{"report_id":"ba5b0201-f62c-4334-8bf8-decf081c3b0c","version":6,"status":"done","tags":[],"date":"2025-12-27T21:31:59Z","url":{"schema":"http","addr":"new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"172.66.169.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"title":"Download Club Valentine - Version 0.2 - Lewd.ninja","dom":{"size":3412,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3412), with no line terminators","md5":"16dd3e139eeec62236441fc7dc0ba430","sha1":"4a3e0a8a58b7ccac71fd6e01b6f16b5f400bb8cb","sha256":"43a9b0a16c346ac8a164a9e240bcd264342ccd88d6d2d0e2d07f1ed7af972ddd","sha512":"2f622272f048b15ad06d588dc4fe81c9133266590b5718bf6c49e2aebeb259515f624649fb0ba3e965465661a7da4bba9fe4ef2083f487350b9172471ad37f1a","ssdeep":"","tlshash":"d96109d3b264782f8d2a523286f7ba0d24368422dec18c48e0d0a83748ec44fb9e56dc","dom_hash":"domhash2ec0b6125f1b4d688c99ffd75f0b43e1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"172.66.169.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-31T21:31:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":9}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"lewd.ws","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"new.lewd.ninja","ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-08-13","domain_rank":121746,"first_seen":"2019-01-20T13:23:12Z","last_seen":"2025-12-18T00:14:56.863091Z","alert_count":101,"request_count":51,"received_data":1832166,"sent_data":30228,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"www.google.com","ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-12-21T22:22:06.545601Z","alert_count":0,"request_count":1,"received_data":1717,"sent_data":418,"comment":"","tags":null,"fingerprints":null},{"fqdn":"poweredby.jads.co","ip":{"addr":"92.222.100.138","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2012-05-17","domain_rank":172301,"first_seen":"2019-12-04T10:34:12Z","last_seen":"2025-12-25T06:03:44.597967Z","alert_count":0,"request_count":8,"received_data":17916,"sent_data":4156,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.ourdream.ai","ip":{"addr":"104.18.19.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-09-22T18:38:02.35517Z","last_seen":"2025-12-27T00:36:25.326021Z","alert_count":0,"request_count":1,"received_data":581522,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":1,"received_data":3076,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"owo.lewd.ninja","ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-08-13","domain_rank":3953531,"first_seen":"2019-04-12T05:46:28Z","last_seen":"2025-12-13T15:27:06.614576Z","alert_count":16,"request_count":8,"received_data":149436,"sent_data":3774,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":2,"received_data":17367,"sent_data":1072,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lewd.ws","ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2024-04-02","domain_rank":465378,"first_seen":"2015-08-26T02:52:17Z","last_seen":"2025-12-18T00:14:56.985823Z","alert_count":3,"request_count":3,"received_data":250242,"sent_data":1854,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"core.ourdream.ai","ip":{"addr":"66.33.22.31","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-29T10:29:26.234837Z","last_seen":"2025-12-19T04:56:24.520883Z","alert_count":0,"request_count":2,"received_data":5291,"sent_data":1025,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-12-21T22:24:05.252763Z","alert_count":0,"request_count":1,"received_data":850438,"sent_data":492,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.tapioni.com","ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-27","domain_rank":177570,"first_seen":"2021-07-01T10:46:55Z","last_seen":"2025-12-23T14:51:31.137622Z","alert_count":2,"request_count":2,"received_data":110513,"sent_data":827,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.jads.co","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2012-05-17","domain_rank":2825720,"first_seen":"2019-12-04T08:50:06Z","last_seen":"2025-12-20T19:54:14.664846Z","alert_count":0,"request_count":2,"received_data":54820,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"xxx.lewd.ninja","ip":{"addr":"172.66.169.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-08-13","domain_rank":4261980,"first_seen":"2019-01-20T13:23:14Z","last_seen":"2025-12-18T00:14:56.895367Z","alert_count":18,"request_count":6,"received_data":2577,"sent_data":2874,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"animeapp.org","ip":{"addr":"172.67.159.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-20","domain_rank":0,"first_seen":"2025-09-13T05:31:09.139026Z","last_seen":"2025-12-19T23:53:49.247Z","alert_count":0,"request_count":2,"received_data":874578,"sent_data":1208,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-21T22:17:33.83847Z","alert_count":0,"request_count":1,"received_data":408982,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-12-21T22:19:25.211281Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/a9513f1.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60c82c03293335b8055f593837ef86a5","sha1":"66bf3c8a828dcbdabc2938579b6107e9390117a6","sha256":"fc47fcb65bf2f7932cff1ae6646da7f4109c3c3bd6b259be0426de1d6be97a53","sha512":"9113025f1cd50723d650f05912a6e83ea54c6a7ef006cc4a5620d4eb6d87e529c59aa47d1b37af62cf9fb60f73ac47eceba171cb269da93cd4fa95a0da8e706a","ssdeep":"","tlshash":"e5e0c09934117cd74bea20e0827752c2b4bd542d0eea34a06bf1c5dc4436a0f0011cec","size":336,"data":"","first_seen":"2023-11-20T01:27:33Z","last_seen":"2026-02-07T17:49:36.793647Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","size":849529,"data":"","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-04-28T23:51:59.987409Z","times_seen":49446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/d9a1f3e.