{"report_id":"b17b1b90-eb73-4e5a-8433-847c37592a60","version":6,"status":"done","tags":[],"date":"2025-10-09T13:19:05Z","url":{"schema":"http","addr":"amateur-xxx.com/","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"104.21.34.112","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"amateur-xxx.com/","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"title":"Amateur XXX - Free Homemade Porn Videos"},"submit":{"url":{"schema":"http","addr":"amateur-xxx.com/","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"104.21.34.112","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-13T13:19:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"amateur-xxx.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-05-04","domain_rank":0,"first_seen":"2025-10-09T13:19:06.29301Z","last_seen":"2025-10-09T13:19:06.293011Z","alert_count":133,"request_count":67,"received_data":1284810,"sent_data":33989,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP:8.4.13","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"bxSlider:4.2.15","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2025-10-05T22:21:50.03317Z","alert_count":0,"request_count":1,"received_data":2103,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-10-05T22:13:51.058913Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amateur-xxx.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T23:47:15.857846Z","times_seen":639628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c675495748ef0df6858b93dd9e623c46","sha1":"e1be723e4e25d37282821c50b7e12796d3df5f8d","sha256":"9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271","sha512":"1775ad0e5bc7d3cc9ebdd032b94e440a0872f616f983ff867511984daba748ed52e1de5c67f0e4648947bef65b499b3a6197ff7726cf1f481b7d4253b6711127","ssdeep":"384:nudkTa6bYaGQZKbZi1X5U59g+rzyPSS1SMVu8r2WiWQK7XYANWck6QDhC2k+0CMu:uv9gPSSbs8PwhCK0CMl+ArJwz","tlshash":"e6b2b609b13939be05f632baf25ecb0550f6448d9827f0f4a8b5c94ddad88d4102fbe6","size":24252,"data":"","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-04-04T17:45:05.542478Z","times_seen":3793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4acb88174f26f7863cfdd497f2d5d04","sha1":"afc162bd1c547c9b61c4c574be76938d10a59dcc","sha256":"d4105f39ef148d294cbf3d92a0de5f47ec516e9c21695d65a00a7c08293f153b","sha512":"8101ad3ec287a9867d9c64f1499ee79b82cd6aefa4940c3902e7b222130775bfbfec4e8ccd070164ce2c64d1e9c3fac8eba6fb92ac484abd57d49ba97879fca8","ssdeep":"","tlshash":"1661a89e3775348b32b604d26a3f4e07fb7258361a88d035cab9e7541cb1463d37ae4a","size":3412,"data":"","first_seen":"2025-10-09T13:19:13.071378Z","last_seen":"2025-10-09T13:19:13.071378Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.10.2.1756566223","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62479648a67b52a1f395970c883fdd50","sha1":"fb9b2468304ef42eecd402a8a935877ca61a9f35","sha256":"5e5bf8c461e32fca94beaf4df1cb8064e06d9702184807936464a163ca82e2e0","sha512":"3393648937cf923b85076b9668d4e49cddfaa4c72d44bcf1fc0dd58dd87720dcf6ebab044d60c8c95b2e47924f3ea361ff273267c7015134d768598580860c9f","ssdeep":"384:pnujdbo6UazbyFx4QsbatrEOFxnIfYatSyDZD9Vk2ly6oUv:puRbo7azbyFx5NtrEYnIwsnD19VkW/oO","tlshash":"2af29489f77d2546867a30da6c6f16cd313d1236a842086fbc2896e428e4b3c7396d3d","size":36394,"data":"","first_seen":"2025-08-28T06:46:38.264936Z","last_seen":"2026-04-04T12:49:15.210683Z","times_seen":1270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c6f473c3894ca355d46c940e91751d6","sha1":"385aaa355233ebebb26bf4b06c89bb1f2dc86101","sha256":"a05f5d496f424ec66b9b0a5789551b609d57434d642848d6bda9ed938cf1f6b0","sha512":"1f7ff2a9f005e11dade9324476b6f8c2dddda0eb9cc54c11ef0a6ee8b45207dc123a47c350ab4238dad065c36c8cc07fbdbe0ed329c753da783a0e941e2e6012","ssdeep":"","tlshash":"a4e07d354b424fe315e1a5d1603c4a936db5b111a858cd577bdcc8984ec2903bbdf52f","size":329,"data":"","first_seen":"2025-10-09T13:19:13.074241Z","last_seen":"2025-10-09T13:19:13.074241Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eca10535dd65f4979e3b3ad3ec8e02c2","sha1":"54c38c3bf24825e407741ef0e316f678a5b580db","sha256":"802bc6725fd37d15aa9d599fa3f921fca0d4c585162c7b23da8ccd6f3ded751d","sha512":"680521331d53bb6b47390979cbb907f78607dc713d99405ea8664d401b8e9e3106bca7111c1142d8abb4a5d71a7957998ada61407432f084648bba32ed8e1d27","ssdeep":"96:wqduIPMiXjA1L1AWeyQqECAvBvRgY31rr/qBvHsMTFsPFxLdY0fdKI:wktP/W1Henqxy1R31/iRHsIFiFPBkI","tlshash":"7c91318aff88217b71b7326a697f61ed373844339a085c22f874d1a03d9446406bafdd","size":4500,"data":"","first_seen":"2023-03-07T01:26:46Z","last_seen":"2026-04-04T18:39:50.616653Z","times_seen":3517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/plugins/wps-disclaimer/public/assets/js/disclaimer.js?ver=1.3.0","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf3e3a5812d68371f4754d6c6dc9bb66","sha1":"ee15494eab31dfa4a09a9f6d055650508f4d5dea","sha256":"fbbaf2eca3f945c4a946db4d8b37be68768f95fbdd514b2c85c64ea928b30cd1","sha512":"d220d3724577f65aebc024786638f8a07cd8bcdaacbafa6c3d2d750f90e9c69b5cf88b5434aa296ce8a18d02f843928713bae924a4dd9c4e92fc289212762598","ssdeep":"96:Cnj1zm+DmCVo4JdHrlDtlUXZlilU+lSldlrlxlClwCdEu9dYR2+XQDjJ3aWaNgU2:ejxm+DmCVo4JdHrlDtl0ZliljlSldlrU","tlshash":"cba1ff2d98b894c5933fa92ef7ff764530210213a52aad47b5edd28d0fd012285a12f3","size":4650,"data":"","first_seen":"2024-08-13T02:04:39Z","last_seen":"2026-04-04T04:16:40.117728Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T23:47:15.83011Z","times_seen":686378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a62ffecdd6a5854d7d3b1b3a70cbc75a","sha1":"a2bd259178446e749a7653726d50eb08d895e112","sha256":"e6758aa5317737c544b35144c9193edc270ee59ee602e091ea1de388b1d7048a","sha512":"2cae3cf82edc6a962758ab4800bf2300ee9a2da7a27334e07020caa65a5e84a4715afbff867ad1999c90c70f2abd305be2e711e9341e5b293aea4c00b9c5231e","ssdeep":"","tlshash":"79f09eae2b8c2f3012e195e8368fcd59f58c022869ccc859cb08c4f8dcd97d3817b062","size":644,"data":"","first_seen":"2025-10-09T13:19:13.076596Z","last_seen":"2025-10-09T13:19:13.076596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"75abd4cd8807b312f9f7faeb77ee774b","sha1":"e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7","sha256":"ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034","sha512":"c9f1f752994f1361555680ca5a60339fda152587ccc055db20148c086d82846887dd0801187aa033829b7d5eb9644b9391f493965eee35b4a1592f82cbb36aa4","ssdeep":"","tlshash":"bb01cbb6b30d44b604aa32178d5f61cd297d91e3a829649b8cc909502924c6d23befb8","size":683,"data":"","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-04-04T23:32:44.537644Z","times_seen":10625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"af88ce6d561fdd7d07a4c8579f1c636e","sha1":"bc37fb837164f6af29e3e961bba0f125bcabd2b8","sha256":"c8e3045e78ed34e5de37837506f3fb3e707737afe3c46ba566cfcf10b213936c","sha512":"338bb7fdf8bf9d517f56bdea716f34e40b1b7b34cafecba70403bb66bb53cdfc8ae96b657d9f20f223629f612daa2d636f9f8c3e8771dc17c351d36850d32447","ssdeep":"","tlshash":"9bd0a7992d66843176da024a20b7d7a8666021607b11a50481cdcc3b5a21dd344a195c","size":217,"data":"","first_seen":"2025-10-09T13:19:13.07862Z","last_seen":"2025-10-09T13:19:13.07862Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd5ea35543390c5fc4e9def651ab721","sha1":"d360aa74dff157fcefda69336ecf420f04940f98","sha256":"9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17","sha512":"d666a51729862abb8d23b0cca5d5ade738c08df2a23fbabb55be95f2a1fbef60255bda850cb36457e70bb2706067f9cee620169c9166f5e9f29a48af470d4fab","ssdeep":"384:lrKvSC3FheMYNzktJlro8aVfPxodAuyalYleh++PFoAS4TSPE9MfA+0UUTK7:gqC36LkJcjPxodAl8DiPE9/+0UKK7","tlshash":"da9294c5bb053d53e9ff12f64157170ba2368eed050e10289839efc629314b1a6efb69","size":20430,"data":"","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-04-04T18:39:50.595142Z","times_seen":4561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T23:35:10.569211Z","times_seen":330273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dcca58db348f35d6eee39aadb7cd280","sha1":"0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec","sha256":"2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4","sha512":"ee897cdc326f80eb18c74b3c42fe1b97b3b16c0be8f048a763cb33db134fa47dc2eb07bc1ba6cd8feb91385d791aa89a28816fd49217a57763dc54df1ef3693e","ssdeep":"96:IncwFK9HqOq0tioGJULBx7PYuyrr5VrcAeS1h3osyTaZ+1KZZ/p5k1QDSYRV9uR5:M9YH9qfJ2x7PYf5BcVSPfq+DkGDjP9u/","tlshash":"5fc15308b065b43f65777032523f130bb23a606778884494f6b4eae99ebc81e5923f7d","size":5755,"data":"","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-04-04T17:45:05.529423Z","times_seen":3555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/plugins/wps-disclaimer/public/assets/js/jquery.cookie.min.js?ver=1.4.1","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"212120987089b815521b9a35677f109bb078ab55d09c40a9c391e4e03f708820d72ef9","size":1300,"data":"","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-04T23:54:11.230722Z","times_seen":17771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"78e00957585d69ee8524aca9073e9330","sha1":"17ec17f80c79d5bfb0e012c329bfd03329f10e8b","sha256":"7552bdd129fd0c35c739f1cdec8932383405369666468062054dd67f87c1e34a","sha512":"23652078559cfa31cacc24d533894506c6ea8f32cac2eeb160d886029393d237564351ba7f374c72e8f43a38cac8c7b3f655c5a45db840c5d6e643e864268271","ssdeep":"","tlshash":"821190753e1a5534d6c6414b317ee7a93e3260617a02a044c26ccc255958d8714dfcbe","size":902,"data":"","first_seen":"2025-10-09T13:19:13.080658Z","last_seen":"2025-10-09T13:19:13.080658Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e112230795d9670c1c7cb5eafef9a409","sha1":"ef11eb5e9603df4f718028f17c9a7485f73697a8","sha256":"7229ad7e4ffdba41abf27717494fd1e7f70619c19ee11376dbc86f42bc60725d","sha512":"c0ae3fad0bdcb09aa1dd0a8ba36541ec7f972fa47bce047dd699673d31ae74b59bd816b5c0a3120b62bba04e10963670fb44ccbddbab544c884662ecd7a5288d","ssdeep":"192:qA45x+mQP8tbw5YNmm0w0aVBkm9irRL+phTzwIF/7ZTa8+Lv2Tx:L3z6bw5CmmrVSOGRyphQIhlTa8Yv2Tx","tlshash":"de221acb3e4d60a8624960a71c7731fa665c9d032017ad099341b7f9bd2175dbc8eedc","size":10049,"data":"","first_seen":"2025-10-09T11:57:34.632014Z","last_seen":"2025-10-09T13:31:57.694379Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T23:30:25.650986Z","times_seen":195867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"amateur-xxx.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 39773\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Tue, 28 Nov 2023 20:10:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KEi8rOl4m0cOpn%2FdmmJqSBXaHWfaFyjEznVK1TBgV%2F2oHyVCkyLJuqnP7nUjpGOK4L1bCJAS7bowX3kkuuIKlsKkTTHJzLzav8B9%2Bn8sqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e3fb2c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T23:47:15.83011Z","times_seen":686378,"resource_available":true,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":677,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/02/hot-blonde-milf-uses-perfect-ass-anal-cream-pie.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/02/hot-blonde-milf-uses-perfect-ass-anal-cream-pie.