{"report_id":"b433a40e-d594-4a8a-845d-750cea2c333f","version":6,"status":"done","tags":[],"date":"2026-02-06T10:51:35Z","url":{"schema":"https","addr":"casibom.icu","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"casibom.icu/","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"title":"Casibom - Most Popular Betting, Casino \u0026 Porn Site","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"casibom.icu","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-13T10:51:35Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-06T10:51:12Z","timestamp":1770375072,"ip_dst":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":48574,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-02-06T10:51:12.044974+0000\",\"flow_id\":530972976124389,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":48574,\"dest_ip\":\"172.67.184.48\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"casibom.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":913,\"bytes_toclient\":3519,\"start\":\"2026-02-06T10:51:12.037349+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"aa.pornvideotop.com","ip":{"addr":"185.73.221.189","port":443,"asn":32338,"as":"HOSTISERVER","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-07-22","domain_rank":0,"first_seen":"2018-08-28T21:26:39Z","last_seen":"2026-02-06T08:45:19.67343Z","alert_count":0,"request_count":4,"received_data":612,"sent_data":2112,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2026-02-05T02:39:29.126229Z","alert_count":8,"request_count":8,"received_data":24208,"sent_data":5516,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tdska.cfd","ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-19","domain_rank":504966,"first_seen":"2025-03-03T19:24:50.394619Z","last_seen":"2026-02-06T08:45:19.593067Z","alert_count":0,"request_count":8,"received_data":121818,"sent_data":3808,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"casibom.icu","ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-04T08:13:20.786783Z","last_seen":"2026-02-04T08:13:20.786783Z","alert_count":0,"request_count":8,"received_data":294190,"sent_data":3784,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]}]},{"fqdn":"thumbs1.casibom.icu","ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-04T08:13:20.790899Z","last_seen":"2026-02-04T08:13:20.790899Z","alert_count":0,"request_count":81,"received_data":1491817,"sent_data":41090,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.pemsrv.com","ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":104334,"first_seen":"2023-08-04T13:10:46Z","last_seen":"2026-02-04T16:02:41.690599Z","alert_count":0,"request_count":1,"received_data":251,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.magsrv.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":51490,"first_seen":"2023-08-04T16:18:00Z","last_seen":"2026-02-04T18:09:25.401815Z","alert_count":8,"request_count":4,"received_data":747720,"sent_data":1588,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"s3t3d2y1.afcdn.net","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2022-06-27","domain_rank":0,"first_seen":"2025-11-21T12:51:16.33547Z","last_seen":"2026-01-31T02:16:20.878182Z","alert_count":14,"request_count":14,"received_data":9528535,"sent_data":6967,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"a.pemsrv.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":181476,"first_seen":"2023-08-05T12:08:36Z","last_seen":"2026-01-31T00:34:46.07326Z","alert_count":0,"request_count":1,"received_data":122957,"sent_data":400,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"casibom.icu/","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f4f87e368f94555357d00f9b7e8ed4c","sha1":"db0173149e571a755cef6a33bb0063382f1b1ba9","sha256":"f997368baa677bfcf69257707de671a58de76eee3cf27855226cc417ec78dad8","sha512":"c99aaf4acc8b400f38f613df5373af1ee8c03a0b51ff5486bff9c2229d600506a00e9292ce6903a830108e5819b4d84509c8792e39d42df9c628110d70169c59","ssdeep":"","tlshash":"2d8004d535c3500447d3115400571cd45034c57115444d404054dc511d55034711545c","size":37,"data":"","first_seen":"2023-08-05T22:12:59Z","last_seen":"2026-04-03T07:01:45.768994Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=25","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31f744bf196a2342492abc93e518de84","sha1":"9da4ae95f8655e47752e6920135e57606b573f11","sha256":"642e045d13b78b96abdf2376df60de5659dbdee05bf132bf91ed7baa88edf1e9","sha512":"b5452e67c7c8b39f5295ce78897ce378f9525dfe8c393543b3aac1f3ba9083a1e21efd2dde5bf7d13cf59f1d77125acd3c55673c81a32e446282d5f635ffa45c","ssdeep":"","tlshash":"ab9002352043829d402908506b521d08ed548466d110615612870074e0d7d875c010df","size":51,"data":"","first_seen":"2023-03-11T16:21:40Z","last_seen":"2026-04-03T19:31:20.786276Z","times_seen":481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=27","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31f744bf196a2342492abc93e518de84","sha1":"9da4ae95f8655e47752e6920135e57606b573f11","sha256":"642e045d13b78b96abdf2376df60de5659dbdee05bf132bf91ed7baa88edf1e9","sha512":"b5452e67c7c8b39f5295ce78897ce378f9525dfe8c393543b3aac1f3ba9083a1e21efd2dde5bf7d13cf59f1d77125acd3c55673c81a32e446282d5f635ffa45c","ssdeep":"","tlshash":"ab9002352043829d402908506b521d08ed548466d110615612870074e0d7d875c010df","size":51,"data":"","first_seen":"2023-03-11T16:21:40Z","last_seen":"2026-04-03T19:31:20.786276Z","times_seen":481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=49","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-03T19:37:19.161198Z","times_seen":11590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=25","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-03T19:37:19.161198Z","times_seen":11590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casibom.icu/main.js?v=35551","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdffa49621923905c35356f5a00f7d28","sha1":"d623864e1137edd6c355528c747accb21bd7e637","sha256":"b2ce64dda42d89d7bfb20041dca08f76bdc2436a580b9d63b98116d1e9f4b8fa","sha512":"c10e1060c786146bed9c286771fc0591ebc4a16ad0b556306914552c294e25c2b2f613a023fe2743bbf6bf4e629ade1f84a1946db3ce6a9922917c7d508ef4c1","ssdeep":"384:lB5SZknG9LvsCPT+KVTdvPjZqrNDD0qyH4ArzyqjoNeHVGyWbThU0LzR5PhevfaJ:lyiGpvsCPT+edvPjZoDD0bH4Ar2khWbt","tlshash":"19a20ab4332479b346ee92fbe0bf9b84f171219994058054a439dcd93a38e8612b7fb5","size":22954,"data":"","first_seen":"2025-12-21T05:35:43.471571Z","last_seen":"2026-03-22T20:52:31.858668Z","times_seen":276,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/dd/WsnBaLXORD.js","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9253997ad088b6fb84712b33d6440312","sha1":"782b916dd47bedbaee7c2313caf07028380d7375","sha256":"e47142b1e847b928bafe231b4c3283fecb41d19792fa1670c8d3b71ba8d75c1f","sha512":"1d8440a8052f26c110e50a83f84ad4e8880983a634a5219f259bdbe2a288b04926cf7c49d761157a9c659aff6a7c1e62bf7c5f46d256200e34e8ceacd609ae6c","ssdeep":"384:sDxlmqkaByOb0MMDgneElUUf8CBbghiYXpZRWotaO7cuifS:GlmqQMMIeEuUf8CBKpZRJtaO7c/K","tlshash":"15c2638d5df360649167707c6fafb6083170d0233249cd20bd4c9ba89f98d6989b5fda","size":27987,"data":"","first_seen":"2023-03-13T02:53:30Z","last_seen":"2026-03-15T08:05:23.499538Z","times_seen":361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/dd/WsnBaLXORD.js","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9253997ad088b6fb84712b33d6440312","sha1":"782b916dd47bedbaee7c2313caf07028380d7375","sha256":"e47142b1e847b928bafe231b4c3283fecb41d19792fa1670c8d3b71ba8d75c1f","sha512":"1d8440a8052f26c110e50a83f84ad4e8880983a634a5219f259bdbe2a288b04926cf7c49d761157a9c659aff6a7c1e62bf7c5f46d256200e34e8ceacd609ae6c","ssdeep":"384:sDxlmqkaByOb0MMDgneElUUf8CBbghiYXpZRWotaO7cuifS:GlmqQMMIeEuUf8CBKpZRJtaO7c/K","tlshash":"15c2638d5df360649167707c6fafb6083170d0233249cd20bd4c9ba89f98d6989b5fda","size":27987,"data":"","first_seen":"2023-03-13T02:53:30Z","last_seen":"2026-03-15T08:05:23.499538Z","times_seen":361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casibom.icu/","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"266e981e65dd998dae2618c505175d5c","sha1":"5174bbc54ec84ebb7189571c554acec9875bc28c","sha256":"fc7260eff8fb7ff76ec61c7cafaed340ea159a96c8c9ae4a6a524c3172a25913","sha512":"173d710fd1a21893f6ec88461203989a75b68ff35919d51ad546798f0afaea41310d247eda2be8da91882b0c4518a6c5a041547345e55729ac8f3753ec0aca24","ssdeep":"","tlshash":"3ef0c09ec017c506171539a8a4cc2de8d4285a50fa842c2103428f0090afa9ba25f5d8","size":531,"data":"","first_seen":"2026-02-04T17:41:15.452998Z","last_seen":"2026-02-09T00:30:08.220534Z","times_seen":258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=44","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31f744bf196a2342492abc93e518de84","sha1":"9da4ae95f8655e47752e6920135e57606b573f11","sha256":"642e045d13b78b96abdf2376df60de5659dbdee05bf132bf91ed7baa88edf1e9","sha512":"b5452e67c7c8b39f5295ce78897ce378f9525dfe8c393543b3aac1f3ba9083a1e21efd2dde5bf7d13cf59f1d77125acd3c55673c81a32e446282d5f635ffa45c","ssdeep":"","tlshash":"ab9002352043829d402908506b521d08ed548466d110615612870074e0d7d875c010df","size":51,"data":"","first_seen":"2023-03-11T16:21:40Z","last_seen":"2026-04-03T19:31:20.786276Z","times_seen":481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ce9b7f5248baf2063035fa91d4e8848","sha1":"0908bf20d882069d8dc1bfdcf3ea8659470466da","sha256":"899cf739c4bfd9aa01b311a3797a3c70e85bd06470244bb2a850fd5127a80fb1","sha512":"08178dd7ccf4410fc54fde46d07112a721e9967e8c09848c7aa699fca80e6f9c9d3cd7f21cf574ca8d1f076f517472a451df70c851f80096bf40fc414634026c","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmq:XGjVdhdQQOe+p5q","tlshash":"10c35140210748e921e2e67e956fb0993c24a823f5e9cda75c05e7c1f8dec99069bdf3","size":122444,"data":"","first_seen":"2026-02-05T15:39:07.758503Z","last_seen":"2026-03-12T11:18:40.896944Z","times_seen":433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/dd/WsnBaLXORD.js","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9253997ad088b6fb84712b33d6440312","sha1":"782b916dd47bedbaee7c2313caf07028380d7375","sha256":"e47142b1e847b928bafe231b4c3283fecb41d19792fa1670c8d3b71ba8d75c1f","sha512":"1d8440a8052f26c110e50a83f84ad4e8880983a634a5219f259bdbe2a288b04926cf7c49d761157a9c659aff6a7c1e62bf7c5f46d256200e34e8ceacd609ae6c","ssdeep":"384:sDxlmqkaByOb0MMDgneElUUf8CBbghiYXpZRWotaO7cuifS:GlmqQMMIeEuUf8CBKpZRJtaO7c/K","tlshash":"15c2638d5df360649167707c6fafb6083170d0233249cd20bd4c9ba89f98d6989b5fda","size":27987,"data":"","first_seen":"2023-03-13T02:53:30Z","last_seen":"2026-03-15T08:05:23.499538Z","times_seen":361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=49","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31f744bf196a2342492abc93e518de84","sha1":"9da4ae95f8655e47752e6920135e57606b573f11","sha256":"642e045d13b78b96abdf2376df60de5659dbdee05bf132bf91ed7baa88edf1e9","sha512":"b5452e67c7c8b39f5295ce78897ce378f9525dfe8c393543b3aac1f3ba9083a1e21efd2dde5bf7d13cf59f1d77125acd3c55673c81a32e446282d5f635ffa45c","ssdeep":"","tlshash":"ab9002352043829d402908506b521d08ed548466d110615612870074e0d7d875c010df","size":51,"data":"","first_seen":"2023-03-11T16:21:40Z","last_seen":"2026-04-03T19:31:20.786276Z","times_seen":481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=49","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdbc1b061924c2ab3f44c40472397088","sha1":"2c7f6211c717385c4e428a1888c7179e5ce53dde","sha256":"1001145199b605e6187767b537a383d16854d6edba6c8924ac9063fe1d3d09f4","sha512":"93d1929d201cfaea62cacabc9f9c17c61cad27282270612e549be532ecd146d52060ab2c71c4528a107b1b49da3ac268d064bf175ea00a9df97cf556db43bdb8","ssdeep":"","tlshash":"c00120b4b724cef8464449a91eb7e25aa53277632c1a95485a0e1e4451408454808c3e","size":748,"data":"","first_seen":"2025-10-12T13:09:37.651087Z","last_seen":"2026-04-03T19:31:20.788323Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casibom.icu/","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dff932eb62b0ddaac2211366b4b01ebc","sha1":"9dab4d6ec387b84659b55330837eb7377f8d4f90","sha256":"6a95709e3e4f44a0dc86ff470f0d2bb12eb97af1cbd52c67542c43e693392bb6","sha512":"b60004f4b5caf487000de2d2f7ad7844afe6153f3d487d0ad001e009daf990122e3bcdce29b9cc80502df28d3429f0d3fab8fa22923f9f37efdef6cba77f1c54","ssdeep":"","tlshash":"1a9002da71c371009653326c407f188d613988e5288c4940915094922c6503491269ac","size":53,"data":"","first_seen":"2025-01-25T20:39:32.065702Z","last_seen":"2026-04-03T03:15:29.473427Z","times_seen":1321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=44","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-03T19:37:19.161198Z","times_seen":11590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casibom.icu/","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1711b78d0d21828aa96ef101ef6701ff","sha1":"7baf2235ee8382b60f7a0fab5fec83364b6c5986","sha256":"afb4be9542670a1d3298c2cdd0d0d73687a251655074b8f26296ae97ad6f661d","sha512":"be40a9f8841cc9af0c1d8c0bb751f5fde137b4e550727a5638137a9dc65412778e6c792b611397cf518af1cd073535e6719ce6639407af0be041292d7f5e2abd","ssdeep":"","tlshash":"26019458fd44701900ad34754c9d461ad131afb53a179bb27081ba5c7cf560db21fe2e","size":675,"data":"","first_seen":"2026-02-04T08:13:25.924324Z","last_seen":"2026-02-09T00:28:12.411515Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casibom.icu/","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ffae61e7f7982ce4a59bf1d2e9b9bf2c","sha1":"dc2f34d246558a9f5f74d22d87c0d652fdec3ee4","sha256":"47f45152b780cbd2d1fbef69d7875d84751a4279adfbee3c81e0d4208718bdd3","sha512":"a180bea11cdf505fbb2e6d10babfef592c4d4376a49bfb5c870c00c398897586a987f4b2abcf1109563f58d40034dc33e0faf754e2537d644765931f0e4484d1","ssdeep":"","tlshash":"fee0c2780d01943e04b54cdea245efdc696a5d77e1b41410e8bdf6181942996d1924e2","size":301,"data":"","first_seen":"2024-10-06T09:16:08.570967Z","last_seen":"2026-04-03T19:31:20.787787Z","times_seen":420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casibom.icu/","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3c465e37b2a74e59b27b3360cd1eb0d","sha1":"83a47a5426b7fb7a8773491c5beedf426603bed5","sha256":"48eb6ef74561670f5c1bb5f231381dba86031598db85fdc391436e475bff0869","sha512":"2578bd8405918fac125239091f04599b2ab8a58d621012c3ab8f551827bf5ac2738510a88e3347aead4f0d342e2cfe6391769a040369a765420743071cf21b84","ssdeep":"384:xaIBGQWbYDGW5ydf10RyYuT37fK/EwC6O:M7mB5yd2mK/EwCh","tlshash":"3b42e885719eb87e098e5cb8866f660d79362e9d384f8414bd11bdf63824b4b110bf3a","size":12985,"data":"","first_seen":"2026-02-06T07:44:36.224323Z","last_seen":"2026-02-09T11:47:03.981627Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/dd/WsnBaLXORD.js","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9253997ad088b6fb84712b33d6440312","sha1":"782b916dd47bedbaee7c2313caf07028380d7375","sha256":"e47142b1e847b928bafe231b4c3283fecb41d19792fa1670c8d3b71ba8d75c1f","sha512":"1d8440a8052f26c110e50a83f84ad4e8880983a634a5219f259bdbe2a288b04926cf7c49d761157a9c659aff6a7c1e62bf7c5f46d256200e34e8ceacd609ae6c","ssdeep":"384:sDxlmqkaByOb0MMDgneElUUf8CBbghiYXpZRWotaO7cuifS:GlmqQMMIeEuUf8CBKpZRJtaO7c/K","tlshash":"15c2638d5df360649167707c6fafb6083170d0233249cd20bd4c9ba89f98d6989b5fda","size":27987,"data":"","first_seen":"2023-03-13T02:53:30Z","last_seen":"2026-03-15T08:05:23.499538Z","times_seen":361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e6ef1d47c65910c8d8451844ab4766d","sha1":"44ec981015dfcc69e362ab1cc8529af2ef6aaa9a","sha256":"fd235aed55f904c458271f48a38222120c4a7100e389746e6cefef09ea3f720c","sha512":"c66e3423c9e18b74bdadd82f409f7e1fb92cca51c8276b1edfe1a22142c99f7933973a365852f50c8313cbee70f213ae9af7b0ea0381f652a3fa08b988ec05c3","ssdeep":"3072:g0Nq+z+28VOk2DG2HgMaElwnRehI1fsBHiswLslYznqCXMtpo:3+28VOk262SElwnRrfs4sM2po","tlshash":"d0045d983792307441d3a12daaff53093371506ab80f4884bb4dd9a427adeda51a3ffd","size":186417,"data":"","first_seen":"2026-02-05T11:29:28.547266Z","last_seen":"2026-02-06T17:16:09.922883Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=25","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdbc1b061924c2ab3f44c40472397088","sha1":"2c7f6211c717385c4e428a1888c7179e5ce53dde","sha256":"1001145199b605e6187767b537a383d16854d6edba6c8924ac9063fe1d3d09f4","sha512":"93d1929d201cfaea62cacabc9f9c17c61cad27282270612e549be532ecd146d52060ab2c71c4528a107b1b49da3ac268d064bf175ea00a9df97cf556db43bdb8","ssdeep":"","tlshash":"c00120b4b724cef8464449a91eb7e25aa53277632c1a95485a0e1e4451408454808c3e","size":748,"data":"","first_seen":"2025-10-12T13:09:37.651087Z","last_seen":"2026-04-03T19:31:20.788323Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e6ef1d47c65910c8d8451844ab4766d","sha1":"44ec981015dfcc69e362ab1cc8529af2ef6aaa9a","sha256":"fd235aed55f904c458271f48a38222120c4a7100e389746e6cefef09ea3f720c","sha512":"c66e3423c9e18b74bdadd82f409f7e1fb92cca51c8276b1edfe1a22142c99f7933973a365852f50c8313cbee70f213ae9af7b0ea0381f652a3fa08b988ec05c3","ssdeep":"3072:g0Nq+z+28VOk2DG2HgMaElwnRehI1fsBHiswLslYznqCXMtpo:3+28VOk262SElwnRrfs4sM2po","tlshash":"d0045d983792307441d3a12daaff53093371506ab80f4884bb4dd9a427adeda51a3ffd","size":186417,"data":"","first_seen":"2026-02-05T11:29:28.547266Z","last_seen":"2026-02-06T17:16:09.922883Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e6ef1d47c65910c8d8451844ab4766d","sha1":"44ec981015dfcc69e362ab1cc8529af2ef6aaa9a","sha256":"fd235aed55f904c458271f48a38222120c4a7100e389746e6cefef09ea3f720c","sha512":"c66e3423c9e18b74bdadd82f409f7e1fb92cca51c8276b1edfe1a22142c99f7933973a365852f50c8313cbee70f213ae9af7b0ea0381f652a3fa08b988ec05c3","ssdeep":"3072:g0Nq+z+28VOk2DG2HgMaElwnRehI1fsBHiswLslYznqCXMtpo:3+28VOk262SElwnRrfs4sM2po","tlshash":"d0045d983792307441d3a12daaff53093371506ab80f4884bb4dd9a427adeda51a3ffd","size":186417,"data":"","first_seen":"2026-02-05T11:29:28.547266Z","last_seen":"2026-02-06T17:16:09.922883Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e6ef1d47c65910c8d8451844ab4766d","sha1":"44ec981015dfcc69e362ab1cc8529af2ef6aaa9a","sha256":"fd235aed55f904c458271f48a38222120c4a7100e389746e6cefef09ea3f720c","sha512":"c66e3423c9e18b74bdadd82f409f7e1fb92cca51c8276b1edfe1a22142c99f7933973a365852f50c8313cbee70f213ae9af7b0ea0381f652a3fa08b988ec05c3","ssdeep":"3072:g0Nq+z+28VOk2DG2HgMaElwnRehI1fsBHiswLslYznqCXMtpo:3+28VOk262SElwnRrfs4sM2po","tlshash":"d0045d983792307441d3a12daaff53093371506ab80f4884bb4dd9a427adeda51a3ffd","size":186417,"data":"","first_seen":"2026-02-05T11:29:28.547266Z","last_seen":"2026-02-06T17:16:09.922883Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=27","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdbc1b061924c2ab3f44c40472397088","sha1":"2c7f6211c717385c4e428a1888c7179e5ce53dde","sha256":"1001145199b605e6187767b537a383d16854d6edba6c8924ac9063fe1d3d09f4","sha512":"93d1929d201cfaea62cacabc9f9c17c61cad27282270612e549be532ecd146d52060ab2c71c4528a107b1b49da3ac268d064bf175ea00a9df97cf556db43bdb8","ssdeep":"","tlshash":"c00120b4b724cef8464449a91eb7e25aa53277632c1a95485a0e1e4451408454808c3e","size":748,"data":"","first_seen":"2025-10-12T13:09:37.651087Z","last_seen":"2026-04-03T19:31:20.788323Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=44","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdbc1b061924c2ab3f44c40472397088","sha1":"2c7f6211c717385c4e428a1888c7179e5ce53dde","sha256":"1001145199b605e6187767b537a383d16854d6edba6c8924ac9063fe1d3d09f4","sha512":"93d1929d201cfaea62cacabc9f9c17c61cad27282270612e549be532ecd146d52060ab2c71c4528a107b1b49da3ac268d064bf175ea00a9df97cf556db43bdb8","ssdeep":"","tlshash":"c00120b4b724cef8464449a91eb7e25aa53277632c1a95485a0e1e4451408454808c3e","size":748,"data":"","first_seen":"2025-10-12T13:09:37.651087Z","last_seen":"2026-04-03T19:31:20.788323Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=27","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-03T19:37:19.161198Z","times_seen":11590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"casibom.icu/htt/ch?screenWidth=1280\u0026colorDepth=24\u0026pixelDepth=24\u00267fod8btq=kc0h\u0026nj97cbn=10zed\u0026y9qfcag=1j1n\u0026d3hwcrcq=ogedk\u0026ip2xwx5q=2j0bg\u0026wa6cy2zq=vl4i8\u00267u5rmv5v=v8s54\u0026tuifqwl=9inpl\u00262yac4r1j=gxplk","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /htt/ch?screenWidth=1280\u0026colorDepth=24\u0026pixelDepth=24\u00267fod8btq=kc0h\u0026nj97cbn=10zed\u0026y9qfcag=1j1n\u0026d3hwcrcq=ogedk\u0026ip2xwx5q=2j0bg\u0026wa6cy2zq=vl4i8\u00267u5rmv5v=v8s54\u0026tuifqwl=9inpl\u00262yac4r1j=gxplk HTTP/1.1\r\nHost: casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: htt=-NcWyE6sPOc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: application/json\r\ncontent-length: 187\r\npriority: u=3,i=?0\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: htt=-NcWyE6sPOc; Path=/; Expires=Fri, 06 Feb 2026 11:45:00 GMT\r\nx-robots-tag: noindex\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=no4T9tslPQEsZ5OTc1wl%2BEhMtB74NPB8E0%2BZknln3Ym%2Fsl67SY2X4l5EJsxd2qBSHRP%2FC2%2BwnWNq18uyg7rxH3ASC5mt4tqw9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174a684156c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e4b6b9520167f4ab8c0e1cca44c2cb0e","sha1":"ad3deef7c1315e44e0a3f51607599e6f71a2dabc","sha256":"8f70750155d4b5beb3ce8c2d1baa4a3f9af7f7ad569c2000977c74e6afe9b505","sha512":"30b544b0004e2df54dbd5d202fa1db12d7e7d587b0fca8b7143820132239e47c582713247b31034038c64a7d85339893d8d0ff30b5e667854273d37e16569afa","ssdeep":"","tlshash":"46c0c0294b640de23022ee044df405810c9c1005e3d73140ea80828c5107b30b4d326e","first_seen":"2026-02-06T10:51:41.209387Z","last_seen":"2026-02-06T10:51:41.209387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/4/9/he-agreed-to-watch-he-wasnt-ready-real-cuckold-fantasy/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/4/9/he-agreed-to-watch-he-wasnt-ready-real-cuckold-fantasy/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17788\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 31 Jan 2026 12:44:16 GMT\r\netag: \"697df920-457c\"\r\nexpires: Fri, 06 Mar 2026 17:40:21 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 148251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbPrA2NwykDgTE9%2F5NlPiuM8tf1ZxnsrSD1n3ervJn7%2FMgxj6zg%2FXeBXyo8KhwNuzi0hgy9XKx3DZkbHp6bdNXZ11GL04mhAOUMrf%2FZRm%2B%2Fi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78b056c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17788,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"e436a3a9d9010655581f7e26ad57243d","sha1":"673c51ba9a4eb7adadc8e8a8216deabd9a333488","sha256":"5d3930925001a1ad01e7a57656ab663ca8614d3ba56ba339ed8941c4315a095a","sha512":"bd88d89576748b220210b9b99b36fad4e2f82a2e0be77724096bdc8bca5784fc9302eb5f4143d3eceb6841df005d3c85f82453b8a285f1175fca59a9e70334aa","ssdeep":"384:N64EQzCgC9idlI+SEIxqFki8pEd6oOdAn7vhl9LnbyRqywPKYlEJ:N64/zCgCgwLu7866K7Pdbgq1Kh","tlshash":"c982cf4b0d632402ebe068321350dfa9d388d12159e257359fb3a2f5af3f4274639aa9","first_seen":"2026-02-01T06:18:55.592924Z","last_seen":"2026-02-09T11:47:03.883199Z","times_seen":194,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/venor.php","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:13.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"GET /venor.php HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://casibom.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casibom.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 06 Feb 2026 10:51:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-03T20:31:47.158491Z","times_seen":104717,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":32,"dns":1,"connect":22,"send":0,"wait":24,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casibom.icu/favicon.ico","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:13.