner%22%2C%22ad_domain_show%22%3A%22beeg.porn%22%2C%22ad_domain_referer%22%3A%22redporn.me%22%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:20.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A312851241%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764920%3Ac%3A1%3Arn%3A742697258%3Arqn%3A10%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918684%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764920\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)re(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22ad_type%22%3A%22tube_index%22%2C%22ad_type_details%22%3A%22tube_index_main_banner%22%2C%22ad_domain_show%22%3A%22beeg.porn%22%2C%22ad_domain_referer%22%3A%22redporn.me%22%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ncontent-type: image/gif\r\nset-cookie: bh=YLjDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:20 GMT; SameSite=None; Secure\r\nlast-modified: Mon, 06-Oct-2025 15:35:20 GMT\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 06-Oct-2025 15:35:20 GMT\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/11/files/cd63/706e/f8f3/366c/e325/43cf/31f5/c137/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:20.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/11/files/cd63/706e/f8f3/366c/e325/43cf/31f5/c137/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11946\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 07 Oct 2024 14:20:30 GMT\r\netag: \"6703ee2e-2eaa\"\r\nexpires: Tue, 06 Oct 2026 15:35:20 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hn2M2GVn54jlxRCrojNijYqqidfw4%2FOnv67ibT6gQ1%2FmOqlTymVxRBAclsDlg2eEk65YSl2u58Sh54D6e5JmQCKOIWd7ieE%3D\"}]}\r\ncf-ray: 98a63a60ff4656c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11946,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 288x288, components 3","md5":"cd63706ef8f3366ce32543cf31f5c137","sha1":"4ec4268458e8bdd8c4c404c3a7893709c31fd927","sha256":"524a11fca13303ed68b036c6444ec8bc201258acbea173ad9be523d54ed49720","sha512":"84462f55c014ad2bebad5fe4d593631504a0e26f83940b9c52b9ee9457186708a063f635b52ad5ae5777a25547506045614b703472d83db89d163e28767c38de","ssdeep":"192:NcXgADhu504y9aqs8oY0zLrb0n+lWcVFiLlnHk6P4Izia7lYwqFD5EBrc26pS4:NcXjDE504zPbtJFiJHfxz5pYwqd+q2QJ","tlshash":"5a32bf173fe99500de64d13e045602b1b765de06e02d6a1f71bf4f48481e6f2adee02c","first_seen":"2025-10-06T15:35:52.148322Z","last_seen":"2025-10-06T15:35:52.148322Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/12/files/cca9/8527/55cb/4923/7bfc/0a16/519c/c138/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/12/files/cca9/8527/55cb/4923/7bfc/0a16/519c/c138/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24806\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGpU7JW7l%2F09Og%2FnwBoaz%2F5Qx7n4jQZ7OWe2dACBlQWHKy4fuSFU8mVPZ%2FfzJ2Goj2Vazokbh1UugERfNkXkeM%2BRpyEhEAM%3D\"}]}\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=28781\r\netag: \"cca9852755cb49237bfc0a16519cc138\"\r\nlast-modified: Sat, 24 Feb 2024 14:49:30 GMT\r\nx-amz-id-2: BBzsHGWcUmHu6xn0PyONWNlFfvGBLEjgXo83l8sjaw9G4oVZGQNoejF5L1M86cX83sluCeiSYgGQ\r\nx-amz-request-id: C413957BDF26DC4E:B\r\nx-wasabi-cm-reference-id: 1758269959930 130.117.252.108 ConID:7876871370/EngineConID:75967870/Core:10\r\ncf-cache-status: HIT\r\nage: 1494958\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\ncache-control: public, max-age=31536000\r\nvary: accept-encoding\r\ncf-ray: 98a63a57ad6456c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24806,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3","md5":"729e581805b5e79da5213180b35d3ed5","sha1":"ece6d47f50e286ea06ccb2a27714fba1f2bfaf7d","sha256":"49828f9bb1e6a1ffa24d8169c3afc7e430f9d3acd3cc09db8db806e18c472460","sha512":"2436c22c30bceef8ec5748b872ae4a5dd1c3edd63d972450a0630a98d7f7aa6b21518995f15bca344b0cbbe5291e925f81f6c0ec63cd008b5a019ae7809cd8b6","ssdeep":"768:Vws38TXZbU5bH7IwjRIJif7ZaeEWU1zfqo:e9hU5bbIw1IJi9eLzfP","tlshash":"afb2e16b7e0362331eef177852cf271aa0d580707d3267c669d8f815a0e406af9df515","first_seen":"2025-10-06T15:35:52.150122Z","last_seen":"2025-10-06T15:35:52.150122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A672673805%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A847310888%3Arqn%3A4%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C104%2C1%2C727%2C727%2C0%2C193%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918683%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29re%281%29aw%281%29cdl%28na%29eco%2883952128%29w2s%280%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A672673805%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A847310888%3Arqn%3A4%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C104%2C1%2C727%2C727%2C0%2C193%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918683%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919%3At%3AA-Desktop\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29re%281%29aw%281%29cdl%28na%29eco%2883952128%29w2s%280%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aa.qwerty24.net\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 622\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\ncontent-type: application/json; charset=utf-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"52948508e2df76bfa25561eb2519dc88","sha1":"bb5218ec477326af8d28463ab3a1b88398f18174","sha256":"9d1c5223c7832f4acdb120e42e5bc4f5502537015c305ebcbab2758fd849ef86","sha512":"e84692154b4d8c94c118102c5dafef59be34ade72753ee039df5819b2ebce75c16dc0c9c8feca388bf04c0a3357ae8f3d34b1071c54ca923e9417a93cabcad49","ssdeep":"","tlshash":"b5f00299c8040db64ecfde24d82e361721483a26ccd127902847b150496ff33770a6f0","first_seen":"2025-10-06T15:35:52.152003Z","last_seen":"2025-10-06T15:35:52.152003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.605\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Faa.beeg.porn%2Fad%2Fclickadu%2Fbeeg.porn%2Fmain%2F300x250%2F%3Fdomain%3Dredporn.me","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.605\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Faa.beeg.porn%2Fad%2Fclickadu%2Fbeeg.porn%2Fmain%2F300x250%2F%3Fdomain%3Dredporn.me HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2; UID=2510061035a62b2a1801194ac2bdb2e6e6be; CHCK=1; PTS=; OAICAP=AEmX1wAAAAAAAAAB; OAIBLOCK=AEmX1wAAAABo40zQ; OACICAP=ADbqJAAAAAAAAAAB; OACIBLOCK=ADbqJAAAAABo40zQ; BCAI=ADbqJAAAAAAAAAAB; BMI=AEmX1wAAAAAAAAAB; BCRI=EvpY9wAAAAAAAAAB; IMC_52=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=nb%3A1%3Acl%3A308%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A14140482%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A877306955%3Arqn%3A11%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764918680%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(3)aw(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:34.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=nb%3A1%3Acl%3A308%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A14140482%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A877306955%3Arqn%3A11%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764918680%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(3)aw(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: bh=YMbDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:34 GMT; SameSite=None; Secure\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ncontent-type: image/gif\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\nexpires: Mon, 06-Oct-2025 15:35:34 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nlast-modified: Mon, 06-Oct-2025 15:35:34 GMT\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fmobile%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=nb%3A1%3Acl%3A133%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A526123533%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A150216290%3Arqn%3A14%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764918685%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(3)re(1)aw(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://aa.qwerty24.net/mobile/?type=tube_index","date":"2025-10-06T15:35:34.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fmobile%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=nb%3A1%3Acl%3A133%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A526123533%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A150216290%3Arqn%3A14%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764918685%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(3)re(1)aw(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nexpires: Mon, 06-Oct-2025 15:35:34 GMT\r\npragma: no-cache\r\nset-cookie: bh=YMbDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:34 GMT; SameSite=None; Secure\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\ncontent-type: image/gif\r\nstrict-transport-security: max-age=31536000\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nlast-modified: Mon, 06-Oct-2025 15:35:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/libs.