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4606\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 18 Aug 2023 21:43:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQhfuIyM6tS3FgFoU4NZ9p8f7wVKDq92zhMdeh4tQy97vh9lj1MeUU8isBsQ2gcOTBGiBc2mDvg8RQUekWKmnIiP34mbea6GBL7jQOMtVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e7894c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4606,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fb34e0d9400599ab32d62b7aac85693e","sha1":"83a460476f1ff7ee4049c022e5b43678c7b5565c","sha256":"0db2a99b976e678c4c6428f452f96aa93d221525809f98df419249873111c810","sha512":"710807025897582b622287604a753d745dee0bfe7cf6b4d29ad634cd4ad09ba1e36948f8158edc48fb3eef1acbd6e20cfa74dafd4e5bfa6be74d12847746cb7b","ssdeep":"96:8/SXHD06qfxFccqhwkBQYVAtQ7x2qviwt:8Yj05FRqHBeOziI","tlshash":"95917dce4898102c13073b637b4fe685f80f0738dff98a3b9146c4097987a52714a95b","first_seen":"2025-10-09T13:19:12.913827Z","last_seen":"2025-10-09T13:19:12.913827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/style.css?ver=1.10.2.1756566224","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-content/themes/retrotube/style.css?ver=1.10.2.1756566224 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-length: 22561\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Sat, 30 Aug 2025 15:03:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ToUV8wiM%2BIBn%2FTz%2Br5ZTeMpvOw7ZGtu4mISTOWe4qZGAgHlL89pKgpVg4y8P7P9Ql4qVlGV2YIMHp7xUPBDoAVb7zWdV4IHtXu%2Bg8sPng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e3fadc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75704,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"assembler source, ASCII text","md5":"c48f6edba50d51809787fbd9344de949","sha1":"0a2a37afe84f4929f54f202d41ee6821be9a1a44","sha256":"588117437aed4239f76d76462c04dfd9307b99e7a1ce74fd7b3ab24ca72fdf55","sha512":"c9561555b8afa826ee1ada6d32c9e177fd9bc1f5ea74efc96377d99ad064c8fca2e42fca191ec339d9b3d032d2074d36e900615ed3674b6a99e54a5c7d01d70e","ssdeep":"1536:1+vfevN5dbJil/zinqEqFkQiN0NtIhjwU3zl0oyEjG/2WmM1/S/5s5DX3F/Is5Du:1+3QN3Jil/ziBN0jKl0KyrWixLO","tlshash":"3d737465af141c44932bc2a9afd5e750c63e4051df0f0edff099a528d38a69502bff8a","first_seen":"2025-08-28T06:46:38.274306Z","last_seen":"2026-04-04T11:43:31.544975Z","times_seen":555,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":678,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/01/squatting-and-creaming-on-a-big-dick-amateur-saerosoh.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/01/squatting-and-creaming-on-a-big-dick-amateur-saerosoh.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4832\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Mon, 31 Jul 2023 05:47:59 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibVvv%2BV6pZTqj38hG2Uum%2F%2FT50MmZBcNcTMU%2FXpySX%2B0yQxQJR7unjOpiXcMV9UrUY71bVQgfkIfgDvraVbdA6C07cr%2FxUKBUPSNA5sKRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fd3c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ab7796079ddf74512bb3e50ad8b2d14a","sha1":"f7a45ccdc0575f1a53a6089210927abefa508944","sha256":"e80b57af3de3fd2e8129ef1b35e153e820a3e2af6e46dcb24bac4fb02bbec9aa","sha512":"955101c917dc203763a198a01b564ad0241ffb8434bd2c04b9f28cb3607938656e5d0f92d837dc928ee03c1b90302c246c0dbf96c5b770451de4cc147ce4d2e2","ssdeep":"96:JIlvQRs5ACV3FYmv2rFMdrhR8M06sBrncSrDw/ZhdE72dI:JCistVXKPhnVDw/ZESu","tlshash":"8da19ee7ce110acd0bc07f245da8f298c6150f186b4445e9bf360e3b616760b623d51f","first_seen":"2025-10-09T13:19:12.919016Z","last_seen":"2025-10-09T13:19:12.919016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/12/clit-lick-pussy-eat-untill-she-cums-erotas.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/12/clit-lick-pussy-eat-untill-she-cums-erotas.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6146\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Sat, 31 Dec 2022 00:54:24 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2BdrdAEfbEOpKAFxkg%2BHelYDvmLk8aje6%2BOfN70dTW7%2Bxevl617GItCIw4Z%2FKURhTXLAhcxNnRF%2BiECBVNOahoZJdPuMwsxUwn5Jq30SSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fdac759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6146,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"360f38dbdbaf5f8cb0af4635af604b7c","sha1":"56063ec46ae932739a821a193d42b0055a1037bc","sha256":"b709dda15f58eaa8935ea5a886623f72ba183efada15e355c87e0d209334038d","sha512":"695210eb08e49aadb3ee782059e620445097a67cd748ab6d6fdcb65bf4a9a870584c3e12eb21cfaf30b1596f8a53165652fb561a2b1bf0838e5a5acb0f4588e9","ssdeep":"192:V9BR5geuUcvpdFMfKpHwOE4sEuQUNiaYe/co/iEG0tKq:VPgeGpbMiaiaYet/j5b","tlshash":"dbc1ae8a3f13042823edca02e8b08df167f1b4e4441fa15667856e507766efc853803e","first_seen":"2025-10-09T13:19:12.921792Z","last_seen":"2025-10-09T13:19:12.921792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2024/03/single-moms-need-dick-23.gif","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2024/03/single-moms-need-dick-23.gif HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 65092\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Wed, 27 Mar 2024 15:30:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KgQZlXnI2ZylL0WjeoFWzmxx7rkcKfkxKR%2FkKj7V8tla9%2BZiS39gVcB1DLf4Y2xuucxjU0M%2Fra6YorKP07l9MLCcGWtDVfmOothN77n6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e5ff4c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf6d6c4fbd0a63dbb2f9739011f4cfec","sha1":"c31434a95950abf94353347b6c8d44e25509eb47","sha256":"9617e721649ccaed90a3d83c795a9adff69c46fe3c604bbc1b58ec2e17d6bb03","sha512":"a35eef78a755727f725b4a37e2ccc5d3e325b71d8fd45a82e4252ab023abef67d208d368ac27f2300b4a52b205dcf3ed49112fc52a355584d2e5e4d6d2b432bd","ssdeep":"1536:TEp1TwpbBS2yFgdUyG4fXgHgbJb6r7pk6BbJe7Sa47B:TI1kJKHgbJb65k6lJe7M7B","tlshash":"5153024280f27ec4f94122b93ed1097d612a68d0956556c30eac910366bb3eaf3ff64d","first_seen":"2025-10-09T13:19:12.924948Z","last_seen":"2025-10-09T13:19:12.924948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":889,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":706,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2025/02/please-dont-cum-inside-i-have-a-boyfriend.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2025/02/please-dont-cum-inside-i-have-a-boyfriend.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14734\r\ncache-control: public, max-age=10368000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Tue, 18 Feb 2025 17:50:25 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZ%2BqJjogwzYaNF6%2BK69hSIe4PCnSmQ24SWYgwQ4apFZ7iG0Hb%2FGdITuSuis0%2FdscWn8iXICBmwu0uvzg2WlSuknorIaS7uZZfKok16z13A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e5ffac759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14734,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"b49c1558ad1aafc8bda25f3f3f4eacda","sha1":"014b6f327365a9e783c7b7191ccc621113b66fff","sha256":"75239c86b713b34390f607badc80cdaa77cfe335d21cc83aee6d03fe7b4eece6","sha512":"3b071c9848c5d489232165fa5ce0ba525bb02d5a74b683dd76857b135ca306f07c7d170967041a75feb01f171e0361fb259bb69ac0d541c86462d2ea28e0406f","ssdeep":"192:EAmysQd4dZiwHpgHzFPEBTnuiENBrSvTU2a3UkBEaLlsLbv/6j34I79ywMUBg4:EGGfHiHps1utwvTXupBEaLl/D47pUBv","tlshash":"7c62b051730146d6fa85412633944dc92bf8047a7e495e7a2ac07edf1a777d23ce44bc","first_seen":"2025-10-09T13:19:12.928148Z","last_seen":"2025-10-09T13:19:12.928148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/07/cheating-fuck-with-brothers-wife.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/07/cheating-fuck-with-brothers-wife.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12448\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 18 Aug 2023 21:49:19 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HkFrsjXzoB%2FgZYw2ENxCa8%2FJ2TsJptgvv9GLXrSWksxZmcATPxAXWO7ZleejqSn60UjA3QY%2BPqG8KLnDyOIGTRLZz%2BiHc1SQSYnSwhrVSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e684ac759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bfb6bf1e74d8d963351a2a9d65f9c575","sha1":"dad98172bfcfc8a49386a38141f9a8d07ea84ee7","sha256":"bfa9ab82b53f0ee9a91dac9403189c9b8927c44a47b41d601d2b0d858daf57ba","sha512":"959332781fd76b161bb2eac4835cb1afd66602146913e258826b7a1ebe5d1c3896688e46e1d4fbbc8c3ea063baffdfebe32de244d109fbe9df9e7ae5f301bfdd","ssdeep":"192:esmxnJXL+vhNYU3wjgED0X1QOtR5ERQDdkM2EH6Ev40XYLsgfPZ+6+w:gxJ7qhNYuygp1QONER+dj2EH6VzpfP3","tlshash":"3442d07c6eded66f3e25492000328b5d20393b5ecd6642e6b2f0d8b45db82e54e02617","first_seen":"2025-10-09T13:19:12.930901Z","last_seen":"2025-10-09T13:19:12.930901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/11/boyfriend-trashes-parents-room-and-fucks-sexy-green-eyed-girlfriend.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/11/boyfriend-trashes-parents-room-and-fucks-sexy-green-eyed-girlfriend.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4636\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Sat, 19 Nov 2022 01:33:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dZR4Y3HeuoE%2FohzGSJNAiEezu6z7mxAew04sXgd8qylQ%2F8sdGIGQjnnlVqmTcAe73RafC7YMNj4p6zAUDLsojQ%2B%2F7wdlDrRX9HhzAQb9gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fbec759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a688b772ad3636141d9df5fec0b56e6a","sha1":"c2f81e7e86f5f4de0c0e07e53b73bf438d85078b","sha256":"d4251c04e2bafe8061c6a8ac7a1b7d892b8e612a8155f4bd50eaef971086bae4","sha512":"cbab88163bdad17ee8b8b320fdfef4e3c81d3841b38c231ae26a674f0c0ab8093bbf1594c0c9378d214cd1b03621b780d5ad5c6385a182f012a8e04ff71ab537","ssdeep":"96:swLzZ0oqSZrQKUp/X1rTVTKCtWsFd37FFmEfCdKbKl:lLznneBXlTVWOlJtfCwY","tlshash":"bea1ae80f4f22593bc0d1eebe27d8308ceafc304253fe581f67611d18284d6779a2856","first_seen":"2025-10-09T13:19:12.933675Z","last_seen":"2025-10-09T13:19:12.933675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/07/wife-begs-for-two-big-dicks-to-cum-in-her-pussy-sloppy-seconds-double-creampie-amateur-hotwife.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/07/wife-begs-for-two-big-dicks-to-cum-in-her-pussy-sloppy-seconds-double-creampie-amateur-hotwife.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18132\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 18 Aug 2023 21:47:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCJs%2FF38fnGGVwdWh4jgd0XLg4pDpqfNv4WMaKFqezzQF2wLVPPWZlFpjfNmphupOM9%2FNupWcMJNXiFnCtrkTux0NhW6Kw7qantq0HpoqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fd0c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":18132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"91d4716e072bde9eafd5b64151460af4","sha1":"b2b43b8b759dd871872a9eb30927b42d9ebb3603","sha256":"b55b810fa7fa52a21c3d662bf5da72122f3826a51e8b44a9e7c6812f34d1657b","sha512":"f44dac30c2f0ada6387ab63765bcd392cc2354370f922b8b3e3465d8042f638f59fb380716cdee71bdb260c3c69cd3a8c6e4694f344e3f0ac64de81d21d6c33d","ssdeep":"384:qOgz7xVRBH87AeY5xBfAmNLRO+rluEPM9fRxMk+J4qvElsO+tFwMLAI:qOgzDRt84xdrRNzPIpb+JnElsO+0MLAI","tlshash":"0982d09f82f5b50056a26c9f386a6ddad77e291f0aed3a4e0d49fd597366bf08320010","first_seen":"2025-10-09T13:19:12.935833Z","last_seen":"2025-10-09T13:19:12.935833Z","times_seen":1,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":638,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/12/stepmom-fucked-and-get-cum-in-mouth-by-stepson-while-she-is-stuck.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/12/stepmom-fucked-and-get-cum-in-mouth-by-stepson-while-she-is-stuck.