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: htt=-NcWyE6sPOc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nset-cookie: htt=-NcWyE6sPOc; Path=/; Expires=Fri, 06 Feb 2026 11:45:00 GMT\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IVFwqKZeCQxPjceFcbSuMER%2Fxk1vU3Ig0%2FKD7qQ%2BpdmcN2nqHO5Arx447TDCOY1QoHidHVCZDy6FcHudinJQQJp0xLyC1tkEkQ%3D%3D\"}]}\r\ncf-ray: 9c9a174ed8e556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13784,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7396)","md5":"f82a1846bde869f29d37dcfdb6b743e1","sha1":"537654452deadb7531da85fabc534035fe65952d","sha256":"74640c8719705e287975817c95ffe927e876d507eafe97b12d2990d03d1df9f7","sha512":"514356090d29e1f9fc2c2a7219aee572c519782475f820f816a4635a87bce2f14ff0e2e6d230b4c8cb4ad81577ec1a63f6497052ba23afd8c2c270381fa70424","ssdeep":"384:200Qd+9rM7+hghFG/IXUo4KckIOPhiC3eaS5d2aoNdUawDT+v6JozPYgySQJw0pV:b0QOAadQoldzx","tlshash":"74525722d6c8446f073a9e5e7951776cd0035566db7b2d02b42c8aca5f85bb2dd031cf","first_seen":"2026-02-06T10:51:41.212623Z","last_seen":"2026-02-06T10:51:41.212623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casibom.icu/flags/flags32.png","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /flags/flags32.png HTTP/1.1\r\nHost: casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casibom.icu/main.css?v=35551\r\nCookie: htt=-NcWyE6sPOc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 89104\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\nlast-modified: Tue, 03 Feb 2026 16:19:11 GMT\r\nage: 3817\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nkvw96NHefmfz7JbZfSBnHckEAst%2B9%2By0nfjDvTsLNLHdWiC5FvGWlufyQkVengFcVvyrMGZuYDrPBYow2Vh0gE1lv7MQ7A3FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174aa84356c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 7936, 8-bit/color RGBA, non-interlaced","md5":"2e6ce38f2e568d6f4b886e49dd43fa59","sha1":"eff14fd807a86d5ac9e0fe3010e50753da228e11","sha256":"6fef0c27ea67a4048b91c84087ae6449d034e535836ad84cf107d229777d0f7b","sha512":"9442c4d8a314e7ea694f0112cc50cb47e9d901b33963658ebb7f104a8e6935a0bab6b99eed5f597c67b4e1d95786b93c7229034e24bf1165ee38ad98a3fa8f26","ssdeep":"1536:l/FeRhGBb1kAsrjVGtW0UwDCNWrkyg3+ecu1dOp8eAm7OenVEfqr792Ho7kGY+3:lNqhG0Asrj4CWrkYqqTA+Oe+qrnpR3","tlshash":"b593f1045c4076ab5c76448a57ad9a5cc8111796e8fdc3c2b5d3ffb828b9724d2ff288","first_seen":"2023-04-10T21:18:57Z","last_seen":"2026-04-03T19:31:20.754012Z","times_seen":529,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2024/2/7/8/grateful-ukrainian-stepsister-thanks-bro-for-the-room/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2024/2/7/8/grateful-ukrainian-stepsister-thanks-bro-for-the-room/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18532\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 01 Mar 2024 08:57:11 GMT\r\netag: \"65e19867-4864\"\r\nexpires: Sat, 07 Mar 2026 19:49:41 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 54091\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EQrVmylKYWHaSWKL%2FQfSsid%2BErhBLaWSlzuZJhJ8ttkKz5J6csmX1mM%2BcW49YYQb%2BloFVHi95bBeL54K48FlA4rrIM%2FeUEYtbOOVzbcLz7Vk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd86b56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18532,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"b27a89a20a0819481f6608116c43a40d","sha1":"e956eddba4652770e72443173f197b7f7d8016d1","sha256":"130879a2c892c551d337d1bd48f7408ef9b583fa25b46e741b665b486fb678f3","sha512":"420a555faadeaf221276c84031827728bc0bf4bd1a57bb99d09ca98885119e24cd86d721722d07a4b3f2be3b16a556701f041cf528b244b2295dad0129b92f15","ssdeep":"384:oR33RFp6ukm0fB6cAusZCl6/QRmKnzn+FnI2pm4V:q33RFpIm8sg6/fKnbEnZV","tlshash":"0982d038ab42de06e05c677a4098dd68eb64da40dd311f5e196b12dc021267e3be8a27","first_seen":"2026-02-05T19:50:11.963811Z","last_seen":"2026-02-09T11:47:03.92658Z","times_seen":223,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/11/2/6/addicted-to-cum-busty-whore-licks-the-floor/thumb-main.3.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/11/2/6/addicted-to-cum-busty-whore-licks-the-floor/thumb-main.3.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11569\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 20 Nov 2025 10:10:09 GMT\r\netag: \"691ee901-2d31\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HREjPl8zwjHNck2gJ844FSVNoe7AXyZKU07YVZ9qROvR1yE0VtVF4n9Da6ZeAPxzYdgLKCPJU4jEOVi9CPV%2BbkZ9CfMkmJzcVA7loZ3YZwCp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd87356c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11569,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"3f28bfb87ae5b9fc80eed0eca24180a8","sha1":"2cd0499b635627ae39f63fac73b55794f4b9c5c1","sha256":"228958678c197143b7b097c35854ff373740bb3323edca5e5ba0c7a3cbb5c548","sha512":"9b92e982ac936f958ce07ac0062cb974f47667a13ec5de52e52f1a5056fa0674741feb80c5de7b5ec3c843d99fe3d5c9884190220bcd287bef1ca02984dddb72","ssdeep":"192:foMT8HlNcYPD5TkOAXyqHLLoNQxdns9ZS+l10Fku/0oqHsfI1:Q5XcYPD5tAXyuECx69ZvGkk2H8y","tlshash":"d632cf65f7323ccedab608b65624673913802123af16ff14608b7cd0d6f859e58cc5ba","first_seen":"2026-02-04T08:13:25.82809Z","last_seen":"2026-02-09T11:47:03.85208Z","times_seen":262,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.pornvideotop.com/dd/QNwkXSVWYx.php?ex-Kyoea={%22objName%22:%22kneN68pUc5EJAs%22,%22request_id%22:0,%22zones%22:[{%22idzone%22:%225697032%22,%22here%22:{}}]}","fqdn":"aa.pornvideotop.com","domain":"pornvideotop.com","tld":"com"},"ip":{"addr":"185.73.221.189","port":443,"asn":32338,"as":"HOSTISERVER","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=27","date":"2026-02-06T10:51:13.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"aa.pornvideotop.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Jan 2026 00:32:05 GMT","end":"Sat, 11 Apr 2026 00:32:04 GMT"},"fingerprint":{"sha1":"BF:5D:12:EB:33:20:E4:C4:6D:AD:0F:C9:87:47:FE:5C:C4:83:B0:BF","sha256":"E3:C0:57:F1:47:DA:12:21:65:D0:99:32:F0:D1:53:59:0D:AA:B3:48:96:24:72:23:A0:A3:52:E0:32:5C:84:97"}}},"request":{"raw":"GET /dd/QNwkXSVWYx.php?ex-Kyoea={%22objName%22:%22kneN68pUc5EJAs%22,%22request_id%22:0,%22zones%22:[{%22idzone%22:%225697032%22,%22here%22:{}}]} HTTP/1.1\r\nHost: aa.pornvideotop.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":119,"dns":0,"connect":32,"send":0,"wait":43,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casibom.icu/fonts/icomoon.ttf?vfzdwy","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /fonts/icomoon.ttf?vfzdwy HTTP/1.1\r\nHost: casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casibom.icu/main.css?v=35551\r\nCookie: htt=-NcWyE6sPOc\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: font/ttf\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TiLjVsiVmQ3%2FZ6qyNi9lklHpl5F4GwcVFy%2B7q%2BSctuuWFNjX3H51j64jjGZRBlJPmrJZtGd8aNFofm8a6d64iXERMm7Rty1CDA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nlast-modified: Tue, 03 Feb 2026 16:19:11 GMT\r\nage: 3817\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174ad84556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15016,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"dcf35a6e52678e99737aca4be4ee42fa","sha1":"6439c9eeac6b70b7495657aadef1efc698b0d592","sha256":"44a128353d76f199ebdc529ae28646762810e5d39abc6f4e7181f7a8922e012c","sha512":"6cbbcbbad16dc8317af3ce359e68f8b0f92d79f41d7776ca16072b48351b8d15e6b389006464bcb733d905ef9789802cbdb0bcd3cd9f1de85c0e391d507a163a","ssdeep":"384:W7xlIUH6NKgV2x1WCVy2fnLeNqIApQdFsRtRd5:WllIUH6NKX1VfoASdFsR/","tlshash":"4c62d94bcb5ac77ffc22da342c9741215edfd829d23ea28f88445d8678494f88c297e5","first_seen":"2023-11-09T13:00:32Z","last_seen":"2026-04-03T19:31:20.776036Z","times_seen":433,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=25","date":"2026-02-06T10:51:13.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: application/javascript\r\netag: W/\"44ec981015dfcc69e362ab1cc85\"\r\nexpires: Thu, 05 Feb 2026 19:21:20 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3+wYAAAwBuUwKAQH3DQAAAAwBw7WvBgG3pQAAAA\r\nx-77-nzt-ray: 2a494a15463ed5c1c6c78569d7f97c08\r\nx-77-cache: HIT\r\nx-77-age: 1787\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186417,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39746)","md5":"9e6ef1d47c65910c8d8451844ab4766d","sha1":"44ec981015dfcc69e362ab1cc8529af2ef6aaa9a","sha256":"fd235aed55f904c458271f48a38222120c4a7100e389746e6cefef09ea3f720c","sha512":"c66e3423c9e18b74bdadd82f409f7e1fb92cca51c8276b1edfe1a22142c99f7933973a365852f50c8313cbee70f213ae9af7b0ea0381f652a3fa08b988ec05c3","ssdeep":"3072:g0Nq+z+28VOk2DG2HgMaElwnRehI1fsBHiswLslYznqCXMtpo:3+28VOk262SElwnRrfs4sM2po","tlshash":"d0045d983792307441d3a12daaff53093371506ab80f4884bb4dd9a427adeda51a3ffd","first_seen":"2026-02-05T11:29:28.547266Z","last_seen":"2026-02-06T17:16:09.922883Z","times_seen":117,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":77,"dns":43,"connect":11,"send":0,"wait":1,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/2/7/shes-used-to-fucking-rappers-but-today-she-fucked-my-husband-threesome-with-brandi-kelly/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/2/7/shes-used-to-fucking-rappers-but-today-she-fucked-my-husband-threesome-with-brandi-kelly/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19033\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 27 Jan 2026 23:15:07 GMT\r\netag: \"697946fb-4a59\"\r\nexpires: Fri, 06 Mar 2026 17:40:21 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 148251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MzF8UAr%2Bpwl7R2h%2BLO98Pldhtpmfn2KvwUPxLyiDNz3h9VqUy2zAVifS1eddwvl1Tf5%2Fj4JEg0hWtgZ%2Fe1HGjr2IlhrsqfNwEb19F1vLqjxb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd87156c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19033,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"58a9da5db541cd7756b7f42f2338bae6","sha1":"17c34d0e590d9adb447b81f1b92479d43907f814","sha256":"3b4a58af75200d99a8c30f92e85e1df936172f0b480b1feda77e2a03fe211d96","sha512":"38c5f30871ee12e22613664d3db01b29846c5e4892d51f0400db7c7ee129dc78d94c1a13102fcadf91871cb03e295979a2a7395ff5bf8ed5bb8a88a84b76b704","ssdeep":"384:uO/Csn2cxg7RIzNncgT2yCrkonmi8ZWYms8BohTxYmeC0:uO/CgKlIBjpy7nn8sLsoSFrt0","tlshash":"6b82d053bf32dd05da63507a1d36a732aa3c8ba67f3940fa448e45cc883d5a512d6a2c","first_seen":"2026-02-01T04:25:35.179788Z","last_seen":"2026-02-09T11:47:03.915091Z","times_seen":264,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/11/1/1/the-stepson-caught-his-stepmom-when-she-was-satisfying-herself-and-helped-her/thumb-main.4.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/11/1/1/the-stepson-caught-his-stepmom-when-she-was-satisfying-herself-and-helped-her/thumb-main.4.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20161\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 17 Nov 2025 12:55:19 GMT\r\netag: \"691b1b37-4ec1\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=USykbgVD12Qfkgnp012SlrpsGH%2Bu3osPp7OekI2jkOOFbZtWSQF4cA04n14mtiDvtNjzhX8TXTcvlc5RoojwQOswXSyQHRlGSUH7Ozaqs2H0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78a656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20161,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"db21adbfd70854a7dfd262dc62814749","sha1":"9a1d608dee7d82061fdd112c37ee084a19913532","sha256":"a50fa46e222ba6e5a13327fb3f81374556c9331386497c67c27b1f5e95d2be6d","sha512":"9ea8c720d71201d6298db5109fb9b48c0c1c95699fcf33fa82a2c7d298855e3209ff2c86d9383c59eedd2c123cf263f0298ca0aa60a3c15a001619bdac4666eb","ssdeep":"384:BARBgWfAEOsIWeLm005nx+ossh2A6HSM+7JthG3RxZRbG/W/9TTwbeq2uqUr:BArvfAEOsIWkm7px+BA3M+tG3RxZB/9e","tlshash":"9492c090722125d1f4472339a4dace7a29d7dfd902736caf785d38c860215d4e728ad9","first_seen":"2026-02-04T08:13:25.840519Z","last_seen":"2026-02-09T11:47:03.931897Z","times_seen":262,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/11/0/4/youre-old-enough-to-be-my-grandpa-maya-sinn-and-paul-jones-for-beautyandthesenior/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/11/0/4/youre-old-enough-to-be-my-grandpa-maya-sinn-and-paul-jones-for-beautyandthesenior/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23550\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 15 Nov 2025 13:03:36 GMT\r\netag: \"69187a28-5bfe\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ee%2BnaTwN6wYtL%2FlQ023YfOCmmDu%2Ffd2amcQ616yyuWYbmZCGuR%2FEG8rIAj2kgEHl9V3qyLbLm%2FzahqMDGJPycpucMW6z5rfrjc26RB%2FeCIH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c88b656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23550,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"0ccb9fe21d838b9b45d8265e05acb04c","sha1":"05776e3123e725a2297914c2b2835c4cef376961","sha256":"74f8e3ba8c1adb8f489e69c0e14722c5aa5f7417e82a90f5ec714daf29c66270","sha512":"64e740a144ba75794da3a9768ccae2898e865bb47c915045256bbdc8e4bd728b6701704c0b4930e770987e43c714a1d70258aaea41ecbfe65d8878f7db47c98e","ssdeep":"384:7YA+XKHQ4mtMHiIL0o4zRTNPJkhpWOLw/bg6WNGtp0hKnRmqq4dBIScHsU/oBsx/:DHFgptc3Lw/bONqWl4vOsU1xpWI/d4gv","tlshash":"a8b2e14542548792e63143e1305456f9dd7dc7839e2486fa3379debc0e8cbe26874887","first_seen":"2026-02-04T08:13:25.841651Z","last_seen":"2026-02-09T11:47:03.851324Z","times_seen":233,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/11/4/5/full-video-busty-ebony-stepmom-wants-young-cock-instead/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/11/4/5/full-video-busty-ebony-stepmom-wants-young-cock-instead/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15297\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 11 Nov 2025 10:45:28 GMT\r\netag: \"691313c8-3bc1\"\r\nexpires: Fri, 06 Mar 2026 17:40:46 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 148226\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=de9mM8zs8eXAMYfS1lQOXIlYFUXpI7%2Bb1tryX7%2BvUlhy1ATytmV77GN0kKmo3JC0wdvVLfM%2BqNs7waJzavE1ZIWvpIra3RFW92Wvvn%2Fmi6u2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c98c656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15297,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"6c8f939e888b42dda731e55b93b5f137","sha1":"14160df42b4802eed55a0d2b1f9f10e47a17452b","sha256":"fb40cd32ca95f85917a48c758253547ae15846fd456ab77a6b6175b18344bccc","sha512":"58ec6835f60cb3234479400f27d4d33e243ada25b6c9b702422e0bb57a11814ce1c8ad03810144f58effd4cd077891627f4f0a30d227c92fde7307844e655213","ssdeep":"384:7IQTXX+IaaKkuCdlLtuqVPBb2Ra0518ReuqZ8cya5OYyN:lXOtafuCdlLcqVBbWJIeuqA8O","tlshash":"1962c02dce39a762f86551770c922f03e7862d27716f03751c39a9de8ab36c7492006e","first_seen":"2026-02-04T17:41:15.402429Z","last_seen":"2026-03-21T01:00:21.778138Z","times_seen":176,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/1d852e0819d42c155809596f2bde1f6f42cece5e.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=49","date":"2026-02-06T10:51:13.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/1d852e0819d42c155809596f2bde1f6f42cece5e.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5816\r\nlast-modified: Wed, 15 Oct 2025 17:36:28 GMT\r\netag: \"68efdb9c-16b8\"\r\nexpires: Thu, 15 Oct 2026 18:07:17 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3jkN5AAwBuUwKEwH326AcAAwBWd59LgG3YwAAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c785699d233323\r\nx-77-cache: HIT\r\nx-77-age: 7947150\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":5816,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"468ac6f15efc4fd1fe6198e54e5bc935","sha1":"1d852e0819d42c155809596f2bde1f6f42cece5e","sha256":"0e909f6f78edf823ae07b9ab8c18de310f7a541bca4aa41f9c3a29a8b73be8fd","sha512":"610b416227b7c1233203a680bc5314885e5df7eeb67df289d49b5b2d6b31229cefc28bf5c69b78c4b376bfa6ce16a1f8f8bae336238961033d491acb48b5ad4b","ssdeep":"96:Dnd8RUDOpiddalfvpGTZUEi8lvU5XpYADQsWqWoVxDDZWDUDMXEVYU5JliOoEDX:DnDSi3a5vpGTZU/8RU5XptGqWoVxX0od","tlshash":"8cc17d414b61e067bc06fabca858176f79e8e187e4c74428e061d9a71bc49a37edc3cd","first_seen":"2025-12-19T06:23:54.122917Z","last_seen":"2026-02-06T10:51:41.220971Z","times_seen":27,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=44","date":"2026-02-06T10:51:13.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1265075\r\nlast-modified: Wed, 15 Oct 2025 17:38:31 GMT\r\netag: \"68efdc17-134db3\"\r\nexpires: Thu, 15 Oct 2026 17:56:55 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3AqqVAAwBuUwKAQH3qzoAAAwBJRPCLgG3jQIAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c785694038292e\r\nx-77-cache: HIT\r\nx-77-age: 9808386\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-1265074/1265075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1179648,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1d0dcaa94cf3ab342325fe2bb0e7f313","sha1":"27f220120d94ed095ef4cf9aa0eae63e2f5550e3","sha256":"151fadf43c958099f0a7a6cb650c2e7497b50b839727d3e4b68da1ecf735e208","sha512":"a6d8ab253313ef53c81ec412c00e7816261331222e8f9af4ee5e27e3d5a4cba575be67887a318ea77002630c410bfb0f1fbf084ab601cc71d662cfa77a43a82a","ssdeep":"24576:su1hI8xWtlZT0Zurpj1aUr276rc6b+xUAatEyjkifAZOiJR6:suX3Ivd0ZI7aN+rcurAaSvgoR6","tlshash":"0725330e930059b9dc11927fd9e4a7b9eab49ee8cd8337637a9c1b931f412e01e15c8c","first_seen":"2025-12-19T01:04:36.860962Z","last_seen":"2026-02-07T05:07:29.786398Z","times_seen":52,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casibom.icu/","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-06T10:51:11.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJ10c8ke0KRNX%2Bw%2Fq%2Fjz9mVhswbP6lR%2BcSQWeBMKg4R1KotwBpfG2P4Qf8DOGTzt33RJqfiJ7t%2Ff1SFfbykLsvJLJAAan6H9ig%3D%3D\"}]}\r\nset-cookie: htt=-NcWyE6sPOc; Path=/; Expires=Fri, 06 Feb 2026 11:45:00 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c9a17485cabb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119865,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2684)","md5":"cd53f510afa1cd25e82c995929816e7f","sha1":"5508aaa5987955991a985ed424fe62428c73da63","sha256":"575543874b01557f99a95653c9337e5b9e66705afa85134637e7f09f009cb2d6","sha512":"49fd44851f33df514b7d56567ea058489d0c8b15e8a1394b974bbf5478ea3e742440c4d44a29eabcd9d1fcdc95b9725007c00648712fb7f09d632aa54ae43f9c","ssdeep":"1536:6KOlWLB7UDRFZxld7OB/JnUXJXj00xP5lPK/0nl:lOlWx6T7OrnUXJXj0cP59bnl","tlshash":"6fc365b6f6cc40bb07974ec970b27a1dd006f29ccfa33946e53047e19b65d72a4626e8","first_seen":"2026-02-06T10:51:41.222369Z","last_seen":"2026-02-06T10:51:41.222369Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":91,"dns":77,"connect":1,"send":0,"wait":148,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/4/1/3/nao-aguentei-ver-meu-namorado-comer-a-amiga-e-pedi-leitinho-completo-no-sheer-e-red/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/4/1/3/nao-aguentei-ver-meu-namorado-comer-a-amiga-e-pedi-leitinho-completo-no-sheer-e-red/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21286\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 02 Apr 2025 01:49:31 GMT\r\netag: \"67ec97ab-5326\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WR9V05hx3nyfLBLng3kKSjK7clKoGGza30vC1kLqMuLtYTZWCyC9C4B1W6ZYxZgVqlM%2Fv%2FfaDZ9CkjOYI2yb6nGiC8hhK7QNZ6xvvKFnlhrM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd86d56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21286,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"9bd8aab772af30d78b193cf7df79f4d5","sha1":"7df5d050011366be45fecc6126eacd373e63cd00","sha256":"cdeaf3c6df1a5165a53f8347c89d110f94aad22a8ce10d39f1b53b73c1f07b4a","sha512":"3d0facb741ca20e61e4964d14bb0dd016ed40a53e2b955995c83c162e75f75645f2911437627cdf6ea3f0ef1e935294116fd137f0d6b1e40f8e6bae51e880540","ssdeep":"384:Gfex37GF/baKDanXzMUXFpm9bEdjHPfHSEViHR:wexLu3YXp1pUIHnSEVix","tlshash":"e8a2e17b3595e139c4f91ef50b7203e62499ca1ca8c033db216295f0ed457eaf727681","first_seen":"2026-02-04T08:13:25.892125Z","last_seen":"2026-03-21T01:00:21.761433Z","times_seen":234,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/7/2/alone-with-18-yo-busty-stepdaughter-daddy-fucks-her-and-her-big-tits-bouncings-hot-kissings-sex/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/7/2/alone-with-18-yo-busty-stepdaughter-daddy-fucks-her-and-her-big-tits-bouncings-hot-kissings-sex/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16047\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 26 Jan 2026 12:50:42 GMT\r\netag: \"69776322-3eaf\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=guYi%2Fa%2FntrkuOHokc5KATZJQGEOQFJBN566PZYdghZPWYGEPMYaXFOI3CUMpDuyaKQiafsN8slhxOmgslSgHZ299Ac6p4S0Mo4lw7s%2B4yJVB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd87456c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16047,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"697957b319d898f3578796d6285cca1b","sha1":"7aa46bbc034bb3c36abb550005720552a76a10cc","sha256":"6d51cb67676f27ac81119bf79b4c8b8bdb0e023f773b74ae10461be395c48754","sha512":"5f415852f45356f5668988f996d273c6df4f7a7d0218db32b1b06d58a03e48bfcb9e0fa55fedcefac3b8d8f1831d598d0aa8ea1d2c43af4ad17e895c1d435add","ssdeep":"384:QGUhBjjnvMonyq6oNanuiuPbjkyoARPlaxgkoR25:VUhljvMoNaybjkyoYTR25","tlshash":"2672d1052f27b63be0e402986174da0d33898b32fe990391a0f557c5e57bbf98359798","first_seen":"2026-02-01T06:18:55.62424Z","last_seen":"2026-02-09T11:47:03.969042Z","times_seen":263,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/3/9/9/hijastra-caliente-de-18-anos-monta-la-verga-de-su-padrastro-hasta-succionarle-todo-el-semen-con-el-cono/thumb-main.3.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/3/9/9/hijastra-caliente-de-18-anos-monta-la-verga-de-su-padrastro-hasta-succionarle-todo-el-semen-con-el-cono/thumb-main.3.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14916\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 30 Mar 2025 02:11:19 GMT\r\netag: \"67e8a847-3a44\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vzkYaxmi%2FRWfADCy1qA6j31%2FrJQt%2Fk3xkVSmABODkQInQs01dQjiAH2QIBd5A%2Bxar%2Bkxf2RqDIFEEWgWnXNPIkvcKHI9aVkQ6BGcvGnlji%2Bo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c487a56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14916,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"91ccff4539ce4b98f4cc336fca3958c3","sha1":"fa7e7117a8bf6c41bc25cc261620269dcf754c56","sha256":"3d7c3668f880aa3fa5c056502e0d5cea4b9806183aebe850996e6596470cfa5b","sha512":"8b4834c32ac01f14080a5d1d4f9f8d83324689d9a5da5ebd3a6510c06c1cbebbfbdd7234310bc329300463f40b3856726df32ec2760703d8e9a7a92befd1986c","ssdeep":"384:Qpg4wkzeWPZ5HI1TZio5DqVpIZAUG5ql2B8sY3DM:Qpg/kzeWPZ5oXiWDqRd5ql2BMTM","tlshash":"9c62d0073aadb074c239b8bcdd7244b741ba4426be0651881b95fdde3c529ee10ec59a","first_seen":"2026-02-04T08:13:25.856689Z","last_seen":"2026-02-09T11:47:03.969542Z","times_seen":262,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/5/6/he-found-my-g-spot-mexican-slut-loves-to-get-fingered/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/5/6/he-found-my-g-spot-mexican-slut-loves-to-get-fingered/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15281\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 23:16:27 GMT\r\netag: \"6972afcb-3bb1\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybSfvmbi52vwXq3gIJMgsdQ5R5nxCZrxn1VxTw71FzGL6NxFTbRbo63777Y%2FaPaR0WHAIuhs2YG4ka0jVnTn8lmUWM2yaBLuXO4oKQ33wqwq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c689d56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15281,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"eba71cb0d41791a5decc8c98906e1bf3","sha1":"580d85f9eb24bef384e109b969d8f123a3b88c91","sha256":"60951db8fd6526070be49fcd99ef3d36ceb887e4fb5f71e27e9c4cf2620ada90","sha512":"5fd7c497b94bd7fe6655ac23f7bd369d8bb2bda00dddf12d7d391711b1d81b6bc9f02912d114237a5e7687ab7a80b3207774ca057bcb9efb2df9ca5a618c02ba","ssdeep":"384:KZxxzxY1Uo10mYVJiPz+08Z7jgIYPHxT/eto:KVcEVJnxjgdRT/So","tlshash":"b762c0d6fba4bc11d3281234e50555faa2609a5f3cc79b59a0cc7dd80e9316bb9cac8c","first_seen":"2026-02-04T08:13:25.896494Z","last_seen":"2026-02-09T11:47:03.948521Z","times_seen":226,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/2/1/6/he-fucks-her-in-the-shower-and-cums-on-her-face-while-her-boyfriend-is-in-the-living-room/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/2/1/6/he-fucks-her-in-the-shower-and-cums-on-her-face-while-her-boyfriend-is-in-the-living-room/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15918\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Feb 2026 08:17:00 GMT\r\netag: \"697f0bfc-3e2e\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4bxCKi8b3X8o8c5M5BqwA5MPXyAje6TYuHWho8zAX9ceGxLjQRriz0htZ50558e57ieX3wWIlnIYDA5qE66QxIritzyvYfvKF7bdSBCrok%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c88b756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15918,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"c732f96109f7afc7d09ce3b5604907fb","sha1":"2f7056e005920e18ea679616d4e8e7cfe120a2f9","sha256":"5427f587286ae9e0cc504871d80ee7364ac8a66b3d5ed54b9e6b662d940b260b","sha512":"9cdabc50ea14fffaba14a1be44c3df3cdd7b8820222e22e99eae4d8253a5ed682a2e84e27a94535e901251aae00b2b89e5c4c49592da1a15acb1693d925b7b39","ssdeep":"384:DHv7JXusTW1UDYaI9DyAMfhwMSMveujUP0RTfX1y1IB3VG/n:dTA4IdwveyRLASBg","tlshash":"d962dfefb1ade254c69ea2b64d12c345a3645d8460bb7dcaab016b4900cd0332c6e2e7","first_seen":"2026-02-04T08:13:25.911562Z","last_seen":"2026-02-09T11:47:03.880856Z","times_seen":259,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/4/5/ersties-tv-full-truth-or-dare-game-3-hot-babes-pleasure-their-guy-friends-before-climactic-orgy/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/4/5/ersties-tv-full-truth-or-dare-game-3-hot-babes-pleasure-their-guy-friends-before-climactic-orgy/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17155\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 19 Jan 2026 05:40:43 GMT\r\netag: \"696dc3db-4303\"\r\nexpires: Fri, 06 Mar 2026 23:54:54 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 125777\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2jmvgLglnBI70oFmK1zLqeiyJTeR%2FAE8nfFwe%2FyuzEcv6pQR3i2Uhu%2F0Y9ItrOPykbj2honwd9fXVVbvUeXMsMnxHblKktPsiOASmfJoUj1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c98c356c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17155,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"635e9897f1f3c053027e45f78d0cfd60","sha1":"74b252e58436129f4826af8c1fbd24ec0703a489","sha256":"1a1eddee94729373851ef310e1119eeaadd8833c646eeae41aa0c6b12c1af93a","sha512":"5e5d371d0dfd6194d24d8f1c4b758133abf9ca1b13286992db118997472323a05255614cfd2d627de3bc16219f1fad92c4a7d74268023ab258585e17196b4226","ssdeep":"384:LwCk8xksuzG5abs17Y2DsocLDZkBXhL1Bh+xeSuoqVFPODmEr:Lwz8TtY9oSDZyHixuoqzer","tlshash":"ca72d060e7e0c923cec8553472f0937c6a548e35980573a840ff71c9967bb5dfea9410","first_seen":"2026-02-04T23:55:26.286272Z","last_seen":"2026-02-09T00:30:08.126558Z","times_seen":109,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/2/5/9/wild-party-ends-in-crazy-orgy-yasmina-khan-and-sara-retali-end-up-getting-fucked-and-pissed-on/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/2/5/9/wild-party-ends-in-crazy-orgy-yasmina-khan-and-sara-retali-end-up-getting-fucked-and-pissed-on/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22279\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Feb 2026 18:37:10 GMT\r\netag: \"697f9d56-5707\"\r\nexpires: Fri, 06 Mar 2026 23:54:54 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 125777\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=446yslT%2FhEnNpEpwvDUNtKv7k5Xy3aO28qd7bdOVi7VOQacfCgCNDbGg40%2BRBqfjYE0P1T00LltVxtyFOGiUg3QBfwkYIboYL2OrgAUCqNAz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c98c256c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22279,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"74d4d0ae87672ff7ccea3eadcb8bd705","sha1":"cc8e21c862c29f174bde383d8b78eb4de8228984","sha256":"9aa28938482c14f1fd477ced1ca1b9eed033c0e3c6300fdbf57fd95327b16a27","sha512":"06ebf1e22176a1e99f5d58cc24db3b43a0ef443915dae970b76eecaee6af421a68cfe6af6bce19cf9bf4b99c032be9227ca9af8cc906fc8355607ffc80698387","ssdeep":"384:0pHh2++RwdwabskvUbNEEa7xf9gJJN1knEDiFcnQuhfX/ps+RD2k/wnIt:iHhL+EvbzU+LgJf10EDi+nrhfIkiK","tlshash":"97a2d12612223477d82929f25d8a32b0d32df4f1f542adbf6254b8fd1767255bb61f00","first_seen":"2026-02-04T08:13:25.84638Z","last_seen":"2026-02-09T11:47:03.965233Z","times_seen":240,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"GET /popunder1000.js HTTP/1.1\r\nHost: a.