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /libs.js?v=202503291755 HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"36baa79fb8a6a7de3d0af63ae01c8c55\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8z9s2vK24%2FtFGguoSzm%2FmVNOqyUHlyffbJVxeB5nVwBAbX0%2BWtLkPBfisQJkNSLJtfBPsv%2BHhEOMa5ijM0LWYSU6JGp9YDoo2M5XG4I%2FfrDAm5clyU2OrCWd%2F4hQBTT2AtYW2o%2FsOfnyPhHNKbQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 98a63a56dbb50883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1431,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"cc9614070357853b50c7c52422e80ee9","sha1":"a5a353d8a81630ad02e585914e106da95b0b0fda","sha256":"a4387c06cd8e863daead916951e528d69f16be2efa295a5256339a5023c2134f","sha512":"08854f0c6bf47d1fa57760b3a8682f95a7053866d874aa034f9c9913e9ff5dbb65c70a3936014497b6092801e1c5e98cf39c3b5dd0b79b4b4c772597fa5d66ab","ssdeep":"","tlshash":"d82186882c4aa019c3f333249b576555fc5612063601ccd6fc6cca405fbdd98c4bbd4c","first_seen":"2025-03-29T16:56:08.532528Z","last_seen":"2026-01-17T13:48:46.716722Z","times_seen":257,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/12/files/7546/1f46/4c77/490f/c7a9/e1b9/0861/d95e/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/12/files/7546/1f46/4c77/490f/c7a9/e1b9/0861/d95e/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9313\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibIX5ENE8XdYbZQDXngzQRBmhSpNth63WY5c0OPyRULp9aD6uhWYsy1SzATkLh75SpBWGRP5ktUwSMNLnn%2BuEGu5avGzaBI%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=9576\r\netag: \"677cd7fa-2568\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Tue, 07 Jan 2025 07:30:02 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 9375\r\ncf-ray: 98a63a56ecc856c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9313,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"af924f0c1ada9d5fe2f4fd46a3b75c2c","sha1":"ca2af850594f5edc76a0dedc36a58d39987d53d9","sha256":"7beed7c593f58ad552594c32febeb7199da573280fa2368a9d5cd7c15f1c4f6b","sha512":"07e7dc996b7baf14aae7466fce6e15a9f53ed21f74de1eb7a4e1c3948427808e555ad2b14e1d612c20696631539bbe50ef49664664b9635aef93cc13e165d443","ssdeep":"192:ThDCuoHQf0nAfD9dBQRAgiXFNax8GozxDwYN:tGud0nAfxHQbiXno8lwe","tlshash":"3312b0476e7a32e48b19d3bd0e68256e64f8caf2c39702acad49b46cd83d6c30255e14","first_seen":"2025-10-06T15:35:52.153749Z","last_seen":"2025-10-06T15:35:52.153749Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/metrika/tag_ww.js","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /metrika/tag_ww.js HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 83693\r\netag: \"68de5a06-146ed\"\r\ncache-control: max-age=3600\r\ntiming-allow-origin: *\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\nexpires: Mon, 06 Oct 2025 16:35:19 GMT\r\ncontent-encoding: br\r\nlast-modified: Thu, 02 Oct 2025 10:55:02 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-type: application/javascript\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251057,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"4e58cae18b3ef726b4b1bd099e9f0438","sha1":"5467d148ea0f4585c75c8a43ff13fd0272d47acf","sha256":"4385e1b284b60ab5400677455c34e21d7fe12cec554b822e50a1a05b815d4c84","sha512":"f41609fa97eed07700ec6f8c5a92c5912cfb8f3984f87a2ecaadc6568640cca93fe69fbde242ef76fbf4897521c307d2b6d6253072d3dae7af085e2a21e3ec51","ssdeep":"3072:2WjN+Rla8qz3Oph8msTVdBRQhB35+v5COAH8w6hjWpBF2tSR:2WjN+RB8Opams5dB+z35OS8wMWnFlR","tlshash":"8534e8d976827472937334b4a03f000bb1be6c96f14c8965e186e9d57e389ac9237f6c","first_seen":"2025-10-03T16:02:45.521856Z","last_seen":"2025-10-13T08:52:45.356463Z","times_seen":82,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":145,"dns":3,"connect":49,"send":0,"wait":221,"receive":43,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/bn.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 06 Oct 2025 12:27:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e3b5c9-287b9\"\r\nexpires: Mon, 13 Oct 2025 15:35:19 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":165817,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a99b6ae09058e72bb15a7e541194fe23","sha1":"9bc1863d3ecb11e580aa119ed2366c251a1f01b6","sha256":"50f0b51e2005ee15e4ee9baddd4672b994a42994719717e513f92634b3b92a02","sha512":"8026616a897ffe0929c64750b76298f602a48b3f70ba66f9f298881d8f6843dd29643a64fed71ecda57accac31fd5f8211535253e775999dbb3e831481481f95","ssdeep":"1536:eZNgud5QeZYZKHURgeYJEJc+iq5A1E1PCGGOc7d07Db0gyylZE8kO1i2BaOFBA4j:eZR5QeZ3hoOqk8PDI8Xt7Tk3d0x","tlshash":"f5f384ceafd664356153e329093f6931edbadcd2e1df0113e837d1a41a68805e332b69","first_seen":"2025-10-06T14:48:53.289351Z","last_seen":"2025-10-07T04:44:54.485701Z","times_seen":11,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":61,"dns":5,"connect":22,"send":0,"wait":60,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickadu.qwerty24.net/?c=track\u0026zone_id=1975997\u0026t=1759764919\u0026rf=0","fqdn":"clickadu.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"172.67.143.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:11:30 GMT","end":"Thu, 01 Jan 2026 21:10:05 GMT"},"fingerprint":{"sha1":"2B:F1:86:15:26:34:BB:D0:75:87:8A:BC:CB:26:1D:B2:3C:7F:D1:CB","sha256":"88:90:CA:7F:05:95:2D:02:FE:D1:7D:0E:94:C4:9B:EA:36:EB:29:3F:F9:27:60:5C:69:C3:A9:C3:E3:9E:3C:31"}}},"request":{"raw":"GET /?c=track\u0026zone_id=1975997\u0026t=1759764919\u0026rf=0 HTTP/1.1\r\nHost: clickadu.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aa.beeg.porn\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.16\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-header-sub: Master\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsBOuw%2BW3up4U%2BieKnJ5qJn9sl5RtzSTvEguvcuCajHthlJy1H%2Bj94NMRRF2ybuuALHxfWx1pW5SGv%2FTIsFwMnHQoNEZfyWgcyrqX1oBNn7ZvSZahA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98a63a589a7935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c79da15f422df09e108feabd68f9ea3","sha1":"4415c5cd125e889b721d74c7823afba47f7e8179","sha256":"b19b74974ece6f590f4a95bbbcc33b9e7c7e141feef38486df10037ef843b8d2","sha512":"c3d9a9e59e7671b77af1978fb449cd45abbdd59c18a6d46ecf6304893e9b3cc65200226db411942eae51e5f6cc788ae0a65cba6c8f8c746a680dfc338299876c","ssdeep":"","tlshash":"1f8000a0030088ef30e2a3e0f80ab0c38a2bea328c0c830000008a0b380f20c0323202","first_seen":"2025-05-14T00:26:21.944464Z","last_seen":"2026-01-26T08:51:06.43815Z","times_seen":18,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":18,"dns":2,"connect":5,"send":0,"wait":22,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fmobile%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A526123533%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A621697945%3Arqn%3A1%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C138%2C1%2C%2C%2C%2C239%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918685%3Arqnl%3A1%3Ast%3A1759764919%3At%3AAds\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29re%281%29aw%281%29cdl%28na%29eco%2883952128%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/mobile/?type=tube_index","date":"2025-10-06T15:35:19.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/100522608/1?wmode=7\u0026page-url=https%3A%2F%2Faa.qwerty24.net%2Fmobile%2F%3Ftype%3Dtube_index\u0026page-ref=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A526123533%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A621697945%3Arqn%3A1%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C138%2C1%2C%2C%2C%2C239%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918685%3Arqnl%3A1%3Ast%3A1759764919%3At%3AAds\u0026t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29re%281%29aw%281%29cdl%28na%29eco%2883952128%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aa.qwerty24.net\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 622\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\nx-content-type-options: nosniff\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-credentials: true\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"535370bf6c5c623fcc0a998cb6cfa398","sha1":"c3c22a99986984b427003284681d9a067a3dc032","sha256":"fcfd76d407e55e83b39b77aee59ed4c7514d2d471ce8a5c7b5ce8116b845ae98","sha512":"5fb277a1917de4b9db78cafbd4afe28eb1dcee72695f7ebe959a71bb8aecd64deb75ce8843f7b5b19d6280a08924038bc16946298167d3afd6129602885557e0","ssdeep":"","tlshash":"33f0024488550af6468f6e80d0ef7b16608d3000dcc117ccee93e12188cef623709594","first_seen":"2025-10-06T15:35:52.155975Z","last_seen":"2025-10-06T15:35:52.155975Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/desktop/?type=tube_index","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /desktop/?type=tube_index HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Belpd1QHqg4N41arif%2BMmtgK%2B9wXnPRMvN6rX8rOi9ajBZF6suBle9jUR8SD3ttp045SaoEZTmm%2Fn8Ao4q0EckseTQ3wpcdWA55JMBwI3fksZK1LjBPfTVDrsduDUASdCbI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98a63a562d6e8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19349,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7538), with CRLF line terminators","md5":"c867ea255534b7d2682f7bdeecc73c3f","sha1":"35e66adbbfb162b76d55804f568ef0b9f71cd872","sha256":"518426cd8379f0618f8bf1b72b78f273661ef7649c8bdca74a82343c9a6d7af0","sha512":"1826782f41f94a22fef50e59f4f1039dae9913089e834e298efb82d79507c0367ffc40fbab1aa8daedf26520bd0c719d36e746e953c3da837aa7e433e79d6a58","ssdeep":"384:7oRN1vHNbi0wJCL0nIxv7Qhs6Ofyjx8JSiMq0CeHghiS9fJ2m/P6xPEf:7oRN1TV7Qhu080iMq0CFhiS9fJ2m/P6U","tlshash":"c792a40c766675299133f275ae6f8908fb31a9db128281057d5cc0999f70829c777efc","first_seen":"2025-03-29T16:56:08.42811Z","last_seen":"2026-01-17T13:48:46.732975Z","times_seen":18,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":52,"dns":3,"connect":2,"send":0,"wait":37,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/6/files/65dc/233e/088c/ab7f/7c51/e3e0/a2c6/a9f5/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/6/files/65dc/233e/088c/ab7f/7c51/e3e0/a2c6/a9f5/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8595\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6QVDTIaKtlilucto0PgUzyfLqJvqY98sZlxfqM5nLCZUTH2to0FpGHXJ1oIXktcKKLd7eVuyI3w3Ksh7XDHTv%2FLd%2BOC5d0%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=8662\r\netag: \"650b60e0-21d6\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Wed, 20 Sep 2023 21:15:12 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 21781\r\ncf-ray: 98a63a569c5f56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8595,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"3461a45d15cd8a7d626ee43c4af08bab","sha1":"2a80ceca07e21dc943470c9b0b50560188f05778","sha256":"1369b4ac7aeac78c3080734dc5303490806d995e8e8cc3b00c6cab72e87aac60","sha512":"166e18d8ac10b57e3112817697cadde522e84c14dceeceedbb5c489c821ed81227c511dcc5c361db59ac9e83fbfbfd542ec2cdd666d972d51f564f4dd56e7c7f","ssdeep":"192:hw/7sHHF5bDJI3VzJpDjYp9Gk7M4A2vVJfMj2XLMo06K3n:hwT+JDuzXYKGvzfrYoVs","tlshash":"7602b01e6de9c48fd8d90336a37d03949f1184e9c3e4f5564f672e5691ac0a2cf10a78","first_seen":"2025-10-06T15:35:52.158257Z","last_seen":"2025-10-06T15:35:52.158257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/1/files/d658/167b/555e/a2b0/6d39/a291/b79f/2267/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/1/files/d658/167b/555e/a2b0/6d39/a291/b79f/2267/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10932\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 08 Sep 2023 03:59:26 GMT\r\netag: \"64fa9c1e-2ab4\"\r\nexpires: Tue, 06 Oct 2026 15:35:19 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5QDnQH2AFRMwdB%2FCrbltFA9pIatp97WfuVLIbwgJ8sVVyMLliUUWpkStHymKjHS4ekp5NUifLUhN%2FPcsvKX2n0AipXRIvk%3D\"}]}\r\ncf-ray: 98a63a57ad6156c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10932,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 288x162, components 3","md5":"d658167b555ea2b06d39a291b79f2267","sha1":"74bf0614e4f2d177468d079e246a265b2eea0898","sha256":"76b14610f5f65a1c0813b21a542e7af600365977f3d96b776174ff861835dcc6","sha512":"04d32f54ed1d16f1a0de0d87af2bddc39bea8424aec528cee90d787171ed85168bea55ece2f932a912244e1d68a0bc44f8a21c21808d3950e74ca1c4a7d943af","ssdeep":"192:NXn3d8JU/cjqJXOJT5Stf8Ia25xNqs6AYB9dW9nGVI9kWfmywkxBJqy5Vn:N33d8eyqVWT2EA5xNt/YBGFGG9kW+y1R","tlshash":"6832ae57b3466902fb55c4f7881e874cebdffe849428477e529c02825c709e6eee5b08","first_seen":"2025-10-06T15:35:52.159934Z","last_seen":"2025-10-06T15:35:52.159934Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/97686631?wmode=7\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A971747173601%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A228092482%3Arqn%3A1%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A679%3Awv%3A2%3Ads%3A0%2C175%2C406%2C0%2C8%2C0%2C%2C171%2C9%2C%2C%2C%2C761%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Arqnl%3A1%3Ast%3A1759764919%3At%3ARedPorn%3A%20Free%20Porn%20Tube%2C%20XXX%20Videos%20%26%20Movies\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)cdl(na)eco(83953156)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:19.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/97686631?wmode=7\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A971747173601%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A228092482%3Arqn%3A1%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A679%3Awv%3A2%3Ads%3A0%2C175%2C406%2C0%2C8%2C0%2C%2C171%2C9%2C%2C%2C%2C761%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Arqnl%3A1%3Ast%3A1759764919%3At%3ARedPorn%3A%20Free%20Porn%20Tube%2C%20XXX%20Videos%20%26%20Movies\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)cdl(na)eco(83953156)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlast-modified: Mon, 06-Oct-2025 15:35:19 GMT\r\nlocation: /watch/97686631/1?wmode=7\u0026page-url=https%3A%2F%2Fredporn.me%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A971747173601%3Ahid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A228092482%3Arqn%3A1%3Au%3A1759764919269503784%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A679%3Awv%3A2%3Ads%3A0%2C175%2C406%2C0%2C8%2C0%2C%2C171%2C9%2C%2C%2C%2C761%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764917918%3Agi%3AR0ExLjEuNjM4NjI1NjQ5LjE3NTk3NjQ5MTk%3D%3Arqnl%3A1%3Ast%3A1759764919%3At%3ARedPorn%3A%20Free%20Porn%20Tube%2C%20XXX%20Videos%20%26%20Movies\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29cdl%28na%29eco%2883953156%29ti%281%29\u0026redirnss=1\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: yabs-sid=778558201759764919; Path=/; SameSite=None; Secure\ni=hLa2g/kAQMVmfpLM11jGPsz+RUK9fM+DJ/jdyh+6cqpUrauP8tVBV0hOve8Wzwoa+q1AgL094zLDt5ezdewt1b0mj2g=; Expires=Thu, 04-Oct-2035 15:35:14 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=2421571301759764919; Expires=Thu, 04-Oct-2035 15:35:14 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=2421571301759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1791300919.yrts.1759764919#1791300919.yrtsi.1759764919; Expires=Tue, 06-Oct-2026 15:35:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\nbh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\nexpires: Mon, 06-Oct-2025 15:35:19 GMT\r\nx-xss-protection: 1; mode=block\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-origin: https://redporn.me\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sacwumsf.com/en/oqwobr?jx=3\u0026xn=955586\u0026vkwwxjok=hv\u0026nsiiadvex=yiivja\u0026stqykxh=248876\u0026bhwo=fu\u0026njuiiq=fmnpl\u0026asz=1\u0026id=1975997\u0026lw=_zrxoxsczxutjobwsljrfhd","fqdn":"sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Thu, 03 Jul 2025 23:17:13 GMT","end":"Tue, 30 Dec 2025 22:59:00 GMT"},"fingerprint":{"sha1":"BE:0F:B3:AB:65:72:6D:3D:A7:A8:5D:51:50:DC:FF:DA:02:74:0F:AD","sha256":"79:64:10:CC:73:5F:CE:C0:5D:BB:D7:95:7F:2D:4C:BC:A1:BD:04:10:0F:9B:14:3A:A1:91:8F:7F:3B:E4:EC:83"}}},"request":{"raw":"GET /en/oqwobr?jx=3\u0026xn=955586\u0026vkwwxjok=hv\u0026nsiiadvex=yiivja\u0026stqykxh=248876\u0026bhwo=fu\u0026njuiiq=fmnpl\u0026asz=1\u0026id=1975997\u0026lw=_zrxoxsczxutjobwsljrfhd HTTP/1.1\r\nHost: sacwumsf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: UID=251006103563d982733d26454bac327178ad; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":465,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (465), with no line terminators","md5":"831864c5dc2c98fa9790b2af7a481604","sha1":"80cafbc861292450a3f193df78f2d7ce4a4f41c6","sha256":"26a1374e0352a50c23dbfb2431a77301a590f8cca3d07da003cf4e7b4c3a4a08","sha512":"cc2c54321aa85a7c4056ca0f7ca71ee9c613bfb191ba3c3347f4f54144b0740020b6043fb6e22682bca4a4b25bb27db61633165338fca322fe2449526454255d","ssdeep":"","tlshash":"65f0dcaeb858dc9980d16c0e055dfdcf2eea2018ad17f528c750205051584b9397750f","first_seen":"2025-10-06T15:35:52.161966Z","last_seen":"2025-10-06T15:35:52.161966Z","times_seen":1,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":73,"dns":1,"connect":21,"send":0,"wait":21,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=nb%3A1%3Acl%3A195%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A672673805%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A968873847%3Arqn%3A13%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764918683%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(3)re(1)aw(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:34.