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12576\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Sat, 31 Dec 2022 00:12:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AI6rjpcJiHfS0BxefkTyMudIENdyOH5EZcYtVtndeJt9g%2F87ArsrNZFgS3%2FQgHJxP3d6r99dONBIPbUyT4rjgKf70WWxHbNYsmeIxZeE5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e7869c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12576,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2dda42d94522706cd8442b0b3cf13e76","sha1":"6b2fcd4256c901835fc278302e2c604dc3da9b37","sha256":"0ad56731efbafdc4ca5748f94f0d29d0d730f2a3ff7b00fe2c794fe750a2f8d4","sha512":"de7691b9250d3126f1a85e168f7041bf39283e62a7548080c5d551a8df4799f7f7b386a4f8089dbc0dc728879eba1661bd81e489a57a1091276e2ce210f47850","ssdeep":"384:g9KdLQ+tRLmCRrctfxMz2f77IUYtnRplcE5um:BLQ+nxrctJMz2D7I7pccv","tlshash":"fe42cfc863436f319f182a571e6b6a7c24856f2505b7abd7029298c5fce0a5f0ba0d17","first_seen":"2025-10-09T13:19:12.938181Z","last_seen":"2025-10-09T13:19:12.938181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-length: 8282\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Sat, 30 Aug 2025 15:03:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76XJOAXUqMGHl1fF8HuleuvefKbWb%2BPne7NJW3sw4s4g0DEuF2eprwNJqmCiBYH5OiZu24YOxLRLARxETysdLj038kmscxZ0UulCSyi6BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e3fa9c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-04T23:45:54.947783Z","times_seen":236922,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/08/wrong-hole-surprise-amateur-assfuck-but-she-likes-it.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/08/wrong-hole-surprise-amateur-assfuck-but-she-likes-it.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6418\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 18 Aug 2023 21:36:25 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0%2FLl0PcqlWIf1V3K82cMG%2BI6MstHUfuHscOMe9JVCdt51Zp%2BHVddI0X0WMwtJUWdLU1Q6BrMrOuuM7LrYCfNxoq420OogZ0VPc1o6Wn4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fd5c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d30474b6a2a4566ef1fc6c9caa181e1a","sha1":"25bda2b76e935d4d6190c5793ee38f5e47608432","sha256":"f518baf623b91a5a2f4bc5c71c7d1e65df698383e4a86a2e5f63b48a50755271","sha512":"240de17963e85d982227d503c4d457345bf1fb683364b279a5d961f4226f6dcfd16fb38e53eadb9fc537eb09dcf29a60b8ccbd7fb757bf944b11da13ee677cf7","ssdeep":"192:5VC2rj2SkXy8hXj9KqmEZsPmeKMmSgsIJg:HPriv9SEZsPmk/","tlshash":"10d19e83f4cf3b1fdd5e19894af402f5b80b5a29a70491c997df17709048c939b9ab1b","first_seen":"2025-10-09T13:19:12.941186Z","last_seen":"2025-10-09T13:19:12.941186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/12/wife-didnt-know-she-fucked-by-a-stranger.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/12/wife-didnt-know-she-fucked-by-a-stranger.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7216\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 30 Dec 2022 23:27:30 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLrYEm4iYA4fp9ZQMQrNcVKD%2B977p4jiYVqRP3pe0juw4vjK1e7nTVW0EhBfoFMHRDfNQlr3FCuBV8eUznDb85y3CUeh%2BSMHpfdpirhMCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e683ac759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7216,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0d970ff06b32f4ad8ff2285427c91555","sha1":"82b0a415aef5e2899634b0fb8bddb5ef6266ba05","sha256":"5ed15f0416dcd377a26fecb11e4d28d59f2d1e17d448d23c9f7b4b94ffba7fd2","sha512":"f1eda6d37fb62150596522106d0ddbc7765a671bb2c99bdf82f8c9c9be0afc32f58ca6beea39a1d2aa02ada27032740917b59ef732477e7fc1d7e221ff505e3e","ssdeep":"192:GMfsD1l2y9HNq86jubzfrfd1w0ElR+f3fM9VF:TqLNq86jubnHwPPo3fMHF","tlshash":"95e190acd2445cedfa07325e76a7675f77a8ef7c202f544665b5361aec02c99520010d","first_seen":"2025-10-09T13:19:12.944633Z","last_seen":"2025-10-09T13:19:12.944633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/cdn-cgi/challenge-platform/h/g/jsd/r/0.8248821017674082:1760009049:9J019jGARVst-AaLbo08MksMArL29XYNWRlPdUinc3A/98be2a5a3ee80afe","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:44.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.8248821017674082:1760009049:9J019jGARVst-AaLbo08MksMArL29XYNWRlPdUinc3A/98be2a5a3ee80afe HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12081\r\nOrigin: https://amateur-xxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:44 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nset-cookie: cf_clearance=849Kaxk8lScvVGI3pZLfsDxAWI9c7UG2SSXpQLoDSnA-1760015924-1.2.1.1-RECYHcaS_dxPaT1TTzE8vv.dFcipkUzIzBliaWpyZCCZenOQ95u9dMB9xpSHhvumI8Ngjf9u18uOy7a.8AuU19dyZdks16e0yzxVzXGg2F9tSidCxQQgqIDOrIego5aMpMocnEg5GhrKsPaKhJO_dAUyuDI6SC.xOT21C7Htf9YG7S.KWtt_5HIS0RYuJDmGdnOt5T7T4C0Uy.mMvmYWnY.msTGfYY_H0QwuwcShV1s; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=amateur-xxx.com; Expires=Fri, 09 Oct 2026 13:18:44 GMT\r\ncf-ray: 98be2a65cb47c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2025/05/icon-300x300.png","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:44.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2025/05/icon-300x300.png HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nCookie: cf_clearance=849Kaxk8lScvVGI3pZLfsDxAWI9c7UG2SSXpQLoDSnA-1760015924-1.2.1.1-RECYHcaS_dxPaT1TTzE8vv.dFcipkUzIzBliaWpyZCCZenOQ95u9dMB9xpSHhvumI8Ngjf9u18uOy7a.8AuU19dyZdks16e0yzxVzXGg2F9tSidCxQQgqIDOrIego5aMpMocnEg5GhrKsPaKhJO_dAUyuDI6SC.xOT21C7Htf9YG7S.KWtt_5HIS0RYuJDmGdnOt5T7T4C0Uy.mMvmYWnY.msTGfYY_H0QwuwcShV1s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 13226\r\ncache-control: public, max-age=10368000\r\nexpires: Fri, 06 Feb 2026 13:18:44 GMT\r\nlast-modified: Sun, 04 May 2025 14:59:59 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FMVXexKA5IbUFPx5G7Ebr1Hn1fLHxW%2F%2BcHiNEpZ3TQmIB9kg7hcjrNaE0gYLogwu6zcVA9xw3FsaMJDHkP%2BCM2rdyOtTn2dTfZLu6qWu9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a66fe2dc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"88940d38a813a5f9917cf3f98ad0f3cc","sha1":"03041153424f5b55d2c265e68746a163bed36ae7","sha256":"d10986875cbb1fac5d906ea6eb4c392405a0ee93ecb207297d37e84ec6ebedd8","sha512":"6f8215f25fcb810b752ef8f16f3919e1daf7ceaae64c0c08f0b59450a2a975722bf4ca4b807ef8ad935eb5e762456749ef1bbdc1e2ddcae92951cdbc2515ed88","ssdeep":"384:AU4w0xPlMhKf5ftiHslpfVX/eceqrqeFbeZW3bk:srl4iftiHsVX/Xeqrqehe83bk","tlshash":"4552c0019af81d4e3e5814be146c32bfe5dbef08a589f74c590fe99c99319338a2d905","first_seen":"2025-10-09T13:19:12.95245Z","last_seen":"2025-10-09T13:19:12.95245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 2435\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Sat, 30 Aug 2025 15:03:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q22Af8jGwrC1fgx8BN0e7Q0xcZKornE3wC5s4nInXXGtyI%2Fg%2BsoSdzmD34JOdbi6%2Bqwtl4AnHXGdfzi9yJRjyX%2BxiOJkONgApo%2FwOlYljw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e88a5c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5755,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5710)","md5":"6dcca58db348f35d6eee39aadb7cd280","sha1":"0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec","sha256":"2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4","sha512":"ee897cdc326f80eb18c74b3c42fe1b97b3b16c0be8f048a763cb33db134fa47dc2eb07bc1ba6cd8feb91385d791aa89a28816fd49217a57763dc54df1ef3693e","ssdeep":"96:IncwFK9HqOq0tioGJULBx7PYuyrr5VrcAeS1h3osyTaZ+1KZZ/p5k1QDSYRV9uR5:M9YH9qfJ2x7PYf5BcVSPfq+DkGDjP9u/","tlshash":"5fc15308b065b43f65777032523f130bb23a606778884494f6b4eae99ebc81e5923f7d","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-04-04T17:45:05.529423Z","times_seen":3555,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T13:18:42.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.4.13\r\nlink: \u003chttps://amateur-xxx.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncache-control: public, max-age=0\r\nexpires: Thu, 09 Oct 2025 03:40:23 GMT\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vyIPCqw0l3FWALJv31SMBTvAk39ey3NZimX0HxYocqP78KC7IsHpigl1eALa%2FC5FxQaINXzjAe6fW4zB46AHKIzPcJT%2B3MqRGgoKMVA%3D\"}]}\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=9,cfOrigin;dur=444\r\ncontent-encoding: br\r\ncf-ray: 98be2a5a3ee80afe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP:8.4.13","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"bxSlider:4.2.15","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":157183,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (39690)","md5":"61adbaa8e74c4c3d9cc216c12505add2","sha1":"e15c5ccbe128844319592a15d24439d1c91d9bd8","sha256":"a9fd5f8255a91fe8f642d2df29ed3e5653e342e95f56d6217c22d4cc72d88512","sha512":"08eee393446d40a0b54585cd0696f2c1284c8e08beabc49cd78de306e22144826b3b0da7fe6087911fcf5f68b150e156bb87b22b86ad00de05b1d5e06977d178","ssdeep":"3072:On4OMBmUmU/UMUFUCULU4UxUuUsUfUGUJUYUrUk1PG:OaBZ1PG","tlshash":"dae3a6ff13d1acac261362d98944326995b2d815cec7888f7fe792c48389df3716846e","first_seen":"2025-10-09T13:19:12.957774Z","last_seen":"2025-10-09T13:19:12.957774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":925,"timings":{"blocked":232,"dns":17,"connect":1,"send":0,"wait":461,"receive":0,"ssl":211},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2025/02/husband-watches-friend-fuck-his-wife-in-the-ass-before-cumming-in-her-pussy-amateur-hotwife-4k.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2025/02/husband-watches-friend-fuck-his-wife-in-the-ass-before-cumming-in-her-pussy-amateur-hotwife-4k.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15038\r\ncache-control: public, max-age=10368000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Mon, 17 Feb 2025 20:39:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WhviUwn2RcvR6b3QofUvg5eNGdxCUCI0GokNnD%2FttsnTr0GUEnXwWztoUuVLNalnmAnSflilMzstAG%2B01qfE693UZC8qJtnL6pd5scL63Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e5803c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15038,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"b00e95d47b28bab330bafe8d9a8632d8","sha1":"40f9b77e9720e353dcade1740596e79e1196a45a","sha256":"bbe807b8d957841f60dd34f51e44ea94ba7f8976d65104efb95482ed7612c145","sha512":"ae303ba8f54b947db414986163dcf93f94b8f15149dbe84eeebcb04ef84e31ec22be10b276549100a8d4d557fcb46a6c8aa15a268256bf3fd4c9b3112af8430f","ssdeep":"384:f/T3P1A8NGs91UkOtYcLUkA47DqiMuIGrW/axLO8KqHnzcC1yjHSTjl:fpPGaUkOpnA47eKvrWgKKnztP3l","tlshash":"fb62cf8300d186c3b5392fbdf50c5f30cbc58c4a4195534a9afa9af5e8d4fee0b1aa64","first_seen":"2025-10-09T13:19:12.961716Z","last_seen":"2025-10-09T13:19:12.961716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/08/adult-chat-48.gif","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/08/adult-chat-48.gif HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21274\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 18 Aug 2023 20:00:49 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bSiYByu%2BSIX%2F03N5VUJl7tn5%2F%2FJnXbjfGUWztGnaGnmqc5XASoI1odg9yq5YVYq3P8SNniYCs0%2FChEC%2B1a4wr8m6%2FKgYwUZtv6vT1BsSWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e5809c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21274,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07b03056200d97b3428be43ddac1c39a","sha1":"a7b6a7be3b8524af839e15f5eac8ca463683e4ae","sha256":"5dbd37f0f67676bb5866f5069dae27f463d896a1705ef5c1a599be6daed77c58","sha512":"bf7e1b23c1435ea66d145fbc23b005a2ca0ce44e213b9acc8e5552a7417544035daf1891d5e08063e6239e3d4ce0c674bb99bb78ee0ced7391e309adf327ee61","ssdeep":"384:WggwExbgbv8Fj9atn8T1E/qzAcg3fT7LCvzkoZ788x3UgLrC5Uw/b4syU8noLqn4:FExbMv8FjkRgVAcqju38kUgy5UY5l84B","tlshash":"3da2d097c9a6eb92cf2c71bbe9d7e946a32287cd1a0d14c34d2894eb0422002564ddf6","first_seen":"2025-10-09T13:19:12.964239Z","last_seen":"2025-10-09T13:19:12.964239Z","times_seen":1,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/01/she-climbs-on-top-and-fucks-me-really-hard.