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casibom.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: application/javascript\r\netag: W/\"0908bf20d882069d8dc1bfdcf3e\"\r\nexpires: Thu, 05 Feb 2026 19:21:27 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH38wYAAAwBuUwKAQH3EQAAAAwBw7WvFwG3nwAAAA\r\nx-77-nzt-ray: 2a494a15d8052dbac5c7856913f19c1c\r\nx-77-cache: HIT\r\nx-77-age: 1779\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":122444,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5ce9b7f5248baf2063035fa91d4e8848","sha1":"0908bf20d882069d8dc1bfdcf3ea8659470466da","sha256":"899cf739c4bfd9aa01b311a3797a3c70e85bd06470244bb2a850fd5127a80fb1","sha512":"08178dd7ccf4410fc54fde46d07112a721e9967e8c09848c7aa699fca80e6f9c9d3cd7f21cf574ca8d1f076f517472a451df70c851f80096bf40fc414634026c","ssdeep":"3072:drCqGR9VdpPtCgzTNiQ4n8701l21bMpSmq:XGjVdhdQQOe+p5q","tlshash":"10c35140210748e921e2e67e956fb0993c24a823f5e9cda75c05e7c1f8dec99069bdf3","first_seen":"2026-02-05T15:39:07.758503Z","last_seen":"2026-03-12T11:18:40.896944Z","times_seen":433,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":58,"dns":34,"connect":2,"send":0,"wait":1,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/8/3/hot-nurse-in-latex-gloves-masturbates-and-fucks-a-patient-with-a-facial-cumshot/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/8/3/hot-nurse-in-latex-gloves-masturbates-and-fucks-a-patient-with-a-facial-cumshot/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18710\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 17 Jan 2026 18:52:23 GMT\r\netag: \"696bda67-4916\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqinEcDb9EMqsMso%2B7UY6bsgu4csfi8DgY7fugbh0rVApPYSl4ZQ3EWtsC0sDYaA5e8ExFJ%2FXhgQ%2FvTcu0ENJ4GwLPPIu8jVPFVaHxMlpdRA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd86656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18710,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"bbfe58c61081e452a87be0c3cde9ff4f","sha1":"b3d5bfb2b72f3363b8633ffcc02677ad9bf06a39","sha256":"be8897eb381b14d31f32c75f61a10e5924b446cde2aafd0ea50b57b4dcbb90b6","sha512":"b20ca1ee9f6e4d1084a403dcc88c5b9bc0949efb20c7d6656e2408bc213c033de80c66d0be353bd7142419b69e5166c01584d9bc31667310b727fd08789def41","ssdeep":"384:xGbk6m2dQJHcu2EBVO/I0lZMEtXmEnVRKiW7IRD411O5pZ59:xuk72dsHbBVO/NlfXNglUB6O5L7","tlshash":"aa82d10347dc9232e858c2ba575162e477018cbba2caef1b9e75a1d584ff404dbe6750","first_seen":"2026-02-01T04:42:00.841911Z","last_seen":"2026-03-18T22:56:46.856995Z","times_seen":260,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/5/4/busty-brunette-lets-me-fuck-her-wet-sweet-pussy-before-i-cum-inside-her/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/5/4/busty-brunette-lets-me-fuck-her-wet-sweet-pussy-before-i-cum-inside-her/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18574\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 18:33:02 GMT\r\netag: \"69726d5e-488e\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKv%2FqOod8EWUCjO%2BMuTcYS68FcPoUrwMhclZZnWojrUqdCTGDya6rBjexqKzaf%2B80WjVf0092p4kMbfQ4Opay9Is9uqbiwCa23JWlwuzKYON\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd86856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18574,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"6aba0d2a754ba808b38ccf4e1747ee8a","sha1":"bada78227ec9ae0395763def69388066f61ddbca","sha256":"ca612517b1ee35d09f0cf32041107b3d7f910c63fff796967e5316ce45abb6ae","sha512":"20fe7eda80f3e3f03d52f7897e21dab79eaecbd36af570bd4730987e5fc4230e918c9979f551dd5be4d12c542f8ddff3a954696115b20dd061eb72319e19d8fa","ssdeep":"384:he4c9tXXa9a4iOYHL39S1l8fdNTmCX6F4j4AzJvv+UPsdij5BZJiH84U:he7tH2a4iZrNS12Xm+4AzJvvdP3LivU","tlshash":"7282c0a37f2a2262d47171350efd1a56e7019979acd54a3719343dccfcac180d9cc7aa","first_seen":"2026-01-30T09:38:41.511548Z","last_seen":"2026-02-09T11:47:03.912264Z","times_seen":264,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/8/8/spread-my-legs-and-fuck-me/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/8/8/spread-my-legs-and-fuck-me/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20518\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 16 Jan 2026 02:13:34 GMT\r\netag: \"69699ece-5026\"\r\nexpires: Fri, 06 Mar 2026 17:40:21 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 148251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k6R1s4YSghkiJrExemz6cgXVOdGP%2BUlxqWfl%2Fas38UPTdzRY19E6NlHBrRkD5VJI%2FLhQRE8I9z0wH9y5D5fmKVDwbyqmxHusCHd7oS1LsSoc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c488056c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20518,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"1ea0f969cf1bd053557044667feec058","sha1":"f5d1ab6a0b1e8bb2a2393daa0a8e1fbcb385b33f","sha256":"697ad6994c3d7daf48fb95a19b3db7dfa444d526160964b04117029d95d95393","sha512":"dc7182a86ba757f38589481e6854b15eccc3694a07d0196e3af4410fd5096dfee5232df30a3697acd1974e4ffe72fb29e1cb83cfcdee38f0fcf346d7c60e381c","ssdeep":"384:pSB/k+4vEALwRAK5pi9g6K7a0x3TI/JzYuBkdOpV9yG1yAcAf7IycZs:okZEUwbiG7rc/JzYuBR70ycZs","tlshash":"2992e1ac5695b0cede3113796c0d49b28ff6fea552bb122a739521e748c43e1584c3b2","first_seen":"2026-02-04T17:40:47.267767Z","last_seen":"2026-02-08T15:05:15.304136Z","times_seen":42,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2024/5/1/8/monja-culona-hara-lo-que-fuese-necesario-para-devolverle-la-fe-a-este-hombre/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2024/5/1/8/monja-culona-hara-lo-que-fuese-necesario-para-devolverle-la-fe-a-este-hombre/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14624\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 14 May 2024 17:30:14 GMT\r\netag: \"66439fa6-3920\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8uhUyzKatBGM6hBu2CnvOB99etZaIKStkHYNdQTd0vtFe5kdsf8KNRvDoKU%2BLoPXbLFUillJQBsWb1Ab1Klq2BeiyG9I4EY5t01YSBrDtrOT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c689756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14624,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"fe0480fa8e45c2a82339526294958296","sha1":"c7bc6b4838ca06590cf4842a9f3bf6e42bfa24e8","sha256":"6118444da532ada0a6483b7d3b23521507a6bf6e19191e1fb46bfb9286e94a60","sha512":"65b85ddc6dc7bd8af01d71fb29a32ec88f92aba3db4a9434274a5e5fae77e2019eeff69426dacb242c40912af38d75abb98dc0b5045026dd314605a6fda30b3b","ssdeep":"384:zqqHumejyZ+9X9aRX9QQcIEwLD3iWzpk2wJvwN:eme9NaIQcI1v3xpOJvwN","tlshash":"6962b0e35e7add71ce2a22310c0d8fb8a30cd41676be2b6b273832ec55485d627718d9","first_seen":"2026-02-04T08:13:25.843607Z","last_seen":"2026-03-21T01:00:21.751125Z","times_seen":164,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=44","date":"2026-02-06T10:51:13.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 415\r\nOrigin: https://tdska.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":415,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"language\":\"en-US\",\"referer\":\"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=44\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5697032,\"extra_params\":{\"first_request\":true,\"zone_type\":38}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 06 Feb 2026 10:51:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://tdska.cfd\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22f07dc48ab71a445d2099c0edf1d5fd62%22%3B; expires=Sun, 06 Feb 2028 10:51:13 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5171,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"541db713dc6fdc441fe03b127713ca17","sha1":"ec4f48db94dfdd975512523627c5adaf033dbf27","sha256":"393b8c2c4cb69d1d677fae9c5ba768df1e5ed51762fc79be2818e394555febe5","sha512":"3abcee0d3d68fc498abcf56a132daf086bdecc27aae8162ff3a6aeaad53789e9e3f2fb0aa1fdc085e4562efc99872fad568ad35ad38646340a35fe6ad993e802","ssdeep":"96:vLBFTZBxBqav2oSoGoorooCDFhTtIhUHq1oLtZ88MLELk1tv3FMqKEOtYwG0kLp6:3T/Dqav2Vl3r3CvTtIhUK1y88MwQ7F74","tlshash":"7cb1e736ef0998dea3da5795dc9b7c4e287c2047c6c4ce635a84c924e1fc3684653369","first_seen":"2026-02-06T10:51:41.245301Z","last_seen":"2026-02-06T10:51:41.245301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":68,"dns":1,"connect":22,"send":0,"wait":121,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=25","date":"2026-02-06T10:51:13.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 415\r\nOrigin: https://tdska.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":415,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"language\":\"en-US\",\"referer\":\"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=25\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5697032,\"extra_params\":{\"first_request\":true,\"zone_type\":38}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 06 Feb 2026 10:51:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://tdska.cfd\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22f2b0811f5d22f6d2cae8e6e8f4732a03%22%3B; expires=Sun, 06 Feb 2028 10:51:13 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5177,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"19e6286ff95c9d0832a2a1bef9037b43","sha1":"84d5ed005866f98f5893e2aa7f2ba62468863699","sha256":"2581fbeefd07d63c0bf82007308266cbd323e1d7004dc7d38c7851a1c6d41a05","sha512":"cdfff5bb47f2fa415f9c66e1a5103b1ec4a56be05f4e839c6653afc229aca46cb04fbb4ff08d80eab8e09e3156bf782c5f995533d4a43b57bcd02048d27552ac","ssdeep":"96:vLBFTZBxBqav2oSoGoorooCDFhTtIhUHq1oqt3qh+4Ctfdy32FK0Ot5w8fJbSjB5:3T/Dqav2Vl3r3CvTtIhUK1Hv1dO2FFOc","tlshash":"5cb11a26ef0d6cce63da8796cc9fbc5d586c5107d9c18e626a84c919a2ec3208b13379","first_seen":"2026-02-06T10:51:41.246197Z","last_seen":"2026-02-06T10:51:41.246197Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":61,"dns":1,"connect":22,"send":0,"wait":130,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/11/3/9/surprise-halloween-fuck-with-hot-step-daughter-letsdoeit/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/11/3/9/surprise-halloween-fuck-with-hot-step-daughter-letsdoeit/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23952\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 10 Nov 2025 13:05:45 GMT\r\netag: \"6911e329-5d90\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qg%2BWKJ9tcl5sAasuUmfxsPwwr%2FGbkTmlrYbBKA9wIgrgN1DZMtrDVT5dm%2FhFYPrH7mMHKxLoIm1yc4rxS8aysLwlMSwvkA4wUI4EntZMss0J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd86e56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23952,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"0464ffefdd8f6527394a0c0543cb97b4","sha1":"12689cdebb4d865fb0be56d1c8679a20b3942eac","sha256":"7ab36e1fd43986477295bdb06d2271842a625764daa31bb05487dc72378ede3f","sha512":"d7e78985fe25ef71134428fde8f3cf52564eaf1903b2cab2e4e596ffa8b4b47c2bd3c178d540423ae61e05016c4ec35e98ff10bb340649afc46a6fa2465775a9","ssdeep":"384:8tRqnWtRid40z40up4c2PW77EZwLKQJIdG3DvDHJhvet4teDw8Im66o4Da6oHBac:8gWtRid8OZwowzvz3vgaeDwNv49oHBKM","tlshash":"c9b2e1017cc29742f1b731a91400966be7b51f722a38139b174fe5ec142a741ec5ac4d","first_seen":"2026-02-04T08:13:25.877057Z","last_seen":"2026-03-21T01:00:21.874539Z","times_seen":263,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/11/1/9/he-cheated-on-his-wife-with-a-neighbor-who-came-to-get-salt/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/11/1/9/he-cheated-on-his-wife-with-a-neighbor-who-came-to-get-salt/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19172\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 27 Nov 2025 21:54:05 GMT\r\netag: \"6928c87d-4ae4\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7jRJObTbTaQih%2BkDE2JsucdSGPUUUa729duT4TL4cTwZ8xbdWpbibXpXbmiUlAc0n4IZUSP1CT7xDKmnA1Yow94g03vlnIT954w684ykl6x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78a156c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19172,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"bd83d40b7c48547bedc802390db1f8ce","sha1":"bb4c7a01b6151629a9a032dc1293640efa6c0061","sha256":"6afe6e36226f96ed402718edc10d7c7fae5f98cddce5f73fa4780dab93074d3f","sha512":"3be9cd59350512a0085535f0c1a088bcf473dca3e0b65b6ee22446599705e1032f59a5ba4424ba045cd85e26f72927b2bd69f19b0bc4ec022b64bf0e50974160","ssdeep":"384:GtRExTVapuwqiH0FLuHg7GtKs0U4OBGu4IDolWKmI7fqZeC4:RFV8UkA9U/BLxowxIoA","tlshash":"9882e09b4671ce92e9a126fa77f043c567640900688c0f367cf866f9afdd0a3c48745c","first_seen":"2026-02-04T08:13:25.848918Z","last_seen":"2026-02-09T11:47:03.893208Z","times_seen":216,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/6/2/swap4k-a-sunday-walk-ended-up-as-having-a-hot-girl-with-in-our-bed-it-was-her-first-threesome/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/6/2/swap4k-a-sunday-walk-ended-up-as-having-a-hot-girl-with-in-our-bed-it-was-her-first-threesome/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19207\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 23 Jan 2026 14:33:05 GMT\r\netag: \"697386a1-4b07\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uxYNsV6R2D9nSfA%2B007yjYBotdjTyo3NJcFmu4oxKW8QSWFL%2FGq4FdYi%2Fali3v1IHSE%2Bk%2BKllo06ETJI%2B%2BZsA3EeBDlmusMtEQgVztn4nOSx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c98c956c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19207,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"8bf053aef5fecf303fa7bd9b6762ebb0","sha1":"d63a791dd9da05921386b7f9db0023e93b68db42","sha256":"c89dda5b5a63f304f443ea8adfdd80223d24401d62c5a17dc672a2fa444350a5","sha512":"dfac2984f27c3374343302451a9ad8e049e045aa8e783a7d3447a9f2b007bb91771f32886a82b456cfcb38371118a4d1737b9d43a91c0df613c549dbe5de4686","ssdeep":"192:o39OTmDDNRMLF/aH2F+3L8Fh3FzLKaORmwjer2NwzdLO0gk0tVD8MNYd7I3pKc6l:oKmDDeFIWH2pU2NK2tbNAdLEtk7d","tlshash":"0182bf27ab1ed812eaaf633085d2536a2285f116749d77e3779536b0c69e3e41ccc0bc","first_seen":"2026-02-04T08:13:25.90541Z","last_seen":"2026-02-09T11:47:03.900524Z","times_seen":168,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/dd/WsnBaLXORD.js","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=49","date":"2026-02-06T10:51:13.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tdska.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 23:20:47 GMT","end":"Thu, 12 Mar 2026 00:19:11 GMT"},"fingerprint":{"sha1":"EE:BF:84:A0:BA:A0:31:1B:89:D8:01:C2:20:46:7B:87:73:96:88:B7","sha256":"BF:1A:95:8D:E2:64:B1:92:00:5A:B8:28:AD:EA:D1:9F:61:49:BF:55:B6:D0:90:6D:FB:0D:75:AA:DD:E1:CA:52"}}},"request":{"raw":"GET /dd/WsnBaLXORD.js HTTP/1.1\r\nHost: tdska.cfd\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=49\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 14 Nov 2022 13:22:47 GMT\r\netag: \"63724127-6d53\"\r\ncontent-encoding: gzip\r\nage: 3817\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xtpjhqgo7puKxrXvDANSMAd%2FcnWKJipHwl9OCH8zaTm0jgdGfH%2FOt50h7e%2FNmLbP9hbzzIC8t%2FsC8QBvtgkIORSXUOieVWZLaQ%3D%3D\"}]}\r\ncf-ray: 9c9a174ea9641525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9253997ad088b6fb84712b33d6440312","sha1":"782b916dd47bedbaee7c2313caf07028380d7375","sha256":"e47142b1e847b928bafe231b4c3283fecb41d19792fa1670c8d3b71ba8d75c1f","sha512":"1d8440a8052f26c110e50a83f84ad4e8880983a634a5219f259bdbe2a288b04926cf7c49d761157a9c659aff6a7c1e62bf7c5f46d256200e34e8ceacd609ae6c","ssdeep":"384:sDxlmqkaByOb0MMDgneElUUf8CBbghiYXpZRWotaO7cuifS:GlmqQMMIeEuUf8CBKpZRJtaO7c/K","tlshash":"15c2638d5df360649167707c6fafb6083170d0233249cd20bd4c9ba89f98d6989b5fda","first_seen":"2023-03-13T02:53:30Z","last_seen":"2026-03-15T08:05:23.499538Z","times_seen":361,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=49","date":"2026-02-06T10:51:13.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=786432-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 478643\r\nlast-modified: Wed, 15 Oct 2025 17:38:31 GMT\r\netag: \"68efdc17-134db3\"\r\nexpires: Thu, 15 Oct 2026 17:56:55 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3AqqVAAwBuUwKAQH3qzoAAAwBJRPCLgG3jQIAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c7856935a07c34\r\nx-77-cache: HIT\r\nx-77-age: 9808386\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 786432-1265074/1265075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":327680,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"8a7d731fa775bdc438e07c942efdc45e","sha1":"ea7db25579cb56b5733a8b6c08718f1f00d3eb34","sha256":"a5a036ffebde6de13a659777bfe00e75d603f3d8479bf2f7b197896683ed3103","sha512":"f9e3d748b8949e34cfcc0502ac8fa2371c838791df582f4308064790f00f39f92cc88254fe93a9ac3a49545c2558108908f4bf0c4f4c0bead09459ab2613e62d","ssdeep":"6144:YlWVURaoAn/gEDbZbDGiOyKca00XhDng6PAJ2oJbqBOIZw1b:YkifA/1PxtEP0IjAJROU9","tlshash":"5a6423dd03112f3aac00a7db14f52bbedcf46ae74417957250d02ae38ba05e6ab46dcd","first_seen":"2026-02-06T10:51:41.24885Z","last_seen":"2026-02-06T10:51:41.24885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aa.pornvideotop.com/dd/QNwkXSVWYx.php?ex-iLcrv={%22objName%22:%22zb269o9IAKfO%22,%22request_id%22:0,%22zones%22:[{%22idzone%22:%225697032%22,%22here%22:{}}]}","fqdn":"aa.pornvideotop.com","domain":"pornvideotop.com","tld":"com"},"ip":{"addr":"185.73.221.189","port":443,"asn":32338,"as":"HOSTISERVER","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=44","date":"2026-02-06T10:51:13.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"aa.pornvideotop.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Jan 2026 00:32:05 GMT","end":"Sat, 11 Apr 2026 00:32:04 GMT"},"fingerprint":{"sha1":"BF:5D:12:EB:33:20:E4:C4:6D:AD:0F:C9:87:47:FE:5C:C4:83:B0:BF","sha256":"E3:C0:57:F1:47:DA:12:21:65:D0:99:32:F0:D1:53:59:0D:AA:B3:48:96:24:72:23:A0:A3:52:E0:32:5C:84:97"}}},"request":{"raw":"GET /dd/QNwkXSVWYx.php?ex-iLcrv={%22objName%22:%22zb269o9IAKfO%22,%22request_id%22:0,%22zones%22:[{%22idzone%22:%225697032%22,%22here%22:{}}]} HTTP/1.1\r\nHost: aa.pornvideotop.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":162,"dns":13,"connect":50,"send":0,"wait":44,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=49","date":"2026-02-06T10:51:13.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tdska.cfd/\r\nOrigin: https://tdska.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1265075\r\nlast-modified: Wed, 15 Oct 2025 17:38:31 GMT\r\netag: \"68efdc17-134db3\"\r\nexpires: Thu, 15 Oct 2026 17:56:55 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3AqqVAAwBuUwKAQH3qzoAAAwBJRPCLgG3jQIAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c78569a5589823\r\nx-77-cache: HIT\r\nx-77-age: 9808386\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1265075,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1d0dcaa94cf3ab342325fe2bb0e7f313","sha1":"27f220120d94ed095ef4cf9aa0eae63e2f5550e3","sha256":"151fadf43c958099f0a7a6cb650c2e7497b50b839727d3e4b68da1ecf735e208","sha512":"a6d8ab253313ef53c81ec412c00e7816261331222e8f9af4ee5e27e3d5a4cba575be67887a318ea77002630c410bfb0f1fbf084ab601cc71d662cfa77a43a82a","ssdeep":"24576:su1hI8xWtlZT0Zurpj1aUr276rc6b+xUAatEyjkifAZOiJR6:suX3Ivd0ZI7aN+rcurAaSvgoR6","tlshash":"0725330e930059b9dc11927fd9e4a7b9eab49ee8cd8337637a9c1b931f412e01e15c8c","first_seen":"2025-12-19T01:04:36.860962Z","last_seen":"2026-02-07T05:07:29.786398Z","times_seen":52,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=49","date":"2026-02-06T10:51:13.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1265075\r\nlast-modified: Wed, 15 Oct 2025 17:38:31 GMT\r\netag: \"68efdc17-134db3\"\r\nexpires: Thu, 15 Oct 2026 17:56:55 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3AqqVAAwBuUwKAQH3qzoAAAwBJRPCLgG3jQIAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c785699cb16330\r\nx-77-cache: HIT\r\nx-77-age: 9808386\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-1265074/1265075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"0912bdd86833ee80326cc040dcfd234a","sha1":"031b107657ef023d889d7785991f9ed055ee4c45","sha256":"d362f767fcd4eed2b9855be6f2fc63c684ffb8d6723f833e35b2853698ff1ecb","sha512":"c373c957ffa77a95aad0ba7bb33d7cbf874454e0053fa05df1e58e3d3e78ecd7ca1185981fa94ffc9ba52252f83367652c9af81c7823460c99122428738e27e0","ssdeep":"12288:skd1R3IZyxY5tlZT3VqvRo9/rpTIO16vUrk376BI1pc93YmUL6b+xUAagAEi3i:su1hI8xWtlZT0Zurpj1aUr276rc6b+xn","tlshash":"6ff4230ad31054a9cc56d07eeae4e3a4eb74dea8ddc337477b9e5a572f012e02d2486c","first_seen":"2025-12-20T05:15:45.724463Z","last_seen":"2026-02-06T10:51:41.249678Z","times_seen":4,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=27","date":"2026-02-06T10:51:13.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 415\r\nOrigin: https://tdska.