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=nb%3A1%3Acl%3A195%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A672673805%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153534%3Aet%3A1759764934%3Ac%3A1%3Arn%3A968873847%3Arqn%3A13%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1759764918683%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764934\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(3)re(1)aw(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 06-Oct-2025 15:35:34 GMT\r\naccess-control-allow-credentials: true\r\nset-cookie: bh=YMbDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:34 GMT; SameSite=None; Secure\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nstrict-transport-security: max-age=31536000\r\ncontent-type: image/gif\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\nexpires: Mon, 06-Oct-2025 15:35:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/libs.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/mobile/?type=tube_index","date":"2025-10-06T15:35:18.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /libs.js?v=202503291755 HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"36baa79fb8a6a7de3d0af63ae01c8c55\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8z9s2vK24%2FtFGguoSzm%2FmVNOqyUHlyffbJVxeB5nVwBAbX0%2BWtLkPBfisQJkNSLJtfBPsv%2BHhEOMa5ijM0LWYSU6JGp9YDoo2M5XG4I%2FfrDAm5clyU2OrCWd%2F4hQBTT2AtYW2o%2FsOfnyPhHNKbQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 98a63a56dbb30883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1431,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"cc9614070357853b50c7c52422e80ee9","sha1":"a5a353d8a81630ad02e585914e106da95b0b0fda","sha256":"a4387c06cd8e863daead916951e528d69f16be2efa295a5256339a5023c2134f","sha512":"08854f0c6bf47d1fa57760b3a8682f95a7053866d874aa034f9c9913e9ff5dbb65c70a3936014497b6092801e1c5e98cf39c3b5dd0b79b4b4c772597fa5d66ab","ssdeep":"","tlshash":"d82186882c4aa019c3f333249b576555fc5612063601ccd6fc6cca405fbdd98c4bbd4c","first_seen":"2025-03-29T16:56:08.532528Z","last_seen":"2026-01-17T13:48:46.716722Z","times_seen":257,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metrics.cdnjs.work/metrics/domain/redporn.me","fqdn":"metrics.cdnjs.work","domain":"cdnjs.work","tld":"work"},"ip":{"addr":"104.21.68.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 08:03:43 GMT","end":"Wed, 19 Nov 2025 09:02:13 GMT"},"fingerprint":{"sha1":"78:43:27:72:6B:30:35:F3:3E:13:12:6E:F3:AB:02:B5:6F:D0:38:D5","sha256":"A3:6A:1B:B3:66:E1:2C:E9:BA:62:1A:24:86:E6:FB:41:04:9C:E1:6F:46:6E:E1:6A:BE:B2:8D:63:80:2A:D6:B1"}}},"request":{"raw":"GET /metrics/domain/redporn.me HTTP/1.1\r\nHost: metrics.cdnjs.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.16\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\nx-header-sub: Master\r\nage: 79669\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 05 Oct 2025 17:27:29 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UxgisS9AOWyVAsp91ZVqDx9t0qqxGOzJv8rI3TUJdciiuu1wouRBeZQQshkiqiUTKlpGD7xI6DodmrjVi3Xo0AQJ4N%2BLkjCyzJzUBh78Q9M%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98a63a571d92568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.16","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0fe236b447812946ad79c78474834e35","sha1":"a3dde6c7e8c372316b77d2ab57b3d8c551cbe487","sha256":"786145407d6d61998a1fa32635bdf97af97a178f0025c440a15dc0974927e444","sha512":"c29bb698750d9d81d3006a11bf947d5bb7c6ab9fcc952476a4d7d8f1a25799b31bcff8326482e0a918b7852fadcd67d9412600aceb626cff7b07ca12e8f5c0f9","ssdeep":"","tlshash":"52a01202c32127860ec9d00038411c061a5871b41527040010831a25472ca180020021","first_seen":"2025-10-06T15:35:52.163771Z","last_seen":"2025-10-06T15:35:52.163771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":45,"dns":5,"connect":2,"send":0,"wait":13,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/10/files/db23/cd94/b3d0/37f1/f0c2/e7cb/2262/f72d/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/10/files/db23/cd94/b3d0/37f1/f0c2/e7cb/2262/f72d/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16201\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 10 Nov 2023 09:47:35 GMT\r\netag: \"654dfc37-3f49\"\r\nexpires: Tue, 06 Oct 2026 15:35:19 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hy%2FL6vrB6rO7Kb3F79AGxCEpQrjhj809CyIvwgMH0JrN3tyIDcjrPeVd1H8NL6moVsthc%2FIRGUXm5g%2BerCfXoHsI0chKOAY%3D\"}]}\r\ncf-ray: 98a63a56eccc56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16201,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 320x180, components 3","md5":"db23cd94b3d037f1f0c2e7cb2262f72d","sha1":"39b6361dfe821547f4c3ed7b577e2c95fb6dd157","sha256":"3e264602dd036fb3d682be4ce99fb85b58fac8c1ed6568a0f0df5b6eb674033d","sha512":"6974fd8949175aa950b9f2031fe2d5912c2a821feb864f0481ef0352970e651307faa7c3427ec4f820563c5252313ee9e7b5819be0b8a4ba4668fdc014114d2d","ssdeep":"384:WMnGlVPcoj/Ew3+aoDiv0V6Qum3S9TteIqv26nkzNn17WO:vnGlV7j8iEicV/R3SbhFFWO","tlshash":"5272d09c2e82d5726227f604a4b91f9d2b4ec5dd0df8b0e84110d9c46efb9b045c23bc","first_seen":"2025-10-06T15:35:52.165644Z","last_seen":"2025-10-06T15:35:52.165644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.beeg.porn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 08:48:46 GMT","end":"Sat, 15 Nov 2025 09:48:35 GMT"},"fingerprint":{"sha1":"8A:BF:7B:5C:A2:97:2E:37:4F:52:46:2F:49:23:79:93:5F:AA:53:AD","sha256":"94:33:17:BB:F7:2A:44:30:D6:0E:55:A0:78:A3:7E:A3:73:63:A3:40:1B:FF:E0:E2:B7:57:AC:8D:9B:D4:D8:16"}}},"request":{"raw":"GET /ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me HTTP/1.1\r\nHost: aa.beeg.porn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7Ol%2BnvuIG9ErHHlIDzi12h0wCI5aG2dWOgBJp8dpyJjYz7QCbz8WjYq47oE9akl1if%2FTVUWv3g45rDCazJvwqLi4pJy789duoo%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 98a63a574ade569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9001,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6678), with CRLF line terminators","md5":"722c63d30506ffdf40db6a351ea2e835","sha1":"36f69088ded2059a940f79536490e7d83a5bbd3e","sha256":"8cb0781959fccfce24e8feccb49a33a4ae26173df1b596a24cfa90946157fee8","sha512":"71c6d76c3239737616a510d5a2ee8351310064f41a4d2651f83bb6b3a684cf8992d661c81ea363d8202dfe49f924ea2f791a7710eb8e6e26c520b260d9cd4f09","ssdeep":"192:7gyHcJARhLDVLiHwwZM2xdMrmutAo2iMIwGbwJaEgeHL9TIEiKbJoYrS7wMg:7teAjoHwW/ODt12iwGbwULmOEPbDrSo","tlshash":"00023c757282aa6603f241d280ffb550d43e5a167545c488f1ec68833aa67c9d1f3f7e","first_seen":"2025-05-14T00:26:21.923674Z","last_seen":"2025-10-24T13:32:44.576587Z","times_seen":9,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":46,"dns":2,"connect":3,"send":0,"wait":76,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/bn.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 06 Oct 2025 12:27:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e3b5c9-287b9\"\r\nexpires: Mon, 13 Oct 2025 15:35:19 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":165817,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a99b6ae09058e72bb15a7e541194fe23","sha1":"9bc1863d3ecb11e580aa119ed2366c251a1f01b6","sha256":"50f0b51e2005ee15e4ee9baddd4672b994a42994719717e513f92634b3b92a02","sha512":"8026616a897ffe0929c64750b76298f602a48b3f70ba66f9f298881d8f6843dd29643a64fed71ecda57accac31fd5f8211535253e775999dbb3e831481481f95","ssdeep":"1536:eZNgud5QeZYZKHURgeYJEJc+iq5A1E1PCGGOc7d07Db0gyylZE8kO1i2BaOFBA4j:eZR5QeZ3hoOqk8PDI8Xt7Tk3d0x","tlshash":"f5f384ceafd664356153e329093f6931edbadcd2e1df0113e837d1a41a68805e332b69","first_seen":"2025-10-06T14:48:53.289351Z","last_seen":"2025-10-07T04:44:54.485701Z","times_seen":11,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":70,"dns":0,"connect":21,"send":0,"wait":38,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /metrika/advert.gif HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\ncontent-type: image/gif\r\nlast-modified: Thu, 02 Oct 2025 10:55:02 GMT\r\naccept-ranges: bytes\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\ncache-control: max-age=3600\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\netag: \"68de5a06-2b\"\r\nexpires: Mon, 06 Oct 2025 16:35:19 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nstrict-transport-security: max-age=31536000\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sacwumsf.com/en/oqwobr?jx=3\u0026ws=_kqerjlzqftlvsxcjvcvqpq\u0026uar=1\u0026id=1975997\u0026vvwqiipgh=msum\u0026nrtb=951997\u0026gwarotu=jmlv\u0026pvk=rp\u0026rehjpa=om","fqdn":"sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Thu, 