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/01/she-climbs-on-top-and-fucks-me-really-hard.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3418\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Thu, 10 Aug 2023 22:22:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSgMsbPInx%2BXESkrmFv63PPvzd877mjCjB3ixaRZ2fyXnQBj%2BtQtjHatn5Ds3CxqK8DqFk00BkzjNGgMTKz80Hm6sNgpHV1U6mxN%2FvNkGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4feec759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2821f9271395ad4b1b04a986c764498a","sha1":"04ee3af1a85b79acadc89be52eac01cea071a23b","sha256":"6510bff20565258d686edf00fcab6f9ce42eedb2a145bb64d7d1431263af50c0","sha512":"aadc30b15f8adf50b73eea9a09a5496451c86e84efa791931e62e2bf632bdf3636a4a74aeeefa3b9cdc411338940c63a9d58877b2cabd73a3a5012d6cc522b20","ssdeep":"","tlshash":"56617bd03891cbf69282ae93977c8209c52b0b0340139bd9e953488ff56fc943ceb547","first_seen":"2025-10-09T13:19:12.9671Z","last_seen":"2025-10-09T13:19:12.9671Z","times_seen":1,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/e9c9e9d67513/main.js?","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/e9c9e9d67513/main.js? HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98be2a64f8b4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10049,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10049), with no line terminators","md5":"e112230795d9670c1c7cb5eafef9a409","sha1":"ef11eb5e9603df4f718028f17c9a7485f73697a8","sha256":"7229ad7e4ffdba41abf27717494fd1e7f70619c19ee11376dbc86f42bc60725d","sha512":"c0ae3fad0bdcb09aa1dd0a8ba36541ec7f972fa47bce047dd699673d31ae74b59bd816b5c0a3120b62bba04e10963670fb44ccbddbab544c884662ecd7a5288d","ssdeep":"192:qA45x+mQP8tbw5YNmm0w0aVBkm9irRL+phTzwIF/7ZTa8+Lv2Tx:L3z6bw5CmmrVSOGRyphQIhlTa8Yv2Tx","tlshash":"de221acb3e4d60a8624960a71c7731fa665c9d032017ad099341b7f9bd2175dbc8eedc","first_seen":"2025-10-09T11:57:34.632014Z","last_seen":"2025-10-09T13:31:57.694379Z","times_seen":7,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/01/35-an-unforgettable-night-with-thefirstclassjd-episode-9-38m21s.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/01/35-an-unforgettable-night-with-thefirstclassjd-episode-9-38m21s.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7168\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Thu, 10 Aug 2023 17:20:09 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYV45g9cu7hlxsjfhLvm3L7QFGUHJiHXqVKPxih6QQ71EVGy%2BlyB2xgcE66mV1gxZJfOABp%2Be%2FZR67XIWEkOohoDopftrrt1QMmzzJ5hiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e5813c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7168,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e9b1e647b91d162f81eeb4692b74e06f","sha1":"70d2db1134fb10b3acf4228ab68ce693ee9df8f6","sha256":"22e3da3928a539badc4decc5ff19afff89b16c55e9240f68aff0fb97deaf02d7","sha512":"09da14a8fdf32ceb5da8cce3242ebb89282536c4b475b07b8591adf135292f8491c6f38b23a971e8dd7ee2e9ba1432d6354c4b0071d40136115e24bec2fa983d","ssdeep":"192:ct6oMQGnt7NdUa7hqNvYebr5t2cge2Og4nC0p0Q:cteQGtLtY7H58yg4CBQ","tlshash":"5de1af6f05b2b0e71c24bc306a33cd5dbef8b4d9742be26a22d4b1c7c61650310712a7","first_seen":"2025-10-09T13:19:12.970467Z","last_seen":"2025-10-09T13:19:12.970467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/01/his-dick-is-so-huge.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/01/his-dick-is-so-huge.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7096\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Thu, 10 Aug 2023 17:21:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FoevVMeVf5SXzgqqrYO0OtV1G44lRiZpLiXJ6sPNmfOXKzKMiVGxR8LZb8Zzgtlq184ARliQeaplPUsuYz%2BlcjFKYazNn1ivjtGHlQldOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fe8c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7096,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bbb7741e7e839b30051e5fe918a4f837","sha1":"9db15fe67fef97cb94f9415edb92a1932da24c38","sha256":"8fb9191867e79b24d7524495fff600c300edf77baf67c721906c2207f17ccabb","sha512":"b0195b751e4dff87070bc0e52f592ee10fec6f03a3eecbcfdc1c4cb0965001a3485b7974085d085b36083d5ad13ec8ec0ebf1d63ef6a1b6f3c26fd50cf3ebb45","ssdeep":"192:/xB28q1hTeQ3g+QPcIw69ysGlyvsmFgoTv:r28qR3g+ecIwvLkFgoL","tlshash":"c6e18e35b8b18f8d6441697669484a6ad06c7faff917c0d834c8db37fc890212fa5219","first_seen":"2025-10-09T13:19:12.973294Z","last_seen":"2025-10-09T13:19:12.973294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/e9c9e9d67513/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 98be2a64bf87c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10049,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-includes/css/dist/block-library/style.min.css?ver=6.8.3","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-length: 23739\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Tue, 15 Jul 2025 22:04:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jLQHvw6cyzDzeg4YBhp3Tq6MrgpG49W8nIw98z1%2B1DuWJmcWzTh39K9hmPih89eWcd9NdiqYSwwPXXPe0eS%2BE5YEufW%2B10BmaCvbIEaNJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e3fa6c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-04-04T23:40:19.53979Z","times_seen":164277,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/01/delightfully-fucked-his-girlfriend-in-various-positions-and-finished-on-her-back.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/01/delightfully-fucked-his-girlfriend-in-various-positions-and-finished-on-her-back.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8326\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Mon, 31 Jul 2023 00:56:45 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8D%2Fe24YLkpfWjnxnrN0jtVwcpN0D15BjUSJ6YasCZ1ldXSiB9ePeRFEUuJuvKPsTAF6d%2FWk%2FF1oP37%2F0fGgUDyBZ%2Bkf9bAj1C53XR%2F6Djw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fdcc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8326,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b4c6f2a82154ee3417fb14027c255c8d","sha1":"1fdea554634bd66e553b0085c10fced87994e462","sha256":"80a593abdcbc19981a48a70b9b0bb3eef5825081963e506035653fce30a4c988","sha512":"c9d366266540aa540b617a91c77384c5154b282fcb01b4392bea8f8957a6b1b3e9c9a2713b3453b1ba198cd3249c9135a5c46a15f4f0a7cc55aa3e7ef36b9daf","ssdeep":"192:6WwPKcWxpNBBzFDr93CTcgA6JvFqT6+jW0biino5eb4ZwH:+PKcCpN7F/9SwgpJvFq/iWJJciH","tlshash":"e702a0680fa1ba8fceef211d612a24715b218f6854e427e91bc1a11d278db7de030e05","first_seen":"2025-10-09T13:19:12.976816Z","last_seen":"2025-10-09T13:19:12.976816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2025/02/petite-babe-addicted-to-anal.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2025/02/petite-babe-addicted-to-anal.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39806\r\ncache-control: public, max-age=10368000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Tue, 18 Feb 2025 17:00:27 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2FjxI4gzfM1M248QZk33RVoCCKk5r1DPfjRuLmrFZOTZlEF7TZSbuLRPrdWcTigc8oXeK88t7LU6Vyt2jiP7IA2XArPGAimaE5egsZ8cXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e5ffdc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39806,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 1280x720, components 3","md5":"4313ac1253534ccfbb6b42430bf0b9b4","sha1":"04f167a703338dc03af8a517aebe567c09431dd9","sha256":"8e88ef3367ff716885b84c373ec96f3d4935ce995919930d240ce67fbd2cdbdf","sha512":"e3a90f728685712da1d670df139c6a5524ddaaba83f219f255e95ef562e773a4355e3831c156f28ad54c3e2babc1ac4632ab5681cdf6879efc1768ff641174da","ssdeep":"768:MmqkMBtsuSF9LFcziiNF/mC11nMDtw7JAAycT+BRENrXcu8T0F:MBshTLqzicB1nM6JAAyfjPZAF","tlshash":"9003e1375b4956a0f814d7b42293e3851bcfc47248b0cbb2bd20e75cdeb579224aeb46","first_seen":"2025-10-09T13:19:12.979897Z","last_seen":"2025-10-09T13:19:12.979897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/01/cream.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/01/cream.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5636\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Thu, 10 Aug 2023 17:21:23 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRkiwDQEkD0QKWwmtOJ0JQfMlbZvBPDhV40dtdf2SLiCZtJRrPoYdtsrIXntl3vh0AoLIVlKteqyb%2F2BNsz09i6PQ2eaqkinlCNLQxEibQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e6843c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"328d89634d3d55c7cf1cad6b13a5e2ec","sha1":"1a13afde7d7fa03beae35ed313c09065507c4fc8","sha256":"987c18a3836eb21791206bb5adf91ac8bf9e1e85d55f58a10fb9611a930cd1a9","sha512":"96734a69c89aabf3d058bf71038a98714001d6a52a470eee85c46e0c5061c641db37456f6e469de0c1c52b59831728dba6c1f4a9c475dfaaa15c4dd8be75e668","ssdeep":"96:M43tvJdKUq/nPHb4C7a3WohpZa9euFNuNdsZ6PgZbbqpk:PJdB6PHdn0keuFT4P6bbyk","tlshash":"3dc1a0b9ce899b375dd43b5109a96f6434b4ddb1000d0408dc86b7045dfd471b7cab51","first_seen":"2025-10-09T13:19:12.982773Z","last_seen":"2025-10-09T13:19:12.982773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/07/she-loves-a-good-hard-ass-pounding-missionary-anal-15-min-full-length-video-on-my-official-site.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/07/she-loves-a-good-hard-ass-pounding-missionary-anal-15-min-full-length-video-on-my-official-site.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8066\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 18 Aug 2023 21:54:24 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4y67HuMBlIEvC9r8sDr%2FM5dT6MynCCa6xipYhxV47JFxGMLX51Uueb9ceyX7CYpUBhodod4Kw3PGA9N1q8pNKcuaRcgCK4eQY%2BxqENYzyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fc2c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07af7a3150d7428d2953ad6b2bbe63dc","sha1":"f6edbf05d7f01f25a4ebe881b3d4bf3d3eeece80","sha256":"64755fb23b9151ae2b7809da739e3fa547bb6140c3a4ddb10db854df54d551a2","sha512":"7c2d4af5dac15c632099099d524ad63aaf3bc97572d3dd0612f05e69f95ce74d800751a244530503b364b840bec96e016ebf70a89af74b5d7163a58863fa56e4","ssdeep":"192:T3kPbFpSllxVoepw8ANycV2c+GEUkALmYZ:T6pSlxoeqjgzcSUkAiYZ","tlshash":"b9f1af8a41f417e0df0d799dadc61ec64a527327894ae3c3ae4e07d84487ed1259a2fc","first_seen":"2025-10-09T13:19:12.985394Z","last_seen":"2025-10-09T13:19:12.985394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/01/making-my-boyfriend-cum-while-he-plays-video-games.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/01/making-my-boyfriend-cum-while-he-plays-video-games.