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":415,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"language\":\"en-US\",\"referer\":\"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=27\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5697032,\"extra_params\":{\"first_request\":true,\"zone_type\":38}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 06 Feb 2026 10:51:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://tdska.cfd\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22be0c561a273bb8ef771d5370fd249f2a%22%3B; expires=Sun, 06 Feb 2028 10:51:13 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5175,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b3ab38fe377ad1399d2046e83ed9342c","sha1":"6d2dfc1742d887ca0af2761cfa389fb04642c851","sha256":"a37e73264ab7b75d64907389da61d9f8daa9bfe60019c4f1e37e03c1a275c31b","sha512":"f33c5078e32e9015560405aa5977043f5ee4ddf66668ac2085d8db409e77662a18db96f466080dbeed0d0e5c68e8e756c9714fd3a9d496b8bf05e6a1708e3949","ssdeep":"96:vLBFTZBxBqav2oSoGoorooCDFhTtIhUHq1oLt1l+jNUVntvkMLwKSOtawY6sLrMg:3T/Dqav2Vl3r3CvTtIhUK1kIjNUVK2wL","tlshash":"98b1e826ee0d5cdfb3da1699ecab7d8e646c2107d9c0ce636988cd14a2e83548323375","first_seen":"2026-02-06T10:51:41.25115Z","last_seen":"2026-02-06T10:51:41.25115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":60,"dns":1,"connect":22,"send":0,"wait":123,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/4/2/step-sisters-nicole-murkovski-and-sofa-weber-get-fucked-hard-in-the-ass-by-robbers-nick-morris/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/4/2/step-sisters-nicole-murkovski-and-sofa-weber-get-fucked-hard-in-the-ass-by-robbers-nick-morris/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13983\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 02 Jan 2026 23:28:06 GMT\r\netag: \"69585486-369f\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dy1m0gnk0fXJIRIWJT0UWHIsjNPfOcagmwVWw7HRpwqMcWXwDI4V8wwwbwiyRMYm64ewM9PvWOTpU4fyDtWrPpH%2B%2FyAUHLDw32Tev%2BIjhEjo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c487e56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13983,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"aaf0bb32fdb33e50cdd63e42ae4ad071","sha1":"bebfa436f4b036ade0060f86623e8c95199a774b","sha256":"030bbc26b84167aa38aeac10f07305fb889640de466eb762c17492062682b3c2","sha512":"0dc8e03fa2c3692c2e5be244e7e9987eb3f94bde5c3ff7f2577da20b358dacbe10dd02704bbd30a9cd82771572d524b790a173ebd20317d4579f82489c914f3b","ssdeep":"384:BCXT29LdgTDGYAWMWQNZvckxb3EnHmdlHn:995gTyYZcKab3fdlHn","tlshash":"4e52c02f05a6b197f25892b24c7c1601dce1c742c99c1447beb1789e821fad6ca772cb","first_seen":"2026-01-17T14:50:26.898335Z","last_seen":"2026-03-18T22:56:46.902587Z","times_seen":265,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/7/1/asian-teen-screams-for-more/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/7/1/asian-teen-screams-for-more/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12025\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 23 Jan 2026 04:23:40 GMT\r\netag: \"6972f7cc-2ef9\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVuvsG6ALKqi%2BQjA3%2BJQd%2FWGqoRyFa6Sv2QUJOLHrSH6EupErBUcEP8Ey2zXPTNCfAAG10bb2TMvBTao9sgH6GY0lUwa8kMWpg1Iwu8ULwS9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c588b56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12025,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"91ee8da5a936b9a254f3d1b2bbcfac75","sha1":"6fb0b760f79b022428c4a3551ee08992dcb0adba","sha256":"93596b687137f57e0a7850d14d6c53add591077349f5cb95de5dfb967c4bb014","sha512":"9213597841bf25fd82f8c0513ae4c319ed4a5439a643e4c9172169669084af5e81b21c02556a31532634a2dc77a6114bbde6752afba74e34b74cf9824746360b","ssdeep":"192:rMVgAKfaXVrii81VUWRLEEdtnAAN1IWBw4v6r2u/tQwZ9jbuqQaJfBeX6hW/HhoK:r8zZ81VZEU6mCWBmCu/mwzjQaneK+WsH","tlshash":"6d42c0a7ef61457ec4096cbd800a7a267a02c7ca0970f3ebb107a6f51c966528f89578","first_seen":"2026-02-04T08:13:25.910007Z","last_seen":"2026-02-09T11:47:03.87617Z","times_seen":257,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=44","date":"2026-02-06T10:51:13.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: application/javascript\r\netag: W/\"44ec981015dfcc69e362ab1cc85\"\r\nexpires: Thu, 05 Feb 2026 19:21:20 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3+wYAAAwBuUwKAQH3DQAAAAwBw7WvBgG3pQAAAA\r\nx-77-nzt-ray: 2a494a15463ed5c1c6c7856989641b08\r\nx-77-cache: HIT\r\nx-77-age: 1787\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186417,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39746)","md5":"9e6ef1d47c65910c8d8451844ab4766d","sha1":"44ec981015dfcc69e362ab1cc8529af2ef6aaa9a","sha256":"fd235aed55f904c458271f48a38222120c4a7100e389746e6cefef09ea3f720c","sha512":"c66e3423c9e18b74bdadd82f409f7e1fb92cca51c8276b1edfe1a22142c99f7933973a365852f50c8313cbee70f213ae9af7b0ea0381f652a3fa08b988ec05c3","ssdeep":"3072:g0Nq+z+28VOk2DG2HgMaElwnRehI1fsBHiswLslYznqCXMtpo:3+28VOk262SElwnRrfs4sM2po","tlshash":"d0045d983792307441d3a12daaff53093371506ab80f4884bb4dd9a427adeda51a3ffd","first_seen":"2026-02-05T11:29:28.547266Z","last_seen":"2026-02-06T17:16:09.922883Z","times_seen":117,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":69,"dns":41,"connect":3,"send":0,"wait":2,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/6/9/shy-step-sis-wants-to-know-if-shes-hot-family-therapy-alex-adams/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/6/9/shy-step-sis-wants-to-know-if-shes-hot-family-therapy-alex-adams/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13158\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 26 Jan 2026 12:29:48 GMT\r\netag: \"69775e3c-3366\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hoxUFpwyWQbvC%2BoxQ1pUzdoXq3xpkIJllXQiQ%2FjlrZT8EOlnEBI67xXbWUIJ0uaRQio4jhbsA3v5uz6wOxJqiZY4Yu03SdTz34Jza13hkyYk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd86756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13158,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"915803d73bd78df590e8e0cef9d1c137","sha1":"28b0dddc8db3117740791b83d4bba18da86a47dc","sha256":"71406de6b9008a6b91dfc13b13fab1ebbd3d1b3c5e7a9633aa52dfa690009094","sha512":"13a55bfd4c291c47236badee22c161ae7664f3b26f615445005ac2a4c8386877871a91461c1a27527b0d308d12b85d51c07845cb68a57136758d57057e173011","ssdeep":"192:oZz/mWzg8MFmmaB89O9MasUe0Yppx4FKJa0FoSsm+Ajq9toSCPf:oN5zDMkB89qaUeX48TCHGf","tlshash":"d142b032d7c4990bd51eab76b07249b3bd802e8750cb8932f8d310df651114c86babf8","first_seen":"2026-02-01T06:18:55.611417Z","last_seen":"2026-02-07T19:58:01.332856Z","times_seen":90,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/11/3/5/cute-busty-asian-fucked-by-a-huge-cock-ai-generated/thumb-main.3.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/11/3/5/cute-busty-asian-fucked-by-a-huge-cock-ai-generated/thumb-main.3.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20249\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 17 Nov 2025 13:50:09 GMT\r\netag: \"691b2811-4f19\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kKRdxaFQi8arnLa8IbpyWUD%2FjoQRrcuUX3STX%2BE6a%2FA08zb8iN03UPFRK6Kbk%2BSt1QEQEuBnd8Oc6GPzRsVCETRgRLhpl3B8CEzbFUZ9qWT1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c087556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20249,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"35fc81450bc904302952c46a083a3e8a","sha1":"45c4d12db29671a41ebc65ae0756a5a0d0a589e0","sha256":"440330afdce43351a1b71d180c60eff264a94912db3ab2ed2044b77e9ea36892","sha512":"bb38fd7e1a195745e994951368974263161ecb23e2af524d5ba8763fb6f4c728994d11136af84adb187e0847da79fd64d998e2c5074d7f78b247e6b33c0d5d6e","ssdeep":"384:EQ5PuBh70CGK8oIBpRwZOImofqRuCKt/ancTQdFzLy1GKHzqNYF:gZjXjIDRZ/RuV9eF09TqNW","tlshash":"f292e18f26977551f67828fa6b180d2f3b2c1a218e93c327524b48c5253b27e62c0e96","first_seen":"2026-02-04T08:13:25.882435Z","last_seen":"2026-03-21T01:00:21.77602Z","times_seen":265,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/5/5/blonde-slut-in-a-short-skirt-needs-her-pussy-filled-with-cum/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/5/5/blonde-slut-in-a-short-skirt-needs-her-pussy-filled-with-cum/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17876\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Jan 2026 10:22:30 GMT\r\netag: \"697b34e6-45d4\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1xfQpF%2Bq6YjnSGSKmK%2B%2Bhofh5Vm9QPxAoh9K5YVqR%2Fq6qyGz20P9JEZLgsPfNoAYgpVk6kq%2Bq4MYLOMZyvRh%2BTaA7odxFK33CTXAaT%2FYtwu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c588556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17876,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"99d88d3e789d4c540d13a7c9d41868c1","sha1":"b6cfb58aa9f3ed6ee48714a37c27d746ea26bf49","sha256":"1014519af7023d325266e03b9b96736dbfca913e45f905b41e1b58853bc6e288","sha512":"1971f4f59281a33d36bf7f70ffeb0be63120cf1629af9552603f067974f17f7a69b0b4064f0c27bb26ce2ef936bc5f8b975be403d9a70badd84a4f3005651111","ssdeep":"384:C+w/1hq00WIvqohg5atL99FSetDG8G3e6ZqkniheEKYzTE6aN5T2e+zh:CH/qxvqoO5mLTvtDG8chZNfYfEcF","tlshash":"d882d0c6175b311bf08801ec4af00a7fbdf9d603d393abfae806bae143165a54d80b51","first_seen":"2026-02-01T11:13:16.08358Z","last_seen":"2026-02-09T11:47:03.881629Z","times_seen":263,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/dd/WsnBaLXORD.js","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=44","date":"2026-02-06T10:51:13.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tdska.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 23:20:47 GMT","end":"Thu, 12 Mar 2026 00:19:11 GMT"},"fingerprint":{"sha1":"EE:BF:84:A0:BA:A0:31:1B:89:D8:01:C2:20:46:7B:87:73:96:88:B7","sha256":"BF:1A:95:8D:E2:64:B1:92:00:5A:B8:28:AD:EA:D1:9F:61:49:BF:55:B6:D0:90:6D:FB:0D:75:AA:DD:E1:CA:52"}}},"request":{"raw":"GET /dd/WsnBaLXORD.js HTTP/1.1\r\nHost: tdska.cfd\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 14 Nov 2022 13:22:47 GMT\r\netag: \"63724127-6d53\"\r\ncontent-encoding: gzip\r\nage: 3817\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=16trQmFszouXZ8OE5NcM0UU%2BRSZMaiX9sAYwPqGe8Pxsp3s4MrubnYkiylw2NIF5o1xT9phJrgS6ZU9TWOSb%2BNj5fqzyVOgYmQ%3D%3D\"}]}\r\ncf-ray: 9c9a174ea9611525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9253997ad088b6fb84712b33d6440312","sha1":"782b916dd47bedbaee7c2313caf07028380d7375","sha256":"e47142b1e847b928bafe231b4c3283fecb41d19792fa1670c8d3b71ba8d75c1f","sha512":"1d8440a8052f26c110e50a83f84ad4e8880983a634a5219f259bdbe2a288b04926cf7c49d761157a9c659aff6a7c1e62bf7c5f46d256200e34e8ceacd609ae6c","ssdeep":"384:sDxlmqkaByOb0MMDgneElUUf8CBbghiYXpZRWotaO7cuifS:GlmqQMMIeEuUf8CBKpZRJtaO7c/K","tlshash":"15c2638d5df360649167707c6fafb6083170d0233249cd20bd4c9ba89f98d6989b5fda","first_seen":"2023-03-13T02:53:30Z","last_seen":"2026-03-15T08:05:23.499538Z","times_seen":361,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/dd/WsnBaLXORD.js","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=27","date":"2026-02-06T10:51:13.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tdska.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 23:20:47 GMT","end":"Thu, 12 Mar 2026 00:19:11 GMT"},"fingerprint":{"sha1":"EE:BF:84:A0:BA:A0:31:1B:89:D8:01:C2:20:46:7B:87:73:96:88:B7","sha256":"BF:1A:95:8D:E2:64:B1:92:00:5A:B8:28:AD:EA:D1:9F:61:49:BF:55:B6:D0:90:6D:FB:0D:75:AA:DD:E1:CA:52"}}},"request":{"raw":"GET /dd/WsnBaLXORD.js HTTP/1.1\r\nHost: tdska.cfd\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=27\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 14 Nov 2022 13:22:47 GMT\r\netag: \"63724127-6d53\"\r\ncontent-encoding: gzip\r\nage: 3817\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7AURGJNLyoxJ%2F3YGYbwdL5HVyqNk1B3RuVJSfluabqfQlwkXFILNSZhLjWjVF%2B%2BXSFz7JqoaNst1CCYZqS0bdm0rVDmSq1RkQ%3D%3D\"}]}\r\ncf-ray: 9c9a174ea9631525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9253997ad088b6fb84712b33d6440312","sha1":"782b916dd47bedbaee7c2313caf07028380d7375","sha256":"e47142b1e847b928bafe231b4c3283fecb41d19792fa1670c8d3b71ba8d75c1f","sha512":"1d8440a8052f26c110e50a83f84ad4e8880983a634a5219f259bdbe2a288b04926cf7c49d761157a9c659aff6a7c1e62bf7c5f46d256200e34e8ceacd609ae6c","ssdeep":"384:sDxlmqkaByOb0MMDgneElUUf8CBbghiYXpZRWotaO7cuifS:GlmqQMMIeEuUf8CBKpZRJtaO7c/K","tlshash":"15c2638d5df360649167707c6fafb6083170d0233249cd20bd4c9ba89f98d6989b5fda","first_seen":"2023-03-13T02:53:30Z","last_seen":"2026-03-15T08:05:23.499538Z","times_seen":361,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/12/4/2/i-caught-my-step-bro-watching-my-tik-toks-then-he-creampied-me/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/12/4/2/i-caught-my-step-bro-watching-my-tik-toks-then-he-creampied-me/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15696\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 08 Dec 2025 17:56:23 GMT\r\netag: \"69371147-3d50\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=37FCimcCBo81icrA1rN0vdRiGH3U7HkIRMDE0cuWs0U2JH%2Bxrz15fKiXrjDAU2okCGql81UkP6x2m85L3g%2FZ6BoYbLoWZXK1uFSpPPAj1VAJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c88b556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15696,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"99d5ac3ac09dc5f05ad6bf536ab0156c","sha1":"50da999bcc0a8ff2a2299368a4ed3ec65c879d36","sha256":"f57a86173a2bcf535087beb8ef1c916c3c15fb580ed76c99fb0ab512026150f1","sha512":"4ab1b8361671eb6b63a47f1edf2abb0691a5aa84a702dad308ea9f147973e626943477aff4e7febbc183878312b161872501b7611aaca9db2c568bb010c3f929","ssdeep":"384:b6kKRCEJfKVGlEHB/u4IQtM8D35IyCYMyzvHiy1l0zC:+1CcGsgtUQZTFCFE1GzC","tlshash":"5262c05132945649e836bb7943e49303c3d5bd4e4190caf886e1b8ca27b6bbfcfe1201","first_seen":"2026-01-01T23:17:59.970682Z","last_seen":"2026-03-21T01:00:21.856762Z","times_seen":260,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/4/3/gothic-anime-girl-with-a-big-ass-rides-a-big-cock/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/4/3/gothic-anime-girl-with-a-big-ass-rides-a-big-cock/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23145\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 03 Jan 2026 19:25:19 GMT\r\netag: \"69596d1f-5a69\"\r\nexpires: Sat, 07 Mar 2026 17:45:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 61568\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jOYj1bklGCdwRvsCKumbE3VQdHOlHvWAXVZgXD58k2%2B7EfUHLsZLi%2BVwARQjxvpNyrXUP3RFaPDrN4oMoKtl6NVRoANTYGmPae4h0yhO9poa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c98c456c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23145,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"4b61c705f3cb080641c19483140e435b","sha1":"70ab8cfa9562755f5a78504c063b191736027107","sha256":"48f55447f56d5c1761bdbae57e38566dca4b161f5a29524a53a83ad2a7e6c415","sha512":"4ab520da1e0a232f8c6720afc04cb85d948e25500e084b31528c512c5a586ef3fccc4d6c4380056fde09d4919ddb9ff3387be30647e17667b8d46766749132a5","ssdeep":"384:TI2SJsZz3/eRxJcVhF/sFMmm5PANd4DoMVDpYu8Sac4Gg7/u1wPObMkfwEodWcVM:8+/WcVhiTm5PANd9MPYoS64EeVM","tlshash":"afa2d08997ec368be83730bb55f43033144d8350111a0fe7d8d3e9fa716a6a68bdd161","first_seen":"2026-02-04T08:13:25.918137Z","last_seen":"2026-02-09T11:47:03.857247Z","times_seen":212,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=49","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tdska.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 23:20:47 GMT","end":"Thu, 12 Mar 2026 00:19:11 GMT"},"fingerprint":{"sha1":"EE:BF:84:A0:BA:A0:31:1B:89:D8:01:C2:20:46:7B:87:73:96:88:B7","sha256":"BF:1A:95:8D:E2:64:B1:92:00:5A:B8:28:AD:EA:D1:9F:61:49:BF:55:B6:D0:90:6D:FB:0D:75:AA:DD:E1:CA:52"}}},"request":{"raw":"GET /d/native1?d=casibom.icu\u0026pos=49 HTTP/1.1\r\nHost: tdska.cfd\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casibom.icu/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\ncontent-encoding: gzip\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: xt=l-OBo__XXmE; Path=/; Expires=Fri, 06 Feb 2026 11:51:12 GMT\r\nvary: Origin, accept-encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WoEVA8IYaH8cQNfMk5%2B%2BXbvjhd4BNlRnP53X3gjTBlnAk8a0rDogU3FCLR1j4yVeLEhekgFls7Eh6Qnu%2FOAs4e7dc5mVmWk%3D\"}]}\r\ncf-ray: 9c9a174afcc256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1012,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (547)","md5":"488adafeab769e46c60b0922d9073e8a","sha1":"b27bd1e44517a0556bd43ff8787f5cf0f971d4ad","sha256":"3626da278a2724343fa7ac3cd3e2e597daf50e6e23b8b41fbbaf82e9e9383e0e","sha512":"ca6b6563c9c984c8af94a37a4bf62a4ffbb7fcde320ecc1178eddebbd7bcbb49dca0e8bbd1d7b7220abf4f53a7781c01e6a1a117259adcaf3c26586d924e1965","ssdeep":"","tlshash":"561121f0bf15cbfc42550ce81ef7e64ee535a7672c16d4881b8f4d689580ac94c49c6e","first_seen":"2025-10-12T13:09:37.07795Z","last_seen":"2026-04-03T19:31:20.715216Z","times_seen":393,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":55,"dns":13,"connect":4,"send":0,"wait":83,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/9/9/she-really-likes-it-rough-extreme-sex-slapping-and-cum-and-pee-on-her-face-eyes-and-big-tits/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/9/9/she-really-likes-it-rough-extreme-sex-slapping-and-cum-and-pee-on-her-face-eyes-and-big-tits/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22450\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Jan 2026 16:30:19 GMT\r\netag: \"696fad9b-57b2\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mwnx5R5QywzJt%2F%2Fs4fr5ijziyWrL5wWFZuZxT7ogFfC9HV%2Bzidhyo3PJu7sNzr47KsB6jaQBzdFOYZIYgIoWSe9XoqC0UGov9lwpVc8LyHk7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c589056c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22450,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"874bf4a5ddc66b3c20f22e198b17c61f","sha1":"1d7f94e1c6f71dbc57be5f589e299d55f41c9e84","sha256":"2a37d2175fd4d1f52fc8e372624be59836a538622d044dcb31dd95a4c052677b","sha512":"45c8a6f5a7ef0d3e34ef5c8f51eaf9c2031378e689afeb74e881138934916e839557485f7b3ca436b2aa314b0770fe509356d85e56b1cbe14c75dddb9e25f470","ssdeep":"384:3YJom2RZBUv7vdoc5fcDc0bOLQnLeQKo6k8TwN6kCgqzKO2Ipus3:G2RZB+BociDc0bEGLZtXTd0pu4","tlshash":"caa2d0198e536ac1e7512f7108ee5f66b19bdf582c038bd6b2e469d0c236e628bf4204","first_seen":"2026-02-04T08:13:25.867981Z","last_seen":"2026-02-09T11:47:03.906748Z","times_seen":263,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/7/5/full-video-impact-play-gangbang-spreading-and-flogging-a-horny-kitty-vanessa-cliff/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/7/5/full-video-impact-play-gangbang-spreading-and-flogging-a-horny-kitty-vanessa-cliff/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17014\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 24 Jan 2026 20:49:10 GMT\r\netag: \"69753046-4276\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kuROBRP25yrIgaBhDyYKjLY1V%2FZtIIcRz6PL5KgdtONgq07Y1mWG3z%2FG%2BYd7Wq%2FZCVSgxSu0KHxUuc%2Fa19Br1430c16U%2BLnyQq913l1DSELJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c589456c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17014,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"49032d2ece5798a57eb6efea7da9d338","sha1":"5b22e6076843502bee6bd629d18ae1436de25af1","sha256":"9cc0dc8ec80e337fe8ea8ec99a870b616033be2b9cdfd86f3428c80535ed5276","sha512":"bbb9a3a62e2524535601f946bfe199ed74c76a5b1ce0e92578d6d5f7ec4f613f8b7baf56ec2a014cc7b87f34956433acbbd0f241c881c820bf9f93e5325a9db6","ssdeep":"384:pRg4jr8E98+6O78UMWJwkOZ4zxhr7aGvrp6HvO8pp3OpdRuvC:bgE8TO7LJnioh1rEH287+jGC","tlshash":"7472e12b6ba9d3c0f538407ce0fa06d80049a7cd5bb2154f633575f806be4faa518b79","first_seen":"2026-02-01T01:32:53.381468Z","last_seen":"2026-03-09T10:07:24.840179Z","times_seen":253,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/6/9/at-home-massage-turns-into-a-happy-surprise/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/6/9/at-home-massage-turns-into-a-happy-surprise/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16603\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 12 Jan 2026 03:23:25 GMT\r\netag: \"6964692d-40db\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6O%2FmQFuxq3tKcS05WynfKcN43k7ObxIFfd0%2BYaZd0ZwixphplJG6Yd%2B%2Bsbz1NwJjSOPHjqAZQ3dW9JNoDzCb6zlW1ZLrcIAnTibrPkPgA77h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c689656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"076101b040786fdb6aa6623c6218aecd","sha1":"3893c35216064b07256e760a83ee14b1320f6671","sha256":"2cbe401c7acf05d39c2954b3f45fed79ce06e9811ce840cb5ca59b0a8c1be31d","sha512":"429f88ff5c6deebe7e3ac8d73e54b5e7d409d8ce904680944c69ac07b867167a1cb98c47ba304dbaef754fc29a04d38c7196c06e5306740ecc9b0669088788ac","ssdeep":"384:ACcDDDMdG5vtaeyEwotfL/2m+hBcAv/EvLdwsE5i+p+kfyes:ACcQkDaeynotqZh2AvMjjcwkfyes","tlshash":"f172e137f7156b28f82b3476e1d772fd25eddce11116a0019c43b1ec8dba4aa86b429c","first_seen":"2026-02-04T08:13:25.886865Z","last_seen":"2026-02-09T11:47:03.909304Z","times_seen":262,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/2/6/4/home-alone-with-my-moms-hot-bestfriend-sophia-locke-part-ii/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/2/6/4/home-alone-with-my-moms-hot-bestfriend-sophia-locke-part-ii/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20683\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Feb 2026 23:41:45 GMT\r\netag: \"697fe4b9-50cb\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kCXixuN8oWXB7cB0eAB08Fr%2BrRLPNUWHVmmUxlDc%2B158yGu7crCod%2F%2BoqD98cJqfBliht15Uwy3lwVaSEVIPd0EhUntsOM1E1lPc2YkCfF7H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c689b56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20683,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"0e2ca22b2ca6659db3ce15a95b451e13","sha1":"116131f5716549506ac0b172fa4c9cd34bebfee1","sha256":"1f5e31410287d0ad743d712944beb9d8f7032b29b410cbef8fc15494644569f5","sha512":"050da55b60947c3ccdfe831b63665e5f8211efdadf2adc8c8a72d32fe2a34aeb007e703a85206c8e5f660e4939368d3f1d9d727189713880cc0ca0cf8ae1cd4b","ssdeep":"384:UV+zYyUxsy5YVxOXNgkzQ5gNVtg7WWC3aXEg6dryGnJEBNnG68:UVAYNT5Yr+Q5geN7XGUGneBNn6","tlshash":"e992e0d7b1d0b198e42e01bfc41855fa5720aa016de042d9b3c02ffd18bebd0ee58a0d","first_seen":"2026-02-04T08:13:25.84264Z","last_seen":"2026-02-09T11:47:03.930088Z","times_seen":262,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/7/4/9/getting-a-dick-in-her-ass-in-front-of-everyone-was-the-last-thing-she-expected-while-lying-on-a-public-beach/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/7/4/9/getting-a-dick-in-her-ass-in-front-of-everyone-was-the-last-thing-she-expected-while-lying-on-a-public-beach/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22686\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 09 Jul 2025 10:49:33 GMT\r\netag: \"686e493d-589e\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t4AmzM5cVuJVk%2Bapg%2Fbt5k%2Bk79DzQjx6h9O8McI4wCpaBlKZmCvN3d1eyF%2Fb2diOUcpS%2FCEzfh25O%2FWdS5cwWst5ErQxcZ%2B42HJd4jdUVbdC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c689a56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22686,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"e6b9750cfb876f3df37d4c542994a72d","sha1":"dafb8f677d811b0b83a2f6dc0ed7f1a78afea3c6","sha256":"d81069087c0fc10c1cbd6df84aa4a47e4bde61f61c13fba3c73c0ad7addd2c41","sha512":"3246c1766fbb20128b3662680cbd7269d5aa8c63128815da7b2dd2ca39a73736bb369ca3e41c534de35ebd4053d1e9ee0cd4b339ae3f4b4e38eb827d42f044fc","ssdeep":"384:chd17B92FPvJHH2ZcZ9mNeQq5BW5moBDAfd9wBdxmnnsqoCpwlmicB6wY05PJv19:cRcHH2ZcZQIQP5m2DGd9wBPmnnsqoCpp","tlshash":"84a2e16b5920f2f4d176c0bed8d561ea3628c4c993d2ea7b3940d9d947ee083c7c286d","first_seen":"2026-02-04T08:13:25.852288Z","last_seen":"2026-02-09T11:47:03.971455Z","times_seen":262,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/8/7/secret-play-time-with-innocent-step-daughter-cassie-2-sassy-household-fantasy-scott-stark/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/8/7/secret-play-time-with-innocent-step-daughter-cassie-2-sassy-household-fantasy-scott-stark/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15973\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 15 Jan 2026 06:29:24 GMT\r\netag: \"69688944-3e65\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HmUQXv%2FaOJFJXIKd%2BFsj77bk3eAcEmr5GEi%2FiGMuOAJaMAZMNRsnJqg%2Fn0d8etSlZhtdfUH4%2Fe16O9exXHXnC1rDBqVFwR5scVqQG%2BixM3%2Ft\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c98be56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15973,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"7a684acba5a356fd17618746a02b02fa","sha1":"ec2ec8cb599bef641f75a4a5d9fd48fbc3fa9653","sha256":"554d100c3bd10d52d3777f6538a3b1851bab96a6db21a34cd0455f5623b5e2aa","sha512":"1c54cca6c5cc0bc1740aba23afeab8ba7c85b6ea7c87fa97c10ddaa66f8e12706cd3e44101f0b2e3f47bd5599108c5c8331e663bd8c7e00b1dbea7039035f59a","ssdeep":"384:dzaOXzIj9GT3KiJvieuRVnIlBv/SMh33wOoJ5L:dFQ9GDK9euRUPQ1","tlshash":"1272cff05118711a6eaf103959d50fbc6fa43e9f74cd2693e9d524e8a4860c2bc4ab91","first_seen":"2026-02-04T08:13:25.828923Z","last_seen":"2026-02-09T11:47:03.916761Z","times_seen":262,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2024/5/9/1/virgin-bffs-are-grossed-out-by-the-idea-of-touching-their-stepbrothers-hard-cocks-sisswap/thumb-main.3.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2024/5/9/1/virgin-bffs-are-grossed-out-by-the-idea-of-touching-their-stepbrothers-hard-cocks-sisswap/thumb-main.3.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22204\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 24 May 2024 17:27:10 GMT\r\netag: \"6650cdee-56bc\"\r\nexpires: Fri, 06 Mar 2026 23:54:54 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 125778\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZPN9vL6YGIWBQh9RXtoHstcTefR8Hp0VpZnWaMJ4NV1bRBRuQzYJiaguKnDdPc0wY0yY9mWym%2BXRZzcWppArFLsNRJxeOsEnZw8NoT6ZCHP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c588656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22204,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"678524886bf4e5f59d2808c022731f93","sha1":"1172c78f1f0d1ae7fb245002f01eefb5275a8bfe","sha256":"7a1a1ac98a5dbc7bb62583bbe4c9b7f18a5aa8e88ec429aebc221e00c224e41a","sha512":"35ba10f8809bcc707b561901dcd129b2d9f794a7f796bbb9a9a60f72e896594a07e6ca8d211811162df5c3b4142211d95b2a9d15542398de8e3b4baf030eff27","ssdeep":"384:SS/eH1QI/nTwnq9dHKRBI09z5EJRcrLhpIt41Jh9HQLVtWsJWhsUHSN:SBH1QO0n+qbT9zmInY4Lh9HoW2VN","tlshash":"c2a2e05adfbb1855f81d3e77f66e7a2dc41c7d05213d8303a3d8a29f4d8a4951ca1029","first_seen":"2026-02-01T02:25:33.40446Z","last_seen":"2026-02-09T11:47:03.965807Z","times_seen":259,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01QUU7DMAy9ChdYZDuOk+yb7yGBOECatmiCrWgtE0g+PHEmxGLZsmw/vfdCQLID2oE8QNgH3KPXjC6DY3IYWA9Pz8qoZfz62K7HcVq25dPV5aQpSRbShIlZFEHEM2uQHMGDBkiaAAmJFUmShJBJMahXaEHBjlvnADhoBH19eeyJLQi0VWNuWFK2ISX4RiADVfLjABFSykFqRg8Z5jpNNGAR9r6dg27j+l5cncfWIyRDUoyIZJwxR6PpUm6xM4xH9tR0tQfax2X9OVfVu8ObQYPevJC1lvdH/yF/Jq2ilWYX+2p1p/K2Xq79N7GTOkwm16QhM+i1XI5lOy7nvjeQ+mlo/geYSSrxPFMIOMdYppIFYOJfUhoDbtEBAAA=\u0026cb=e2e_6985c7a1675649.98138082","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=49","date":"2026-02-06T10:51:13.