03 Jul 2025 23:17:13 GMT","end":"Tue, 30 Dec 2025 22:59:00 GMT"},"fingerprint":{"sha1":"BE:0F:B3:AB:65:72:6D:3D:A7:A8:5D:51:50:DC:FF:DA:02:74:0F:AD","sha256":"79:64:10:CC:73:5F:CE:C0:5D:BB:D7:95:7F:2D:4C:BC:A1:BD:04:10:0F:9B:14:3A:A1:91:8F:7F:3B:E4:EC:83"}}},"request":{"raw":"GET /en/oqwobr?jx=3\u0026ws=_kqerjlzqftlvsxcjvcvqpq\u0026uar=1\u0026id=1975997\u0026vvwqiipgh=msum\u0026nrtb=951997\u0026gwarotu=jmlv\u0026pvk=rp\u0026rehjpa=om HTTP/1.1\r\nHost: sacwumsf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: PTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nUID=2510061035b209c35a20bc4cc0903857cc48; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":465,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (465), with no line terminators","md5":"f626dd25ac65e645f62b0d1ba21011d3","sha1":"42cecfb573870b585ac6d21cc00a78dec382d3aa","sha256":"3d30b2242136a91e529493d44efb435c6d4b1430eb86bae0dc85ffaaa7447134","sha512":"74d31e1b08c6d952ec7a873855b8fa7461cce125d090162edb8ecd2cbc0595f8d8e78f5e95c3571a306a222a831e78a647362bcae78a5e28e8ed3b567fa32238","ssdeep":"","tlshash":"9ef0555f72c694faa821e30da3ab998469f0f47a5e131467badc5c50453e0e1c59f381","first_seen":"2025-10-06T15:35:52.16799Z","last_seen":"2025-10-06T15:35:52.16799Z","times_seen":1,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":75,"dns":0,"connect":21,"send":0,"wait":21,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/556/116/bfa/556116bfa96d6b796350549740e616cb73ed2aba.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.15.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 01:53:00 GMT","end":"Sun, 14 Dec 2025 02:52:57 GMT"},"fingerprint":{"sha1":"6F:7E:45:FD:0D:E1:5B:9F:C6:D0:2A:9F:AA:8E:F1:FA:79:84:B9:99","sha256":"0A:22:22:40:F0:60:14:FC:D9:59:21:94:0E:1A:55:24:DC:9F:21:05:F9:C7:0D:42:25:19:56:47:78:53:0D:8B"}}},"request":{"raw":"GET /bn/556/116/bfa/556116bfa96d6b796350549740e616cb73ed2aba.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 756510\r\ncf-ray: 98a63a5c1c1956a4-OSL\r\nx-amz-id-2: ob8Acb61oatk6SjK6Py+Bw4g2/RfjBxOm3tryDm9BGDzuKL3OYcrmfn0Fpi5VShDFpS/YoJKijZuY1twUJymM6eN/GTP+HLYFOza23ibe58=\r\nx-amz-request-id: 9TWSCVDVXRSYCVD2\r\nlast-modified: Wed, 25 Jun 2025 13:28:33 GMT\r\netag: \"f4b92fbf335b4b867319d40ff6201279\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nage: 489\r\ncontent-range: bytes 0-756509/756510\r\nexpires: Thu, 06 Nov 2025 15:35:19 GMT\r\ncache-control: public, max-age=2678400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":756510,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"f4b92fbf335b4b867319d40ff6201279","sha1":"556116bfa96d6b796350549740e616cb73ed2aba","sha256":"f3f9d4c032218a6e1c0de3a18c20bbd88f3ed479d5fb85c3f2ed2010b414856e","sha512":"b56f8773f825cf7b17265798a8a2b286fa82d6c827d84f08acf564658a8688473e02967dd9cffb48abf50d6069889b18fcf45a6374a6eff2a4d7db068f0613fb","ssdeep":"12288:hWHNQuL0ldiNq+04LpcO0ICd+GDSK/qrEE1ZG16tSBNHSYGaxFmV6F/eyKd/D:6NQuL0Huq+04SXXb43SkwNHJGazm0vOL","tlshash":"e5f423b609aa38a3f884583b74db511e544d8a13a7fcc6973bbd68b18f745c30f19c86","first_seen":"2025-10-06T15:35:52.090084Z","last_seen":"2025-10-12T08:33:18.553601Z","times_seen":11,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":36,"dns":0,"connect":4,"send":0,"wait":21,"receive":18,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.redporn.me/ftt2/in.php?ft=1759764918\u0026fs=f3b15a2fbdca15ecce51af80d37e743e\u0026fb=2d8cf42a6088032e895095d02c29febe\u0026referer=\u0026id=","fqdn":"go.redporn.me","domain":"redporn.me","tld":"me"},"ip":{"addr":"172.67.195.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redporn.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 01:12:32 GMT","end":"Thu, 11 Dec 2025 02:11:12 GMT"},"fingerprint":{"sha1":"E9:3B:B6:27:06:E5:0B:32:2F:C2:AF:E4:36:CA:D4:93:D0:04:63:88","sha256":"F6:43:72:FF:5E:8B:16:F9:CF:AB:D8:60:01:84:36:83:F5:D8:E8:23:A5:7D:75:2F:8B:B4:0F:B2:26:B3:D2:56"}}},"request":{"raw":"GET /ftt2/in.php?ft=1759764918\u0026fs=f3b15a2fbdca15ecce51af80d37e743e\u0026fb=2d8cf42a6088032e895095d02c29febe\u0026referer=\u0026id= HTTP/1.1\r\nHost: go.redporn.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://redporn.me/\r\nOrigin: https://redporn.me\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wPHWbCD9PiJCJ15UBWpkD2v83MuLJ6Qy3OMNnj7Ql%2FjueLpuoaHkxFKTFG4GmXnucsKlmR%2FMdh4xVqACJWUEB05UYrz2CzYsxEMck6w%3D\"}]}\r\ncontent-encoding: br\r\nx-powered-by: PHP/7.2.18\r\naccess-control-allow-origin: *\r\nversion: 2021-09-01-2316\r\nx-header-sub: Master\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98a63a57287449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.18","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/bn.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 06 Oct 2025 12:27:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e3b5c9-287b9\"\r\nexpires: Mon, 13 Oct 2025 15:35:19 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":165817,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a99b6ae09058e72bb15a7e541194fe23","sha1":"9bc1863d3ecb11e580aa119ed2366c251a1f01b6","sha256":"50f0b51e2005ee15e4ee9baddd4672b994a42994719717e513f92634b3b92a02","sha512":"8026616a897ffe0929c64750b76298f602a48b3f70ba66f9f298881d8f6843dd29643a64fed71ecda57accac31fd5f8211535253e775999dbb3e831481481f95","ssdeep":"1536:eZNgud5QeZYZKHURgeYJEJc+iq5A1E1PCGGOc7d07Db0gyylZE8kO1i2BaOFBA4j:eZR5QeZ3hoOqk8PDI8Xt7Tk3d0x","tlshash":"f5f384ceafd664356153e329093f6931edbadcd2e1df0113e837d1a41a68805e332b69","first_seen":"2025-10-06T14:48:53.289351Z","last_seen":"2025-10-07T04:44:54.485701Z","times_seen":11,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":77,"dns":21,"connect":23,"send":0,"wait":77,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sacwumsf.com/static/video/bn/556/116/bfa/556116bfa96d6b796350549740e616cb73ed2aba.mp4","fqdn":"www.sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Thu, 03 Jul 2025 23:17:13 GMT","end":"Tue, 30 Dec 2025 22:59:00 GMT"},"fingerprint":{"sha1":"BE:0F:B3:AB:65:72:6D:3D:A7:A8:5D:51:50:DC:FF:DA:02:74:0F:AD","sha256":"79:64:10:CC:73:5F:CE:C0:5D:BB:D7:95:7F:2D:4C:BC:A1:BD:04:10:0F:9B:14:3A:A1:91:8F:7F:3B:E4:EC:83"}}},"request":{"raw":"GET /static/video/bn/556/116/bfa/556116bfa96d6b796350549740e616cb73ed2aba.mp4 HTTP/1.1\r\nHost: www.sacwumsf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 756510\r\nlast-modified: Mon, 15 Sep 2025 18:49:32 GMT\r\netag: \"68c85fbc-b8b1e\"\r\nexpires: Fri, 05 Dec 2025 15:35:19 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-756509/756510\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":756510,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"f4b92fbf335b4b867319d40ff6201279","sha1":"556116bfa96d6b796350549740e616cb73ed2aba","sha256":"f3f9d4c032218a6e1c0de3a18c20bbd88f3ed479d5fb85c3f2ed2010b414856e","sha512":"b56f8773f825cf7b17265798a8a2b286fa82d6c827d84f08acf564658a8688473e02967dd9cffb48abf50d6069889b18fcf45a6374a6eff2a4d7db068f0613fb","ssdeep":"12288:hWHNQuL0ldiNq+04LpcO0ICd+GDSK/qrEE1ZG16tSBNHSYGaxFmV6F/eyKd/D:6NQuL0Huq+04SXXb43SkwNHJGazm0vOL","tlshash":"e5f423b609aa38a3f884583b74db511e544d8a13a7fcc6973bbd68b18f745c30f19c86","first_seen":"2025-10-06T15:35:52.090084Z","last_seen":"2025-10-12T08:33:18.553601Z","times_seen":11,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fmobile%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A526123533%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A25727721%3Arqn%3A6%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C777%2C777%2C0%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918685%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)re(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22ad_type%22%3A%22tube_index%22%2C%22ad_type_details%22%3A%22tube_index_main_banner%22%2C%22ad_domain_show%22%3A%22beeg.porn%22%2C%22ad_domain_referer%22%3A%22redporn.me%22%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://aa.qwerty24.net/mobile/?type=tube_index","date":"2025-10-06T15:35:20.