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10018\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Mon, 31 Jul 2023 05:53:37 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jLOfXJTYftacxypn4a5EAaIRZuyuTvHlBycbCE5PdH2xOvXE%2Fvnz6VtR0jNYeXQ%2FyyjGGGO8U8vNO0Depnnl%2FAUdM5HMVUyzg21%2FFUa8cQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fe3c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1509f7bf377fb4292e510ddd0867bfad","sha1":"fb46faea9143b5f5ac2cb47e62ecc0201d57cfec","sha256":"83590eb2244bc26b5786f1bd8bc2c7d6a2937b2c4d7522233a590d60a7a83c88","sha512":"b8cac2b5f05c843dd1ba49daab85813e3458ab62f4343fc2481e5d56cae4e8b403c624b14694bbf2b33352c90ece563a7d00360b132bd231cced3023ece794f4","ssdeep":"192:pWrMHPMGilIz8GUXtXHFDuutK1q2wg+cvtaH7O1zLBQnDk5rBv94PeO/hUKV:p8GizGUGu+q23vvUOpLD1MXR","tlshash":"7c22b094303428aff6a30ad8a2d8ade604d5c04bf05fdf61f131a7ff85414ad099046b","first_seen":"2025-10-09T13:19:12.988665Z","last_seen":"2025-10-09T13:19:12.988665Z","times_seen":1,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":710,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2025/02/step-sis-uses-my-cock-like-she-owns-it-and-creams-every-inch.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2025/02/step-sis-uses-my-cock-like-she-owns-it-and-creams-every-inch.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13214\r\ncache-control: public, max-age=10368000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Tue, 18 Feb 2025 18:14:51 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cGByn0%2Bzx3tgpRenELdm5tZ12f%2BIUsulcKLMz%2BnR4RgxW14o6Hg9gT%2F6rGhaFb%2FXHSaw63fEbRqImxdRdOGqIi3x5%2BF2PfsUvCnDbVHx5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e5ff6c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13214,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"caecb2726ba167e006a018d87c10f024","sha1":"1d2f93ad0f6b07ca3e58ecb5e34d8bb2534a4695","sha256":"d67c45f747be2f5224fe388ca3535d71b8c0c8cc0946992b49652401c4c01b73","sha512":"fbb0d89152a4e606e44e6f6ff9b7947f3af08ee09308ea98ff4c358f8c5bacd3fcba8c72389f88b88d7e897594a1dffd2b22ba75f2e5557a81071ecf94c9f42d","ssdeep":"384:pHInvA5qCza37jO2/CXLJwg8VTRVsQJfQLEhlg4:5InoZC7K2/CVqVVKEfg4","tlshash":"2152c001c324edf3f92c16b607450f6ddfde9fa9a442813665e830806abaea19cc57f1","first_seen":"2025-10-09T13:19:12.991724Z","last_seen":"2025-10-09T13:19:12.991724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/12/plumber-adventure-pt-3-lidraulico-si-monta-la-milf-zoccola.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/12/plumber-adventure-pt-3-lidraulico-si-monta-la-milf-zoccola.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13560\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 30 Dec 2022 23:52:55 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xvD4UyxhUbjghC86MQeJWXJ1Ht8vpf9bcj5uUh1Zo4Ccrl5MZjDcRVt0dHHq%2B5O29xj3hCrSxdizpgejqKEgL7CU%2Fi3O6HoQqCt8XHpY%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fc7c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13560,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2f0bdcf3fb94f10aac571e25673a9f0c","sha1":"fef6c5a07a04ebe9296bc5fbe44e57b849feb028","sha256":"478f310d09fc926f6dcc5d1c884a74a3b8155c715a7747307d62e5ed28428b2b","sha512":"2a7b7fcb7743bf1ee342036cada6a6561bd282eadef312ed13e959f2c87d6fa0c8762736b311cb6831cb692f831a686736650203700e1f68532dd4be331834f8","ssdeep":"384:UVaVPE0rAInf0eUoKWras/ne8fO9J+fol:1NPf0ZI1e8e","tlshash":"d652c0cb0452800e1e766cb97cf633e01c81a966c3ae65a29d5d83be1628c7ed1f54fc","first_seen":"2025-10-09T13:19:12.99479Z","last_seen":"2025-10-09T13:19:12.99479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/plugins/wps-disclaimer/public/assets/js/jquery.cookie.min.js?ver=1.4.1","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-content/plugins/wps-disclaimer/public/assets/js/jquery.cookie.min.js?ver=1.4.1 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 751\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Tue, 01 Apr 2025 14:57:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=000qNp12F7UFMnvwltvCO6lj%2FepE8tqE79yFQmhELQy2b7jdnIPcwYaGQbIT6E61%2B7YQlmO%2BunSJuKjHtNqJioXWrjdx%2FHoIKsbZe%2Fhx9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e98c6c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1300,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1266)","md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"212120987089b815521b9a35677f109bb078ab55d09c40a9c391e4e03f708820d72ef9","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-04T23:54:11.230722Z","times_seen":17771,"resource_available":true,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/12/cuckold-joi-you-are-buttons-husband-watch-tip-fuck-your-wife.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/12/cuckold-joi-you-are-buttons-husband-watch-tip-fuck-your-wife.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9564\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 30 Dec 2022 23:42:07 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmschjKW53z5vGM8gM1nRQ0aeYCVh3TvQ8WVlMqC%2FLBbCQY%2BPmT84kWi3hUc07aCL5hSqSbhlcsim5WVuNkGDSMKNAZbNXGvYbHqPoxOoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e6827c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cc463cb52d1214054cbdda934c555c4","sha1":"186e26b46e31fc518cfebe6324ef4cbf380e50d0","sha256":"e8068093649025a3cc4ecb6efa00844a02c64e41f4a1f02cd46fe8f292c7d46d","sha512":"fcd8599cb2bb763d818c288178c8e7ed3ab8638d62b196d45edbe59dea48a3cce9cfb3d98be324ddb62059db8a8763f977e0b3e3652e4859b981b6a5cbe74043","ssdeep":"192:Amec5QO2u/7GsjH2dm4bUkz5Oq+KbSEwsDwGmsI7D+VKHVX8mP6lBc:A1El2uIm4bxzQqnSErKsxlBc","tlshash":"9d12c093665b5d67f5fa0260d011cfd067a60f2d7e02041bb0abafad209f4a80315f07","first_seen":"2025-10-09T13:19:12.99972Z","last_seen":"2025-10-09T13:19:12.99972Z","times_seen":1,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2025/02/amateur-college-slut-rides-huge-cock.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2025/02/amateur-college-slut-rides-huge-cock.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18293\r\ncache-control: public, max-age=10368000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Mon, 17 Feb 2025 20:24:41 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8SenEtHeNx3Cn8hXyCCACxF1lIsghoZW3LiZXg8uOfL3EiAbFGJ4QiuPc4UIyi50n0DhjNay16HyMcSm%2F4NSEYP15Zb%2FBe8tlANmU%2BMDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e5805c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":18293,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"932ff28cb31d564e41afe68ad937854f","sha1":"ae1191b73e1cc701ebbfa7b0434055c81df7ca61","sha256":"cfbdd43e87d85db6a36254f118457ba55be1472dc075a1a1a8144be5a84f3072","sha512":"c8a74d54d14a62609641238f6f3141004bdbe6d6b09e1a33cc27c536d96362c524a7eb74b087d064d229131595aacb397f3c79dea79a73b19b3d4854eb57dea0","ssdeep":"384:8xnWV+MOYxALzSOI/ojR7mB8RWKqyK5TsGFs0muJZ:GWSHz3PRbW7RYGm03v","tlshash":"8b82cf507baec0f9fc3ed138d5361f64bbea80299055431b80cd54788e98ae1dddf865","first_seen":"2025-10-09T13:19:13.002397Z","last_seen":"2025-10-09T13:19:13.002397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\ncache-control: public, max-age=10368000\r\nexpires: Fri, 06 Feb 2026 13:18:44 GMT\r\nlast-modified: Sat, 30 Aug 2025 15:03:43 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSgcm58%2FLyB0KKbVVtkLOgujBkTQqAj%2FiA0qok96KARE8gPi9yVvrY11gEbAa%2FC3kW%2BhOUTy3bwOhTmK4wyvbiRgZ12FXvaUS3PviyxmzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a63fd97c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-04T23:45:54.926503Z","times_seen":410972,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":499,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2025/05/icon-150x150.png","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:44.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2025/05/icon-150x150.png HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nCookie: cf_clearance=849Kaxk8lScvVGI3pZLfsDxAWI9c7UG2SSXpQLoDSnA-1760015924-1.2.1.1-RECYHcaS_dxPaT1TTzE8vv.dFcipkUzIzBliaWpyZCCZenOQ95u9dMB9xpSHhvumI8Ngjf9u18uOy7a.8AuU19dyZdks16e0yzxVzXGg2F9tSidCxQQgqIDOrIego5aMpMocnEg5GhrKsPaKhJO_dAUyuDI6SC.xOT21C7Htf9YG7S.KWtt_5HIS0RYuJDmGdnOt5T7T4C0Uy.mMvmYWnY.msTGfYY_H0QwuwcShV1s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 5973\r\ncache-control: public, max-age=10368000\r\nexpires: Fri, 06 Feb 2026 13:18:44 GMT\r\nlast-modified: Sun, 04 May 2025 15:00:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9p1%2FTEALhcwocc3glKC%2B%2BNB%2Fif8e%2BtAvzYNJrd48zL5R%2FhrQbyAlg6zybMmN%2BI%2Bnz4h%2F7TvtJSYZPZr4ZhhsYhNCS0yX5kr0pV2GmlhZjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a66fe2fc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"c7e3c996a027ff385b3cf64da939daf4","sha1":"11e630d2945a588aebdbfb56cf800783001d9776","sha256":"1bf2a0e0b2cb08a4a85d16f68b7f5aaa56d8c2c9839db10df60d5dbdc2fe9a7a","sha512":"b410682ab00ca0d2dbd3f64637af5d19896bb296cf0792f4990997c60f6a22ac0c8c2ac06dd93dae35cf5154dd61f53cddce1e212c5fe652fbfeaa7cc81b9c00","ssdeep":"96:0ScXhqTHn8Bg40NaQbeE5jiTi4lk8h4U6xy0Nir5JFQDumE1fKsn0v4bFvQoBMZB:0SyhQ8x0bpdKiK1h4UIy025JeDuh1oAw","tlshash":"abc18ffa61d5bd10aa1af102000bcc25f3e35ff4192d92b80d7569f72e1cd7a38ea465","first_seen":"2025-10-09T13:19:13.006627Z","last_seen":"2025-10-09T13:19:13.006627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/08/hot-wife-in-lingerie-does-doggystyle-and-missionary-with-a-big-dick-and-huge-cumshot.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/08/hot-wife-in-lingerie-does-doggystyle-and-missionary-with-a-big-dick-and-huge-cumshot.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11326\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 18 Aug 2023 21:32:17 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JaymoaS3ias5%2FgftwVFHo2oUAA7RF7c2anIjf0zsSGScW7LWdzRoyMqBKCdSfVqzVW4UDABtWY%2BRvC5Vw2U0zRWzwJ6lt8rg%2Fq5xLMqhiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fcec759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11326,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"02397717c846841dbeb0291dc2f30e83","sha1":"5a0d420dd6d2906b64733c6e235feb9535ef3c88","sha256":"99eb96ce36e058f66ef237327821820c86788b11e1fecc7c8d90ab84458956c7","sha512":"03c631222f5f8bc3a8c29cb5a6ae27c8612cf37fe0c462c46452b0607de3ee110a9585cb9d3040734c7c664575d673756e2614b31c3970ce184b9dbf20cada0c","ssdeep":"192:TBDMaBkPmBYL5hjL8lFAsSdFAVVlGc6Z0A2xjucpA:TBvkPmBAZdmNm2e","tlshash":"4632c0011f2c6dd70e134be7435ce90e4d58ce4d6d29594bee019e124ebac8af708ea7","first_seen":"2025-10-09T13:19:13.009285Z","last_seen":"2025-10-09T13:19:13.009285Z","times_seen":1,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/07/fit-little-milf-rides-his-big-cock-until-she-earns-his-big-creampie-4k.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/07/fit-little-milf-rides-his-big-cock-until-she-earns-his-big-creampie-4k.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12986\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:42 GMT\r\nlast-modified: Fri, 18 Aug 2023 21:45:27 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxxpkggVoOLTgSqZHRsg%2BnGH77wgtWFknqMkaG6wDdG%2BgZLL8Bnznt%2BCe%2FqJ5Z3U3LcwgA%2BeLz06MFIBhxgddwZjRobUx%2F1XWlFDmpnqow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e3fbbc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12986,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"319cfbb6769f1b150d752a02874115e2","sha1":"e9040b7ffcec42136ae39934dc62dbd45c989ea1","sha256":"b7ec026155f161452d645de25a8561a7fc5694520ec83417cc5122d9f8ac2b22","sha512":"969f05094234fa07652cf41794cc9597119ddf06668673d3da8ba1c699f1c9c6d0d03acb23687ee6bc60dbd7653f16d73147281ec15a69ba347dc73c4116830f","ssdeep":"384:dlhHIImqcffzSbuNRebT8I0/Mv5461GKJzpZXuexIrduUCIO:T6fzSosTx0W5jjtZXYZPCR","tlshash":"ee42d0360fcec0898639144a3d4cc5ad043f1b31a31913cbf51e556e3a8748ac296f8f","first_seen":"2025-10-09T13:19:13.012039Z","last_seen":"2025-10-09T13:19:13.012039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/cdn-cgi/rum?","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:44.