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd8295ac405ddb994e9c1bc675abae9d","sha1":"d0aabf943242cc51836e8bfb8faa813694633367","sha256":"0193d8714451f78b9fa6c4e42e1638b7a0286d5f664aa6508edc193c4c852ebd","sha512":"22e138ff259d50d3c19baa62525ae63b3ddd69054a18bc4a80f82760e2c1af9f6254a88f4ddd32a8d319dd5893ebc300e60d6cd2f921cc5047f5c895eab73933","ssdeep":"","tlshash":"d9219b3b798be4799c2e809102651ab0e0740fe98525e083a375ce6484a0c771f2fdb8","size":1113,"data":"","first_seen":"2023-11-20T01:27:33Z","last_seen":"2026-02-07T17:49:36.802064Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/fe93e8e.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c8fcb4b5e7e02b17287781552fe1203","sha1":"f4dd0c4156397d5561318e781bf17cbbc54bdc2f","sha256":"33c58720c1bcc05c5e83822a3198e4aaf67356fd85a4991fcafb80b1a6023153","sha512":"099dd89baeff76e8c19c3261c402e362efcebb8f067936e8810b71370e24c50cdc0652de8dc1accbc279d0f6e01c56cead60e462009c2be6d6d0081ed64bde25","ssdeep":"","tlshash":"4421013f6183723bd55e02220260667460752e8edf53c407bf68cd64d174e727623b5d","size":1348,"data":"","first_seen":"2023-11-20T01:27:34Z","last_seen":"2026-01-13T20:00:37.781393Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lewd.ws/api/users/453988?host=new.lewd.ninja\u0026ev=228\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fnew.lewd.ninja%2Fgame%2F62178-club-valentine-v02-vonfawks%3Fasgtbndr%3D1\u0026sid=b1c52590-5edd-42dd-acde-959060e59aeb\u0026i=1\u0026kw=free%20porn%20games%2Cadult%20games%2Cxxx%20games%20pc%2Cxxx%20games%20android%2Cporn%20game%20apk%2Cincest%20games%2Crule%2034%20comics%2Cincest%20comics%2Crule%2034%20webm%2Crule%2034%20animations%2Cr34%20incest%2Cr34%20comics%2C3dcg%2C2dcg%2C3dcg%20games%2C2dcg%20games%2Clewd%20games%2Cxxx%20manga%2Csexy%20games\u0026url=https%3A%2F%2Fnew.lewd.ninja%2Fgame%2F62178-club-valentine-v02-vonfawks%3Fasgtbndr%3D1","fqdn":"lewd.ws","domain":"lewd.ws","tld":"ws"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"801138166f87bacae8f5adc05b9561ce","sha1":"823b818e567986da5cac7fe46aac8ea9524e0d0e","sha256":"d93de5e0d976d4b355b8d610a77ea103138696f6b5b531050e7ea5d6941383be","sha512":"b2ae94ed63bc9f6bf8a3b50faf6312f08b134deaf8220541692f3be37fcd90a0b3af80b2fbd91d1342c9ea4eebe33dcce8987335be5d0a5ed3db7570d685a9bd","ssdeep":"","tlshash":"5801ddc9a6ac65fb974890b3ea3d4ea68a8d88742315500afb24071e64ce28203e0197","size":670,"data":"","first_seen":"2025-12-27T21:32:12.910339Z","last_seen":"2025-12-27T21:32:12.910339Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg-iframe.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4308f130c316ea75ade208adb3126a7","sha1":"37f8058fab33f4a7e6486bb653678c1092d224c8","sha256":"db7cbee0a6b8f325cca705c58e0d233f1ea687d215b239e540b5d15c0b0448ea","sha512":"f82de2999d7d99cf00c46b29b6db7b050949e067ee3ed7fa5001ae702f6d548fcb4f48dd09d2e3cc5ca60dbfc1481bcb28c195e07f714f33fac47e4e95b2dabb","ssdeep":"1536:gnqy91uit1m/sh9gFvaRHGeNMJysrH3GS5832:mqE1uym/e9gxwCcsrWS5M2","tlshash":"abb3918cf6c2b05606e37474422f600af37b6a54b45f8481e62ad5d07dba94fa037f6d","size":107787,"data":"","first_seen":"2025-12-23T14:51:43.550841Z","last_seen":"2026-02-16T08:21:27.330939Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/a6e85c9.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25c56b0f50f4a2e15b45894ed834448c","sha1":"4194c8cdff0e120543314eb6db2ab61e6a1e2744","sha256":"0f17ceff5aba2101c8ed3ee5ad35c01628510abdc5e19125a93eb0cb3c15b538","sha512":"3d427583bbaf27a48750b16ca73eedd18d9902da1c431782f728df25c3a806b03db6e54d436f1ca5cd4c47098a89f978362f2683125b014c4a11cbd400f8e819","ssdeep":"","tlshash":"2451540bf953edb149eb0050043f7a11b2711b5a642ee1a5bb39dde549f02260377a3e","size":2827,"data":"","first_seen":"2025-06-22T23:57:28.124719Z","last_seen":"2026-02-07T17:49:36.763065Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/pug.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"acb8501274106c8c5d25141dd0dc252a","sha1":"86eeee52b9443b6df7caffbf9fd4a7031fff5ccc","sha256":"615ee8ac2cde2b20b7ae8fbb6ef33a9128193f07590540b77e514627be7ae1cd","sha512":"fc132d309cceab4afb51f33774638dd6faf711ab435c38ec751edb0ec46a4010c5b58724a3dceb985e1682aa2b9ddf5dc28d778ba1242bdba60db34b96030ed6","ssdeep":"","tlshash":"c97000288802202083fa0388820c000e220202008b208a0020c82822e380c008220c00","size":25,"data":"","first_seen":"2023-10-16T23:07:46Z","last_seen":"2026-04-25T21:02:38.913615Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b57455c9a0032c8d67868882258a4a19","sha1":"017f1d5e957af25bc7ee498e8e6104da00835773","sha256":"1aa296f8312ecf0d0959f759affc2850e1ed52b321033a51355cc1f37fd5dc89","sha512":"24db4575be8e92cfb7b408e04e6bee7cc5257a22b46488a3f4e9a8dbc05f75c3f4a465fea59e4ea866c1a9f3afb145f50b60fb5969a61ef7c466d572a7197e57","ssdeep":"","tlshash":"581165731a04f0350b3209d1e1ffc7b5e482b01cf12845dca511ea842f79ccbce04589","size":1017,"data":"","first_seen":"2025-12-15T23:56:17.122996Z","last_seen":"2026-01-20T22:35:06.74886Z","times_seen":7485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-30T15:35:46.130075Z","times_seen":635015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-30T15:35:46.130075Z","times_seen":635015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/890f189.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0eddeb3849dc25c7427243bbeebf885f","sha1":"d53f6355bc4f73125e7ca5313e28fb38445ac4da","sha256":"d519350852dd2f6f60ad5d05b16c5c6d5390c5bfadb3e10aa75c1d4ea4d343f5","sha512":"e1b5569fc9e944676ac4785bb170b0d6d8006ee0d9e0acdff30386dc5289e9142117a9e1d518dcc21bd2a09f05df81fd68a86b0f39143932c51fb47b453cffdf","ssdeep":"3072:rZXPmb3TVcwgoAPbvQbfLP1bC1QvixhY4uyYm:dtoebvqwsixhlurm","tlshash":"c254b3cdf695b0b103e720b4407f560bf27aa955b84a8590e262e4d07cbd98ea137f3d","size":284424,"data":"","first_seen":"2025-06-22T23:57:28.16309Z","last_seen":"2026-02-28T17:55:11.196918Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/e3f02c2.