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fmobile%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A526123533%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764919%3Ac%3A1%3Arn%3A25727721%3Arqn%3A6%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C777%2C777%2C0%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918685%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764919\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)re(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22ad_type%22%3A%22tube_index%22%2C%22ad_type_details%22%3A%22tube_index_main_banner%22%2C%22ad_domain_show%22%3A%22beeg.porn%22%2C%22ad_domain_referer%22%3A%22redporn.me%22%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\nexpires: Mon, 06-Oct-2025 15:35:20 GMT\r\ncontent-type: image/gif\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nlast-modified: Mon, 06-Oct-2025 15:35:20 GMT\r\npragma: no-cache\r\nset-cookie: bh=YLjDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:20 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A672673805%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764920%3Ac%3A1%3Arn%3A507375110%3Arqn%3A7%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918683%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764920\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)re(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22ad_type%22%3A%22tube_index%22%2C%22ad_type_details%22%3A%22tube_index_main_banner%22%2C%22ad_domain_show%22%3A%22beeg.porn%22%2C%22ad_domain_referer%22%3A%22redporn.me%22%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:20.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/100522608/1?page-url=https%3A%2F%2Faa.qwerty24.net%2Fdesktop%2F%3Ftype%3Dtube_index\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1759764919_4c51109f0a8a644cb58e26fe70ab6e46cf39354e48dcc07da0b2b91d7b5028a3\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A81k5o1pwtl2zg7015ulbxhtnthc9n%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2210%3Acn%3A1%3Adp%3A0%3Als%3A103681344437%3Ahid%3A672673805%3Aphid%3A119462379%3Az%3A0%3Ai%3A20251006153519%3Aet%3A1759764920%3Ac%3A1%3Arn%3A507375110%3Arqn%3A7%3Au%3A1759764919858024278%3Aw%3A0x0%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1759764918683%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1759764920\u0026t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)re(1)aw(1)cdl(na)eco(83952128)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22ad_type%22%3A%22tube_index%22%2C%22ad_type_details%22%3A%22tube_index_main_banner%22%2C%22ad_domain_show%22%3A%22beeg.porn%22%2C%22ad_domain_referer%22%3A%22redporn.me%22%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nOrigin: https://aa.qwerty24.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\npragma: no-cache\r\naccess-control-allow-credentials: true\r\nexpires: Mon, 06-Oct-2025 15:35:20 GMT\r\nset-cookie: bh=YLjDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 10 Nov 2026 15:35:20 GMT; SameSite=None; Secure\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 06-Oct-2025 15:35:20 GMT\r\ncontent-type: image/gif\r\nstrict-transport-security: max-age=31536000\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-origin: https://aa.qwerty24.net\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-06-16T01:02:11.925757Z","times_seen":106147,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-06","alert":"Sinkholed","trigger":"mc.yandex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/12/files/e46a/80ef/1211/32b4/d607/b50b/800b/6092/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:20.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/12/files/e46a/80ef/1211/32b4/d607/b50b/800b/6092/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24718\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mNGpX2jsa7YgPth%2BlidIbbmaH35jzwsvTXAJ2QwauRWCnF7GFwHEXYlREDoH%2BUZ17%2BdF60gASA4VyR4mvMksMhHZWa9MiI%3D\"}]}\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=31581\r\netag: \"e46a80ef121132b4d607b50b800b6092\"\r\nlast-modified: Thu, 29 Feb 2024 16:20:07 GMT\r\nx-amz-id-2: gXdAT4Ly3KGtM0UGjCCflJWoN82qsBsQKbbBU/v6G+4LpOusjfHjW+ulaon2dBteyTiAdpxV4S2E\r\nx-amz-request-id: 9EBEA000B291A00C:B\r\nx-wasabi-cm-reference-id: 1757966457790 130.117.252.111 ConID:1255731660/EngineConID:12088880/Core:59\r\ncf-cache-status: HIT\r\nage: 1798463\r\nexpires: Tue, 06 Oct 2026 15:35:20 GMT\r\ncache-control: public, max-age=31536000\r\nvary: accept-encoding\r\ncf-ray: 98a63a60ff4256c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24718,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 420x236, components 3","md5":"51acece81aea015ade067232c01e199d","sha1":"80619c5f89f9133d2d3cb1445d1dcb8abcfca8d9","sha256":"0ead8ee3135362a9146c4e26b1d04c4a803b8f4894ee57fd37a877a033a0173e","sha512":"6404dd5f3e2d79748584911d5b3b1eaa7cede7581c0b26585c634010f44b212108058ad5aae052ab10ff7a81a6ff4182dfd45438ecaae4e2fd106c5f520456ac","ssdeep":"768:estUDqZEak6b7HI4Rm4Emt4gFpCbmAQrsaAm:T17H1c4VtzpCbmvsBm","tlshash":"c5b2e18faf1fea3d9de518e8b3c51eb8058438a45cc69b0d4aa2257547f1212af1a13c","first_seen":"2025-10-06T15:35:52.170271Z","last_seen":"2025-10-06T15:35:52.170271Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redporn.me/i/flags/4x3/gb-eng.svg","fqdn":"redporn.me","domain":"redporn.me","tld":"me"},"ip":{"addr":"172.67.195.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redporn.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 01:12:32 GMT","end":"Thu, 11 Dec 2025 02:11:12 GMT"},"fingerprint":{"sha1":"E9:3B:B6:27:06:E5:0B:32:2F:C2:AF:E4:36:CA:D4:93:D0:04:63:88","sha256":"F6:43:72:FF:5E:8B:16:F9:CF:AB:D8:60:01:84:36:83:F5:D8:E8:23:A5:7D:75:2F:8B:B4:0F:B2:26:B3:D2:56"}}},"request":{"raw":"GET /i/flags/4x3/gb-eng.svg HTTP/1.1\r\nHost: redporn.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://redporn.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nlast-modified: Sun, 10 Aug 2025 10:37:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LJ%2Biiz0nEyhpnQ56LIO0UKATnqhkkvPjkpG3gQ%2BJZV3bynNO8DqGCDu5Q2%2BYAg%2Bxuy0IhQwR129iIDOhS51Qicgu%2Ff9s5PMs8Gk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\netag: W/\"68987656-f2\"\r\ncf-ray: 98a63a55382749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14167f77f128b0f57a6263843017fc0f","sha1":"d3d0546d4f72bb12d7e0f869b3d568a4704498fa","sha256":"d2de597c10f3c833fd8c7bfbe818189e6209db19882a27398b8e180884697eca","sha512":"b621472300db748369447fc281f00570679792f13b766cf6f2ae815f911d3a430e7b6ab6cef99fc140b6e149fb13e06f226cb47d28f7b1b4144079d8d5b2cc37","ssdeep":"","tlshash":"43d0a7e4e32ca5188a9057102f6d3dd1416fa0aec19442cea8e40478a299597ddc7a91","first_seen":"2023-04-19T18:56:19Z","last_seen":"2026-05-17T06:12:37.594863Z","times_seen":129,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.qwerty24.net/libs.js?v=202503291755","fqdn":"aa.qwerty24.net","domain":"qwerty24.net","tld":"net"},"ip":{"addr":"104.21.95.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.qwerty24.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 11:08:57 GMT","end":"Sat, 15 Nov 2025 12:08:49 GMT"},"fingerprint":{"sha1":"68:3A:02:BA:9C:33:52:1C:1C:26:86:68:45:BE:96:1D:7D:EC:0B:EA","sha256":"E6:85:27:27:23:E5:33:AD:26:EB:3C:F3:B6:23:14:E5:0E:5F:B1:70:83:2D:B4:54:E7:E6:0D:25:1A:D3:83:5B"}}},"request":{"raw":"GET /libs.js?v=202503291755 HTTP/1.1\r\nHost: aa.qwerty24.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"36baa79fb8a6a7de3d0af63ae01c8c55\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8z9s2vK24%2FtFGguoSzm%2FmVNOqyUHlyffbJVxeB5nVwBAbX0%2BWtLkPBfisQJkNSLJtfBPsv%2BHhEOMa5ijM0LWYSU6JGp9YDoo2M5XG4I%2FfrDAm5clyU2OrCWd%2F4hQBTT2AtYW2o%2FsOfnyPhHNKbQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 98a63a56cbb10883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1431,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"cc9614070357853b50c7c52422e80ee9","sha1":"a5a353d8a81630ad02e585914e106da95b0b0fda","sha256":"a4387c06cd8e863daead916951e528d69f16be2efa295a5256339a5023c2134f","sha512":"08854f0c6bf47d1fa57760b3a8682f95a7053866d874aa034f9c9913e9ff5dbb65c70a3936014497b6092801e1c5e98cf39c3b5dd0b79b4b4c772597fa5d66ab","ssdeep":"","tlshash":"d82186882c4aa019c3f333249b576555fc5612063601ccd6fc6cca405fbdd98c4bbd4c","first_seen":"2025-03-29T16:56:08.532528Z","last_seen":"2026-01-17T13:48:46.716722Z","times_seen":257,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/12/files/8aeb/029b/ab2e/90e6/4f8a/16f3/70ef/9ca2/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/12/files/8aeb/029b/ab2e/90e6/4f8a/16f3/70ef/9ca2/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32618\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 28 Nov 2024 03:52:16 GMT\r\netag: \"6747e8f0-7f6a\"\r\nexpires: Tue, 06 Oct 2026 15:35:19 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7QeNCER%2FC9wC2lwJv5nOg%2B0JetXQT4JC5E9Al2wXGl%2B8fcVKARPxHtFNyKJwIwXkCpIsIYquHjolXtnfoMrWFRRexfxA4A8%3D\"}]}\r\ncf-ray: 