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1022\r\nOrigin: https://amateur-xxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nCookie: cf_clearance=849Kaxk8lScvVGI3pZLfsDxAWI9c7UG2SSXpQLoDSnA-1760015924-1.2.1.1-RECYHcaS_dxPaT1TTzE8vv.dFcipkUzIzBliaWpyZCCZenOQ95u9dMB9xpSHhvumI8Ngjf9u18uOy7a.8AuU19dyZdks16e0yzxVzXGg2F9tSidCxQQgqIDOrIego5aMpMocnEg5GhrKsPaKhJO_dAUyuDI6SC.xOT21C7Htf9YG7S.KWtt_5HIS0RYuJDmGdnOt5T7T4C0Uy.mMvmYWnY.msTGfYY_H0QwuwcShV1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 09 Oct 2025 13:18:44 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://amateur-xxx.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ilNuw4Qry7vB3jk9t9Y3B4pi2SIE3XzG79DSg9eR4BAgtoC8hlgq7vv4DBQcw0xuhnfXhP1zW2nmy0Z9UbBSUazzP4prSQSC%2BPU9kRcSNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 98be2a68098ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/12/nympho-stepsister-cum-twice-on-stepbrothers-cock-amateur-reislin.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/12/nympho-stepsister-cum-twice-on-stepbrothers-cock-amateur-reislin.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4482\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 30 Dec 2022 23:39:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLOC2RzPS8yPJzgyESFRdhGzM6CCjmPaP7rtWIDsQ6P5e2WVA3ZO31pBv8Aj5PMgWXJB7tK2qAu6oeCr23bSnmXlp3Lf8KVATpT9MTmpSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e7887c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4482,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"821e35c3c11398da7df9e4b9e0f77e6e","sha1":"2c16d0761c57e9845a8f811bd2669c46d97de15e","sha256":"94e5fdb6d0b0f597076c5a631a87e014f20c7e251ebe3ea65c60e3867d4e3a33","sha512":"e4ff1bf0b9d050d670f98da3dc02bd1b46ae8ada723f7f4b8fc4d353a076f44905a920edfd81bceadeea84c5ac351a6b58f6d17a008add6086ce749e0ad193b6","ssdeep":"96:cJfG400KWSBQPvXHSlNFDro2iSR/pIENj/cPETAfrlyioAClTdR:cJftSmPfHSlTF/PcPETaBvClRR","tlshash":"94917e4b699450da1c9c5e3608dc2df928c9dbc7369708b49e678ac43283ea5a0a98dd","first_seen":"2025-10-09T13:19:13.01435Z","last_seen":"2025-10-09T13:19:13.01435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 6876\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Sat, 30 Aug 2025 15:03:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YHgYE3qgvU3%2Ba6ZVHfSwlizuBfaI90lSEe687tZ0XL2sfINlL6DCyZ%2BmCH%2Bdz8K6%2Fx0BGFKVudvral8yh%2F4JqifBhZpSUfd%2BDWPC6V4NfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e88a1c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":20430,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20018)","md5":"4cd5ea35543390c5fc4e9def651ab721","sha1":"d360aa74dff157fcefda69336ecf420f04940f98","sha256":"9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17","sha512":"d666a51729862abb8d23b0cca5d5ade738c08df2a23fbabb55be95f2a1fbef60255bda850cb36457e70bb2706067f9cee620169c9166f5e9f29a48af470d4fab","ssdeep":"384:lrKvSC3FheMYNzktJlro8aVfPxodAuyalYleh++PFoAS4TSPE9MfA+0UUTK7:gqC36LkJcjPxodAl8DiPE9/+0UKK7","tlshash":"da9294c5bb053d53e9ff12f64157170ba2368eed050e10289839efc629314b1a6efb69","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-04-04T18:39:50.595142Z","times_seen":4561,"resource_available":true,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.3 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 6416\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:44 GMT\r\nlast-modified: Tue, 15 Jul 2025 22:04:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wAuqQIbsCDDt9smFPru8WZLnnNVb2A422WI4jtYfxlT9vlecFyzKrOUoX7wx2s3UZzIooe05dABq6TBSg%2Bju5RfDcU0Gl2aNzOZA%2Fz%2F3Sg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a64bf85c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T23:30:25.650986Z","times_seen":195867,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 440\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Sat, 30 Aug 2025 15:03:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Q8TSqFeD2FQxNR4Cy%2BAaIExrPT%2Bl9oujf0PTEo0zskJYw4JNnjwIxkAlouNZSwqKFkRd7wNtpOlyQqC6FS0xUrDpkHpBf3i6xeFweIhew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e88bbc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":683,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"75abd4cd8807b312f9f7faeb77ee774b","sha1":"e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7","sha256":"ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034","sha512":"c9f1f752994f1361555680ca5a60339fda152587ccc055db20148c086d82846887dd0801187aa033829b7d5eb9644b9391f493965eee35b4a1592f82cbb36aa4","ssdeep":"","tlshash":"bb01cbb6b30d44b604aa32178d5f61cd297d91e3a829649b8cc909502924c6d23befb8","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-04-04T23:32:44.537644Z","times_seen":10625,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 8317\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Sat, 30 Aug 2025 15:03:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eda%2BKj8Wi5g6Pw2oAOxiTiRTVVZHFQsgB2zHac7%2Bp1UW0%2FozfbFa4PPJYNGi2qanfvnnaKcYOfCrGHzbeg6Wj5jRSCsWmQrqUuHPedLcBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e889ec759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24252,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24063)","md5":"c675495748ef0df6858b93dd9e623c46","sha1":"e1be723e4e25d37282821c50b7e12796d3df5f8d","sha256":"9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271","sha512":"1775ad0e5bc7d3cc9ebdd032b94e440a0872f616f983ff867511984daba748ed52e1de5c67f0e4648947bef65b499b3a6197ff7726cf1f481b7d4253b6711127","ssdeep":"384:nudkTa6bYaGQZKbZi1X5U59g+rzyPSS1SMVu8r2WiWQK7XYANWck6QDhC2k+0CMu:uv9gPSSbs8PwhCK0CMl+ArJwz","tlshash":"e6b2b609b13939be05f632baf25ecb0550f6448d9827f0f4a8b5c94ddad88d4102fbe6","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-04-04T17:45:05.542478Z","times_seen":3793,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/12/busty-college-girl-fucked-with-her-hands-tied-behind-her-back.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/12/busty-college-girl-fucked-with-her-hands-tied-behind-her-back.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6150\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 30 Dec 2022 23:32:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FtTfi0zJDqVleKlr9Tdc24exrLVGkOZzR1KH3FuPLp0p3H7SXDap5NskGKqDnRFeSGtq0JG%2Fn40QznCHn9o7Xlu9YK6Ys%2BrOW85oflf9GQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e785fc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6150,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5dea4f9635b19238bb2fd2979296dcf7","sha1":"fd01ee52dc7dcf1112ea740ae54c2a58350c5aa2","sha256":"ad3a3dc87dfafc3e83fa1920f96035f5712df507a1055bf979c0f2b0f34dc262","sha512":"f1d00d75cd1722e3699db108f2250deee7920b24047800dac7e97f8d44461efe708f3064768fc135f3120dce11ac4829077fd6a9a0c27c88a7ed1b7ff995ee41","ssdeep":"96:tubcXQXk0hehZ72plOsZXR5UCIA6I474ZkKxdFz/3JApSIVu7nR0wT:AwXAkGQXOR5Jn6IFZkovDWVCCs","tlshash":"44c18efcf795264a0f90838a975b672bd55d62f458614090f4c3c5397a942b82cdc076","first_seen":"2025-10-09T13:19:13.022666Z","last_seen":"2025-10-09T13:19:13.022666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/07/natural-young-blonde-takes-risky-creampie-nikkierae.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/07/natural-young-blonde-takes-risky-creampie-nikkierae.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6852\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 18 Aug 2023 21:50:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1GgV1v8L6zX%2BOkDzPxVpFrUNAPBrw0VM7PpA1h%2FzeVjRadba31Y0EjVrtQSXMl%2BQ0GPU6i21vZ9asSQEsd8kxZZK%2FFJQWdGnliR9mlgT7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e5ff3c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ec44edf8cd26543072837188d0f578db","sha1":"9db200115a02ebdc8649279b8435af58361f5308","sha256":"a7103e694fbcb891ad2f33f48a36e54a00140626cdf10ad0a489b920401550a7","sha512":"8d8052d862338f85ac2a1a51df5990bc96d6095c690c33357707c961e99e7772c19f882950a87cd2849d9788e92142a39310d33fad4e556054ec4b8242bd6436","ssdeep":"192:M2XZH1H9svLWXPicAjd2mkvfdr/E0OjkhGa45K08:LH1dsaXPicAhcoW058","tlshash":"92e1aebd6b035c90ef4e663f5ee417d3062e4806a3dc1f521bf6c122e2fa84540a471e","first_seen":"2025-10-09T13:19:13.025488Z","last_seen":"2025-10-09T13:19:13.025488Z","times_seen":1,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/12/delicious-massive-cum-kissing-sharing-husbands-cock-with-girlfriend.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/12/delicious-massive-cum-kissing-sharing-husbands-cock-with-girlfriend.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6844\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 30 Dec 2022 23:47:45 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HpQW1yp2fVS8bpXvEvwpIuAV%2BxIK9CfolTubVcAx4RSwozcPKvtodDa62boWeZF4ZMb3nn8ZCF9fReivDx%2B4MQ3APr%2FUbYHURrSxWIaeYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e6824c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"163379f1db0203c9251a4e15b524a057","sha1":"66e5ce7641b3e06eeac094c014f56add6763b7f5","sha256":"3112b8d7f56dfca5faf4f42107a67fd7ee9115f430a3c0d86d1bb2166d82bd48","sha512":"eb197f6e1e2d82cd6f83ef7a1783f1da6874e7e85a252f39c2caeaed1508a4ff03262071a6b78c86de4d4407b5d064c792a6720435672b4a90c44de2bbbcfdd8","ssdeep":"192:3Pj53NgM312hQ1JKVX7ySu33pL7vWc1Xgs0C:3PLzUhQ1JKIhzWUQsT","tlshash":"66e1bf078effde42d14009081f1681e2804f75c17ce17e3f9e6160c58c6899a9f7b4ae","first_seen":"2025-10-09T13:19:13.028428Z","last_seen":"2025-10-09T13:19:13.028428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2024/03/test-rx-56.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2024/03/test-rx-56.