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6df3a3774489b7722d2bb547c5064b7","sha1":"77dc7b21eae6eccb3598eabb4c6905140b1c7a83","sha256":"b81546d7b01c40a8870d2ea9b4299add6ca70cb7a069b645ee9e92da71a3f222","sha512":"643cde3e09aefbe173c98286075640e6e95c0a46cd2480b5f78b69c2c654fb9dbec7c6b3a3bc5bcad006b808822881fefbb97ea788742ebd9e2d0f58157d3cb0","ssdeep":"192:mxCpsfm6+p/Ps3hbN8oNFHgDUsVXaT8LABfcRbeOpTyuUyQ+ev+uzNeQGkKuCI5C:cCm+h28oNFHgYs9aTB4xrk15C","tlshash":"1592b6af6ac1f4398a366010291fb1d4e3711fd640484886f27ec89977b8d78567bb3c","size":20936,"data":"","first_seen":"2025-06-22T23:57:28.12598Z","last_seen":"2026-02-24T03:30:51.225962Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/bb62ad5.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5141679325699fda04d286d5c8aa78b","sha1":"e1acb94527518620b24c68f3321782b42d513749","sha256":"b0e46d025225b7fbbdead5bb538b883d313bc906b7ff1a5bee0e6cbc50c5c71c","sha512":"d9826d0e176ca0eaffe8648f2902f24c3c606ef3e66622c4c953456d91f7d775bdb71dfcdbf2cda50fa47e934d0caae2638476ccd6c9d9e7f3d95aa70db330e6","ssdeep":"96:04sezW113MkdtRxBCJr7AUXUDtF9/J4hmsBs7QJPKIZ8yMtIyoUg12z:XsAWftALynB4IQ1aUm","tlshash":"0791611d75c3aa7c4c0f60110a1f1a34e1b11f9a901cd5a5fa30dda19b90e68662ebbd","size":4407,"data":"","first_seen":"2024-06-02T08:45:48Z","last_seen":"2026-02-07T17:49:36.794193Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/40d1211.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68dfed94eb97d8021c9845b2e1288c90","sha1":"d05c330b7dd61c48e94c763dc698d6e7d6014527","sha256":"8eb283e8cb5ca8c3338307ffa5e460e88d3f35924ed4db36be62d3155dd6599f","sha512":"3080117aae5c2a63e67a7e45b82a7cfb415141d2c2c163975e6451d3764564a0da95306a0244702b7716f6b1ee3aab272ae27fccba536dbd2d22398d33d1f6fa","ssdeep":"","tlshash":"6151430a7087a83bce2d1050215f7a7672b21fda8849c643f165cca0a6b8c71523fb7c","size":2824,"data":"","first_seen":"2024-06-02T08:45:47Z","last_seen":"2026-02-07T17:49:36.762564Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z2M9CGZLB6\u0026l=dataLayer","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bed2d28a591e9a42a054929792ac934","sha1":"a937d0d2b724659b98af22a34fe0357ee4c43c2f","sha256":"054d3f00439d0f9565b946aed8032fa9271ac14e9c4f4aa838372d7036762436","sha512":"9dd0f65466c6c38b86fd0ef08d59771dcaa594fa74d89084c352f97ceca4c4229483e1fbd81ee1053e4f361256c80e49f38c72ae1a8be48762020e64159866e8","ssdeep":"6144:XIe7mZ2bulKY/1u99xHDmHYmyBFzvnsNO6JWoNPad4FpC1+9:4Cpbu7/1mbrnsVWbMpB","tlshash":"829419ce73c674668396f078503f118ba57b29a2b44cc895f189cce42d74aaa4237f7d","size":408378,"data":"","first_seen":"2025-12-27T21:32:12.95055Z","last_seen":"2025-12-27T21:32:12.95055Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/0c20777.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54cedcfa67a283a597985c191124a1cc","sha1":"889a08095f1d7b56e380b274ff3dc2b756b0aada","sha256":"fd57b6aeaa1d315cb6ccd960b4108a9f5c291c2445afc6c8934195cbe7ced3ab","sha512":"7b8d5217b808f65b83ec5cd946b7afdd43d56e2b4f17c6865bb6ff0477107abe5c3ae17dc1642a6aea57efed37ed0ef1c61291bbefd4499c40fa63edeb4a642e","ssdeep":"1536:r83pk3GW86yq6bae2GJTph7EiyKOsCsSQCsS4ys8CtqpsEzZ5AVKiMYXl+sY6fgW:MrY+ExsPkVTQV1YNhepb4/INVEk3","tlshash":"e2f34aad72c7f02a06933161542f3006f2755ca9a04fc442b73adde678a894da177fbe","size":170340,"data":"","first_seen":"2025-06-22T23:57:28.148687Z","last_seen":"2026-01-13T20:00:37.79263Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/e3bc540.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b4e5bf7e08023dc8d26447737bb251a","sha1":"95840f2418ccb78b20649a8e591b199c889ee7c5","sha256":"790e164096f50df649f1174fb87f510eccdda74127c50dd1f933ee11900bcbd9","sha512":"af0126bda35ef427f7f06b1da86ad3820be4f13d4402d043655f65fb3764eac02fffdf74c4301917a53f20673c5a87ab92adfc5f16ae34916b0e31ea0323e561","ssdeep":"6144:3vGUVtRR2JsdG4aPlMA7+r3nqW6ywmVZvHSERvy/VZKbShCFaFIbaeyF:3vGUVjBG4yQm8fSW0/rCFaFIbaZ","tlshash":"acf42a8db2c5742903d761a6103f220ab33e286da80d846cf979d8e66d79d4d617bf3c","size":725143,"data":"","first_seen":"2025-06-22T23:57:28.142855Z","last_seen":"2026-02-28T17:55:11.209347Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fc3ac4b260ddcb1b6c684743a2b154f","sha1":"ca0d7b66644944e5270be95b6ca7e8dd6b875bc7","sha256":"647c68c23c5d03cb19a403f4db195ea033d9db787f2fc9720749d21dd0e676f2","sha512":"9d75da9ecdd924b86911e978b8af234ef2a399787688b2221ccca52c2b7ee0ae289d4f16fd318a2935cfbdf11471129a229e9020ccf4558f697a79801a00c2e0","ssdeep":"","tlshash":"703101ee31a1edb1078b6048203f040af5acb4a0a3ade9d6dba5c9647d781444062ffe","size":1849,"data":"","first_seen":"2025-12-23T09:40:45.346184Z","last_seen":"2026-01-30T11:59:22.192754Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-30T15:38:27.204048Z","times_seen":84627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/859f7d1.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"506d75adb5e7261416539a86a5cd5e32","sha1":"44669c1cd5828f15e8afd563a0cc130931c098f2","sha256":"6176f749b7d626f83d30567aa77a0b3468edd67943fb679d868be61654a41b97","sha512":"db0a92efe751fbfb8ccc39289d38dfd49c454777e2895ec57943324c7f64ce598d8c7373c333d94d628437ac9b701dbe70a2524770b9a6dcf2666012624bbfc8","ssdeep":"96:iOHgoX3T3zeghQVwlPfW2zcHwc3hQVwLGc5kCOJEUqtBkw06iUfAUIw6uUl4Y:aozzjQVwpu2zewcRQVwmdgBkmigYd34Y","tlshash":"2ad194387cc2a97a0f836121101b10e5e3555c89a02ed963f730cee2bad4d495a26ff6","size":6628,"data":"","first_seen":"2025-06-22T23:57:28.158617Z","last_seen":"2026-02-28T17:55:11.21485Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=643057","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.138","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4c34b7295f5897a6e39c001768fd57c","sha1":"ebea2bb1b0bef40c199f2db0e5969648818bdc18","sha256":"183b56ab43