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01QUU7DMAy9ChdYZDuOk+yb7yGBOECatmiCrWgtE0g+PHEmxGLZsmw/vfdCQLID2oE8QNgH3KPXjC6DY3IYWA9Pz8qoZfz62K7HcVq25dPV5aQpSRbShIlZFEHEM2uQHMGDBkiaAAmJFUmShJBJMahXaEHBjlvnADhoBH19eeyJLQi0VWNuWFK2ISX4RiADVfLjABFSykFqRg8Z5jpNNGAR9r6dg27j+l5cncfWIyRDUoyIZJwxR6PpUm6xM4xH9tR0tQfax2X9OVfVu8ObQYPevJC1lvdH/yF/Jq2ilWYX+2p1p/K2Xq79N7GTOkwm16QhM+i1XI5lOy7nvjeQ+mlo/geYSSrxPFMIOMdYppIFYOJfUhoDbtEBAAA=\u0026cb=e2e_6985c7a1675649.98138082 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://tdska.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nCookie: __uvt=s%3A32%3A%22f2b0811f5d22f6d2cae8e6e8f4732a03%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 06 Feb 2026 10:51:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://tdska.cfd\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casibom.icu/main.js?v=35551","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /main.js?v=35551 HTTP/1.1\r\nHost: casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: htt=-NcWyE6sPOc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 03 Feb 2026 16:19:11 GMT\r\ncontent-encoding: gzip\r\nage: 3817\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7xxXOEGgunj9gQHt%2BeDafqLVUsSXi%2FwAN8Tr8bKSAxMybLs3dgYbh5pJxZA1OlmFY%2FFsVwF5rD643suA0r1fFQX%2B3oOaLGS8UA%3D%3D\"}]}\r\ncf-ray: 9c9a174a383556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22954,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17478)","md5":"cdffa49621923905c35356f5a00f7d28","sha1":"d623864e1137edd6c355528c747accb21bd7e637","sha256":"b2ce64dda42d89d7bfb20041dca08f76bdc2436a580b9d63b98116d1e9f4b8fa","sha512":"c10e1060c786146bed9c286771fc0591ebc4a16ad0b556306914552c294e25c2b2f613a023fe2743bbf6bf4e629ade1f84a1946db3ce6a9922917c7d508ef4c1","ssdeep":"384:lB5SZknG9LvsCPT+KVTdvPjZqrNDD0qyH4ArzyqjoNeHVGyWbThU0LzR5PhevfaJ:lyiGpvsCPT+edvPjZoDD0bH4Ar2khWbt","tlshash":"19a20ab4332479b346ee92fbe0bf9b84f171219994058054a439dcd93a38e8612b7fb5","first_seen":"2025-12-21T05:35:43.471571Z","last_seen":"2026-03-22T20:52:31.858668Z","times_seen":276,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casibom.icu/flags/0.png?v=35551","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /flags/0.png?v=35551 HTTP/1.1\r\nHost: casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: htt=-NcWyE6sPOc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 140\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\nlast-modified: Tue, 03 Feb 2026 16:19:11 GMT\r\nage: 3817\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPiyc5NjqnJAxsmKfK%2FlSG5ziipUaoKdrVxgyn%2FkbFXvjoF5SFRTCRdG70Ij%2BXsxEM%2BgTMmiDiN4jUEVtUcOWLZ%2BmFvBO4UypA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174a383656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"1841443641af694c6515e15166b04b68","sha1":"58ad8383ddb30d9e9c27a563712b3f0747920384","sha256":"b8f06a19ef29e66c792c9c2828a5a49206b70759b20492c1b827300de8228b1c","sha512":"c2ca036fd9c9deed8255d516a6007bf68bb7a1c04be59a2b7162dc343117a1b1773a593f81ba012f828a7381735b5ac4f4ef0583d449c4bdbe9b079fee2d165c","ssdeep":"","tlshash":"51c02bc2b2408960c01102634c0c4020c8e3ce548e24637c00c58cbf073cd0090f4316","first_seen":"2023-04-13T07:06:13Z","last_seen":"2026-04-03T19:31:20.732792Z","times_seen":523,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/0/3/step-sis-caught-me-jerking-off-but-i-fast-seduce-and-hard-fuck-her-pussy/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/0/3/step-sis-caught-me-jerking-off-but-i-fast-seduce-and-hard-fuck-her-pussy/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11001\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 Jan 2026 12:30:00 GMT\r\netag: \"6970c6c8-2af9\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t1Yw8xzRh7ac1dWgAa0SLHinjlVR08T1RtwDWjeqLabvNOkaT%2F1cRcfcj5Upj3Wnb89xHI3ywujAZU8IVHZCpliAAoAhkZ%2BLBdGZ3Vt2PUJa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c588f56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11001,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"8beea088b9d64a2451323affd9efb4f7","sha1":"d09a0ca6bdb1af91244f4196858633b3c056007b","sha256":"332299bde7b478460ee67c591d19775facdcd36a04d931c00775e4177e9556dc","sha512":"b6fd38cecf5bda131823d577dccff8a4b1ed1ef69e0da19e9040bc992699cfbfd95f279f40e7d66071a03c741dc6a22fdef259a251c58e1f7187aec2978f804c","ssdeep":"192:VuTPGdQAi3CdtIqCczHjo92beCv6Xd4iFdRyfi5jzrkZu19UaHbEeu6PACkXNFI:G6pdt7CCY2bXodbd8fieufUaHg/6P8Xs","tlshash":"ea32b04b5e656509e2ae8634c2ba3591e717f5c73ad2014703b3ebfd4839893a5484f1","first_seen":"2026-01-30T03:04:02.637001Z","last_seen":"2026-02-09T11:47:03.884473Z","times_seen":266,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/3/6/horny-step-mom-uses-her-stunning-body-to-seduce-her-real-stepson/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/3/6/horny-step-mom-uses-her-stunning-body-to-seduce-her-real-stepson/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21148\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 28 Jan 2026 20:06:25 GMT\r\netag: \"697a6c41-529c\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AWDSlzCw805GN5SryXNkLarvyYb%2FS%2BY1hg20pRP6B5xadU1S6FKVrwxvr%2Fn7SzxrAOT0MEw0AGzTNN0hn9ZrrR2KTvdw2RYJCSIqXPi2ozvK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c98c856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21148,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"47fca4e98b155b5a7b47d28eb8363f55","sha1":"33084b82e415fd18ef97e649972547325af66855","sha256":"99d587b79d050cca5bba9a97680bde1702264cbaa461dba5d3e7d7afec003f55","sha512":"70f5ba0fb3a9fc7327f5860aeec8eb36647592d7347c0919178e638e5f0c18770c8856f0fd039b8891586ccba3b4ed5b9ba95b2a58d3410738dd0742ef51222e","ssdeep":"384:6fqOoVRYh3/J8AhZavyijhG2tAIIalTD7S74XPM7SjomFRoSES1+BxJ3dgkpxQ:6f1IEmkYIilTSU3jomFRoSR4xZdgkpxQ","tlshash":"7b92d08e10d1762dc7bd20330761a3d2bd898943dae2d35ed7065f8cb48487b8fc6969","first_seen":"2026-01-30T09:38:41.531849Z","last_seen":"2026-03-21T01:00:21.830784Z","times_seen":264,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/39f41b299fbab3751b35f41d5e5d43052e8f425c.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=25","date":"2026-02-06T10:51:13.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/39f41b299fbab3751b35f41d5e5d43052e8f425c.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1028588\r\nlast-modified: Wed, 19 Nov 2025 07:24:12 GMT\r\netag: \"691d709c-fb1ec\"\r\nexpires: Thu, 26 Nov 2026 09:00:28 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3htxeAAwBuUwKAQH3FCYAAAwBT3/Y+AG3WwMAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c785695e2b4a2b\r\nx-77-cache: HIT\r\nx-77-age: 6216838\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-1028587/1028588\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1028588,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"26b8bf5721825f9efed86dbca0ab31d8","sha1":"39f41b299fbab3751b35f41d5e5d43052e8f425c","sha256":"6d6a70b9e626d08d31d4cb606a81d475121a5e52c84015be950d685c26192e15","sha512":"3ea7066f56e47b2c0abe70f8134d1ffa80e26a61139cbdcb3778aeed05b8c24fb98404bdd75eb7478066dc37d1c80fdee3c0ce3306b6e83348dda6ab4960c204","ssdeep":"24576:eVDj01k8oGqpq6ihMluVVK7DHk7YUpIfenQnfrtBAN:eZ018GfJMl6K7LKYS/nQnTzAN","tlshash":"ee253351b3863261fa090c76716b4d07ff46f59270232b5a7a4e84df6fcb880497be26","first_seen":"2025-12-19T06:23:54.123988Z","last_seen":"2026-02-07T09:20:19.406434Z","times_seen":40,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":48,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/3/8/boss-and-friends-take-turns-in-my-ass-while-my-sucker-slaves-away-at-work-hi-to-husband/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/3/8/boss-and-friends-take-turns-in-my-ass-while-my-sucker-slaves-away-at-work-hi-to-husband/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15010\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 28 Jan 2026 09:24:07 GMT\r\netag: \"6979d5b7-3aa2\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MUg441exZPbM7gAarvSZCCK2t8uxCvD9Dx3dfVjUk7s%2BNbbZo%2Bmv9lqEX2fO%2BIFs36p618%2BoGiHj5tUhyXNXssfCoZxtbFPlQXbhHOfqnrEt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd86956c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15010,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"9c9be13ac10095c2f4d89a446e0eb09f","sha1":"050db14f10ec4e482b521d4000a07b07a31edfe4","sha256":"fdafed609cbe08eb93ea494e3ed4de6d513ed662bc72c9725cb8da86557de70a","sha512":"242d458aa3331126d3926a6937a55e598b5c72abf7b7502d5210afdc0b5816dfb4a03e787f470472cb86e6a32e4abb76ea72d6c831a18c67dbc7ee3b81709794","ssdeep":"384:0iC6qG6RTOyql/ny2iPHjQwuSWU3v153UDcJ0srePN7kNI5p3:0362wxyjPD4U/15guePN7kNIH","tlshash":"dd62cf0163f767cbe47257395a8dc625c059221b2408d61e1e7bbce5096efcb4fe4a32","first_seen":"2026-02-01T04:25:35.140555Z","last_seen":"2026-02-09T11:47:03.959206Z","times_seen":251,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=27","date":"2026-02-06T10:51:13.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1265075\r\nlast-modified: Wed, 15 Oct 2025 17:38:31 GMT\r\netag: \"68efdc17-134db3\"\r\nexpires: Thu, 15 Oct 2026 17:56:55 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3AqqVAAwBuUwKAQH3qzoAAAwBJRPCLgG3jQIAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c78569e902a331\r\nx-77-cache: HIT\r\nx-77-age: 9808386\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-1265074/1265075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1265075,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1d0dcaa94cf3ab342325fe2bb0e7f313","sha1":"27f220120d94ed095ef4cf9aa0eae63e2f5550e3","sha256":"151fadf43c958099f0a7a6cb650c2e7497b50b839727d3e4b68da1ecf735e208","sha512":"a6d8ab253313ef53c81ec412c00e7816261331222e8f9af4ee5e27e3d5a4cba575be67887a318ea77002630c410bfb0f1fbf084ab601cc71d662cfa77a43a82a","ssdeep":"24576:su1hI8xWtlZT0Zurpj1aUr276rc6b+xUAatEyjkifAZOiJR6:suX3Ivd0ZI7aN+rcurAaSvgoR6","tlshash":"0725330e930059b9dc11927fd9e4a7b9eab49ee8cd8337637a9c1b931f412e01e15c8c","first_seen":"2025-12-19T01:04:36.860962Z","last_seen":"2026-02-07T05:07:29.786398Z","times_seen":52,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":5,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/8/2/3/hentai-virgin-teen-getting-a-massive-creampie-in-her-first-time-subtitled/thumb-main.3.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/8/2/3/hentai-virgin-teen-getting-a-massive-creampie-in-her-first-time-subtitled/thumb-main.3.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12522\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 29 Aug 2025 10:24:07 GMT\r\netag: \"68b17fc7-30ea\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBAliIxYjJei%2FNRyi41A9u7yjah3bFQK2rkSAOPUNcHZ4ZAIKoGorJcP4LT%2F%2BPOt51s7x8d0WOpiW95iGeZCsF2niH6VJ6uH5gLQEMkMar7Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c387856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12522,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"6c6aa8900d83ad0456f70c368af48906","sha1":"8de8d6ab4092495d6d6cbb16fcd6b0817c6de077","sha256":"c7b1c4f83d5310a8b6407141867032a0e43db6305e7924442188ba54dcbf7e6c","sha512":"12cd4220d2b896c77369912bf9ed42ab766b5b3be87a3fa0ec58dc7ef64510e93f52f6ba74414ecca75ad56edc6f2a4e7af1f88bcf6a16b31012498f357bdff1","ssdeep":"384:u1t330WgUkgbH6w+ti+ZicMgTaQCnIwNpMlrc:ut330WgcbafZ4cbTaQCnIjl4","tlshash":"0742c0012c4128dece27863a3c9475f46d9bead69ca47d2b1cb633e5e8700de5f6029d","first_seen":"2026-02-04T08:13:25.919376Z","last_seen":"2026-03-18T22:56:46.923754Z","times_seen":255,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/8/4/blonde-babe-angel-youngs-gets-her-ass-fucked/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/8/4/blonde-babe-angel-youngs-gets-her-ass-fucked/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17688\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 16 Jan 2026 02:18:10 GMT\r\netag: \"69699fe2-4518\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=peiMKDrK5i1lZ0vwTpjKhTjbK2b4C8%2Fn3wTuZE1%2FSqDG%2FevQZbvew4xhrBU1Ex4eeiHzTJylU1WXNuMeucgdyp0bCseCGQqGJb8pnLgqpQyR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c689e56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17688,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"53b65b50754cfccd1f4c7c4c62ec717a","sha1":"c5df662342c0049648d5f606e52ab58fe89965fc","sha256":"4540c51fab0acce3a22ac18a16152be1b5d7b44e204497a00668bd5f9f776783","sha512":"a28f583669163b2c902ac0f7a851ac5774646582279c43229a1f63b0f36d80b09f7f3ebe2410bc0cfcdf24074285620f3466fbf37eaebf08e6b597a5585b723c","ssdeep":"384:IVLAB9v+OnMCrx0+aRUk8W/oEoCKKTBwCWGBGr9oF/jshc:IVsb+OMCHaRc7CnTBM9m","tlshash":"2482c0813388e697f5fe33330496468ddb41e7e4d8894b372d112bf6ceda696224ca44","first_seen":"2026-02-04T08:13:25.849902Z","last_seen":"2026-02-09T11:47:03.927528Z","times_seen":262,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/2/6/1/love-in-three-dimensions-with-ginormous-tits-shaved-pussy-and-girl-girl-activity-enjoy-full-hd/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/2/6/1/love-in-three-dimensions-with-ginormous-tits-shaved-pussy-and-girl-girl-activity-enjoy-full-hd/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16198\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Feb 2026 18:28:16 GMT\r\netag: \"697f9b40-3f46\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4dALKg3hk5RfYZ4KjXNtsZ96wmHKSWp9pNfU7AESO3z0mMM807mS47twbVb2wgV1KiKfSnTKubNQ%2BAwa9yFD%2FREDTSjePP32CLwpr%2BfA4U2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c98c556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16198,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"ed05190f0679d58e5119a38463ce9e06","sha1":"62539e3cbec29af25f76b7890714ae43ca83c96c","sha256":"ba78413755869ea9061e2b9738718a0ef335334ff44477858c8e595f6021deb6","sha512":"215df71c144c8680693fef3c3af075eb7608bc9a1b7c774935301a53be8cde674782553f88be8c03ebd9b79ce524fa16a11b2cf41f8114628b49d1aa83d60096","ssdeep":"384:ZFYX9YZlGAB07C/ugX/fTwMp1eLbYbH4lVZuY4H2MuALPol:3YXaZtB07mhNp94lVI3H27Ajol","tlshash":"6772d03a6325b12de8f31d7d73c6592066d7cc74abbda7a3361230c82195df78211a6c","first_seen":"2026-02-04T08:13:25.862146Z","last_seen":"2026-03-09T10:07:24.823948Z","times_seen":229,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.pornvideotop.com/dd/QNwkXSVWYx.php?ex-EqTMf={%22objName%22:%22kn4umnN70klpL%22,%22request_id%22:0,%22zones%22:[{%22idzone%22:%225697032%22,%22here%22:{}}]}","fqdn":"aa.pornvideotop.com","domain":"pornvideotop.com","tld":"com"},"ip":{"addr":"185.73.221.189","port":443,"asn":32338,"as":"HOSTISERVER","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=49","date":"2026-02-06T10:51:13.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"aa.pornvideotop.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Jan 2026 00:32:05 GMT","end":"Sat, 11 Apr 2026 00:32:04 GMT"},"fingerprint":{"sha1":"BF:5D:12:EB:33:20:E4:C4:6D:AD:0F:C9:87:47:FE:5C:C4:83:B0:BF","sha256":"E3:C0:57:F1:47:DA:12:21:65:D0:99:32:F0:D1:53:59:0D:AA:B3:48:96:24:72:23:A0:A3:52:E0:32:5C:84:97"}}},"request":{"raw":"GET /dd/QNwkXSVWYx.php?ex-EqTMf={%22objName%22:%22kn4umnN70klpL%22,%22request_id%22:0,%22zones%22:[{%22idzone%22:%225697032%22,%22here%22:{}}]} HTTP/1.1\r\nHost: aa.pornvideotop.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":1,"connect":45,"send":0,"wait":43,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/6/9/yoga-teacher-got-horny-after-feeling-a-students-boner-against-her-ass/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/6/9/yoga-teacher-got-horny-after-feeling-a-students-boner-against-her-ass/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11637\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 31 Jan 2026 07:27:14 GMT\r\netag: \"697daed2-2d75\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l7Nz%2B5DHCE2NC5t0xlG38XUZoq19ZvPdfl2d7OHOFmGOJIM%2F79TugNrE2ot9gQUJ7VlWHlhDKQ3foWpGjocrsBB5PK9YO2siFTusckT2Ha17\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c588d56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11637,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"27b0374c0591fee025dab3bb933d9d9c","sha1":"9bf19b35f2f510848fca14d9eb100b5302b52bfd","sha256":"97b7322b1ade4283d446d8c2bb882d364d3cc12c752f8807de3cf92e76082676","sha512":"7818b6c86afe8f7d479190d7d4f8572056d78742b850e3554055c609e69e2d571205e6b8db8fd035be7069cdf1bf6d125df8a1c5dd92d8f54e1817e1ed128dd6","ssdeep":"192:N0PKhGWmw004pT/0+/lAqh9D0ArJADbFqK2f74Fwk5UBcKrghZQebiY/AscxCK:N0yCIKzD0Ary3x20/5acKkhqof/LOCK","tlshash":"9932b06f3f076763d11556b618af21a36f30e84d47286e14e2023cf5001bdfd196c9ea","first_seen":"2026-02-01T01:32:53.369811Z","last_seen":"2026-02-09T11:47:03.902049Z","times_seen":264,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2024/5/4/4/amazing-asian-creampies-end-big-chested-sloppy-porn-flashes-featuring-red-hot-japanese-milfs/thumb-main.3.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2024/5/4/4/amazing-asian-creampies-end-big-chested-sloppy-porn-flashes-featuring-red-hot-japanese-milfs/thumb-main.3.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16876\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 10 May 2024 16:37:49 GMT\r\netag: \"663e4d5d-41ec\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=55pAaLGIanYJgEe1RASyXhIDRhzvR3Fs9fT0WkxVhdPRTKnb7Gpzx2buOlENVVhUXdobrddmMDpMon1PzEuIjihU91nMT7gz75fOElbcAYtQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78a956c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16876,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"859f93c33b5dc1b1ffae27ea47501129","sha1":"df58f2b5b422d85426f83e98382e40fe577fffe1","sha256":"adce281604971b8c42c9290690e2e1a75dd843ae514d4e38c8de53fd26100b1d","sha512":"4b147e5a117c340b8c8ccead3e4edaaddc458d27d6dc1ed878f8ff3945619efd585c6fd55887d7c18944935a8874ca88c7357364fe696a322746b871ff529e15","ssdeep":"384:w8TNbQFoBzkhC1WOg8s7LzkJ3gLw8aLThN:w8TaFY1WBpLxaLThN","tlshash":"7e72e1d131395415deaed871a1b4ce3801ed963f29bb7fa08184185d0924e9ebbfc9cb","first_seen":"2026-02-04T08:13:25.913572Z","last_seen":"2026-03-18T22:56:46.950391Z","times_seen":239,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/2/1/8/stepbrother-woke-up-with-hard-dick-pushing-up-big-ass-step-sister-and-he-couldnt-resist-to-fuck-her/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/2/1/8/stepbrother-woke-up-with-hard-dick-pushing-up-big-ass-step-sister-and-he-couldnt-resist-to-fuck-her/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19297\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 02 Feb 2026 09:33:49 GMT\r\netag: \"69806f7d-4b61\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rEefIYdmmyLlTGUrLnZHu88XtAO73eeOUuCxxS6IL5MKElqn9aptm95zVvowJDoHgbhysA%2B1Et%2FAxA%2BQ1hyxWTOmNFoii0Y9%2BTVe%2FNjggrxk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c98c756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19297,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"b3b8c08a7f5a2d7a3e398e5b8a3f62e5","sha1":"f3da6ff7e60c8714253baf7121f76d2ff330108d","sha256":"9ef1e64cba503bb5bbd2b6b41e8b7cd0efb289c69cf53c9e225ebf3b459cc289","sha512":"0a38a107bb0bd0523db6b2f6e765d029377bd52b2fc302c9f2b80931ea3d7831bf5a38b05c6077c5281bb383cf9745997785c8a86006d44391b6b97403334026","ssdeep":"384:IrXPcBxgnbG0gfxn4YuA4/q9uOBz2Y4hr/GHoXSfjaAM0tfI5M5iK6O96Jcv:Aaxugfxn4bNOBaY4hr/GHoX6j9M055im","tlshash":"0a82d06e9bbe584399f609b80d9a94bdee184fa8fb9c1ce8250508c0ddc44353ca2752","first_seen":"2026-02-04T08:13:25.875615Z","last_seen":"2026-02-20T09:31:26.59011Z","times_seen":248,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=27","date":"2026-02-06T10:51:13.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: application/javascript\r\netag: W/\"44ec981015dfcc69e362ab1cc85\"\r\nexpires: Thu, 05 Feb 2026 19:21:20 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3+wYAAAwBuUwKAQH3DQAAAAwBw7WvBgG3pQAAAA\r\nx-77-nzt-ray: 2a494a15463ed5c1c6c7856902f35208\r\nx-77-cache: HIT\r\nx-77-age: 1787\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186417,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39746)","md5":"9e6ef1d47c65910c8d8451844ab4766d","sha1":"44ec981015dfcc69e362ab1cc8529af2ef6aaa9a","sha256":"fd235aed55f904c458271f48a38222120c4a7100e389746e6cefef09ea3f720c","sha512":"c66e3423c9e18b74bdadd82f409f7e1fb92cca51c8276b1edfe1a22142c99f7933973a365852f50c8313cbee70f213ae9af7b0ea0381f652a3fa08b988ec05c3","ssdeep":"3072:g0Nq+z+28VOk2DG2HgMaElwnRehI1fsBHiswLslYznqCXMtpo:3+28VOk262SElwnRrfs4sM2po","tlshash":"d0045d983792307441d3a12daaff53093371506ab80f4884bb4dd9a427adeda51a3ffd","first_seen":"2026-02-05T11:29:28.547266Z","last_seen":"2026-02-06T17:16:09.922883Z","times_seen":117,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":71,"dns":41,"connect":5,"send":0,"wait":1,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/1/0/blonde-german-milf-dirty-tina-wants-to-get-fucked-hard-and-deep/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/1/0/blonde-german-milf-dirty-tina-wants-to-get-fucked-hard-and-deep/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16085\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 Jan 2026 12:58:56 GMT\r\netag: \"6970cd90-3ed5\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZ8s9SnqrYJQbKNMNAT6rqPLE4wrMKL4jSMFB8bdgfBbTwRpnPL7jG9D6j%2BAzD8SHOtKRsiS3d6qyXb1QuPoIZmgYjz%2F92yDZJiujTGMZIC3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c98c156c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16085,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"1d5b6343064d9af9172ca5690f182145","sha1":"017de4bbf6ac5ae0dacc95b11536a25ca2826a01","sha256":"3044210c708512c24240938240af1ff2339c5f55a4c5c7115c56bdee6611e48e","sha512":"dbcb43efb8c70e558a8d474c251fe55e74ef8fd314457728adcfea88b9e4f4abe04318e2dedbe8cf4827cc7db79e803b8efd58fb81136a01f83fd48d84eb7ea8","ssdeep":"384:0Jvoxqt+Gpk2eTyRIPYKokyTEx9QU3Q3b/SYA:0JvjcwIPdyqyH6YA","tlshash":"bf72d042cad3f4a3d2760c7682cc6165a3c887c5f73d6773d82d39c00d61af69266399","first_seen":"2026-01-30T09:38:41.506322Z","last_seen":"2026-03-18T22:56:46.855892Z","times_seen":266,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/2/1/5/sharing-hotel-room-with-big-boobed-step-sis-family-therapy-alex-adams-1/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/2/1/5/sharing-hotel-room-with-big-boobed-step-sis-family-therapy-alex-adams-1/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11408\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 02 Feb 2026 04:23:42 GMT\r\netag: \"698026ce-2c90\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ujRuRFx6TwJT9N8qsfgr8D2tmzdUVCGkfgQLCf6IVR0pY33J94aVrdjdQGa3IVGQlRG9Ar3MEzq%2FHeMawgXEXF6MU9R%2BcUYsWS3GSsh6%2BbHj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd87056c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11408,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"55f6fbbf6c953e7079d4affd9bfbdce6","sha1":"2fbb6efb1ada7b76d084eeb138d7f8f41a60a6d9","sha256":"618e8f3a04c8ea144c7bcf40345a88ce938985b3a8f11382a78da6a8301274d8","sha512":"9d48e4f829b38a46c239f1a1576e6a8b2ffca22d066747c24692055230447280368db52f5964e064a5ebc08ec26a0878f3ffcc4fd1b6ff3fafbcc12e6eeb50fe","ssdeep":"192:PW0IyGQCShp0V+0vcZwlD/yhum82swrdpSptwNkXGZNX69RU93C1fCAltu:WHY0VHc+7yhswrdp4tWOES8otu","tlshash":"a732be0459fa4c89fc01097e65fb5abacb65fc0a77766baa1925acd07b280881d314d1","first_seen":"2026-02-04T08:13:25.871495Z","last_seen":"2026-02-09T11:47:03.848272Z","times_seen":253,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/2/6/0/mypervyfamily-gamer-girl-lets-stepbro-free-use-her-becky-summer/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/2/6/0/mypervyfamily-gamer-girl-lets-stepbro-free-use-her-becky-summer/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18491\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Feb 2026 18:37:33 GMT\r\netag: \"697f9d6d-483b\"\r\nexpires: Fri, 06 Mar 2026 23:54:54 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 125777\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nghEZLSBFPx0HZ63J%2F5ch5NMF%2Be%2BTg37z229BP1aB9iXVF85xwl3UzGiqyQAd9%2BaW7gg5eyUtDC8QdWjy2tVlkKGxydR8R6BtVdPuCTWDNFJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c588c56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18491,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"bb4bc16a4954fdc00725d17218b5f49b","sha1":"7cc0a69be546298f74985491fda0105b4ebfdbae","sha256":"d6774b09b3adb070999d840852d57ef33a89ed79ab6361702a66d5954c29c4f3","sha512":"f5fb1e935fb9b495437c1447fc157646ef10660ffc63f5fd32cd2f2c3c8bdac9fa7f80ce86b5a3597a450ef302c77fa82544ad8836c8be6e33b0a50cf1782ed6","ssdeep":"384:rzsWB9RxYvUpAMxgyv0LZWMbTQrQT2cR8ZFrtLMa6MB9LPgGF4V:rzZnYv4V0NWmTXOZka6MB5PFFw","tlshash":"0482e1ef142eb540fc21e3bf806b6b1b7b01a4a805c5029781f194e8298a5f6935b33b","first_seen":"2026-02-04T23:55:26.217742Z","last_seen":"2026-02-09T11:47:03.898407Z","times_seen":220,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/7/0/lez-be-bad-femdom-milf-elise-graves-trains-victoria-voxxx-to-dominate-yhivi-with-raw-bdsm-bondage/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/7/0/lez-be-bad-femdom-milf-elise-graves-trains-victoria-voxxx-to-dominate-yhivi-with-raw-bdsm-bondage/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17134\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 26 Jan 2026 12:31:32 GMT\r\netag: \"69775ea4-42ee\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=thQ56l%2FJUHE7h0adHA0zojj1bOAMq1bhRJBuks%2FxeosR%2BU5bBSwr95nJZ7sFMx4ZN%2F4dw4%2BVxuUjH%2FWVDBEYXdDEpjUPEtMQ8wyZbZOISW6G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78a256c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17134,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"33081186e2c19318583445c9a74bea34","sha1":"f2f1c70e38037ea89ea7ecd488f5c7bd9c30e137","sha256":"b90154b9221932a6e318881eddafc95711115904d8b78e2d9051bb239a6f5920","sha512":"ee6bdf30565e0e443e01b5fb2f806ca91204cb89fb25c6e24fbfe9f74bd35d93334a1e9c6b341ad57e51878c65e0f0b1946ac482fc85f4727bb06e3b2af03f54","ssdeep":"384:CxikI9EsSswV2wsXRdHtsLe9AecstbIMkSaU78ReoGb7:9hyswV2nXRdHVVc/MvaYxZ7","tlshash":"8672d0b0bf693c17ec2b0f3fa1d666209b136e01e75e77819945fadcb1046160b8a26c","first_seen":"2026-02-04T08:13:25.904449Z","last_seen":"2026-03-09T10:07:24.77486Z","times_seen":263,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2024/5/8/2/indian-beautiful-lady-with-her-stepson-real-fantasy/thumb-main.4.