98a63a56ecc756c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32618,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"8aeb029bab2e90e64f8a16f370ef9ca2","sha1":"5192fd87d7fde61503d20695e7b5a8a512140552","sha256":"d1f0caff3d104703a130bf36df73b082bb8719c1e7c215ff446c2917f58ba577","sha512":"f8d301da34d410c66b7cd4ab0fa4f538a4e42427f538bec641f80d5f1481568ed9e973522946b962ce46b6dd4425f5f5607449d2aea21f9c444a393a7cbcbae1","ssdeep":"768:FNN1fSvMvvPqvmNAK4/JJoRgdOWcQiowSp87OD8lPsb:d1fSvMvWmmK4/joRgQWrwS87O04","tlshash":"fae2e1a4c7cadd759fd6403e9060d60c7989a6c39f9e8e0dec664885fbccad2c311893","first_seen":"2025-10-06T15:35:52.174165Z","last_seen":"2025-10-06T15:35:52.174165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/13/files/cd24/6db3/1229/5007/e060/6989/f75e/82c8/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/13/files/cd24/6db3/1229/5007/e060/6989/f75e/82c8/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13321\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 14 Jun 2025 10:36:35 GMT\r\netag: \"684d50b3-3409\"\r\nexpires: Tue, 06 Oct 2026 15:35:19 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icUnbquORFapqDR3vW55CQ9uOAv3ftmYuwAOg5fZu4wlOkRuaE67XObvJQo73TGcAfVP9peJlztHxyRSbAqgeo%2B0FdKe%2FuE%3D\"}]}\r\ncf-ray: 98a63a57ad6856c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13321,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 288x216, components 3","md5":"cd246db312295007e0606989f75e82c8","sha1":"128ae778256095ba60d8826a1b748d41f461ef62","sha256":"865b50f8b6e2c922ea192038fbf0195c2640a1e3041287f232c57b90fdffac2b","sha512":"450492e3813001987d62d7045e194a04c71a27c20c56dc034eb9c36ae7cbab93ac413ceaca76e0ec1cf26be09c8651dc7683231439011d165bca9a5018b42edb","ssdeep":"192:tPzmEdNeBt6Kovp2geUD8sr82njOVAp3r4htowEDiIu3bgatSUGRQCGuUU8vozaY:tPzmEdWtBoh2geuOG30ToziIurg0PCGa","tlshash":"ea52c0b837aa9780d400dabc91e1030ddaa9b9b6bb9154cf3638f2420cc51f7619fc8d","first_seen":"2025-10-06T15:35:52.177073Z","last_seen":"2025-10-06T15:35:52.177073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/11/files/98ed/bba9/03bb/64a1/97fe/131c/d5f2/6a2d/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/11/files/98ed/bba9/03bb/64a1/97fe/131c/d5f2/6a2d/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11529\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNPZCh5IcSwV%2BqriWwaymoVYvHrasqaaBBvetQgcebJ9TUrh%2Fay0ItqIRDkBeR2a6qwrAqglZX7NYQRfcXZWNO2UyjDUlo8%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=11707\r\netag: \"6656dc66-2dbb\"\r\nexpires: Tue, 06 Oct 2026 15:35:18 GMT\r\nlast-modified: Wed, 29 May 2024 07:42:30 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 9372\r\ncf-ray: 98a63a57ad6956c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11529,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"54b3530d98e3786d3cb417697cb1df05","sha1":"2161fd1954c01a931edfaacc73915bd1b13a1633","sha256":"bc8caba5ea65a0b99454f42f71d14a8cacdb026477a35eaaead3a06559acf0f3","sha512":"41fdd47481c2bb380b52c8a3a17d96466e25cacb056eda091d721b873401724482decb3ddbb30fe3e5cffb242f41de747d1b4e2b0f289baaeb6ebf121588d733","ssdeep":"192:jgyZ0qhSdpSgNgTXiB0Vz9PiZtS++J3ZUx66Wh20If8htVXW2TdpaRfbHqoRD4K0:PZ7vgNgwCz9PiJYUU6K20I0rU2TdERf4","tlshash":"0032af8a9e02596fdd0500bde2a85f456b8e7a272964965f3271e3a346c4543e7c9240","first_seen":"2025-10-06T15:35:52.179973Z","last_seen":"2025-10-06T15:35:52.179973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redporn.me/i/favicon/favicon-16x16.png","fqdn":"redporn.me","domain":"redporn.me","tld":"me"},"ip":{"addr":"172.67.195.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:19.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redporn.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 01:12:32 GMT","end":"Thu, 11 Dec 2025 02:11:12 GMT"},"fingerprint":{"sha1":"E9:3B:B6:27:06:E5:0B:32:2F:C2:AF:E4:36:CA:D4:93:D0:04:63:88","sha256":"F6:43:72:FF:5E:8B:16:F9:CF:AB:D8:60:01:84:36:83:F5:D8:E8:23:A5:7D:75:2F:8B:B4:0F:B2:26:B3:D2:56"}}},"request":{"raw":"GET /i/favicon/favicon-16x16.png HTTP/1.1\r\nHost: redporn.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://redporn.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_TTRS8J3R9V=GS2.1.s1759764919$o1$g0$t1759764919$j60$l0$h0; _ga=GA1.1.638625649.1759764919\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 1407\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 10 Aug 2025 10:37:10 GMT\r\netag: \"68987656-57f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3I1OC%2B2V3RO3Jy69hSMOBkvhTuT24hIZvgf2ml7XDzcXP3NFbeIiVqyqsd51IIgg28VtU6w9TT2v0KE%2BHSJuKJ3f1Ax6X9Ot3hs%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 98a63a59b8df49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1407,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"19a6462ed06fd81a06b9790eb367bd0c","sha1":"31c046b51a9acf291ff75ab3929eecaef792b09f","sha256":"6521c4d5a5f876e492583fbd5d78951d10071856ecbb7b4d7d4934930da5374a","sha512":"55f9ef24c27766817dc21c5dfe43c537a8cd403a9c118eba12654b12a2e0921882fdadd2d6c378aa1f01daaeb9064edbcb8a5e1a98bed7b157f57ab0aa021dfd","ssdeep":"","tlshash":"5f21dbc2f9a7f65ad1cb6190fb321480ef2406351d5f978eb9465c04373c17501f4769","first_seen":"2025-10-06T15:35:52.183037Z","last_seen":"2025-10-06T15:35:52.183037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redporn.me/i/favicon/android-icon-192x192.png","fqdn":"redporn.me","domain":"redporn.me","tld":"me"},"ip":{"addr":"172.67.195.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:19.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redporn.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 01:12:32 GMT","end":"Thu, 11 Dec 2025 02:11:12 GMT"},"fingerprint":{"sha1":"E9:3B:B6:27:06:E5:0B:32:2F:C2:AF:E4:36:CA:D4:93:D0:04:63:88","sha256":"F6:43:72:FF:5E:8B:16:F9:CF:AB:D8:60:01:84:36:83:F5:D8:E8:23:A5:7D:75:2F:8B:B4:0F:B2:26:B3:D2:56"}}},"request":{"raw":"GET /i/favicon/android-icon-192x192.png HTTP/1.1\r\nHost: redporn.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://redporn.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_TTRS8J3R9V=GS2.1.s1759764919$o1$g0$t1759764919$j60$l0$h0; _ga=GA1.1.638625649.1759764919\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 8561\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 10 Aug 2025 10:37:10 GMT\r\netag: \"68987656-2171\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uGcCmcM6DhKsS3nfPdNZrllD9e%2FDgSQ2iFmh%2BHHiu2cOOIH2ZJ6ULmu05GfLAAD7sFeGYE8lxP4hiTOkozfI4Sw528PEv%2BEOTXI%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 98a63a59b8de49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"55ec449ae863cb624cacbf3a8939812e","sha1":"293e6c1a7a7a7f36a4134c5f7656ca138dd12047","sha256":"11fc04afb66e432e48996915a4eb8b9281a734ed41dfe7025e8d350c3db5e4fa","sha512":"89aa9b91788faa30317ea0aa2cc45f888d7c4c41a897d45e3e31341fb8b16b23cfe26a550744ebf4a267a45511ea84f42409c2d69b55298ce667a850b74209ae","ssdeep":"192:Jeo1zq0iNYWtSBM2mLcWaY7GI6FlrmmfGQz2CKT+NfXJLLxdbq:JeoXyjemL5V7volBfGQzXKT+FDdbq","tlshash":"9502bfbb23d630309157163840dc820e15dfe16e3a3f25cee6749a5ce6e16b1a9bb218","first_seen":"2025-10-06T15:35:52.1858Z","last_seen":"2025-10-06T15:35:52.1858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sacwumsf.com/static/video/bn/556/116/bfa/556116bfa96d6b796350549740e616cb73ed2aba.mp4","fqdn":"www.sacwumsf.com","domain":"sacwumsf.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Thu, 03 Jul 2025 23:17:13 GMT","end":"Tue, 30 Dec 2025 22:59:00 GMT"},"fingerprint":{"sha1":"BE:0F:B3:AB:65:72:6D:3D:A7:A8:5D:51:50:DC:FF:DA:02:74:0F:AD","sha256":"79:64:10:CC:73:5F:CE:C0:5D:BB:D7:95:7F:2D:4C:BC:A1:BD:04:10:0F:9B:14:3A:A1:91:8F:7F:3B:E4:EC:83"}}},"request":{"raw":"GET /static/video/bn/556/116/bfa/556116bfa96d6b796350549740e616cb73ed2aba.mp4 HTTP/1.1\r\nHost: www.sacwumsf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 756510\r\nlast-modified: Mon, 15 Sep 2025 18:49:32 GMT\r\netag: \"68c85fbc-b8b1e\"\r\nexpires: Fri, 05 Dec 2025 15:35:19 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-756509/756510\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":756510,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"f4b92fbf335b4b867319d40ff6201279","sha1":"556116bfa96d6b796350549740e616cb73ed2aba","sha256":"f3f9d4c032218a6e1c0de3a18c20bbd88f3ed479d5fb85c3f2ed2010b414856e","sha512":"b56f8773f825cf7b17265798a8a2b286fa82d6c827d84f08acf564658a8688473e02967dd9cffb48abf50d6069889b18fcf45a6374a6eff2a4d7db068f0613fb","ssdeep":"12288:hWHNQuL0ldiNq+04LpcO0ICd+GDSK/qrEE1ZG16tSBNHSYGaxFmV6F/eyKd/D:6NQuL0Huq+04SXXb43SkwNHJGazm0vOL","tlshash":"e5f423b609aa38a3f884583b74db511e544d8a13a7fcc6973bbd68b18f745c30f19c86","first_seen":"2025-10-06T15:35:52.090084Z","last_seen":"2025-10-12T08:33:18.553601Z","times_seen":11,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.redporn.me/ftt2/js.php","fqdn":"go.redporn.me","domain":"redporn.me","tld":"me"},"ip":{"addr":"172.67.195.24","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:18.