cf7572cffe6c4bbb68c7fd400099d040809e894e39dcf7c053e824","sha512":"d42175270d9f6cf5ee59cd3bde964a839e3c96fb236f79bd1418e3f431d5e17ef327d87a4693d7d53f52f6d69e6facbe7aafd7e0abe663e6b66e1c2d36575038","ssdeep":"","tlshash":"86418c3967fa1574a947f035ca6fa209307700871558ec54bd0cd6804f18e7d1ab9bfa","size":1919,"data":"","first_seen":"2025-07-05T16:21:00.388884Z","last_seen":"2026-04-25T21:02:38.944783Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"core.ourdream.ai/api/render?uid=872b-9e2e0c0ac4ee","fqdn":"core.ourdream.ai","domain":"ourdream.ai","tld":"ai"},"ip":{"addr":"66.33.22.31","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"f208bec66765431e755c7a62d865ce71","sha1":"f430203c20b07d99491794683ab92da418be2d72","sha256":"f696d36c3397e46089cdac160daca81c7d668856f443f3b6655ffb1ef791f9fd","sha512":"f071848effbb265e4b0ce27cf3215117b1c5ce38f3341f6daa4fba10945e0f854403b074bb5d8bfb4e1f93ab7611a413af8c5602c6344f9d730ec2930e638fd3","ssdeep":"","tlshash":"3d41d5c6b2b8291f997a523282fb7d0d59324812edd14828b1d49c234da895fb2c12ee","size":2290,"data":"","first_seen":"2025-12-27T21:32:12.998147Z","last_seen":"2025-12-27T21:32:12.998147Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-30T15:10:42.423293Z","times_seen":334312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"61e5b4baabb2a0ccc3105b8469ba24ca","sha1":"e69a90f8a2d61b83d7a0dcce719bfea1e0ecada8","sha256":"546156861ec0410eaf8c0cd98807c5ef09e74e8a6af36e4eeeaaf2cf63e65655","sha512":"19b4ca6e13e733a7c68888986efecada65dfeb91585dd71ea6dffcbb4591b26cd39885593bfc28f98f41e020fa1de3d233f91201a954aff33671421faf46dfd3","ssdeep":"96:nIomaazx3hD+i9lDK+WHFoN9w2adaDaRa7amaqa4auadpETMaPSDK+WHj4aPdYJX:tmaaXD+i9l++WWTw2W6SOJ/HtgpaE++x","tlshash":"28c1fb72c69878ff283a97667c3b7fc892d76a01f4948e4b238f512915348603c76e74","size":6093,"data":"","first_seen":"2025-12-27T21:32:12.999254Z","last_seen":"2025-12-27T21:32:12.999254Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/0a21198.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e764b4865d67c0cf26f2f161f7f418f6","sha1":"3c4171d81dd56023111c55238a050bbc1676055b","sha256":"1885e7177fba78169fc5c35298e799cf06ef6076278c274b7ba30fa1adf31cc0","sha512":"1d9a86060d2bbf7f13cee50c3e80c5036190ba9ce6f1e5254eb586a50593b91035f79a517d314d01340d5554e882f794cea1de729a3b11fab5ae578927939b91","ssdeep":"","tlshash":"0871fd0eb483a53d9b3a1000056f6675b2752fd04916d44fb9b8cca2faa4cb5a71ef78","size":3476,"data":"","first_seen":"2024-06-02T08:45:47Z","last_seen":"2026-02-24T03:30:51.181929Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/d6b3a07.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2820972e45e43f1e4887e3c743f1efe","sha1":"54c6281560df77418d402a99cb0c272a1c2ce1b8","sha256":"3a1f2f4ed05e23e7a4cf72c60e64d3b1bdadda09db6522656ee822a456bc37f7","sha512":"669148afe2506728621a770c5c6944910669ddcf35bcc60ae4c89046a22c61dbeff7c9de8233d48670e22dd9e7d7932146eaf6ee75717718ab098ce90ced7ca2","ssdeep":"","tlshash":"c251205ff3d3f495492a2471013f3509a13f5c962b87c8487ab084d1d4b970ab225ebd","size":3130,"data":"","first_seen":"2024-06-07T00:41:53Z","last_seen":"2026-02-24T03:30:51.231173Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/5ee7f6c.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed9d61c420c06334ca26d8af2ed4b2a7","sha1":"46fadd446d139e9a18d62990ddc70f5c58431df4","sha256":"b13fb4aa0cea1dfd5a21d30ae3e6b4502498bf1727a0b849da71d6a867e37335","sha512":"97e01ab7565249e6498536c2176987b0cc33ba3353bde0947fb8bc3c270c5fa74dcefca9bd2371137b389e79533dae5e78a259fefdde29d80614bd45f0244e56","ssdeep":"192:8S0L2hFuVxELS8oelWk95a4SUpd5sbNzu1qcog0/9fiW+2HLhPrR9D:8S0L2hFuVxELhokWk9NXpdmidu/NSWH","tlshash":"af02eb4aa883fa39ce1fa062453a5170f0b01fd5812d9463fa7dce505bd4d296b3fa9c","size":8257,"data":"","first_seen":"2024-06-02T08:45:47Z","last_seen":"2026-02-28T17:55:11.200077Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=699330","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4c34b7295f5897a6e39c001768fd57c","sha1":"ebea2bb1b0bef40c199f2db0e5969648818bdc18","sha256":"183b56ab43cf7572cffe6c4bbb68c7fd400099d040809e894e39dcf7c053e824","sha512":"d42175270d9f6cf5ee59cd3bde964a839e3c96fb236f79bd1418e3f431d5e17ef327d87a4693d7d53f52f6d69e6facbe7aafd7e0abe663e6b66e1c2d36575038","ssdeep":"","tlshash":"86418c3967fa1574a947f035ca6fa209307700871558ec54bd0cd6804f18e7d1ab9bfa","size":1919,"data":"","first_seen":"2025-07-05T16:21:00.388884Z","last_seen":"2026-04-25T21:02:38.944783Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=610935","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4c34b7295f5897a6e39c001768fd57c","sha1":"ebea2bb1b0bef40c199f2db0e5969648818bdc18","sha256":"183b56ab43cf7572cffe6c4bbb68c7fd400099d040809e894e39dcf7c053e824","sha512":"d42175270d9f6cf5ee59cd3bde964a839e3c96fb236f79bd1418e3f431d5e17ef327d87a4693d7d53f52f6d69e6facbe7aafd7e0abe663e6b66e1c2d36575038","ssdeep":"","tlshash":"86418c3967fa1574a947f035ca6fa209307700871558ec54bd0cd6804f18e7d1ab9bfa","size":1919,"data":"","first_seen":"2025-07-05T16:21:00.388884Z","last_seen":"2026-04-25T21:02:38.944783Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/fluidplayer.min.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57c091151b032dc219a8e239b3add116","sha1":"a5bd1b4a98747fffd21e26902e3941f99934bcba","sha256":"26bb48d4e49c2cabb541d8c1cc261551400a51fcac679ecbdb9e5e3c4329e688","sha512":"fef9bf8ac75fccc1e86f38273e451c4043c037c910a4247253b6cbbb8092393a2777dd250be416f59190ed9f964cc3b786b9bd58a90a397bd61556845e4b7a7c","ssdeep":"6144:Duokalkmaeu66EiF4ag7/CA6sRPvPYXVKwSpHGf9OSLBTF2HYeVyW:xag7/CAZRPv49VF2HYe0W","tlshash":"c224098e3644b6344ccb655fb7afd211327ca91aac12712ab417fc8dd3ec489d413ada","size":211686,"data":"","first_seen":"2023-03-08T06:28:54Z","last_seen":"2026-02-28T17:55:11.212212Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/01a2362.