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2024/5/8/2/indian-beautiful-lady-with-her-stepson-real-fantasy/thumb-main.4.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16920\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 28 May 2024 17:37:57 GMT\r\netag: \"66561675-4218\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JAbEsncxVw6TW79AaaD%2F1TtJyzMUInm7HUyvgHXK5ypq%2Bh2%2Bsb1LDx7ZCjUj5%2BP1FDAtYXj6lkc%2FU%2FdtDpvAzTJGNY4AEoUOfOKA%2Bnl0OZiE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c98c056c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16920,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"2c5c36462a54a33a95094e26cb260a1b","sha1":"dbceb637d26b0eee2bc04cd0baf9a912b5b6641f","sha256":"24c7cdfa909ddfffd335a19735498c8646686631a3be7bb70514716adcc5ea80","sha512":"ec9c066f66e4df45bb9f8284067c0cf53cd676bb60af9d5f2f03c8da5e1be240f6da545bf10326ddc8676557f2e6c40a68ad397d8f722915eebb81e2e3a23681","ssdeep":"384:bxQaStA/DxpUfS3o35vG8pRuDghfH8dgeMq70jKvqRUnHRsye+i:bGA/DkfYkvMDg1cdgi7pvqOqp+i","tlshash":"7c72d06e329e6e48ce0074b57e10c159e5def6803c552dfb2e4b27c29ba714b0663a6c","first_seen":"2026-02-04T08:13:25.863018Z","last_seen":"2026-02-09T11:47:03.856291Z","times_seen":262,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa.pornvideotop.com/dd/QNwkXSVWYx.php?ex-PBoPy={%22objName%22:%22ynwghE2CXyxs8%22,%22request_id%22:0,%22zones%22:[{%22idzone%22:%225697032%22,%22here%22:{}}]}","fqdn":"aa.pornvideotop.com","domain":"pornvideotop.com","tld":"com"},"ip":{"addr":"185.73.221.189","port":443,"asn":32338,"as":"HOSTISERVER","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=25","date":"2026-02-06T10:51:13.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"aa.pornvideotop.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Jan 2026 00:32:05 GMT","end":"Sat, 11 Apr 2026 00:32:04 GMT"},"fingerprint":{"sha1":"BF:5D:12:EB:33:20:E4:C4:6D:AD:0F:C9:87:47:FE:5C:C4:83:B0:BF","sha256":"E3:C0:57:F1:47:DA:12:21:65:D0:99:32:F0:D1:53:59:0D:AA:B3:48:96:24:72:23:A0:A3:52:E0:32:5C:84:97"}}},"request":{"raw":"GET /dd/QNwkXSVWYx.php?ex-PBoPy={%22objName%22:%22ynwghE2CXyxs8%22,%22request_id%22:0,%22zones%22:[{%22idzone%22:%225697032%22,%22here%22:{}}]} HTTP/1.1\r\nHost: aa.pornvideotop.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":2,"connect":32,"send":0,"wait":43,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=27","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tdska.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 23:20:47 GMT","end":"Thu, 12 Mar 2026 00:19:11 GMT"},"fingerprint":{"sha1":"EE:BF:84:A0:BA:A0:31:1B:89:D8:01:C2:20:46:7B:87:73:96:88:B7","sha256":"BF:1A:95:8D:E2:64:B1:92:00:5A:B8:28:AD:EA:D1:9F:61:49:BF:55:B6:D0:90:6D:FB:0D:75:AA:DD:E1:CA:52"}}},"request":{"raw":"GET /d/native1?d=casibom.icu\u0026pos=27 HTTP/1.1\r\nHost: tdska.cfd\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casibom.icu/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\ncontent-encoding: gzip\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: xt=l-OBo__XXmE; Path=/; Expires=Fri, 06 Feb 2026 11:51:12 GMT\r\nvary: Origin, accept-encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I93Quiy62jxqNNGIFYA7tJOw31naINLaMCb5xc%2B08ZlgNeoe2F1DUnbZ9V3%2FUpiU3IClk51fOIFmwRB9ZvYhzRPUMK2L4R0%3D\"}]}\r\ncf-ray: 9c9a174afcc156c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1012,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (547)","md5":"488adafeab769e46c60b0922d9073e8a","sha1":"b27bd1e44517a0556bd43ff8787f5cf0f971d4ad","sha256":"3626da278a2724343fa7ac3cd3e2e597daf50e6e23b8b41fbbaf82e9e9383e0e","sha512":"ca6b6563c9c984c8af94a37a4bf62a4ffbb7fcde320ecc1178eddebbd7bcbb49dca0e8bbd1d7b7220abf4f53a7781c01e6a1a117259adcaf3c26586d924e1965","ssdeep":"","tlshash":"561121f0bf15cbfc42550ce81ef7e64ee535a7672c16d4881b8f4d689580ac94c49c6e","first_seen":"2025-10-12T13:09:37.07795Z","last_seen":"2026-04-03T19:31:20.715216Z","times_seen":393,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":59,"dns":11,"connect":4,"send":0,"wait":91,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/2/1/spin-the-bottle-got-out-of-hand-and-ended-in-a-huge-swinger-orgy-with-squirting-and-lots-of-cum/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/2/1/spin-the-bottle-got-out-of-hand-and-ended-in-a-huge-swinger-orgy-with-squirting-and-lots-of-cum/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22477\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 12 Jan 2026 13:17:06 GMT\r\netag: \"6964f452-57cd\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hyNa4Jz17XbC6FWKLzP7C13kzsOKrCqoMA0IWUGQL27Jj0P8Ce2cX459cckyyhw%2FdFZowhYyYYSe4j%2BJNnljXMPKKWEm3i10YbmE5vyYt8ET\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c88b856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22477,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"60bd7d75707a46b7d63098dd664db75f","sha1":"46b1d551cadeae3c8bd77bdaa74e96622f918c17","sha256":"e983b763f1729131f912e35cd62d41149914617057442843ce3fe56af7150aa9","sha512":"86bee3330fb692612196b04c7aef76c68d868ff6b46badcca6c9adfb5bde0d3e959f7f18ff791984088a8d527bbccd68812aa13301443dbf7946849f46a098af","ssdeep":"384:Vt8unYZy/3TgsAaX82/+nM7Bs3vMK7cWq8iwU/qGT60xgNePW0VB4+B:H8A7/jgM/+nM7Bwv8X8thif7W8B4+","tlshash":"8ea2e00052a58e6f885d28fa0a3e13c9f2d22a57dc738bd55c3658f3f9ae1d6d352d20","first_seen":"2026-02-04T08:13:25.868977Z","last_seen":"2026-02-20T09:31:26.585793Z","times_seen":262,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/3f387bc3a18ce3508e9125b84e774e00a6e9db25.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=25","date":"2026-02-06T10:51:13.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/3f387bc3a18ce3508e9125b84e774e00a6e9db25.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6254\r\nlast-modified: Wed, 19 Nov 2025 07:21:51 GMT\r\netag: \"691d700f-186e\"\r\nexpires: Thu, 26 Nov 2026 09:11:05 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3oDdcAAwBuUwKDAH3FMsCAAwBJRPCNAG3xAAAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c785696bdf7123\r\nx-77-cache: HIT\r\nx-77-age: 6043552\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":6254,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cb9328f338d9e4d5b26d36f8e168da7d","sha1":"3f387bc3a18ce3508e9125b84e774e00a6e9db25","sha256":"669465ad467d158f731973a388075ea72e03c7211f367c6cd42b32502c118e87","sha512":"6d9849f78a83dfb76ea965d4ebef0cad75c096f5f363c2df7515b8eda0f9b1e187a0cebe5ea04e155751456b3cd09aa190a4310d1ddd1db024eda49955c987e9","ssdeep":"96:IPM9+tjad6hHPP5sR3Cg8DRWry73RNUfY7v2skqctkeBtwTS4pL:qMwFadWP6Pa3XUQ7KkeDwT9","tlshash":"38d1a09548d0f9c14418b6cea427f2317cd94cda0a2e6e8d21e174b717bf30902df176","first_seen":"2025-12-19T23:26:42.09696Z","last_seen":"2026-02-06T10:52:59.395002Z","times_seen":14,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/1/2/village-weekend-gone-dirty-redhead-and-brunette-get-pounded-on-the-kitchen-table/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/1/2/village-weekend-gone-dirty-redhead-and-brunette-get-pounded-on-the-kitchen-table/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20298\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 11 Jan 2026 17:13:00 GMT\r\netag: \"6963da1c-4f4a\"\r\nexpires: Fri, 06 Mar 2026 17:40:21 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 148251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1gZAuH45s3wqbq8BiNoYK27swxXnvW4k3ARvwzZ19gWoMG4v4UjMZmYSJI0WeVzsP74aXUazHgOHkb%2Bw58BVuOPVdc7M645GGQ1F%2BimGpSBq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c88b356c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20298,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"52fd0a32d1047eb519533ecc149550b3","sha1":"6d47922956d504e5687cbe02406d1b09507904a0","sha256":"f44dfe9b0aec98740d193e403010eaf6f896ebc81fc45c3ba2778df71d5bc2af","sha512":"8d6a2db46e0002512aa329a7b455d86361a7909930bbd99d6e113eaebd37e80b2f95fdd17e0aaf9e3a8f7208f7920a6aef65cca306b72f03c11a91cd2cef52f6","ssdeep":"384:wYQefdcrlRSBo4bTJVGJL7KtVXqcUbE8mH81KvOOOfqEyS64d4q2iEX:KrmdaPgHB2OOfqEySu9","tlshash":"d892d0171b6db293ff0dee30208d463590755ee22ec6529eb60a60d85e320e48fc5b9f","first_seen":"2026-01-30T03:04:02.69211Z","last_seen":"2026-02-07T21:03:05.686237Z","times_seen":203,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/12/2/7/s5e6-why-sexologist-hunny-hanna-stays-in-share-bed-with-step-mom-mistaken-fuck-tease/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/12/2/7/s5e6-why-sexologist-hunny-hanna-stays-in-share-bed-with-step-mom-mistaken-fuck-tease/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21035\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 19 Dec 2025 00:39:09 GMT\r\netag: \"69449ead-522b\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RD3A09OrYExwIw3VSurX8PLF%2F1oK9O1XizFXEJzi%2BdQmIwHEd7Xut7W1UdOWP%2FTN7qxSdTom3AlDQo9hSfkrkw5%2Bn2c6d%2FZjAlMRQ8p1CWJR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78a456c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21035,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"9b35d034f3b47e29cfa8e74692e94318","sha1":"829cd9921d95908a6a68332b65f6ffe94af9d7ea","sha256":"c6dcd04218de0aaa5962c956ccad9dae20e64496fa13d0eef6e4df4d2cfdfb30","sha512":"8f2c97c779c0065403fc51cb288b6973f4a79d796c4592dfaccc5bb634f148c195eef8768ec23c04eab10fa9032a3998b6737317594fef415cef13cdfe29f9da","ssdeep":"384:1F+G29K48FrGfZBvYvQ81GI4HByTu3iqO74dmwXuuTH/AcJvhgNsKkjRK7acH:nN29JvfZpQ1GI4HByTuSqLmWVTHNJvbm","tlshash":"6c92e1662b70b1ceec6c3b3311e3bba01d8751dbac851646e25651f081936c4cfa24e2","first_seen":"2026-02-04T08:13:25.879574Z","last_seen":"2026-02-09T11:47:03.942399Z","times_seen":222,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2024/3/4/6/german-mature-witches-fuck-orgy/thumb-main.3.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2024/3/4/6/german-mature-witches-fuck-orgy/thumb-main.3.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15733\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 12 Mar 2024 11:50:38 GMT\r\netag: \"65f0418e-3d75\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9KIhoqUDW72lua2%2F9piSl58Oc36z0zIz61ET2Nmu%2FiYhhr3jaBbiUY6eldyCQTDy%2F8PjJU3wx0ZNaLvNS0BkzE%2BGH62un6sCaRb%2Bpx6PdMAI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c98bf56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15733,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"5c04b8f77291acf6b3b48a08a57d93c2","sha1":"332ea2c8f7b83572af205a78b5cc2b9cbb84ebf3","sha256":"92546aed3fdd51cc72ef5d551cdfa932354012cec389302b412205c444eec2da","sha512":"432ffc7dca4a953a78e8b83106955b94d7ba9730db4f1468624e215b979839a3bd80f2fc2a0539a811bf881b5c9e49232123c5c3003936d4a2071904f0210ffc","ssdeep":"384:FbZ/0N+deUEljNrBbGPN+R1olXE0WpiwXC41yBBh:JZFedR9qYUlJIiwlyHh","tlshash":"a462d1b221f41c2cec1577322195cc656ed96300946623257ec60dedb46dbf19e90eed","first_seen":"2025-06-14T16:25:40.695292Z","last_seen":"2026-03-18T22:56:46.915217Z","times_seen":240,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casibom.icu/main.css?v=35551","fqdn":"casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /main.css?v=35551 HTTP/1.1\r\nHost: casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: htt=-NcWyE6sPOc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: text/css; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 03 Feb 2026 16:19:11 GMT\r\ncontent-encoding: gzip\r\nage: 3817\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNAKlJjiUxq%2FcH2J5wTO5j42M6twBF8Tv3ccZFTDeeHLgM5NzU3dq8aIRPJbb3lH72yXkyusP18WcVCrGTnDOiGDvRCczLIGkg%3D%3D\"}]}\r\ncf-ray: 9c9a174a383456c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27779,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27779), with no line terminators","md5":"adc023a9a658363dfcc2f35f3a48b56e","sha1":"3b3477870bb495f175585cbbfabc2617d11c349d","sha256":"9de60505254afd6ae5ac8ae8a1a5ba6bca8dfd04d408a55026b4b304e80bed9f","sha512":"5823198f17742be40dc6edf5e7d3d70c9e2a817732ffe9ac0ec1197597e1b63c3203a5ba8d91a8afc6f9cd84d345618387c6d55f0bf4ffbdffe00bed0f7648c0","ssdeep":"384:aofRs2yH8FMUdLqaVueMB3yTX06djRyS0ODn:aofu2dLFaOX02Zz","tlshash":"30c2ae50c886207fba53e13969d057852c3991d1e8a20ffda46fb67c67c20e89df3da4","first_seen":"2026-01-11T21:21:55.372706Z","last_seen":"2026-02-20T09:31:26.629425Z","times_seen":264,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=44","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tdska.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 23:20:47 GMT","end":"Thu, 12 Mar 2026 00:19:11 GMT"},"fingerprint":{"sha1":"EE:BF:84:A0:BA:A0:31:1B:89:D8:01:C2:20:46:7B:87:73:96:88:B7","sha256":"BF:1A:95:8D:E2:64:B1:92:00:5A:B8:28:AD:EA:D1:9F:61:49:BF:55:B6:D0:90:6D:FB:0D:75:AA:DD:E1:CA:52"}}},"request":{"raw":"GET /d/native1?d=casibom.icu\u0026pos=44 HTTP/1.1\r\nHost: tdska.cfd\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casibom.icu/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\ncontent-encoding: gzip\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: xt=l-OBo__XXmE; Path=/; Expires=Fri, 06 Feb 2026 11:51:12 GMT\r\nvary: Origin, accept-encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9kshjf5bZU%2F2zTpht2HDd8XtpIB21kjQtVpIBFtRfm679uSzS6SI72ugBXDTkUJB7BMYwASWs6EPRdaXikhTO0DN6s5DVfM%3D\"}]}\r\ncf-ray: 9c9a174afcbf56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1012,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (547)","md5":"488adafeab769e46c60b0922d9073e8a","sha1":"b27bd1e44517a0556bd43ff8787f5cf0f971d4ad","sha256":"3626da278a2724343fa7ac3cd3e2e597daf50e6e23b8b41fbbaf82e9e9383e0e","sha512":"ca6b6563c9c984c8af94a37a4bf62a4ffbb7fcde320ecc1178eddebbd7bcbb49dca0e8bbd1d7b7220abf4f53a7781c01e6a1a117259adcaf3c26586d924e1965","ssdeep":"","tlshash":"561121f0bf15cbfc42550ce81ef7e64ee535a7672c16d4881b8f4d689580ac94c49c6e","first_seen":"2025-10-12T13:09:37.07795Z","last_seen":"2026-04-03T19:31:20.715216Z","times_seen":393,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":56,"dns":17,"connect":1,"send":0,"wait":90,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/0/4/her-friend-prepares-a-wild-gangbang-with-double-penetration-for-her-18th-birthday-rossa-vaxx/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/0/4/her-friend-prepares-a-wild-gangbang-with-double-penetration-for-her-18th-birthday-rossa-vaxx/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17199\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 21 Jan 2026 12:40:38 GMT\r\netag: \"6970c946-432f\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wkfcSfam%2FgD4z9GnUN%2F3OgVw12MsnJKFL5CRFRFU1ct%2Bdu6XPTlj%2BvnWvwZFN0dLTpTh95UYir9DDXyexAuedTEwu5nwGDOqIzZvHvFWNwvV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd86a56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17199,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"cde56b02931d841d4875375402639247","sha1":"17fba84ba4637eaaf623c8f42f903c569db45111","sha256":"3f989f0c6271c361b31a2b7e5a3871bc055c3607c9d2d62f7debfce62e489f7d","sha512":"594e0ecc856132cbd701cd1c8377775b560602309441d0b9d61f1033b2187c86f84341ded6ee43c65b5dfdf710e3fc94e0eceb543910b0497189ece3b085be68","ssdeep":"384:wRzLIkSl4knpVmflJU6S0KQ22h1CAuP308Gx7/fJEZ:w+9TnpVmlJU6S0K32hU/0Lxf6Z","tlshash":"b772d07e93d1e403e078912fb5192bd4336c9b2059748017896916cce2cfcf099b68f9","first_seen":"2026-02-04T08:13:25.903268Z","last_seen":"2026-02-09T11:47:03.941537Z","times_seen":261,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/6/0/2/college-roommates-get-revenge/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/6/0/2/college-roommates-get-revenge/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19092\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 23 Jun 2025 10:28:03 GMT\r\netag: \"68592c33-4a94\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6OhkWUB9%2FWwV%2BY298kGX9lJ%2FcH5WPe6bgem%2Fcss3jfa2GC7oZ3N2mAh6uveecp%2BmzC5tF0IyCPOZwORePErYVULrMgW0Pa78mnIVfERGezPk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c487956c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19092,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"8bd6dac4a58e2b18aa20417c1fec3cfa","sha1":"0419a6540e080d60f83e57fff9598a79836c3802","sha256":"2e84f7bb2e52ab8e9f0c92f1a075119b7ac37f97fa00e9d938a59043275d41bd","sha512":"6b4a0e3043a9cabcdae746fba20150b115677356dbc7d0f2c00322bad3d1f280d82d4e5ba24938717dc2d746bcd6a483fdbcbea63ca61dcc087953d9af5df487","ssdeep":"384:oIIgUfXXc+X/+KMmnpT7Zv1q+3oulePZdvObAW8tc+rloYf5w6WcG8b:SgaBHT773/lOuYvBf5zo8b","tlshash":"4882e13772507411df793ff8ed8919bad0c85801b13658899ff6b9a07249db8f29431c","first_seen":"2026-02-04T08:13:25.839359Z","last_seen":"2026-03-21T01:00:21.7376Z","times_seen":217,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/12/1/2/bonnie-blue-gets-her-milf-cunt-absolutely-wrecked-by-19yo-pretty-boy-jak-white/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/12/1/2/bonnie-blue-gets-her-milf-cunt-absolutely-wrecked-by-19yo-pretty-boy-jak-white/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14662\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 22 Dec 2025 01:37:46 GMT\r\netag: \"6948a0ea-3946\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQgu8CpL5G5%2FkAAjnFPiAE3tSXFvLLJHIgDpz2nCFNugXLI%2B5ES0sEbqRfJvo4%2FLOkb0eEh%2BA3OqLLZEcU357P90qsguDk%2FZLf2vfvx5euYz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c487f56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14662,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"8a0ebf2b043011c2ddcd565696c6067d","sha1":"7ea6da59590c8760d482b79bbe45bcfd1a15396f","sha256":"27c690d34fd56305601256b2b0584b93c9fca183ad63b4a3d75bf7cd01f6bdc1","sha512":"45e237db28c75da3d0a9f3b149683a87ad44ba65199d4e4dbcb7cb7a8e6406c3333052f844ef98364865dc7818cc800394b3b094a941dd9ab6d2a7beb0ef0029","ssdeep":"384:wa1M7XpZFdQww1sItJOfWQ5vee7lDXMUDIKPucNnx:C7XplQ95ufWQTlDHIKmwx","tlshash":"0862e055f7418405f02a8b3aec927f1f7b086cdbbcca3d13b08393da9f68492591b166","first_seen":"2026-01-11T01:13:05.606901Z","last_seen":"2026-02-09T11:47:03.877245Z","times_seen":264,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/11/5/2/young-guy-fucking-friends-stepmom/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/11/5/2/young-guy-fucking-friends-stepmom/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21191\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 16 Nov 2025 13:12:42 GMT\r\netag: \"6919cdca-52c7\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2KDAmnF04Vvj7vLANAQIFHIoiZjj3SlMj%2Bn983rsvPFnB%2B5ZRQZvunbqtN3Lg5NbZhliNqj0VL7wx1E%2BAxxu64chtPB04Nu1YIwJz0db9%2FK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c689956c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21191,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"e29a1285afb0a37634227ebac4db87df","sha1":"412f8b4ca235a4c619a065886fbdb5a03b310034","sha256":"12111b3cbbf29d9f8b05316da4067a12119c80bb003583fbc7a00524368fcceb","sha512":"8017e6e6b2c7fa3ab0696f58f7ab33a836b56e6df07e138e03e5d56207a89a900e3ce3904cb825a481cfc1230fb9e7cf4fcce4bcb7b6170280dccd43a03a6ee2","ssdeep":"384:QczN3TvUZpLwNn2P8Bd3koDkGCSDxN7QSsMS0xnp/hAuwsOHIr4Di:QczNywhpBd33DulS4CZAuXF","tlshash":"8d92d02d13ab95bbd5378f71cbb8dc22e49a401672ea66f576d108d0de4a24246e313c","first_seen":"2026-02-04T08:13:25.898322Z","last_seen":"2026-02-09T11:47:03.964584Z","times_seen":262,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/4/6/big-step-sisters-play-with-your-penits-family-therapy-alex-adams/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/4/6/big-step-sisters-play-with-your-penits-family-therapy-alex-adams/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19342\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 31 Jan 2026 12:22:47 GMT\r\netag: \"697df417-4b8e\"\r\nexpires: Fri, 06 Mar 2026 23:54:54 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 125777\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVtgcaYrVIMoHCLuaAMMqEdMdgpRnEBMcUzgefMTwWJOv0ZrUarREsAtEVcSbh3MNINJGNjRU6B%2F1wRDlg112W1rZTMuX7oX5Y1X1%2BYuL7YM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78ac56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19342,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"c2d829fa4565e2317b49fd0f029fa8db","sha1":"8faf164f33069af312279956c4d8b01f1ec5ad9f","sha256":"5ca04f5e6c7d4f45277790979cf73051652c06a1f170af1de5f0cc8b74fa705c","sha512":"8a23714ef29babe9d3b712855ef60c60c0cb30e554987d7ea16b5a1072c7163b87ff10845906676e149ff35bdbdb817cbecc448c7b670e85f283c68593ee2b20","ssdeep":"384:R2O4lx88tSK3AFtDlvEMb4WHvgmD33Kr2Sxo1i3sceasW:R2Hx8l++tDlvEwHvgmDNSxyi3uasW","tlshash":"9b92d0039d2310fde09e165144a6f73df2522a2577d1cef39e122978a086922bef3710","first_seen":"2026-02-01T06:18:55.59424Z","last_seen":"2026-02-09T11:47:03.87396Z","times_seen":263,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2024/11/3/2/pussy-eating-close-up-my-boyfriend-makes-me-orgasm-with-his-fast-tongue-4k-pov/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2024/11/3/2/pussy-eating-close-up-my-boyfriend-makes-me-orgasm-with-his-fast-tongue-4k-pov/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13944\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 01 Nov 2024 12:48:18 GMT\r\netag: \"6724ce12-3678\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=siw%2B2zC0wiSSFs5sUaPLceoQcs%2BgdPzsI5Y1hd2z0tXnE%2FbmP6ED0Q8VJuVyP5l55TRhC1HYeWkfjz2JL56vlc71qdFCACtHffm48upxPTon\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c588e56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13944,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"8d7924273694b9b18f0c4fda4f5fe096","sha1":"d19c31b5664f1f1645607fb3555c228ff52a58c4","sha256":"ca7c1ea5ea8468d2d609d89c8dc71d0a479310c147ca2427b7a019baecae5422","sha512":"6e55b91c447c64e6fa741a0662d95bee70a6e723ee037d98169f651d84b296b99035a4c7bfff7ef9e64c3fac82200838055e5aa13a948d124f385e750a8e62f1","ssdeep":"384:WBwvXKNjUHNTLPlcxxPQk3h2ct0Bi4/01:8ww0plk3wQW901","tlshash":"8f52d0094bad4d86c53b4378006bd2b3fbe8dc37b20e6d1317a0a5ccba15752984d92a","first_seen":"2026-02-04T08:13:25.877907Z","last_seen":"2026-03-21T01:00:21.771185Z","times_seen":266,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/1/6/sharing-a-hotel-room-with-my-hot-asian-co-worker-evil-erotic/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/1/6/sharing-a-hotel-room-with-my-hot-asian-co-worker-evil-erotic/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14212\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 11 Jan 2026 17:25:13 GMT\r\netag: \"6963dcf9-3784\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QY7j0DkrGsi7LotSnjs%2FxV2Q3ZD5cr%2FC7btpz9chXrmMRgeZJ%2BCwTx16Uv7vjsYfNKQ7VlyKhTq8SEtbGrq%2BVyvnD2m5%2BEjfbU4Jm5FHuRTk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78ae56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14212,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"02164776b10112c4f8ff6e3b1871f72f","sha1":"b435aea55656e5796a836db28cb0347fe447243b","sha256":"66e024913b43ca3e6746a5a95262066e360dce49cbecd9e552b33e517336d689","sha512":"8426dbbdfb59e3a8f43a3f4d11744012afc34a545e4655113710ca85490673041dfabdc9a0b988512b3ff75d44962209a763f1b24a156430bb09ecd0bb2a151e","ssdeep":"384:OsY55nOTadDRd9ddJYmBt7+0YRrpImxZ7VB6XwQSQ5Hs:Os65nhdDRj7CBrOilVB+wQSQq","tlshash":"fe52d1791b26ca08cc053bf7a07bd44e4ff99d3470b713a4708a26c19ebd1a78897268","first_seen":"2026-02-04T08:13:25.88122Z","last_seen":"2026-02-09T11:47:03.918478Z","times_seen":261,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01Q4U4DMQh+FV9gDVDotfvt75lofICuvZlFtzO7c9GEhxduMa4ESuD7wgcElDZAG0gPIFvBLUYtGAoEpoDCunt6Vkat/etjuR77OC3TZ2jTSXNOJZFmzMxJEVKKzCqpDBBBBbJmQEJiRUo5iRRSFI0KZiQOtiwAsOgA+vryuDqaEahFn2xcUvYiZfhGICf1sZVIsfdDReCUccQymorSBravGxx06fN7De3QLUfIzqRhQCSfObgWpVXKzTbOiciRTJc90LVc559zU70D3hZ06m0X8tT9HvRv6W9Jj+jB1sW1NYdTfZsv1/WauA4N5C10acgMeq2XY12O03ntO0ntknZPoDbYBQSlxsa9S8972rOw/AIs4dsE0QEAAA==\u0026cb=e2e_6985c7a1671466.02046295","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=44","date":"2026-02-06T10:51:13.