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redporn.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 01:12:32 GMT","end":"Thu, 11 Dec 2025 02:11:12 GMT"},"fingerprint":{"sha1":"E9:3B:B6:27:06:E5:0B:32:2F:C2:AF:E4:36:CA:D4:93:D0:04:63:88","sha256":"F6:43:72:FF:5E:8B:16:F9:CF:AB:D8:60:01:84:36:83:F5:D8:E8:23:A5:7D:75:2F:8B:B4:0F:B2:26:B3:D2:56"}}},"request":{"raw":"GET /ftt2/js.php HTTP/1.1\r\nHost: go.redporn.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://redporn.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 06 Oct 2025 15:35:18 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AwDoaGZ3NCk2h%2BDUxXd0qocki%2B1nQqvzVMGEJhRQBQZaKFHv8aw9%2BjGKxXg5yXkQyJ%2BxRx5oIS2qXj9y2Y4BNtqnoU3ScDK%2BHauodHY%3D\"}]}\r\ncontent-encoding: br\r\nx-powered-by: PHP/7.2.18\r\npragma: no-cache\r\ncache-control: no-store, no-cache, must-revalidate\r\nx-robots-tag: noindex\r\naccess-control-allow-origin: *\r\nversion: 2021-09-01-2316\r\nx-header-sub: Master\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98a63a56b86949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.18","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3162,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"00c5b4e10b407e048b4f1d69ab2a7218","sha1":"115fe888d45e0e5cee992c51adde7a5a9dfecaec","sha256":"7fe7249e3ca5406405872213ec143a0b2b9bee89b69f31964017ee25ba33b465","sha512":"48d7669721708752598d7c563ccd583a50603d05af5f6bb0776e84487759766f634fbc93d7d924f357429e8f050493a5913fa7bc545522c784583579a0d97435","ssdeep":"","tlshash":"0351f05e4cda80b0c35370999e7f9609f062e1673d1a9da6390c52904f11b7bc2e9fed","first_seen":"2025-10-06T15:35:52.188973Z","last_seen":"2025-10-06T15:35:52.188973Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/metrika/tag_ww.js","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:18.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /metrika/tag_ww.js HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 83693\r\nexpires: Mon, 06 Oct 2025 16:35:19 GMT\r\netag: \"68de5a06-146ed\"\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:55:02 GMT\r\ntiming-allow-origin: *\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\nset-cookie: bh=YLfDj8cGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Tue, 10 Nov 2026 15:35:19 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251057,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"4e58cae18b3ef726b4b1bd099e9f0438","sha1":"5467d148ea0f4585c75c8a43ff13fd0272d47acf","sha256":"4385e1b284b60ab5400677455c34e21d7fe12cec554b822e50a1a05b815d4c84","sha512":"f41609fa97eed07700ec6f8c5a92c5912cfb8f3984f87a2ecaadc6568640cca93fe69fbde242ef76fbf4897521c307d2b6d6253072d3dae7af085e2a21e3ec51","ssdeep":"3072:2WjN+Rla8qz3Oph8msTVdBRQhB35+v5COAH8w6hjWpBF2tSR:2WjN+RB8Opams5dB+z35OS8wMWnFlR","tlshash":"8534e8d976827472937334b4a03f000bb1be6c96f14c8965e186e9d57e389ac9237f6c","first_seen":"2025-10-03T16:02:45.521856Z","last_seen":"2025-10-13T08:52:45.356463Z","times_seen":82,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":95,"receive":78,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.beeg.porn/status.js","fqdn":"aa.beeg.porn","domain":"beeg.porn","tld":"porn"},"ip":{"addr":"172.67.184.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aa.qwerty24.net/desktop/?type=tube_index","date":"2025-10-06T15:35:19.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aa.beeg.porn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 08:48:46 GMT","end":"Sat, 15 Nov 2025 09:48:35 GMT"},"fingerprint":{"sha1":"8A:BF:7B:5C:A2:97:2E:37:4F:52:46:2F:49:23:79:93:5F:AA:53:AD","sha256":"94:33:17:BB:F7:2A:44:30:D6:0E:55:A0:78:A3:7E:A3:73:63:A3:40:1B:FF:E0:E2:B7:57:AC:8D:9B:D4:D8:16"}}},"request":{"raw":"HEAD /status.js HTTP/1.1\r\nHost: aa.beeg.porn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aa.qwerty24.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWOGHvFNQ%2Fx%2FLh36%2Fr%2FNqQjbadR915CiDitLtgXyrE1SelxnGhZdjs10T%2FvKwZIWZlLJk7BlwJ%2BNjvrh%2FwymlOG3S5y4xA3VbAasB6F3VdumiRmaR2GRQw%3D%3D\"}]}\r\netag: W/\"429187bdb4f8ff9e96446629ee3b1e5e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 98a63a57bde449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T02:37:22.206617Z","times_seen":16457685,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1975997?id=1975997\u0026pid=__clb-spot_1975997_kbc_1\u0026jp=_cltfbeyidprfsyizzdrkqa\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=2pzJRY5aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=U8iaaGwaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=8559577255058944\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aa.beeg.porn/ad/clickadu/beeg.porn/main/300x250/?domain=redporn.me","date":"2025-10-06T15:35:19.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 07:05:06 GMT","end":"Wed, 31 Dec 2025 07:05:05 GMT"},"fingerprint":{"sha1":"08:D8:F7:BA:94:22:0B:94:B2:DB:CF:56:23:B7:92:F9:F1:FB:7C:65","sha256":"89:1E:1F:7C:7D:77:DA:0D:D4:D0:AF:90:C2:F9:8C:33:55:D7:AF:80:D7:11:BD:B7:0C:65:6C:3A:E5:EA:4B:CA"}}},"request":{"raw":"GET /get/1975997?id=1975997\u0026pid=__clb-spot_1975997_kbc_1\u0026jp=_cltfbeyidprfsyizzdrkqa\u0026dr=52\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.605-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=2pzJRY5aHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=U8iaaGwaHR0cHM6Ly9hYS5iZWVnLnBvcm4vYWQvY2xpY2thZHUvYmVlZy5wb3JuL21haW4vMzAweDI1MC8%2FZG9tYWluPXJlZHBvcm4ubWU\u0026afid=8559577255058944\u0026eclog=0\u0026seu=cb6wgSraHR0cHM6Ly9hYS5xd2VydHkyNC5uZXQv\u0026snc=0\u0026ssc=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=0\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aa.beeg.porn/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Oct 2025 15:35:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\nUID=25100610358605b73e8c55435d9a0d408b21; Path=/; Expires=Mon, 09 Nov 2026 15:35:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":489,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (489), with no line terminators","md5":"4a7802136b3dde29d128b083d9ee8a11","sha1":"1778c42fca564ab3f1df1e6a688ed2a6021dd788","sha256":"a4b902ecd9533ec851bc9630ef03e2b064b487bbb8f85f807e54d81bc799976d","sha512":"fed453f71751cf3e89bcf8397f28b37fbbd5564776c2ec692cf02b906de9128d0b43ae52b3d8f6f189bc00082d7ee39297c5af3f228122813bda2714ef0db0dc","ssdeep":"","tlshash":"85f0dc981d71d898a7c1b82f16a35d4b303471e52e5b782f342102c1402c0bbd4d7cc3","first_seen":"2025-10-06T15:35:52.19152Z","last_seen":"2025-10-06T15:35:52.19152Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evocdn.net/hw/redporn.me/14/files/e4cc/fd37/2084/ddac/cddc/f01a/f56d/58bd/1.jpg","fqdn":"evocdn.net","domain":"evocdn.net","tld":"net"},"ip":{"addr":"104.26.7.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redporn.me/","date":"2025-10-06T15:35:20.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evocdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 21:44:13 GMT","end":"Mon, 10 Nov 2025 21:44:12 GMT"},"fingerprint":{"sha1":"B9:29:F2:10:2E:97:CC:61:5D:7F:C7:B9:21:79:C4:63:F0:71:EB:43","sha256":"D7:1B:FE:A1:B5:DF:1A:90:2E:7C:6E:35:FB:2D:68:3C:49:D3:02:A8:93:02:76:8E:A8:F6:CC:7F:83:94:C0:64"}}},"request":{"raw":"GET /hw/redporn.me/14/files/e4cc/fd37/2084/ddac/cddc/f01a/f56d/58bd/1.jpg HTTP/1.1\r\nHost: evocdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redporn.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Oct 2025 15:35:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12696\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RojiwZ6qRR6BfgwFZoJ%2Fa%2FwgiEbEJu%2BzW8tNevpOXfJPMMkoXF4gptSzerqkqd9Of7xOA3ZkRPv%2BHAqq8%2Bx2WUG%2Faj5UeQ8%3D\"}]}\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: degrade=85, origSize=12707\r\netag: \"68dda794-31a3\"\r\nexpires: Tue, 06 Oct 2026 15:35:20 GMT\r\nlast-modified: Wed, 01 Oct 2025 22:13:40 GMT\r\nvary: accept\r\ncf-cache-status: HIT\r\nage: 9374\r\ncf-ray: 98a63a614f9356c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12696,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 427x240, components 3","md5":"7252535ccfbb634b603db2a6f6710b74","sha1":"e5d7262524aceb8c73adb964f604f12ff1ef3bf9","sha256":"922931502d6962155a5066f271e3d3782a0cede36981a7a1fb2616e53c28e8ac","sha512":"27e8a6b42e392edefe16311b2bd7cc2f3975874eb805980a932fa29321389e6ed18f0664dab44677c8705374c5dd9bc9f57e2cc6b22f31227b59a34e18ef4dab","ssdeep":"384:fxw70Xzjh0jaQGVZswvYR5qhHuQLG44Akq39Ok:Jw7ujhKKVZswvYCHuQLG4w8P","tlshash":"2542c0e3bea20011dd7981badd9950fd9251f881df0942fa1ac542f66db81c1f78138c","first_seen":"2025-10-06T15:35:52.193806Z","last_seen":"2025-10-06T15:35:52.193806Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}