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac3559571fbde34430e35f3b66390e53","sha1":"e7c3ebc40585e20884fd113a8a1f11df1671182e","sha256":"64485f3e0878eb4f822e27d73cf5819d9593a4076e9edb02dedb4c24cc1fa919","sha512":"dc7aa56d2d41803b612899e13a005f3349554c200a679002e0b66682e827f68ead6f5ab8b593152522b455aaa1df5669ceea4266343694997697dc83f3c956c0","ssdeep":"","tlshash":"e81165114e43bc6089bb40503d3678e9f3bd0f48184c646176dacda8b1b1b660e3bf2d","size":986,"data":"","first_seen":"2024-06-02T08:45:47Z","last_seen":"2026-02-07T17:49:36.77789Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/9478b70.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"750c9452e04ae66374a3e29ae9dc82da","sha1":"ddf146edfbf175208b95d6d0a16f4a84cb6adb87","sha256":"edcb8a2478385b45bbafcc7c6657dfebdb73079170496f2a2503cfd623a8d9d6","sha512":"05ef82e2abd0560cefb7b50f55dadf14aa7fd9e57f64f109b4d3332fd44ebe12f0f29b7810c8514f7cff058af9c66454ec3da834b0027604f7f72a2d9b5f52fd","ssdeep":"192:8FXiUjpR3WP4+n6SeaQ+Fx5yKwrAdaY8Nu4A8xr1pO5DAroKCGlY:MXAP4+npeaQ+7pQC","tlshash":"ce62c54f6893e83c0a6fa112513b959cf0300b8ab015c452aa39ddf599d4db97a3fb7c","size":15719,"data":"","first_seen":"2025-06-22T23:57:28.088848Z","last_seen":"2026-02-28T17:55:11.189211Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"core.ourdream.ai/api/render?uid=872b-9e2e0c0ac4ee","fqdn":"core.ourdream.ai","domain":"ourdream.ai","tld":"ai"},"ip":{"addr":"66.33.22.31","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"10563a832fd69c4822438f4589f092e7","sha1":"2fd7e63d818bfc02c2d4d428df3c2f5d67c3692b","sha256":"fae41f1f15e37a3d766ba5e8f8ada92b61863d0e2021803ee23e785ba5c5bfee","sha512":"2feafda295b9d2e7fa9069468bcf4d1bb2665f11ee1abb12656d8c6e89c35a046b80753f24ba51e5fc5ef07f8fb839065b200bc60f57509e502a0f4bc1bcfb59","ssdeep":"","tlshash":"b1b09b66f53575760d4e69674576434d743644510c46064948d41054847454d353da5c","size":129,"data":"","first_seen":"2025-11-29T10:29:37.43211Z","last_seen":"2026-04-30T05:41:40.20402Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"owo.lewd.ninja/j2.js","fqdn":"owo.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"829aa8c505c0d047dbe946d14187b32e","sha1":"56ce06baf4c6dff0cdf029925a3c14cc482a627e","sha256":"8083f887f97200735f060557c8542c512a44fa9c1854acec9e91bb7216a88ba8","sha512":"7ae2a3554d0059ef6677a80f484e52d809d2cde5bc8d820e9d54d7139b0afcf02cf57a995a2ccd695d338c0996872a9fa588aaebfb0fe0442b8f19926aa23965","ssdeep":"","tlshash":"8871716733553878889b966f10ef6a18317fa6320f0688025a9ce868987cdcb047fe84","size":3764,"data":"","first_seen":"2023-10-16T23:07:46Z","last_seen":"2026-04-25T21:02:38.899068Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/982e86d.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"965aae27d51ef742135089a5a4b1531c","sha1":"86a403ec97b6e87d68ec46283ff61a8313696d15","sha256":"c7e714291fd1928a7d33b1d51c146f6ce6cc029b9cbd2918d706e94e8428fb27","sha512":"5642f032681eda0463845151b6d430d9631b533714ad8f39a4bedd371fcb606e8d55bc01dda28ad80f4ef7f3cc7b65b31b50cf83c988c6542157dc7566472abe","ssdeep":"96:ERgh+PvV2fed6fSuNdCNRffOTz9xAJ6fSuNdCNvrqIpXjbr7TEpDcX68U:KPdmed0SuMRffOTz9KJ0SuM2gfr/CI67","tlshash":"1da1a67a37d8f8e942545e16643bf11af06829762e26d588c3edc970a838fc10166ff3","size":4886,"data":"","first_seen":"2025-06-22T23:57:28.099977Z","last_seen":"2026-02-28T17:55:11.20126Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lewd.ws/GBIBAH1.js","fqdn":"lewd.ws","domain":"lewd.ws","tld":"ws"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4402ff91a4c2c14641427454c831602","sha1":"720e8365191135a4745a533a843f4acd32292df9","sha256":"0019105a70cd9bed5725359fb59b243d481224ce5fc68a317a4637ca853e3829","sha512":"c5f5215cec44e91fc07547550c764cdce55e38cc3107a037840777c013266fe86b37c22f34c9687ff3198c3fce27976ae4fd7bb609e9a99ba4afd7a62ef25134","ssdeep":"3072:kg9Ou1GUClpCuDFiYLPSYOP5iXac/znNTxx7p+Qw:Ku1GrlUu5SZ4XZDx7pY","tlshash":"7634b78cb6c1b4e586a361b4023f181af3773a15744ec481b52dd6d16e7ea0fa927e3c","size":248445,"data":"","first_seen":"2025-12-23T13:01:17.084993Z","last_seen":"2026-02-08T15:49:19.807881Z","times_seen":441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/a31fd02.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/a31fd02.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.615Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"3b24-Tf/pIyJ/fUXpT5xYfemRcXuMwaY\"\r\nage: 2241283\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfb5ac956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15140,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8020)","md5":"993c6141c77fc3ba8adbc6a464071f5e","sha1":"4dffe923227f7d45e94f9c587de991717b8cc1a6","sha256":"c8f855765ab21c216c72d4b2157164770929efb544dd1fde94ba330acec07382","sha512":"9f2524f2fedd82217a161ac1be3afd0b55a10dc8a3e3ff054f480d983dd34101b9fb562cbebe94ace21fdb3f97f8ad2f8c77823ed77c34ee46b0a7de1d19e750","ssdeep":"192:6h/k0FZzg4AQzAjHEDCQkycfOCuBRxj4zS/OJlaegd1upcniWzZneBTCpS52Wl:6h/FZg4JuSt7e9C08Wl","tlshash":"f1629516d74131699c2bd721e2d1ba4cb176e723faf30aeaf105722496cbddd30a2294","first_seen":"2024-06-02T08:45:49Z","last_seen":"2026-02-28T17:55:11.211058Z","times_seen":101,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/935032c.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/935032c.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.615Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"f1b-WSi6jXpOqzbT1dMZwNO/s/4g9C4\"\r\nage: 2244527\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfb5aca56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3867,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3867), with no line terminators","md5":"5b84a03cf2540efd81fe18e1c3454e40","sha1":"5928ba8d7a4eab36d3d5d319c0d3bfb3fe20f42e","sha256":"e6b1ca8d00f0b0797266016b49467fccac40c81f930f3b128202957773b9e26f","sha512":"b52eca9ec42bb9645c58af8f1e3041758496edff49ef8ae9a6c4efad3e8e04c28fe7ebfe4d4f4c8eba26c3eabeee971f507b34e79677a00f872b927aebaa8b26","ssdeep":"","tlshash":"30813207ee651005a03bd166bdcabfdc6124802ada21bbb8d1236fb58a5f1d73533b1c","first_seen":"2025-06-22T23:57:28.092206Z","last_seen":"2026-02-28T17:55:11.217198Z","times_seen":69,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"owo.lewd.ninja/j2.js","fqdn":"owo.