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01Q4U4DMQh+FV9gDVDotfvt75lofICuvZlFtzO7c9GEhxduMa4ESuD7wgcElDZAG0gPIFvBLUYtGAoEpoDCunt6Vkat/etjuR77OC3TZ2jTSXNOJZFmzMxJEVKKzCqpDBBBBbJmQEJiRUo5iRRSFI0KZiQOtiwAsOgA+vryuDqaEahFn2xcUvYiZfhGICf1sZVIsfdDReCUccQymorSBravGxx06fN7De3QLUfIzqRhQCSfObgWpVXKzTbOiciRTJc90LVc559zU70D3hZ06m0X8tT9HvRv6W9Jj+jB1sW1NYdTfZsv1/WauA4N5C10acgMeq2XY12O03ntO0ntknZPoDbYBQSlxsa9S8972rOw/AIs4dsE0QEAAA==\u0026cb=e2e_6985c7a1671466.02046295 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://tdska.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nCookie: __uvt=s%3A32%3A%22f2b0811f5d22f6d2cae8e6e8f4732a03%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 06 Feb 2026 10:51:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://tdska.cfd\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=27","date":"2026-02-06T10:51:13.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tdska.cfd/\r\nOrigin: https://tdska.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1265075\r\nlast-modified: Wed, 15 Oct 2025 17:38:31 GMT\r\netag: \"68efdc17-134db3\"\r\nexpires: Thu, 15 Oct 2026 17:56:55 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3AqqVAAwBuUwKAQH3qzoAAAwBJRPCLgG3jQIAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c78569ad96ac23\r\nx-77-cache: HIT\r\nx-77-age: 9808386\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1265075,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1d0dcaa94cf3ab342325fe2bb0e7f313","sha1":"27f220120d94ed095ef4cf9aa0eae63e2f5550e3","sha256":"151fadf43c958099f0a7a6cb650c2e7497b50b839727d3e4b68da1ecf735e208","sha512":"a6d8ab253313ef53c81ec412c00e7816261331222e8f9af4ee5e27e3d5a4cba575be67887a318ea77002630c410bfb0f1fbf084ab601cc71d662cfa77a43a82a","ssdeep":"24576:su1hI8xWtlZT0Zurpj1aUr276rc6b+xUAatEyjkifAZOiJR6:suX3Ivd0ZI7aN+rcurAaSvgoR6","tlshash":"0725330e930059b9dc11927fd9e4a7b9eab49ee8cd8337637a9c1b931f412e01e15c8c","first_seen":"2025-12-19T01:04:36.860962Z","last_seen":"2026-02-07T05:07:29.786398Z","times_seen":52,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/39f41b299fbab3751b35f41d5e5d43052e8f425c.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=25","date":"2026-02-06T10:51:13.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/39f41b299fbab3751b35f41d5e5d43052e8f425c.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tdska.cfd/\r\nOrigin: https://tdska.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1028588\r\nlast-modified: Wed, 19 Nov 2025 07:24:12 GMT\r\netag: \"691d709c-fb1ec\"\r\nexpires: Thu, 26 Nov 2026 09:00:28 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3htxeAAwBuUwKAQH3FCYAAAwBT3/Y+AG3WwMAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c78569094dd323\r\nx-77-cache: HIT\r\nx-77-age: 6216838\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1028588,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"26b8bf5721825f9efed86dbca0ab31d8","sha1":"39f41b299fbab3751b35f41d5e5d43052e8f425c","sha256":"6d6a70b9e626d08d31d4cb606a81d475121a5e52c84015be950d685c26192e15","sha512":"3ea7066f56e47b2c0abe70f8134d1ffa80e26a61139cbdcb3778aeed05b8c24fb98404bdd75eb7478066dc37d1c80fdee3c0ce3306b6e83348dda6ab4960c204","ssdeep":"24576:eVDj01k8oGqpq6ihMluVVK7DHk7YUpIfenQnfrtBAN:eZ018GfJMl6K7LKYS/nQnTzAN","tlshash":"ee253351b3863261fa090c76716b4d07ff46f59270232b5a7a4e84df6fcb880497be26","first_seen":"2025-12-19T06:23:54.123988Z","last_seen":"2026-02-07T09:20:19.406434Z","times_seen":40,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01QUU7DMAy9ChdYZDuOm+yb7yGBOECStmiCrWgtE0g+PHEmxGLZsmw/vfdCQLID2oE8QNgH3KPXhC6BY3IYWA9Pz8qoefz62K7HcVq25dPV5aQxShLSiJFZFEHEM2uQNIAHDRA1AhISK5JECSGRYlCv0IKCHbfOAXDQAfT15bEntiDQVo25YUnZhhThG4EMNBUoTCHClKvnktjP1UsYss88zNxo2tE2ru/Z1XlsPUI0JA0DYueMkIymS7nFzjAe2VPT1R5oH+f151xV7w5vBg1680LWWt4f/Yf8mbSKVppd7KvVnfLbern238RO6jCZXJOGzKDXfDnm7bic+95AOmFNSTxImYoHnDnURDxEpjFx4fIL3IHRPtEBAAA=\u0026cb=e2e_6985c7a1678180.30172869","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=27","date":"2026-02-06T10:51:13.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01QUU7DMAy9ChdYZDuOm+yb7yGBOECStmiCrWgtE0g+PHEmxGLZsmw/vfdCQLID2oE8QNgH3KPXhC6BY3IYWA9Pz8qoefz62K7HcVq25dPV5aQxShLSiJFZFEHEM2uQNIAHDRA1AhISK5JECSGRYlCv0IKCHbfOAXDQAfT15bEntiDQVo25YUnZhhThG4EMNBUoTCHClKvnktjP1UsYss88zNxo2tE2ru/Z1XlsPUI0JA0DYueMkIymS7nFzjAe2VPT1R5oH+f151xV7w5vBg1680LWWt4f/Yf8mbSKVppd7KvVnfLbern238RO6jCZXJOGzKDXfDnm7bic+95AOmFNSTxImYoHnDnURDxEpjFx4fIL3IHRPtEBAAA=\u0026cb=e2e_6985c7a1678180.30172869 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://tdska.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nCookie: __uvt=s%3A32%3A%22f2b0811f5d22f6d2cae8e6e8f4732a03%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 06 Feb 2026 10:51:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://tdska.cfd\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/11/8/9/did-you-just-cum-inside-me-sexy-teenage-stepdaughter-gets-punished-for-wearing-slutty-outfits/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/11/8/9/did-you-just-cum-inside-me-sexy-teenage-stepdaughter-gets-punished-for-wearing-slutty-outfits/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19081\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 17 Nov 2025 11:38:14 GMT\r\netag: \"691b0926-4a89\"\r\nexpires: Sun, 08 Mar 2026 09:47:35 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 3817\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RQwX8f3RwKXXxLDeYuV0VFc5JhwOdT4hBVIOgIIKwZlTFiqgT%2FEFuPz5TKr6rJdLk33OnJK%2FBY7%2BxRgJx9ChCVpWGo7ZOEHQ1aBNjSFODcmf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd86c56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19081,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"9ccb6e3d7e7aecba3444d70612b2d377","sha1":"c0d038734a8c109c309db77b6feec308ee061d0b","sha256":"08c026aaef6959b772b166a5974f24efc3042104fc667678c406ef984ebce91f","sha512":"9fd2adc29f2a3d1f62628f09f9f63144124bf7c6566bc444d0debfb7ec7db1c09cc14f7ee85c556ade881e81eca17116d02f2165c9a3f8a7f1c5546321f4e87f","ssdeep":"384:l/cczpdRYy2+vZjzMYPPQy2i02kDk6aFVREDbv3+aJETrai9adpl:lzbRYKxjQYPIy/092V+/ftO03","tlshash":"c282d087c9c84031e5238b3e5d652d631c7ada68dc60981fdc8ae4e835459da0fffa70","first_seen":"2026-02-06T09:48:03.877236Z","last_seen":"2026-02-09T11:47:03.85904Z","times_seen":181,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/4/5/milfstepmom-caught-stepson-jerking-off-and-helped-him-cum-on-her-face/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/4/5/milfstepmom-caught-stepson-jerking-off-and-helped-him-cum-on-her-face/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18229\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 01 Jan 2026 07:03:57 GMT\r\netag: \"69561c5d-4735\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OS4MiGZo2snLg%2Bmg19Cv9VSwb%2FA8mgZdrs2PO%2FC4YQNyllajiptVckd4ITpkX7%2Fxr0jTbtTPndka7Z2PgbWOs%2FqWaW3i0LhzYJVsAEtvU4Rk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c589556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18229,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"8ca5e070285d11078729ab3877a03314","sha1":"0a69a9bd10c287f7fc14c3d048ea7f62c3a5db25","sha256":"38d9993fa097b27eae74eb9bdb5f82b84afa52a0ec591c131ec5bc8deb97bad6","sha512":"a2ab2f70609c195b9dfc79b2820a08515370683850c577a315472889bf35807860c2e84c68b1da5b2fa0b3064d4e8bd72c9d7935fd7b6cbdd4dd6b282375c6fa","ssdeep":"384:G6sOHzLk2tqjT5aoe2TUnV5N1mBdVBRZ/SIDgi+3:GrC/DqjT5/4VL0xBRgxim","tlshash":"4782d0b704a03e52f488b5b9012c85a25625fe1a1dad1279ddb028ec76b4d424b2cfba","first_seen":"2026-02-04T08:13:25.848036Z","last_seen":"2026-02-09T11:47:03.970548Z","times_seen":262,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/4/9/new-years-sex-with-the-hot-girl-from-tik-tok/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/4/9/new-years-sex-with-the-hot-girl-from-tik-tok/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14173\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Jan 2026 20:37:35 GMT\r\netag: \"697bc50f-375d\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uNjxSC7IpXVxNH8R0FEtqPk%2BPjZRP9i0QkDHf58vfU8Q37HmW4b9LHV3mBlWNkXXvAJqxrfS18fVcfvHkKaBsphAMnTe8qNAy4rqWgg1uEAN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c689c56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14173,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"5a51b5062c7f805385d101bda781210b","sha1":"5d2d58afff08bcceb4732a84413c2e220a03d8a9","sha256":"12d259849b4d98bb4ad3ca250623ae8fc90e2451919a5e1343bd827a0cd21d18","sha512":"2d6fc269c5f11a73b262ceb1ef549f6f4105b6af30ba3529e88c98859343e1fae18c647530392ea2aadb2383b1dc6300fe0ed0c27da921ce85320908a4a958e2","ssdeep":"384:Cziq0SwQ6Kj0k+CgSSzzYEW5+3dPnOV0TquxF:Ofw3xk+ZSWzYZ5+39OVH4F","tlshash":"7a52bfc7ccad16c5fe14ac32f997467a6e929880112f224b3b2925f64da6ce7490c764","first_seen":"2026-02-04T08:13:25.912607Z","last_seen":"2026-02-09T11:47:03.970052Z","times_seen":262,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/5/9/lucky-black-gardeners-got-madam-kiara-lords-holes-to-drill-after-excellent-job-1/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/5/9/lucky-black-gardeners-got-madam-kiara-lords-holes-to-drill-after-excellent-job-1/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25158\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 30 Jan 2026 01:27:14 GMT\r\netag: \"697c08f2-6246\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y4bJJFOyEhXdUBooTl7MtLjiqgsa6Uo%2BfNE4%2FawE3ZyC7SMcsZFOKsWV%2B5Lj5GMDU3ZppCTjDBjjXRH%2BXmyF1HcFWIea%2Bm6VDP6uwk4MZw39\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78a556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25158,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"b4a5c3c84e7bf959c870dcac35417608","sha1":"cd143dd56552ad51eef3cedb769ba09f8d6a2d8b","sha256":"9bed392bb9f72278cbdc8fb0f639f13c8a473b8a7cfa867c6a6e11154ed3f661","sha512":"37a4c5a0ee57f9fecfbb2533e3908d41c6a8ecbe00229541d510f44336849eb62322fbd96b147379018093daa6425aac1dde38558d3f66a4583b3d23a51d105d","ssdeep":"768:L7dDDWWo3PGGf5AzkZg4F81nafBIXX9qZbHi8IJX:L7dix3TRAAy28E2XgZbzIJX","tlshash":"f1b2e0cff7ebb062e035faf4901252572641698cf1cd6b8263c615d67b069ac088e3ac","first_seen":"2026-02-01T04:25:35.175437Z","last_seen":"2026-02-09T11:47:03.880042Z","times_seen":263,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/11/5/2/stepbrother-pranks-bunny-colby-and-fills-her-with-hot-jizz/thumb-main.3.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/11/5/2/stepbrother-pranks-bunny-colby-and-fills-her-with-hot-jizz/thumb-main.3.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18325\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 12 Nov 2025 12:14:16 GMT\r\netag: \"69147a18-4795\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=txFaOnAnvcE7awV3ttFxBhYc4GdZq%2B9lGfnBntg0OjTo0L%2F71n6UjvwwmPMed8QORqmch5L5eFqj0zKNYZcJ7W0Yb6GA60XiY2L%2BKFVigWnf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78aa56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18325,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"fe38ad1c8fc145d0ae3fbddc75ee6eb0","sha1":"1128274d899cd9feeda6a7825c30605d80d439c2","sha256":"0a5de669d9b3e7c2bfb01bfc9fb7f638a216fcea191d573b963473565e10c503","sha512":"fb5930ea7eb0eeff92a62a41550e96af8d076d275e5f6175001bc8baaf9bcb3f1b659c08f80f5722e6d748cbe47e35b1135db076a45078260958b9a9c62b6810","ssdeep":"384:9jyONy+qVikpuyRyefQcrfsiG666u9cFLJRScJPTVM8UqTd0:YyqrxRdezcdJZPTKfqa","tlshash":"2f82c004c3245d83e47d62f0aa8570356097ff25d281fbcebbdd12c2be856ab14ec55a","first_seen":"2026-02-04T08:13:25.865753Z","last_seen":"2026-03-21T01:00:21.869424Z","times_seen":214,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/5/1/step-sister-catches-me-jerking-off-and-offers-to-help-me-cum/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/5/1/step-sister-catches-me-jerking-off-and-offers-to-help-me-cum/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17633\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 31 Jan 2026 12:47:30 GMT\r\netag: \"697df9e2-44e1\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9KuDqoiEnbx3TvJMy8XZVUloHp3ys0xkoCPj6CG0zLq9YOMOV2wDO7GHSNf29HQ7dh%2FZVI%2Fao759LckPy26%2FSMwnFAKfNr9IIO8537fFxC7h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78ab56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17633,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"57ca374a15d8cfa059250765bced1479","sha1":"2fc1b7fdeffda90c81f4afb61d193a3d7537af62","sha256":"8b8896a6eef8963e6085ed467683afbf71b0c7bd6579c3944f1fd3c10f60ba97","sha512":"3c8f4f8e0f88bd33935ca0a0f65cc04a0e9b4dcb15a80ef07befe91d6d10e177d825c99fa330adfc7bd7a7c7f261db3b2550cdbe07e2f10463f020bae3a2ace2","ssdeep":"384:ZqukCXYzB1GXrFRTzqbvaswnGENMME2yrxA+Nyyls:PI/G/yEGElEtlvG","tlshash":"1582d0943e23b4468c5f4b717bcc926a0df4464620068bfed04b48c28e78be3dc632ac","first_seen":"2026-02-04T08:13:25.858598Z","last_seen":"2026-02-09T11:47:03.960325Z","times_seen":233,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/1d852e0819d42c155809596f2bde1f6f42cece5e.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=27","date":"2026-02-06T10:51:13.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/1d852e0819d42c155809596f2bde1f6f42cece5e.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5816\r\nlast-modified: Wed, 15 Oct 2025 17:36:28 GMT\r\netag: \"68efdb9c-16b8\"\r\nexpires: Thu, 15 Oct 2026 18:07:17 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3jkN5AAwBuUwKEwH326AcAAwBWd59LgG3YwAAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c785695b2a5423\r\nx-77-cache: HIT\r\nx-77-age: 7947150\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":5816,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"468ac6f15efc4fd1fe6198e54e5bc935","sha1":"1d852e0819d42c155809596f2bde1f6f42cece5e","sha256":"0e909f6f78edf823ae07b9ab8c18de310f7a541bca4aa41f9c3a29a8b73be8fd","sha512":"610b416227b7c1233203a680bc5314885e5df7eeb67df289d49b5b2d6b31229cefc28bf5c69b78c4b376bfa6ce16a1f8f8bae336238961033d491acb48b5ad4b","ssdeep":"96:Dnd8RUDOpiddalfvpGTZUEi8lvU5XpYADQsWqWoVxDDZWDUDMXEVYU5JliOoEDX:DnDSi3a5vpGTZU/8RU5XptGqWoVxX0od","tlshash":"8cc17d414b61e067bc06fabca858176f79e8e187e4c74428e061d9a71bc49a37edc3cd","first_seen":"2025-12-19T06:23:54.122917Z","last_seen":"2026-02-06T10:51:41.220971Z","times_seen":27,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/d/native1?d=casibom.icu\u0026pos=25","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tdska.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 23:20:47 GMT","end":"Thu, 12 Mar 2026 00:19:11 GMT"},"fingerprint":{"sha1":"EE:BF:84:A0:BA:A0:31:1B:89:D8:01:C2:20:46:7B:87:73:96:88:B7","sha256":"BF:1A:95:8D:E2:64:B1:92:00:5A:B8:28:AD:EA:D1:9F:61:49:BF:55:B6:D0:90:6D:FB:0D:75:AA:DD:E1:CA:52"}}},"request":{"raw":"GET /d/native1?d=casibom.icu\u0026pos=25 HTTP/1.1\r\nHost: tdska.cfd\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casibom.icu/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\ncontent-encoding: gzip\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: xt=l-OBo__XXmE; Path=/; Expires=Fri, 06 Feb 2026 11:51:12 GMT\r\nvary: Origin, accept-encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bddIYJv2ix4lHaA%2F9jIb0xpqgEab72n9rpDkiGO1EtJhj73ZDfw%2BrGoGZ9JgtTEHd1XqmRK8YlvQky6xT%2BX0iYk%2FED3eHb0%3D\"}]}\r\ncf-ray: 9c9a174afcbc56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1012,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (547)","md5":"488adafeab769e46c60b0922d9073e8a","sha1":"b27bd1e44517a0556bd43ff8787f5cf0f971d4ad","sha256":"3626da278a2724343fa7ac3cd3e2e597daf50e6e23b8b41fbbaf82e9e9383e0e","sha512":"ca6b6563c9c984c8af94a37a4bf62a4ffbb7fcde320ecc1178eddebbd7bcbb49dca0e8bbd1d7b7220abf4f53a7781c01e6a1a117259adcaf3c26586d924e1965","ssdeep":"","tlshash":"561121f0bf15cbfc42550ce81ef7e64ee535a7672c16d4881b8f4d689580ac94c49c6e","first_seen":"2025-10-12T13:09:37.07795Z","last_seen":"2026-04-03T19:31:20.715216Z","times_seen":393,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":59,"dns":21,"connect":1,"send":0,"wait":92,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2024/6/1/1/eternum-65/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2024/6/1/1/eternum-65/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27806\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 01 Jun 2024 17:19:02 GMT\r\netag: \"665b5806-6c9e\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UcQ3Gz%2FWFqUgkM8grW4ay99ZZNbDWpkFv4B5eEuelpSH58x2hj%2B4klGqiAYujMxMjRAFmCPdKNZs87fwF5tUW0%2FXirlre2e3n9RPXDF8mlAv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd86556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27806,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"51e867edf092af0bb67c576157e10e52","sha1":"417aa7bb9744e4fe738d00fcb8664aea65cd5aa4","sha256":"69dd7a3df1195b98016229721ea14fd9c0d73f073ce4d624bf905592944cf9df","sha512":"18c2e99d3359f8942968178c0083df57168c2ac5e1aba27e146466f4bd925882108e300e36ee91b384ac152629ab4d8c746cabfb9b5296da91fb4e00e080f968","ssdeep":"768:dtLGiAi+9YbvOVsDeBJDo/CpjbbCtur3aAvho:XGjYzDYtjXv3jS","tlshash":"93c2f059cb5f2df3c5b6567684379b810e1cc3e20e56a7884a8924d84c472d1b8e12f7","first_seen":"2026-02-04T08:13:25.89906Z","last_seen":"2026-02-07T21:03:05.709906Z","times_seen":201,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/12/3/1/brazzers-dan-dangler-gets-oiled-up-for-a-slippery-threesome-with-angela-white-and-ricky-johnson-1/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/12/3/1/brazzers-dan-dangler-gets-oiled-up-for-a-slippery-threesome-with-angela-white-and-ricky-johnson-1/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16241\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 19 Dec 2025 19:16:01 GMT\r\netag: \"6945a471-3f71\"\r\nexpires: Fri, 06 Mar 2026 23:54:54 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 125777\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bpCvwvel%2Fz1G%2FNGl8ved5j%2FLGo1sWHEvr0N8vVHR5FOofeKcsL%2FbKGn%2FiR6HfS52cInEuGSU5%2Fb8Acds8o9z17hsw3IeCfzvK9QLshk%2FSDYR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd87256c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16241,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"76fc211aa942f1387f6505a699638f9f","sha1":"a276b050fe2bb9e1cea69902d992309ab79d9e91","sha256":"a73a7ed46e17612858fd4895aa72fc224776411deeb67dab8ed7c7cdaa2ac09e","sha512":"f6cd54b3c0f1420c6fa3cb64dab72bb85e94d2e392224dc8dc4c4e3d9b0a5df67d17bde8d6fa0e97a19b855696c9137e90364ed5113110773033cfaa97cdc473","ssdeep":"384:0KTYy41TH/et7xJBYjGLyRrlYiXgpiXfAlTikHhJ1IEuRrm:qlfelx0jvpk0olT9b+ED","tlshash":"a172e18a8f0d4222e57c5a1365c93aa93229dc0749e85b124f4109fbe863bd995bcd8f","first_seen":"2026-02-04T08:13:25.87301Z","last_seen":"2026-02-09T11:47:03.953179Z","times_seen":262,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/1d852e0819d42c155809596f2bde1f6f42cece5e.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=44","date":"2026-02-06T10:51:13.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/1d852e0819d42c155809596f2bde1f6f42cece5e.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5816\r\nlast-modified: Wed, 15 Oct 2025 17:36:28 GMT\r\netag: \"68efdb9c-16b8\"\r\nexpires: Thu, 15 Oct 2026 18:07:17 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3jkN5AAwBuUwKEwH326AcAAwBWd59LgG3YwAAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c78569af57ed20\r\nx-77-cache: HIT\r\nx-77-age: 7947150\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":5816,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"468ac6f15efc4fd1fe6198e54e5bc935","sha1":"1d852e0819d42c155809596f2bde1f6f42cece5e","sha256":"0e909f6f78edf823ae07b9ab8c18de310f7a541bca4aa41f9c3a29a8b73be8fd","sha512":"610b416227b7c1233203a680bc5314885e5df7eeb67df289d49b5b2d6b31229cefc28bf5c69b78c4b376bfa6ce16a1f8f8bae336238961033d491acb48b5ad4b","ssdeep":"96:Dnd8RUDOpiddalfvpGTZUEi8lvU5XpYADQsWqWoVxDDZWDUDMXEVYU5JliOoEDX:DnDSi3a5vpGTZU/8RU5XptGqWoVxX0od","tlshash":"8cc17d414b61e067bc06fabca858176f79e8e187e4c74428e061d9a71bc49a37edc3cd","first_seen":"2025-12-19T06:23:54.122917Z","last_seen":"2026-02-06T10:51:41.220971Z","times_seen":27,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":71,"dns":51,"connect":5,"send":0,"wait":5,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/12/0/8/i-fucked-my-step-niece-after-school/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/12/0/8/i-fucked-my-step-niece-after-school/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18968\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 10 Dec 2025 05:10:32 GMT\r\netag: \"693900c8-4a18\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LBC07V%2FNY3M6xURMXA2tnwfwXWaaS4lU8V6ZdfpnbBZAT6Ts0oMzu8kXdIVJujX6KMqxVjVTnSDA77QveOq3pspTdgRJY3bxj%2FLwFTdFDBxz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd86f56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18968,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"2d211cd7acfee8bbbbc65337c45f61f9","sha1":"529a7ee6f736188a190904804ab662f709d3e9a6","sha256":"f1b757ac9ed7a1e6474c92f8bb8ff5e0ac4f046a7fd172d4f5d0925bc6e538c8","sha512":"b482a8b47dac9f2be07bad674b9fda271a4f7ea2fb3a71150781ac95a4ad1dd1fc5a631738d09098e5ff100f9519278a503ebe605aa0c189c998d9d216d62ee4","ssdeep":"384:Byp3VGr9jWrZuLCeyPOTZgW+qjwOFOsm2Wj+ExdzaPXs0q75t:B9BjtL/TT6W+qj7klri+kXw","tlshash":"3082e1811423f9f2d52457790397cbf657a0feb90cac0af58eb6fcd044b75d1692a10a","first_seen":"2026-02-04T08:13:25.83293Z","last_seen":"2026-03-18T22:56:46.914592Z","times_seen":203,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2024/6/6/1/orgasm-inside-the-vagina-close-up/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2024/6/6/1/orgasm-inside-the-vagina-close-up/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11536\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 17 Jun 2024 16:23:41 GMT\r\netag: \"6670630d-2d10\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovZwmXHo7wmkV8A%2Fa9x8qaAaA5%2F58%2FmUCt7Boztrh0lv8PTpvqFGHeIkV3dXVqZULmq%2FjTOlnA4kQOtT61JpjBPE9bSbHbKMeOMjUr0ZFdgz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c187656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11536,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"1356c56b202aa4cc26def1257b1bdd17","sha1":"42b80181f1f27641578a6cb6f280df47658a2649","sha256":"c3baed9cad3aee79f04ca63f47a252108e46983b5baeed1e8c6f1fc0a156f46b","sha512":"17a8a08c4dc3dbd2179051636c62875ff6795f6f9aebd63d51f95c0e2bedbf37e2d7f69c3de403d494d558958d628545b8add95b0df2ad671c902a382ccdfbe5","ssdeep":"192:7M3hZySKyq2z5a4DzEWEnvU85y9Euil9gHOO+azmxiKL7uRNiTmv5obLHu3EKU5f:Q3hZyCzlu885u8lOuObmxiGSyNHKjCF","tlshash":"c432bfa2b66be231cb7d5937412e0c34f5b9e64674fed32332921acd8cde4c27298145","first_seen":"2026-02-04T08:13:25.885142Z","last_seen":"2026-03-21T01:00:21.760729Z","times_seen":253,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/9/8/swinger-orgy-in-the-shower-total-domination-of-my-friends-wives/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/9/8/swinger-orgy-in-the-shower-total-domination-of-my-friends-wives/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18886\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 