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22312\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Thu, 28 Mar 2024 16:46:16 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76nIDJ0dsb7kd3j8IeMxriW4BBRiuW3%2FHHf%2FmzKqn0PZWV2YyCwKT8EW983zWzzEH88bH0O%2BXZimMPSdw7m1otju9iYSQAstHlH4%2B24A%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e685cc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22312,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"62007276d6feebc805ba048e124f2a26","sha1":"1dbceaa1791cca1453c4605b472d2c78e41effcb","sha256":"293e3e176b8ff253c52d41e7760e5f2990ddfa68ef8a27a06627ba7af312281c","sha512":"447c60523071a5d0ca4ee2e042b932ad94fcdc41e3a00b6ab4da42af8edf2fe6468eada8573c6af0b8437ad0ebf698175dc58cc0fedfc966cf2887a1cf3a87ab","ssdeep":"384:SPReH9uhHWr6Paisuq21KzrMrSF8pRZulSuLXAI/iBzWl5a7kAslHISD/fuab4:0eUhHW+PaisupcrMrSFg4JA2iNiaJKHQ","tlshash":"9da2c11d901536ad23c9bca33f605f29775bc1b7533aea6b89db11e42ef7a221270030","first_seen":"2025-10-09T13:19:13.030959Z","last_seen":"2025-10-09T13:19:13.030959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":750,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/plugins/wps-disclaimer/public/assets/js/disclaimer.js?ver=1.3.0","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-content/plugins/wps-disclaimer/public/assets/js/disclaimer.js?ver=1.3.0 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 1555\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Tue, 01 Apr 2025 14:57:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MKbr1fRRh92c8LXD6akbbHnH3aJqjU%2FgouySgO00Iwt55Kab4kccRZpGgNNCymL0eHyVSS6GgA79ajdGHkZY3Yobhpw9ZxCLTgR63To21w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e98d4c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4650,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"bf3e3a5812d68371f4754d6c6dc9bb66","sha1":"ee15494eab31dfa4a09a9f6d055650508f4d5dea","sha256":"fbbaf2eca3f945c4a946db4d8b37be68768f95fbdd514b2c85c64ea928b30cd1","sha512":"d220d3724577f65aebc024786638f8a07cd8bcdaacbafa6c3d2d750f90e9c69b5cf88b5434aa296ce8a18d02f843928713bae924a4dd9c4e92fc289212762598","ssdeep":"96:Cnj1zm+DmCVo4JdHrlDtlUXZlilU+lSldlrlxlClwCdEu9dYR2+XQDjJ3aWaNgU2:ejxm+DmCVo4JdHrlDtl0ZliljlSldlrU","tlshash":"cba1ff2d98b894c5933fa92ef7ff764530210213a52aad47b5edd28d0fd012285a12f3","first_seen":"2024-08-13T02:04:39Z","last_seen":"2026-04-04T04:16:40.117728Z","times_seen":136,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/02/blonde-college-gf-squirts-from-reverse-cowgirl-anal-on-the-couch-homemade-amateur.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/02/blonde-college-gf-squirts-from-reverse-cowgirl-anal-on-the-couch-homemade-amateur.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4452\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 18 Aug 2023 21:42:27 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDYlJ13ZKom%2BlTqsrUsgT2YGtPYKnYF2v8TB0DYVz9ngbQHJ73PBFgyHYGU323jMphEAi9iyjnNDjisqZqBcpzyPdD6JN8TujcKfTltaxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4ff1c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4452,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3495fe0c306069f788853609b0fb4358","sha1":"77c1d077ff2253c6ad42202cfb68e24b224dcd24","sha256":"98707434348f3ca6636fa21ffa2a6015b25a0cf1d2623ad5d6a6e54c9a670836","sha512":"3a9dd83722d1c887be0a51fc4f62da0209398eac127251e967ce935f5968341cd3467383c67f277366b1853de3beb90a8f6ff817945c4dbd10ae72b2292b40fb","ssdeep":"96:BcVykPM2tBlVVa3cCGD6QVtZQK17q7Inik4nO1W/4RLZQXfaLeMCnq:BcVy8cNG+2zQK127IninOK4fQvq","tlshash":"6d917d2eb4d1b531bfef4a049466e29db4e0f1a796011d0b4c7a89718bfec602219725","first_seen":"2025-10-09T13:19:13.034633Z","last_seen":"2025-10-09T13:19:13.034633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/12/let-me-play-rdr2-boy-creampie-1.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/12/let-me-play-rdr2-boy-creampie-1.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10652\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Sat, 31 Dec 2022 00:28:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEogiSpZW%2B3vOL0uPe0ovWg0cVM%2FFO5OflfNwBbLsY7HBMmS3%2B2Oi3LOm6zZxMsJfgC%2FUk10Pg5R4URVVTCAk19lwvPCVd0GcCbRFSw1fA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e682ac759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10652,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c1f7c1cdd907e94ce229ea77440d714d","sha1":"dd8e53511f75f8baa499cea5965eca1ea7d95a1d","sha256":"c9daecf390c8134ce53c1340edb1a8c7530811a04d9526c38b827e54e3bb5b9f","sha512":"5abce6f224a05555807430980a1f2f981a23362b1467b2fadfca498e24422a68f2a0b2f03d25dbcacf32c77df0ee4e7316669a4412a67d589bc825e5705d8390","ssdeep":"192:M71Jqb5I/D1nrq8IIrkTn4+ZheyKFTAoHXvvh44fuy+L49ty6C8rMGpmKCoIKk6a:MwI71q8IIrK4YeyKCoH367yGWtyTYMGI","tlshash":"ee22cf970c802ae0f1a567e948242711d953ad7aeb05ddcd8e8982e20dd738f5a95c1e","first_seen":"2025-10-09T13:19:13.037497Z","last_seen":"2025-10-09T13:19:13.037497Z","times_seen":1,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/1f631.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:44.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 19:44:40 GMT","end":"Tue, 25 Nov 2025 19:44:39 GMT"},"fingerprint":{"sha1":"1F:8D:28:3F:BE:E3:7F:80:0F:AA:45:06:98:87:1D:E9:CA:E1:11:4F","sha256":"AD:CC:CD:64:B6:6F:C9:5B:27:CA:75:DA:4D:1D:57:41:30:6E:12:A2:0D:2E:E8:69:49:40:DD:EE:56:9E:7F:9E"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/1f631.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 09 Oct 2025 13:18:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 06 May 2025 00:25:36 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 2\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1577,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"81195a9847a459acbb2b680a70357728","sha1":"2f595d0dc29979364bc7b3ea943c5718f6c04c5b","sha256":"c050671286ff22d29215d2ecf081a85337b164bdc007e6d342b47f39ef11a339","sha512":"fd6851140cf71671f92ecde7e2e226a9f3d2a95f7b792a12c9ae45064faba5263186be91ec7a2fc8c68c9a75d06a54fd3e5fd885a62eff5e506661f9646fcf06","ssdeep":"","tlshash":"963120da833812cc1acbaf29afbc64c51157e0be19a5c9d4c3b9912068c7acdf801d08","first_seen":"2023-04-16T02:00:30Z","last_seen":"2026-04-04T23:32:15.119547Z","times_seen":423,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":30,"dns":1,"connect":8,"send":0,"wait":7,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/01/tight-young-pussy-grips-dick-and-makes-him-cum-way-too-fast.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/01/tight-young-pussy-grips-dick-and-makes-him-cum-way-too-fast.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2976\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Mon, 31 Jul 2023 05:45:37 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtR2rw%2F9sdsQfXGI6CTIjJLIQFFDeWBubJjHlS7vs4K1EA00Y%2BqKW6YUv5F4%2FmC4PjeBskcUjk13bILwTqQrz7xMp%2BSIqrXc99gLDqhvgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fdec759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2976,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"358da1c1958fb72e09ac0708f645f919","sha1":"5b7cdae852b4b043f1a49b1bc23def1b423b013f","sha256":"5fd70dd2f2847f842d6fe423515e58c56b72c1c0805bc97e3a7e8fc24056381e","sha512":"84c5c37e0cae46f4058469b3889021f4a3ab22cfd60981f7cd499994901a805d5babe7a9e683aeb3382ad5e0d06d5fe481b75623b8735aadd31d9bca8dba1091","ssdeep":"","tlshash":"d7512aea4b22b74470912d4b0e34e80ed2b57f9b2cb7e6e6dd9433180660104cf4c78d","first_seen":"2025-10-09T13:19:13.041102Z","last_seen":"2025-10-09T13:19:13.041102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 5793\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Tue, 08 Aug 2023 22:04:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kkNXy1F1P0DNQYy3TeXYvneYqFNArLTq6ss6DredVpAO1sQhM4nZ2w8pJrfHv3HnEtzLaWZfKBKKwkA16SrOeThhT1bNO%2BGVZq0HoMJlDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e3fb7c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T23:47:15.857846Z","times_seen":639628,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amateur-xxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98be2a5f387921fe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T23:35:10.569211Z","times_seen":330273,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":40,"dns":0,"connect":1,"send":0,"wait":16,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/12/she-wants-to-do-porn-to-learn-about-sex.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/12/she-wants-to-do-porn-to-learn-about-sex.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9710\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 30 Dec 2022 23:38:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i4obZt5lmT6%2B2hScWrFPPMhhTP4B%2BEHKGATdLy3wplxMpwgrsnWLRZJNWwX1a7lKtc6Hz%2FtI1snzbH9unU9WbC0ADE2t0HcVqwa2ooSISA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fcbc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5bd3fc29114d206e2d4508192894955e","sha1":"7a068f37124aaa17f1c0014adf368d5b822f4357","sha256":"ca859a78b3ac6f3598fb985d94b9d5036431f2907930d962dd5d54bbb8a434ea","sha512":"e0d9d4d1000dfb6d82cf9c47800f8bd088d02cafae37f105be8a1d9b4c9e123c40add846baed667f437c4ccc7734997be38b0bd9f709db87c0f0e7580fbe886f","ssdeep":"192:fo6C9R+fXTNwN2/X3cR1ZkSkU/1pN0JuzCYj2NGQWuMq0/vywHaXvyOWmGFd:wL9AfDNwA/nKZ5/FzZj2N1WuK/awHaXC","tlshash":"d612af9d4d503ece08cea744e56bbeb3669508a82d049faeebc06c725cc970345257fd","first_seen":"2025-10-09T13:19:13.045236Z","last_seen":"2025-10-09T13:19:13.045236Z","times_seen":1,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/01/blonde-college-freshman-cums-twice.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/01/blonde-college-freshman-cums-twice.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2992\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Mon, 31 Jul 2023 05:50:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GUgG6UZOVJ%2B908XY16fkBVctvFRI5ZHhJWkjneSIICYONowpVmOJs4ckDArm2doIPTM%2FZg0yXedO9sV16g6hFjaVkM5kI7oaiIsCKtZiKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fe2c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"db58f073e1d0a098ff14175ef01f1618","sha1":"8f6831dd60e678c9f403a7de7d0bfac65d3bda7c","sha256":"44eea1ab3a5df66e8a238a9f513a0353e68213c5df6b0ab1859190d95d459d92","sha512":"2f92cb004ff05ffddd8a4088e31ca14dcb0cadc11168fb21b23db681cd0cbba154ce4533e07d3944ca6558f47a9870c293be7699585655814c34bc91a143ba5a","ssdeep":"","tlshash":"94516dbf8811e6906c703954b02e99cc055674f9c5cebf9a3c89b61a271ed4bca42cd7","first_seen":"2025-10-09T13:19:13.048187Z","last_seen":"2025-10-09T13:19:13.048187Z","times_seen":1,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2024/03/semenax-31.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2024/03/semenax-31.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22804\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Thu, 28 Mar 2024 16:36:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjmyJvDUCiUwR%2BMjo4KlluM7uxdPaWaiLiT8GfM8kCMYwWY7rkfm8ggp4AMo3DQluF6lRAcEpAWjdB2H0y85BYZAaLvXrsnQp0AK%2BY%2BAgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e684ec759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22804,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d0655240e788bbf2f466bcb3bb56b2a","sha1":"14787531737227b77ffa4c7865246dafd7bd5c40","sha256":"9d12cb8110e48825789bc113bcd06d4383efae0f97ad6631afcb85a7fd3a28bc","sha512":"c308a3efed46fda71b905cd97c2ce2c8e2f612ff560188d53467aa3208e9d6bc11631b9f89bfdcd25beee6f6c8470b7bfb8e54b68a58e3bb6216f044527f40e4","ssdeep":"384:O9uQjMXb+3/T/D8rT4bb+D/FwgguE7LhzkUskYOCwOrQWvLjcWoBwJ:8uQwLo/E4bb+D/F4fdaO3OrQiLNoBk","tlshash":"4fa2d1859b0463e2dffca78ac9188d27d28f2a800a45baf4d08cef557332a1d1b557dd","first_seen":"2025-10-09T13:19:13.050711Z","last_seen":"2025-10-09T13:19:13.050711Z","times_seen":1,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 1735\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Sat, 30 Aug 2025 15:03:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oiIu%2F34ymcVMoZGK3ULMmZPD7lbSEfx1jtpZESpHl5zigK3jJyMHliXVHh7CjLuwUuqkdw7QDHQBgIjtKCYLke%2ByKde7A46fODEnwaHB4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e789ac759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4500,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"eca10535dd65f4979e3b3ad3ec8e02c2","sha1":"54c38c3bf24825e407741ef0e316f678a5b580db","sha256":"802bc6725fd37d15aa9d599fa3f921fca0d4c585162c7b23da8ccd6f3ded751d","sha512":"680521331d53bb6b47390979cbb907f78607dc713d99405ea8664d401b8e9e3106bca7111c1142d8abb4a5d71a7957998ada61407432f084648bba32ed8e1d27","ssdeep":"96:wqduIPMiXjA1L1AWeyQqECAvBvRgY31rr/qBvHsMTFsPFxLdY0fdKI:wktP/W1Henqxy1R31/iRHsIFiFPBkI","tlshash":"7c91318aff88217b71b7326a697f61ed373844339a085c22f874d1a03d9446406bafdd","first_seen":"2023-03-07T01:26:46Z","last_seen":"2026-04-04T18:39:50.616653Z","times_seen":3517,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/01/amazing-shes-cummin-all-over-my-dick-using-her-cum-as-lube.