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /j2.js HTTP/1.1\r\nHost: owo.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: application/javascript\r\netag: W/\"5fb3fee8-eb4\"\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 17 Nov 2020 16:48:40 GMT\r\nvary: accept-encoding\r\nexpires: Fri, 23 Jan 2026 12:19:02 GMT\r\ncache-control: public, max-age=2592000\r\nlewd: yes\r\nx-cache-status: MISS\r\ncontent-encoding: br\r\nage: 292353\r\ncf-cache-status: HIT\r\ncf-ray: 9b4becfb9af756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3764,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3763)","md5":"829aa8c505c0d047dbe946d14187b32e","sha1":"56ce06baf4c6dff0cdf029925a3c14cc482a627e","sha256":"8083f887f97200735f060557c8542c512a44fa9c1854acec9e91bb7216a88ba8","sha512":"7ae2a3554d0059ef6677a80f484e52d809d2cde5bc8d820e9d54d7139b0afcf02cf57a995a2ccd695d338c0996872a9fa588aaebfb0fe0442b8f19926aa23965","ssdeep":"","tlshash":"8871716733553878889b966f10ef6a18317fa6320f0688025a9ce868987cdcb047fe84","first_seen":"2023-10-16T23:07:46Z","last_seen":"2026-04-25T21:02:38.899068Z","times_seen":172,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/eefd083.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/eefd083.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.672Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"6f-i3sLn/HGaAqTNvKosqEOtjof/U4\"\r\nage: 2021305\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd1b1156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"34194314d33cc19df0a3e7fa342333e7","sha1":"8b7b0b9ff1c6680a9336f2a8b2a10eb63a1ffd4e","sha256":"6175e8a9af1bb29b58543fa6f0dcf005f77caa28f78d854ddaa95f4111ca4311","sha512":"20c0813c4295fe883f5ec040e47f81373c07991064c9c1e52d734bf90c0918880e064159708bb9fe212eadc023cd85e72ef141199e61ae3e87019af2382f16fd","ssdeep":"","tlshash":"e5b09226f5d00d59522a8889d562faf45829a2f22248c681b1013370a7404d3a202e17","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.191999Z","times_seen":138,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://new.lewd.ninja\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 07:02:38 GMT\r\nexpires: Sun, 27 Dec 2026 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 52138\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-30T15:36:13.442798Z","times_seen":224489,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":133,"dns":9,"connect":22,"send":0,"wait":8,"receive":1,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxx.lewd.ninja/game/62178/versions","fqdn":"xxx.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"172.66.169.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /game/62178/versions HTTP/1.1\r\nHost: xxx.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://new.lewd.ninja\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, stale-while-revalidate=300, no-transform\r\netag: W/\"f-omKz/ah9ckBwbdUVNtIf7GLr2a0\"\r\nx-easter: L1\r\naccept-ranges: bytes\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\ncf-ray: 9b4bed04df81dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"704cc0f1812c62bbb0f8bb30cf52d013","sha1":"a262b3fda87d7240706dd51536d21fec62ebd9ad","sha256":"e64db0fde59206a0cf85c783e644f5e2ffd6a519dbf7d720cc9e5b0ace3d46a4","sha512":"8a67244b2a75138a56a215d6c9614e9e803444bd29741348c47756552f1480e253c25f9ee31000af8ba3f2e79898a45c4c2c299fcec4b8c481e7ec93c8f25e0f","ssdeep":"","tlshash":"e56000000c00f333000c033ccf0000c0c330000300f000300c0000c0033000c0cc33c0","first_seen":"2023-11-27T00:33:08Z","last_seen":"2026-04-11T16:11:59.489026Z","times_seen":26,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:20 GMT","end":"Wed, 25 Feb 2026 15:57:19 GMT"},"fingerprint":{"sha1":"13:5B:80:5A:23:15:61:AE:98:37:1B:0A:3C:F6:E2:BD:63:8E:3B:D6","sha256":"22:03:24:94:F7:E3:5F:66:1B:39:CE:18:75:20:3D:01:AC:FE:93:AA:1A:73:8C:D5:34:98:AB:2B:E5:19:37:12"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 27 Dec 2025 21:31:35 GMT\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1017), with no line terminators","md5":"b57455c9a0032c8d67868882258a4a19","sha1":"017f1d5e957af25bc7ee498e8e6104da00835773","sha256":"1aa296f8312ecf0d0959f759affc2850e1ed52b321033a51355cc1f37fd5dc89","sha512":"24db4575be8e92cfb7b408e04e6bee7cc5257a22b46488a3f4e9a8dbc05f75c3f4a465fea59e4ea866c1a9f3afb145f50b60fb5969a61ef7c466d572a7197e57","ssdeep":"","tlshash":"581165731a04f0350b3209d1e1ffc7b5e482b01cf12845dca511ea842f79ccbce04589","first_seen":"2025-12-15T23:56:17.122996Z","last_seen":"2026-01-20T22:35:06.74886Z","times_seen":7485,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":236,"dns":6,"connect":8,"send":0,"wait":20,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/fluidplayer.min.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /fluidplayer.min.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.651Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"33ae6-pb0bSph0f//SHiaQLjlB+Zk0vLo\"\r\nage: 2172915\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfb6ad056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211686,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (62751)","md5":"57c091151b032dc219a8e239b3add116","sha1":"a5bd1b4a98747fffd21e26902e3941f99934bcba","sha256":"26bb48d4e49c2cabb541d8c1cc261551400a51fcac679ecbdb9e5e3c4329e688","sha512":"fef9bf8ac75fccc1e86f38273e451c4043c037c910a4247253b6cbbb8092393a2777dd250be416f59190ed9f964cc3b786b9bd58a90a397bd61556845e4b7a7c","ssdeep":"6144:Duokalkmaeu66EiF4ag7/CA6sRPvPYXVKwSpHGf9OSLBTF2HYeVyW:xag7/CAZRPv49VF2HYe0W","tlshash":"c224098e3644b6344ccb655fb7afd211327ca91aac12712ab417fc8dd3ec489d413ada","first_seen":"2023-03-08T06:28:54Z","last_seen":"2026-02-28T17:55:11.212212Z","times_seen":142,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/02955de.