18 Jan 2026 19:44:26 GMT\r\netag: \"696d381a-49c6\"\r\nexpires: Fri, 06 Mar 2026 17:40:21 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 148251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LiR9Tlb%2FnFeq8gyCotNeDqlI%2BbXfYcaBY9IuYr3eQ%2B5gP9d5HwzHNM27qkMEwVciRJRzfAsGZYyRN2%2FphfbX7FQel1LsG9hwziUiBcNds9LS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78a056c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18886,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"cebc28e41230d42ae8857c7a19c4ad0b","sha1":"0d28590de15fd3f7f63983a2c0bcb2fd98854492","sha256":"fd50cfea57e50f276d2b4ec0d6703cc646debb4214021e4bdb65cebaa66f7679","sha512":"34383352756b3d5c87b067649e8adc7b1d1f0ebb2d906d6f8ac4c9283940c5f29bdbef8e5a827a985d195761b68e997e5001f5492b80e3218a408f3e703aaf70","ssdeep":"384:zxpPafTDmuFtTyJB8UNkwU7gKmZu48HXWgCdNPpHEFv5h0s:LafTHFta/Ts3vCJE/+s","tlshash":"4382d0dbb660388a4537557c2726b15806dc6bf9715d8e01380c16ee0bf53e82d07acf","first_seen":"2026-02-04T17:40:47.295957Z","last_seen":"2026-02-09T11:47:03.932855Z","times_seen":125,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/9/5/try-not-to-cum-challenge-with-love-lilah/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/9/5/try-not-to-cum-challenge-with-love-lilah/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16472\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 07 Jan 2026 23:15:52 GMT\r\netag: \"695ee928-4058\"\r\nexpires: Fri, 06 Mar 2026 17:40:21 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 148251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlS6NvTu5fxewTZ5OiLyaB1jqOqG%2FVTOcgDk%2B9ufwq%2BjQRNunbFGgB798maun79JNgzXVJqWGkOPlzU3Lw2pj2O2H8gdPs%2BWsPxkx43OMEyA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78a756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16472,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"68e06755b90fb7eac71ed81f4c8265d5","sha1":"904e4136353b2cc02ca6b4414340de4851f85bd1","sha256":"a292ec19fb46e978c7945f813f36543353b3f7ef2ecb9408be45b1fe519840a7","sha512":"c8285324a89d4cfb79656ba6f4c6190c3c3d2a44277cdd38f2f4fe98659428051aca4b985332b0f6689e2d91e9645f3a1df3ff4e1642bdc6b1e13388c3948204","ssdeep":"384:lwO5wFWbuBcck/bzPeV6K7HVGV4I5CcOTdytGoxDhhpsWrH:GOc4uBDkvPeV6K7H65CcOmGoxbpD","tlshash":"2172d02b86401a00dd9e7c3201cdfa3993999bd0f753c5aaf8aa0bdc25dbe5c5f2e114","first_seen":"2026-02-04T17:40:47.252758Z","last_seen":"2026-02-09T11:47:03.913934Z","times_seen":100,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/0/1/a-stranger-rubbed-me-hard-in-the-public-train-slipped-in-and-cum-inside-me-we-almost-got-caught/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/0/1/a-stranger-rubbed-me-hard-in-the-public-train-slipped-in-and-cum-inside-me-we-almost-got-caught/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12890\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 05 Jan 2026 11:03:50 GMT\r\netag: \"695b9a96-325a\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t0uSUA4XdQVOS8pcel%2FtDy4dlDaO%2BChQeekxO66RNoWxv%2BcQ9l9r0HNFEwHa9RHMr5WZRyF5pZA00l%2BGs9B%2FCRVgDUMO1AmU8Tw03y6bmvlU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c88b156c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12890,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"c2cb6d3632e478ed85d8cea9d50e6603","sha1":"ac3bd17d70fa2995b3f00be63dab56bf1e47e903","sha256":"fa8c7677e3c2ace1a47707f22e30455805e9378a3b49fc022208871137094fbb","sha512":"213b0974d0168a041b2a2ec96b3fb14f1ac8bcd5a2463c66dcda556aac38ac1323397043bd73bae89c9770df693f13b5cf31b88f503eee2981facd12059b6c8b","ssdeep":"192:VKvGfiq3M9Xs+FGPbKEYVuFW5zdlEhpZcSlmNmUYiR4pms8NbhPlozq/lY:VKm3MBsJKZ53Eh/c+tUYiR4b8NdPOOtY","tlshash":"2b42cf893d681b85fdde4af303943a7a110deef159b1850d7a7703ed488c99c9e10cba","first_seen":"2026-02-04T08:13:25.900375Z","last_seen":"2026-03-18T22:56:46.953306Z","times_seen":232,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/11/2/2/i-fuck-jamies-tight-asshole-with-my-huge-cock/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/11/2/2/i-fuck-jamies-tight-asshole-with-my-huge-cock/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15287\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 28 Nov 2025 13:13:20 GMT\r\netag: \"69299ff0-3bb7\"\r\nexpires: Fri, 06 Mar 2026 17:40:21 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 148251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2USIW5k%2BL4enxZG8ccXgGzlcEfKBf5SXhI81DZlEVJSYPYhI9GThHxKYmnLyQwpIhZHFvvI05g9PfVQ%2Bdx%2BNhQNq2inzGICFcU7sXsOtUIRK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174bd86456c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15287,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"d730315cfe6ab384b3ad160dafde1511","sha1":"7c2ccfd05a57004e7004c6a63a2edec70ee5a17f","sha256":"e93c8cc6a4f7bcf5f032bd6d25bf6bc3b8ed746d2ef1ba8645d2b6207ef9e00d","sha512":"664184940b3bcbedf1952427eac7bf187f189b2c7e0097da02270ba91bb8e30030bdeb87b940750da4158a593f68407569041b221f61b99756d07972d3d41103","ssdeep":"384:DWTA8RMC0JjW5gVWvOFgsN1RsWt9QlSIYv9Fvz:4F0JjWyVW4FRQlrY1Fvz","tlshash":"ca62d0c03b46f6f8ed9d2cbd063507a92b597dd9a7016bdbdd0c1c83842318a4a279d6","first_seen":"2026-02-04T17:40:47.283065Z","last_seen":"2026-02-09T11:47:03.95645Z","times_seen":261,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/0/1/korirain-in-pov/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/0/1/korirain-in-pov/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16509\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 07 Jan 2026 08:13:05 GMT\r\netag: \"695e1591-407d\"\r\nexpires: Fri, 06 Mar 2026 17:40:21 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 148251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fUnohNIt9go81eF9HZyOt6vYk9aiS%2BKhrYHBJAw1%2F8dcV%2F5W37fbz9ixtJRNx0cZwFhogZ1T76jhKFHhzwZkX9jf1f9cpAIuyjcO8dVfbm50\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78a856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16509,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"21123c1dd97c1164d48f8694b5dce31a","sha1":"6eca3ae639a98aa4edc33c4522609cef7b2da6a7","sha256":"f351c3b6a06f2158a46b2963d1c9523e95292d6155b89939fba02a1aca230867","sha512":"7b6306e131bbf94f3e1a488551c12460eb184cfbbd0c15767ddab42b657a5dbebff6976d4a7d3d75de17dcbb362bed58910364c75f0654fcfe826c1c50bffef1","ssdeep":"384:SsIupwTfIqX4G9Fss6mc7PylZN1I5S17L+eUBL:ou4fVoGDH7lT1oeUh","tlshash":"6e72cf62e2d8830ec5742b3905b94dec0fdccc563ad58a8349b08d887a372a146f66f3","first_seen":"2026-02-04T17:40:47.261285Z","last_seen":"2026-02-09T11:47:03.852914Z","times_seen":124,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01QUU7DMAy9ChdYZDuOk+6b7yGBOEDapGiCrWgtE0g+PHEmxGLZsuz39PxCQLID2oE8QNgH3KPXAd0AjslhYD08PSuj5vL1sV2PpS7b8umm5aQpySCkCROzKIKIZ9YgQwQPGiBpAiQkViRJEkICxaBeoQUFA7fOAXDQCPr68tgTWxBoq6bcuKRsQ0rwjUBGqrH6aUScYIwpYQ1UIg1+FJlTLHNscNCtrO/ZTXNpPUIyJsWISKY5dJV+yS12RvHIntpZ7YH2cV5/zpPqHfDmz6g3K2St5T3oP+TPo1W00txiX63ulN/Wy7V/JnZRh4ZHOw2ZQa/5cszbcTn3vZG0xHGcIvsRapbqM8yRqcYQQGosSX4B24sZZNABAAA=\u0026cb=e2e_6985c7a16b19e2.34759582","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=25","date":"2026-02-06T10:51:13.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01QUU7DMAy9ChdYZDuOk+6b7yGBOEDapGiCrWgtE0g+PHEmxGLZsuz39PxCQLID2oE8QNgH3KPXAd0AjslhYD08PSuj5vL1sV2PpS7b8umm5aQpySCkCROzKIKIZ9YgQwQPGiBpAiQkViRJEkICxaBeoQUFA7fOAXDQCPr68tgTWxBoq6bcuKRsQ0rwjUBGqrH6aUScYIwpYQ1UIg1+FJlTLHNscNCtrO/ZTXNpPUIyJsWISKY5dJV+yS12RvHIntpZ7YH2cV5/zpPqHfDmz6g3K2St5T3oP+TPo1W00txiX63ulN/Wy7V/JnZRh4ZHOw2ZQa/5cszbcTn3vZG0xHGcIvsRapbqM8yRqcYQQGosSX4B24sZZNABAAA=\u0026cb=e2e_6985c7a16b19e2.34759582 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://tdska.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nCookie: __uvt=s%3A32%3A%22f2b0811f5d22f6d2cae8e6e8f4732a03%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 06 Feb 2026 10:51:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://tdska.cfd\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/2/5/7/stepmom-was-shocked-by-size-of-stepsons-cock-hardcore-anal/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/2/5/7/stepmom-was-shocked-by-size-of-stepsons-cock-hardcore-anal/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18816\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 01 Feb 2026 18:39:16 GMT\r\netag: \"697f9dd4-4980\"\r\nexpires: Sat, 07 Mar 2026 17:45:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 61568\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2Btu%2F8Df6F2fNiDsVeGVRr3i%2FpK%2B7%2BuiBzIsRe4HicHlXC6FKt2P%2BJx0s73g7VSvN88Y0WAtzYRF%2B8NPtGTFjqgfDUtqr5MX%2BHiaCQHqg4m4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78ad56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18816,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"a8f85ddbef97e4eb6c02eda96727cf61","sha1":"d89f3025cece8a6d422954884bcb61240094e252","sha256":"52e1effeb57eb6513863ed161a5a2f57fa3c538207645d252446a4bb14d3d121","sha512":"b7909a815bb0ed407c87604504f5815cba35fab2e01c128c9b883343b64ff9ff37ae19cc1bd0a24bf7023ee9ac71cb784fb66f5710fd40385890d345afe155cb","ssdeep":"384:04Wh+F4Gw/aInY8NcSnZs8KBZDNizBJ9Vxoxe:0atwiPYmZDNizBv7","tlshash":"f982d1253cec6a3a85d40c3e13a141a37e49c7ff1077fc2a50baaffa26065f605650e4","first_seen":"2026-02-05T06:07:26.230702Z","last_seen":"2026-02-09T11:47:03.934641Z","times_seen":174,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/1/9/wild-fucking-with-pawg-abella-danger-and-jmac/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/1/9/wild-fucking-with-pawg-abella-danger-and-jmac/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19600\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 24 Jan 2026 10:23:18 GMT\r\netag: \"69749d96-4c90\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aI4ySWa3qp%2BT%2BkVfsDfF%2BuByEzi8O0Pjh6ai%2FRRjxeBnYXMZxXamU3Wo7xSzi%2F4djusJd4SOyfeveiGGnP%2FwfvycDxirqeL7G0MQKfYGCPW6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78af56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19600,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"c858ddc4371814483288243beaabb1e3","sha1":"0c1f377b72f66e538cb6db5249fd15acee9d43d7","sha256":"99c34b27e660c7f63c7b9b32ca587a03f8543e1be49547163aacd511a804757b","sha512":"7d4486e3ec6e19772dd2c368286e36a2c4b2effb3b3c5993f0967d4ddef61e75222540974f9d440b71748e729a7eaae532996e4cf8970c26dd3d98649e46b3a2","ssdeep":"384:87d+uFB3vA5volDefRBdfKufE0a4GpnrQuwuPl6NoNA3AKZ:7uFB3vA5CDef7df/FGhtxl6No5KZ","tlshash":"9b92e02e355b103aebbe46f16b6e72016783560bd978cc7a5f4b39ae4e5c48c01c4730","first_seen":"2026-02-04T08:13:25.830856Z","last_seen":"2026-02-09T00:30:07.851239Z","times_seen":234,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=49","date":"2026-02-06T10:51:13.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: application/javascript\r\netag: W/\"44ec981015dfcc69e362ab1cc85\"\r\nexpires: Thu, 05 Feb 2026 19:21:20 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3+wYAAAwBuUwKAQH3DQAAAAwBw7WvBgG3pQAAAA\r\nx-77-nzt-ray: 2a494a15463ed5c1c6c7856901164a08\r\nx-77-cache: HIT\r\nx-77-age: 1787\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186417,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39746)","md5":"9e6ef1d47c65910c8d8451844ab4766d","sha1":"44ec981015dfcc69e362ab1cc8529af2ef6aaa9a","sha256":"fd235aed55f904c458271f48a38222120c4a7100e389746e6cefef09ea3f720c","sha512":"c66e3423c9e18b74bdadd82f409f7e1fb92cca51c8276b1edfe1a22142c99f7933973a365852f50c8313cbee70f213ae9af7b0ea0381f652a3fa08b988ec05c3","ssdeep":"3072:g0Nq+z+28VOk2DG2HgMaElwnRehI1fsBHiswLslYznqCXMtpo:3+28VOk262SElwnRrfs4sM2po","tlshash":"d0045d983792307441d3a12daaff53093371506ab80f4884bb4dd9a427adeda51a3ffd","first_seen":"2026-02-05T11:29:28.547266Z","last_seen":"2026-02-06T17:16:09.922883Z","times_seen":117,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":66,"dns":37,"connect":3,"send":0,"wait":1,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=49","date":"2026-02-06T10:51:13.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 415\r\nOrigin: https://tdska.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":415,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"language\":\"en-US\",\"referer\":\"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=49\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5697032,\"extra_params\":{\"first_request\":true,\"zone_type\":38}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 06 Feb 2026 10:51:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://tdska.cfd\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%226865b7cc37c5955b71de4aa7029ae984%22%3B; expires=Sun, 06 Feb 2028 10:51:13 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5177,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2145fbf30d1d7c4d3f372acd782b645b","sha1":"f74d0241c4dc5eea1a44eb97bc027c0d3811e920","sha256":"1ece8ec124876a9bff9fbeec574dad5abdd6a0c0f4dbcff8407fac8632aaeac3","sha512":"8942bba3b8370fe702f0668d2d44000f8ebd1d0472d59bf2fb990f7bc6d618dc74d786fb43d1a770b4c4fb683028e1f9ebc880e87754ff2d694554dc4191c4cd","ssdeep":"96:vLBFTZBxBqav2oSoGoorooCDFhTtIhUHq1oLtMbe8pzVuWR+Htv3FMqK1kOtgkwh:3T/Dqav2Vl3r3CvTtIhUK1nbp4WRiF7j","tlshash":"7cb1fa62ef0e68caa3da5391dcabbd9d547d5007c9c0ce639e04da24e2d93188653379","first_seen":"2026-02-06T10:51:41.286132Z","last_seen":"2026-02-06T10:51:41.286132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":65,"dns":1,"connect":22,"send":0,"wait":119,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/12/9/2/i-paid-a-dutch-pizza-delivery-girl-to-have-sex-with-me-ends-with-facial/thumb-main.4.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/12/9/2/i-paid-a-dutch-pizza-delivery-girl-to-have-sex-with-me-ends-with-facial/thumb-main.4.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17450\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 15 Dec 2025 10:38:46 GMT\r\netag: \"693fe536-442a\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9LsBd8UH%2BTR60uoZeow8OAZhOsvxG7ijp19t0QtOzqW%2FwxXTH9ip22csBr3rv%2Fhawwt7jE8WfBMCz%2FpcBF0SkHQVyYJHbNODQu454tHcwtJK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c387756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17450,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"6deeae5deb61060c966b2f7020f1f7ff","sha1":"33e77222d7d05ec67ee10fdbfd99637710051eed","sha256":"c79bb7cf7dadde1bff20fac5a11b95c550acc38a0363660939205b77dec0019d","sha512":"30602b1c9e2bc0775cf270a758430b09fc033396a40df56ad41d2633bb5d5c7eb37b310e0b7eee772e166965f32d260516bc4f49789e317fc362b681af4c59f4","ssdeep":"384:2bd0QrPo7uBfT/SCq9ZBgbxqnmUBqljxPuZG5Z:Id0kPFlmTgbxEmUEFPD5Z","tlshash":"a472d136a71b9f84d573003759ac2926fe00aaec0ff530ab61a1affc5a5e5917d2110f","first_seen":"2026-02-04T08:13:25.850778Z","last_seen":"2026-02-09T11:47:03.935582Z","times_seen":262,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/7/5/goth-girls-vs-virgin-step-brother-family-therapy-alex-adams/thumb-main.2.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/7/5/goth-girls-vs-virgin-step-brother-family-therapy-alex-adams/thumb-main.2.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18255\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 25 Jan 2026 16:31:11 GMT\r\netag: \"6976454f-474f\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5P1i5OETpIBG5YCzUgW8Ur0Gs4HsGuBVqtNBD2r3N5gA7frIll%2Flx3DhqD6nz7lvUdAfzRwhGVrpDZ3jACtBn%2BceImdklkg77R%2BfNLx%2BCANc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c98bd56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18255,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"7d3ce7cd6518fdeb0450c5c66e44ee1a","sha1":"d9c85233d63e712a21b9f3ddd3d6fb6a31dc61e5","sha256":"be01cedf432cd6e9dd41cbf832ab63196f8bf02f12f52cff02266a2efd48c1ca","sha512":"930b9ee02d2c870e5d5e14520ed74c6fd948c0155e0683d36a27d6f903f064dc3a4e06f8f21754d10aaff7865a1fc8f197f9ad50595250d81a8f10e7a804e899","ssdeep":"384:qbJPUU8PVbI1D9bHtY9vvvhf6kStUVBlJTizJhRLGrkO:UtUBNuD9bSvvvhyknbizJh1GoO","tlshash":"7982c024fb06b35ee479f135a19807319ae5e9033e2918433d811af8f8649d1dec8d76","first_seen":"2026-02-01T06:18:55.595704Z","last_seen":"2026-02-09T11:47:03.929256Z","times_seen":221,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tdska.cfd/dd/WsnBaLXORD.js","fqdn":"tdska.cfd","domain":"tdska.cfd","tld":"cfd"},"ip":{"addr":"172.67.192.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=25","date":"2026-02-06T10:51:13.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tdska.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 23:20:47 GMT","end":"Thu, 12 Mar 2026 00:19:11 GMT"},"fingerprint":{"sha1":"EE:BF:84:A0:BA:A0:31:1B:89:D8:01:C2:20:46:7B:87:73:96:88:B7","sha256":"BF:1A:95:8D:E2:64:B1:92:00:5A:B8:28:AD:EA:D1:9F:61:49:BF:55:B6:D0:90:6D:FB:0D:75:AA:DD:E1:CA:52"}}},"request":{"raw":"GET /dd/WsnBaLXORD.js HTTP/1.1\r\nHost: tdska.cfd\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=25\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 14 Nov 2022 13:22:47 GMT\r\netag: \"63724127-6d53\"\r\ncontent-encoding: gzip\r\nage: 3817\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oyPzzzCDd%2Bhs%2FSVUZuHPPrSzOAhUSd%2FYdB37%2BgpdkPyFAtv9H6NF2NGSRRaTFbG9b%2FqXYTo9wvSJc2hUrWfPFIfuP%2F2JMj8R7w%3D%3D\"}]}\r\ncf-ray: 9c9a174ea9601525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9253997ad088b6fb84712b33d6440312","sha1":"782b916dd47bedbaee7c2313caf07028380d7375","sha256":"e47142b1e847b928bafe231b4c3283fecb41d19792fa1670c8d3b71ba8d75c1f","sha512":"1d8440a8052f26c110e50a83f84ad4e8880983a634a5219f259bdbe2a288b04926cf7c49d761157a9c659aff6a7c1e62bf7c5f46d256200e34e8ceacd609ae6c","ssdeep":"384:sDxlmqkaByOb0MMDgneElUUf8CBbghiYXpZRWotaO7cuifS:GlmqQMMIeEuUf8CBKpZRJtaO7c/K","tlshash":"15c2638d5df360649167707c6fafb6083170d0233249cd20bd4c9ba89f98d6989b5fda","first_seen":"2023-03-13T02:53:30Z","last_seen":"2026-03-15T08:05:23.499538Z","times_seen":361,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2025/12/0/6/business-man-cheating-with-hotel-maid-dif-tjejen/thumb-main.1.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2025/12/0/6/business-man-cheating-with-hotel-maid-dif-tjejen/thumb-main.1.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18877\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 12 Dec 2025 16:48:30 GMT\r\netag: \"693c475e-49bd\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VKYKQ2F0lS1At3yw7bYwsBap6nVSRFQ%2BOxhAJN55ge4lDFlI9wm4zFv0qagz3ATgsCZIVC51zc4AGXgiBaIPJqAS5tC3mC0IJpUWa3MHRquZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c78a356c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18877,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"e2f3e9b63ba19c4fbccc88afed675c2c","sha1":"2fd5556534ff8d1550afadd987948f8446a0c1ac","sha256":"906f08ab5a7210b0417f5122147b686c8df15a6c1228e6aeb04534f530296d06","sha512":"daf472638dec5d86b3c4805488ca3f1ab8a257a0a9ee3d6d38292ec30003f1dfc54c09b3fe1d50916d2edeb718180a93db77133ac574c5d139ec9393a7c43431","ssdeep":"384:Ez+HkEeNTM84Sk4/Ku6bUKsMtD5gqYif0dbpDDZrMBi8kJ:pkLQNvu6bUKDtVq/dbDMkJ","tlshash":"4282d11f2b8061dbcd341773e7bac1819bd1811badb8224b589237c1d69c5f2cc76a9e","first_seen":"2026-02-04T08:13:25.872144Z","last_seen":"2026-02-09T00:30:07.868398Z","times_seen":221,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs1.casibom.icu/2026/1/7/8/sexy-girl-in-pajamas-just-wants-to-sit-on-my-face-and-fuck/thumb-main.0.jpg","fqdn":"thumbs1.casibom.icu","domain":"casibom.icu","tld":"icu"},"ip":{"addr":"172.67.184.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casibom.icu/","date":"2026-02-06T10:51:12.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casibom.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 16:00:29 GMT","end":"Mon, 04 May 2026 16:58:57 GMT"},"fingerprint":{"sha1":"06:6D:A6:C5:59:45:9D:31:12:FB:BD:78:74:7C:44:D8:D0:3B:44:05","sha256":"2B:33:2B:0E:03:46:3A:D2:8B:14:5A:7F:31:8A:A5:46:8C:91:9B:61:CD:25:BF:A8:0A:80:3E:9A:7D:7B:68:A1"}}},"request":{"raw":"GET /2026/1/7/8/sexy-girl-in-pajamas-just-wants-to-sit-on-my-face-and-fuck/thumb-main.0.jpg HTTP/1.1\r\nHost: thumbs1.casibom.icu\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casibom.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 10:51:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15049\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 27 Jan 2026 13:31:43 GMT\r\netag: \"6978be3f-3ac9\"\r\nexpires: Fri, 06 Mar 2026 08:12:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 182295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZmwmI%2B075UsuZj5WlnqPsGDwLV%2BnEami%2BvFr5ura1TWTkXU1%2BucT0srpkP8uZAvTOExzCubrfr%2FaJ9%2Fuh4cHUn9g1DeCqIqkng8uAoCq%2BIl7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9a174c88b256c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15049,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x192, components 3","md5":"d5b9cab9e480bc17926a700753de7b00","sha1":"e8ec8b853ead3d3997a966da6d6fca67a0ba52f7","sha256":"39c0b744ef81c7b26f1873a6a7aff17f7914f1b6208ffd1361578f7ffe20e659","sha512":"cc826a93e26f8a0faeb5864e7d6e5e5e2c0193a7f5628849f8881a3b39537c7186f45cb9d414d9e678f57c57496ed1dbd3a789e6a58ebb4ba3f866b3e6592c27","ssdeep":"384:6jWdjzdnN5aho7vxElFH3VwrrH/KKg0pXF2f8Iu:6adjz8ho7ql++Kg0NofNu","tlshash":"7f62c0d322cf9f34c91013365ad7fb02664f242ca748912b306fd0e9491fae1aab5d5a","first_seen":"2026-02-04T08:13:25.897259Z","last_seen":"2026-02-09T11:47:03.849488Z","times_seen":217,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=44","date":"2026-02-06T10:51:13.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tdska.cfd/\r\nOrigin: https://tdska.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1265075\r\nlast-modified: Wed, 15 Oct 2025 17:38:31 GMT\r\netag: \"68efdc17-134db3\"\r\nexpires: Thu, 15 Oct 2026 17:56:55 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3AqqVAAwBuUwKAQH3qzoAAAwBJRPCLgG3jQIAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c78569b2947723\r\nx-77-cache: HIT\r\nx-77-age: 9808386\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1265075,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1d0dcaa94cf3ab342325fe2bb0e7f313","sha1":"27f220120d94ed095ef4cf9aa0eae63e2f5550e3","sha256":"151fadf43c958099f0a7a6cb650c2e7497b50b839727d3e4b68da1ecf735e208","sha512":"a6d8ab253313ef53c81ec412c00e7816261331222e8f9af4ee5e27e3d5a4cba575be67887a318ea77002630c410bfb0f1fbf084ab601cc71d662cfa77a43a82a","ssdeep":"24576:su1hI8xWtlZT0Zurpj1aUr276rc6b+xUAatEyjkifAZOiJR6:suX3Ivd0ZI7aN+rcurAaSvgoR6","tlshash":"0725330e930059b9dc11927fd9e4a7b9eab49ee8cd8337637a9c1b931f412e01e15c8c","first_seen":"2025-12-19T01:04:36.860962Z","last_seen":"2026-02-07T05:07:29.786398Z","times_seen":52,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tdska.cfd/d/native1?d=casibom.icu\u0026pos=44","date":"2026-02-06T10:51:13.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:36:59 GMT","end":"Tue, 28 Apr 2026 10:36:58 GMT"},"fingerprint":{"sha1":"AB:9C:92:CE:1E:90:F5:AF:93:B0:87:A9:90:C3:9A:64:ED:5E:03:AF","sha256":"01:4D:B7:94:F8:BA:31:CB:D6:8C:62:E6:3E:61:AD:4A:4E:F8:29:68:68:FD:8A:E7:69:2F:01:50:99:04:62:40"}}},"request":{"raw":"GET /library/886962/f4ab24f546eee7c65ebe83f0e33d24e9bcaecc00.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=1179648-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tdska.cfd/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 06 Feb 2026 10:51:13 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 85427\r\nlast-modified: Wed, 15 Oct 2025 17:38:31 GMT\r\netag: \"68efdc17-134db3\"\r\nexpires: Thu, 15 Oct 2026 17:56:55 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3AqqVAAwBuUwKAQH3qzoAAAwBJRPCLgG3jQIAAA\r\nx-77-nzt-ray: 2a494a1558415bc6c6c785690a3f8334\r\nx-77-cache: HIT\r\nx-77-age: 9808386\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 1179648-1265074/1265075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":85427,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"3fb3691e491f065ee28c4062aac92add","sha1":"1e70781f6fe1df9cae965ec9f2f09aa0b7a3c003","sha256":"882c04937594c2de7e5d1d1303d54af00242a0e19f7e591ebe70de885b62eb09","sha512":"dd24bcaefe05240b7dccfb35577ac76e16fd8eb36a067596fed3c4a7d1d4840b57b97d12b002e0187e912a7c5458a3dc7bcf7254b402ea1d5cd1f27e7921bf51","ssdeep":"1536:b3EhRBd/yX5eagGJsSaKYGRbavEaxV4g6q/1MMeIlJsXmPVhnkdm33uWTy:b3EhRBVyXkaR5asWVgqdMbO2XmVNyoJW","tlshash":"3483021b870a1b35e8a065967a3baa22953f87cec943fff345428d4fd68515c18c4ceb","first_seen":"2026-02-06T10:51:41.288866Z","last_seen":"2026-02-06T10:51:41.288866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}