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/01/amazing-shes-cummin-all-over-my-dick-using-her-cum-as-lube.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3338\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Mon, 31 Jul 2023 05:47:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PoRrnVOrV5ryBugS%2FctTlPTpte88ZWWvkZ8%2FLNiCLkQQv8wCft2seMVdMpMCjScx6HUYbFu%2BF5t70837m%2Bo6J4mjmrdT3CqlyNEM%2FmwNVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fe1c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3338,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b7cee0c3d3a92dab40a9cf0e8a3031b3","sha1":"213d22df420b9a1bd1af261bf99fd0f4018e733e","sha256":"ee1b28b225d5b08400bb351d71c606874976ff12355bbf1b97e3ce5e53693519","sha512":"ab2d38a78f08ccac2f7e55d53a1ae2decb22c517fa92f33b2930e3591b7c4690c6fd02b4e2fb801e8454ca33e8672aa4c85b17b642ca4c61debefc148ab19822","ssdeep":"","tlshash":"be616bd94e9a808a4ff08912af072bb26c0534084b21dfa6882614b0e15d175cf2e8bb","first_seen":"2025-10-09T13:19:13.054265Z","last_seen":"2025-10-09T13:19:13.054265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2025/02/bwc-deepthroat-and-cum-swallow.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2025/02/bwc-deepthroat-and-cum-swallow.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14883\r\ncache-control: public, max-age=10368000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Tue, 18 Feb 2025 15:37:07 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8Av%2B8S0xSb61PSkTfztxThqrF3F7OGAd%2FeZ5wNXm11sQ%2BZLn9bw4jW7s53%2FeYjGaiub21gNTdmTsMsPkaf2nllX%2FsauN7WoT%2Fwwu5NYhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e5802c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14883,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"355ce4cf9d808ee0528f0ad57d138af7","sha1":"150fbca985ecb38087b3681cc4556904e8c63280","sha256":"7470b439e15c5428622334dc180265de70523d0bea71cdfb17386e374e0ec12d","sha512":"df7549a824a346a709e05d43a2d3fbe4b67c5332376cb9d6db1f7e91282e5e31a07abbb61beccbab9521f803d84803763e5e114812e2675f222a50bf25962421","ssdeep":"384:os47Y2dMT/uOtwobmACreO6UaFIC/LWAZSHgidJmCr:2PMDtXXRnUaiOYH0U","tlshash":"f962c062c7a5a0c2f4a55d7848390fd366e982c4bab3183144f6f39902702358afef56","first_seen":"2025-10-09T13:19:13.056784Z","last_seen":"2025-10-09T13:19:13.056784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/12/student-girl-suck-my-big-cock.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/12/student-girl-suck-my-big-cock.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6992\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 30 Dec 2022 23:06:55 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9n0PDCl8mogmbUY2gvS971pFoGJRCMHVyV04vplojWBVbxxmcuoqfJN9WCXePZXkTpVo83l5oMIw6u0VVEQi5LEl7vhg2uL%2BURVnoJBqKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e580dc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a61bbfadacf4e3cf12b1ae76362b3f32","sha1":"a4eb10088126520fec4f5de23ca1bab4b4ad5c3b","sha256":"079912f201c9421d2ca24f1aa312e5c8ba2272168f102f78952b26cd1e5a5a7f","sha512":"d4ad734d2c5e071c7cd8f8846e72fd2026e48470d6370741bb6f67a0dacdce4b1b2b659d5be7066ed9f623c776de56a518b7f19700772b4912f2105d15fe2d8b","ssdeep":"192:ZI0Wuk0qzLW+VH4XdrjMoIp4zuXM9SoNHYka:Zkuk0aLW+VcAzp4CXM9So9a","tlshash":"5ee19d2c4409ba489c8bb585da0c166b346fb24e9ce2d7f73830ce794e542f73e1846c","first_seen":"2025-10-09T13:19:13.05942Z","last_seen":"2025-10-09T13:19:13.05942Z","times_seen":1,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/12/every-cuckold-dreams-about-it-f09f98b1-but-he-wont-tell-his-wife-the-truth.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/12/every-cuckold-dreams-about-it-f09f98b1-but-he-wont-tell-his-wife-the-truth.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9418\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Fri, 30 Dec 2022 23:41:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DpMu6zoSMRYV9UFZ5Pip9XXpMHddAEnNFdwCvTd6LkQSWcvOy%2BeBCzwKLqnZk0ows2J0lHWy%2BRT%2BqzLgYDiFLj932BBh4cMNcCqd8h2Vug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e6820c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"20d26303339a173aa348d7327b9e29b9","sha1":"17d092f332389d2ec46a0766a3533f2b914869bd","sha256":"78c6847fd9ba61cc7ace48ba41369d152b2401ae1600449b5eb399c2921dea38","sha512":"55dbd8905983d0d1f278a8555912c5aff30c0834954ff25b6c4e7050b438a716aa8dff15ed6c85d67f64c726312b209327a85b5a489c450bd66a632283107796","ssdeep":"192:j0jzM40gNR+FQK6q20p2FRuKSQnXXY9/OxBao0Ub1raxQBnBQ5:j0vM40gNR+yZq2BbJXI9/U75a2rQ5","tlshash":"be12af7f59d06e53313983c25999b243c253d06ce82126e0c3743976dcefa48d897a7b","first_seen":"2025-10-09T13:19:13.061991Z","last_seen":"2025-10-09T13:19:13.061991Z","times_seen":1,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2023/01/hot-roomates-cant-stop-fucking.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2023/01/hot-roomates-cant-stop-fucking.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2468\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Thu, 10 Aug 2023 22:17:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yj5x%2FFDbdEEusAyX8zk%2BeVwvpU%2BQjOyKqjEdbaLgJsIRS9nONrQVgLRpQHCyiu7len9Kc2C6p4TrqYe7p3qI4ufB1FTDLHxPhir6mtIV5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e4fedc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f9a1707d74cbf66f77f133aeb8d20ec7","sha1":"e8eb70a2ed04de687713a1997e266410841aaca8","sha256":"02e9234f3d4fa73ff3119aef52ed32aa10afefa086ccde52fab49fa49ea21478","sha512":"084cb4b98c9f75344756b99f2b96bb9d3367107b32c76565ddbeb179ac25d23ddfbb60f2732df08fcec4e079a4e76ba6ee1bb0973b61c847bd1d051e1d2d49da","ssdeep":"","tlshash":"57516f305202c65ef3cdcedcfbce4ecea2d809982c55575164559650b908888dcf38f3","first_seen":"2025-10-09T13:19:13.06445Z","last_seen":"2025-10-09T13:19:13.06445Z","times_seen":1,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/pictures/2022/12/how-to-suck-cock-the-right-way-better-oral-sex-in-10-steps-guide-part-2.jpg","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /pictures/2022/12/how-to-suck-cock-the-right-way-better-oral-sex-in-10-steps-guide-part-2.jpg HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11294\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 06 Feb 2026 13:18:43 GMT\r\nlast-modified: Sat, 31 Dec 2022 00:09:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XWexv%2BSrMYyMHIJ%2BLsOZfBkp%2FstuE6bfx2nAyHm26YfGv0DjfbEBSOvojcREqHHphB%2FWmPmRH3SB4MvWEHBq4p5T%2BZoUhYtj8DbkDT2AxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e682fc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11294,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fb6aa144ebce24dc108ec75b2739a0f3","sha1":"9e330f0b32a7e92f2d310f8547c792658948e18d","sha256":"2792cd463af4a4ef20570a6d65596015a83b8dc4b7f39fba88171ac29ce7850a","sha512":"032774fcb561312f822b83ff7b6fc52c9b57741d2c90f001093d57fb49df5a84b65aa151939a1602ba6da23c269cd5c9c44ad34c344451140e783308b2de5a3a","ssdeep":"192:ZRL8uySkDLm0v+FUX3Nhc/0SWtuflSm6SdiMhygQ2GHAtNRYxb+mjnjzcrzw/eZe:ZO5D/+FF/3WtutqOFQVYfUbpncrUYe","tlshash":"9732cf07c8bf55b15cc02e0546066bb0bf19236ca9bedd8281a3756ba1bac086f50b8c","first_seen":"2025-10-09T13:19:13.066579Z","last_seen":"2025-10-09T13:19:13.066579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/plugins/wps-disclaimer/public/assets/css/disclaimer.css?ver=1.3.0","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:42.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-content/plugins/wps-disclaimer/public/assets/css/disclaimer.css?ver=1.3.0 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-length: 1176\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Tue, 01 Apr 2025 14:57:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bi%2B2krRGTRU8h%2Bw513BUQsQ5WzjlKRlLBFeyCVr5DIXn2JUXN1voerhh80J2RK%2FthgPv9%2FFucW68C3c%2B6vBHSZQMRyR6growvmMZA4cwLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e3fb0c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3225,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"4eaa4a1a7fd1b16af42715672c0409d2","sha1":"7c736a180a8d8777609a9180ba1320610869e474","sha256":"d348a1e31aae25a763bbe7300efbf14dc58928dddabaa32febd37984d2ecc67c","sha512":"e7ffa9cbb8fdcf147b461838830aaa54beff41a72838a47c10c998e7e8b701c724097c93aaedb7a888662c7c2ab35c5068a1d184ae5b5aff2e9c4d8d2db90632","ssdeep":"","tlshash":"c861e03b6f985488a20ec5643bedff81191a4113972b7ceb64e5e52c93c636400f379b","first_seen":"2023-05-01T19:36:38Z","last_seen":"2026-04-04T11:43:31.541783Z","times_seen":159,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amateur-xxx.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.10.2.1756566223","fqdn":"amateur-xxx.com","domain":"amateur-xxx.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amateur-xxx.com/","date":"2025-10-09T13:18:43.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateur-xxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 01:53:14 GMT","end":"Wed, 26 Nov 2025 02:51:40 GMT"},"fingerprint":{"sha1":"DE:70:1F:E3:50:F1:76:F5:C3:E9:AC:DB:C8:24:8B:55:1C:4A:CC:E6","sha256":"B7:68:EC:DE:33:77:94:0B:B8:E9:47:4D:9F:24:4F:87:31:1E:A6:2C:AE:CA:E9:51:79:AC:A4:1A:04:14:57:50"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/main.js?ver=1.10.2.1756566223 HTTP/1.1\r\nHost: amateur-xxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amateur-xxx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 13:18:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 13426\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 09 Oct 2026 13:18:43 GMT\r\nlast-modified: Sat, 30 Aug 2025 15:03:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EidZ6fIc8qx5JBIaaspshVZGMo9OgnMRaD6L3R3gdFgg4ws52fE9yUWJh24LpamETEprFkbr1e7LmSFRETNDx2K5yFZuER668CoXQadlIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98be2a5e88b1c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36394,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"62479648a67b52a1f395970c883fdd50","sha1":"fb9b2468304ef42eecd402a8a935877ca61a9f35","sha256":"5e5bf8c461e32fca94beaf4df1cb8064e06d9702184807936464a163ca82e2e0","sha512":"3393648937cf923b85076b9668d4e49cddfaa4c72d44bcf1fc0dd58dd87720dcf6ebab044d60c8c95b2e47924f3ea361ff273267c7015134d768598580860c9f","ssdeep":"384:pnujdbo6UazbyFx4QsbatrEOFxnIfYatSyDZD9Vk2ly6oUv:puRbo7azbyFx5NtrEYnIwsnD19VkW/oO","tlshash":"2af29489f77d2546867a30da6c6f16cd313d1236a842086fbc2896e428e4b3c7396d3d","first_seen":"2025-08-28T06:46:38.264936Z","last_seen":"2026-04-04T12:49:15.210683Z","times_seen":1270,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"amateur-xxx.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}