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/02955de.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.704Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"886-fEe5pN/vgiDMb8mzQ7O9wsHy7gk\"\r\nage: 2020896\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd0b0356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2182,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2182), with no line terminators","md5":"677a32da9eee16b9b0ea3a6d7ddca767","sha1":"7c47b9a4dfef8220cc6fc9b343b3bdc2c1f2ee09","sha256":"bb0a6b535fdda979210fd58e4b6f24cbca3b99d4f45aa95cbd5263d7d7083b02","sha512":"eb825393a4dd76bd3ccd4b5007674ef1da7a10ad56584b885ef1acff5b21cdb2345e8dace5dd50a05e8098a34b74366e59c68394c68cda763ae3338e73283304","ssdeep":"","tlshash":"3041612c5e46283dbdafd0bb3030438c1ff4d4cada1d8b7aa62b79a5e5cd4c0502e584","first_seen":"2023-06-15T03:52:42Z","last_seen":"2026-02-28T17:55:11.219637Z","times_seen":83,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"owo.lewd.ninja/images/games/b_62178_59db096e767fe60ac251160bc62f55a3.jpg","fqdn":"owo.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /images/games/b_62178_59db096e767fe60ac251160bc62f55a3.jpg HTTP/1.1\r\nHost: owo.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29219\r\nage: 307779\r\nlast-modified: Sat, 19 Sep 2020 14:47:21 GMT\r\netag: \"5f6619f9-7223\"\r\nexpires: Fri, 23 Jan 2026 08:01:56 GMT\r\ncache-control: public, max-age=2592000\r\nlewd: yes\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\ncf-bgj: imgq:85,h2pri\r\nvary: accept-encoding\r\npriority: u=5,i=?0\r\ncf-cache-status: HIT\r\ncf-polished: webp_bigger\r\ncf-ray: 9b4becfe2b1c56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29219,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 533x300, components 3","md5":"02e6f0de90f757b6c5fc77cad03752fe","sha1":"085ca7c97f0a23d49aa046a01e315b25c66bf0af","sha256":"7f2561d39c0c5a9fed6b56826b88b7731d4db0459c4b0b7705688c3cbddb4a89","sha512":"458e7969743840173be23102d32f322b07f0a4f4aeecdaaf61bf5795c0f6a1715608b4e254e8debde66f1602a0be337ebe7f9f0826e6743cec1b3ce1abf7cec2","ssdeep":"768:XHNWDezOzIWUePvYAXSrFnBl7fHTCdlGRk:9WDrUyRSrPpTcIy","tlshash":"f9d2d1b78d988634710f66b263980fde52c27f8ee410f8d95613f2c826d9437932f666","first_seen":"2025-12-27T21:32:12.899671Z","last_seen":"2025-12-27T21:32:12.899671Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/d6b3a07.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/d6b3a07.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.603Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"c3a-VMYoFWDfd0GNQCqZywwnKhws4bg\"\r\nage: 2243998\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed025b6256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3130,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3130), with no line terminators","md5":"b2820972e45e43f1e4887e3c743f1efe","sha1":"54c6281560df77418d402a99cb0c272a1c2ce1b8","sha256":"3a1f2f4ed05e23e7a4cf72c60e64d3b1bdadda09db6522656ee822a456bc37f7","sha512":"669148afe2506728621a770c5c6944910669ddcf35bcc60ae4c89046a22c61dbeff7c9de8233d48670e22dd9e7d7932146eaf6ee75717718ab098ce90ced7ca2","ssdeep":"","tlshash":"c251205ff3d3f495492a2471013f3509a13f5c962b87c8487ab084d1d4b970ab225ebd","first_seen":"2024-06-07T00:41:53Z","last_seen":"2026-02-24T03:30:51.231173Z","times_seen":37,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/0a21198.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/0a21198.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.728Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"d94-PEFx2B3VYCMRHFUjigULvBZ2BVs\"\r\nage: 2104220\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed028b6756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3444), with no line terminators","md5":"e764b4865d67c0cf26f2f161f7f418f6","sha1":"3c4171d81dd56023111c55238a050bbc1676055b","sha256":"1885e7177fba78169fc5c35298e799cf06ef6076278c274b7ba30fa1adf31cc0","sha512":"1d9a86060d2bbf7f13cee50c3e80c5036190ba9ce6f1e5254eb586a50593b91035f79a517d314d01340d5554e882f794cea1de729a3b11fab5ae578927939b91","ssdeep":"","tlshash":"0871fd0eb483a53d9b3a1000056f6675b2752fd04916d44fb9b8cca2faa4cb5a71ef78","first_seen":"2024-06-02T08:45:47Z","last_seen":"2026-02-24T03:30:51.181929Z","times_seen":36,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxx.lewd.ninja/game/62178/online","fqdn":"xxx.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"172.66.169.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"OPTIONS /game/62178/online HTTP/1.1\r\nHost: xxx.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nReferer: https://new.lewd.ninja/\r\nOrigin: https://new.lewd.ninja\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\nx-easter: L1\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b4bed045e80dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T15:35:17.961431Z","times_seen":14429233,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":80,"dns":23,"connect":1,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxx.lewd.ninja/game/62178/online","fqdn":"xxx.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"172.66.169.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /game/62178/online HTTP/1.1\r\nHost: xxx.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://new.lewd.ninja\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 13\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, stale-while-revalidate=300, no-transform\r\netag: W/\"d-Uu8VyFEh0Y2SwteLCT7PJNe/t2g\"\r\nx-easter: L1\r\naccept-ranges: bytes\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\ncf-ray: 9b4bed04ef99dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"42da8da4f16fc2003690822e38a89865","sha1":"52ef15c85121d18d92c2d78b093ecf24d7bfb768","sha256":"37cef25012daac9af3fa7c539c10a5a3d02f67ed0a8ce85bce12cd8c3f46b36b","sha512":"e0ecc619eb3a4a10e114c2fed378218b490f6a4c074ef54c3276515879b24928f9d1591a51415a8107a85c3d41a347d7cb77a0cc790d8650261d655f6eb9af95","ssdeep":"","tlshash":"f0600000003c3c0f00c000c00300030000003000300030c0c300c00c30c300003000c0","first_seen":"2025-07-07T04:44:18.881539Z","last_seen":"2026-04-19T16:07:27.900027Z","times_seen":23,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/ecfe4c1.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/ecfe4c1.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.672Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"7da-KtYiGuLoMDpu+UpbEalIakAPg2s\"\r\nage: 2025322\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd1b0e56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2010,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2010), with no line terminators","md5":"aa25f80397e6ae52a6cae312ebf2b156","sha1":"2ad6221ae2e8303a6ef94a5b11a9486a400f836b","sha256":"67bf37e084ddb2d43ef89fea7d9b7a36cbca2199f1ebb1f53afb10416367c328","sha512":"903945429663edfbcf2512ab9e35dac09dc60939a5b725028bf44301540e576a64a159184895c7078c94ee2d15c8b87df55ec261e0c3ecb52d08a7b50e8465ef","ssdeep":"","tlshash":"2941432d2984140aa93bf3c1adb6a7fd21314599e153ebed6413a7618fceec74027b08","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.186968Z","times_seen":75,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/flag/ru.svg","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /flag/ru.svg HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.655Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"265-9F3dO27o8ALaXoLTYj/rSUDHEGA\"\r\nage: 2172912\r\ncache-control: max-age=31536000\r\ncf-ray: 9b4bed030b6c56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":613,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02989ed6b1fd68a6c6838ecf125566fd","sha1":"f45ddd3b6ee8f002da5e82d3623feb4940c71060","sha256":"6bbf75716890f876f76351a83d0ee4745695cc07568122239c3a2414259bf4aa","sha512":"fa926b1e7ebc99e4b8dd68f46bb9dffd75e14bec484194cb4da45506e75881c7bf0c245e0ef40fc894dcc4843d370457f29b4c353a12d83a6f65da69591e8a49","ssdeep":"","tlshash":"cff00c62e9888c1ed1128a086760fa8112b3e00193f20e0ccae45c6f722fcd090ed5cd","first_seen":"2023-10-16T23:07:47Z","last_seen":"2026-04-25T21:02:38.908862Z","times_seen":101,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/08bf0c4.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/08bf0c4.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.643Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"5ee-AS8ox/SpN42hKoh4VvmUzkGDvCQ\"\r\nage: 2197865\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed079b9556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1518,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1518), with no line terminators","md5":"076c99d5f06ceb5249dfeb3e6f8c5c20","sha1":"012f28c7f4a9378da12a887856f994ce4183bc24","sha256":"9ace32536210a92ef2fecb9a0993f2b264755198130845d854b7f8aa22169f38","sha512":"fd08d15b87078fd47fb774b73d150b6c519b29c7e78c36425575cefb5b73cebfe11b14b4c7074b2c7ae1d387f49d886bcfcfae1b9037279732367d05be0261c0","ssdeep":"","tlshash":"a9310e9eb1a764010e8226d11a2fa286e15d315df9171492e6f0dbe09f646ccf21bf2c","first_seen":"2025-12-27T21:32:12.906823Z","last_seen":"2025-12-27T21:32:12.906823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/cdn-cgi/rum?","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1104\r\nOrigin: https://new.lewd.ninja\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test; _ga_Z2M9CGZLB6=GS2.1.s1766871097$o1$g0$t1766871097$j60$l0$h0; _ga=GA1.1.1854305219.1766871098\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1104,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1259,\"startTime\":1766871095004,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"c659620f-1948-4934-9c04-609c112bb798\",\"location\":\"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":1068,\"domContentLoadedEventStart\":1335,\"domContentLoadedEventEnd\":1341,\"domComplete\":2515,\"loadEventStart\":2515,\"loadEventEnd\":2523,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":29,\"domainLookupStart\":30,\"domainLookupEnd\":39,\"connectStart\":39,\"connectEnd\":62,\"secureConnectionStart\":42,\"requestStart\":62,\"responseStart\":346,\"responseEnd\":369,\"transferSize\":13768,\"encodedBodySize\":13001,\"decodedBodySize\":59083,\"name\":\"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":2523},\"siteToken\":\"09bba895a065474cb8287c3828ea515e\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://new.lewd.ninja\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9b4bed092bb056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T15:35:17.961431Z","times_seen":14429233,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/93cd910.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/93cd910.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.700Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"13f-9DnQ1SjIyofmXD8EIyBuLZjO4h8\"\r\nage: 2197918\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfb5acb56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (319), with no line terminators","md5":"61f11ed3058037eb7fd2cb369631e700","sha1":"f439d0d528c8ca87e65c3f0423206e2d98cee21f","sha256":"ef7cc05c931adfed0ff92bb9d2894d64b5af87b94287f1f4feafba1d0508d6ba","sha512":"b71c4cc36a44a1f1efaaf725d8e3dea127b2f2cccddac000724b84fea11dc449a7e9b267d9ecae78391f800d21cdeeeb7d156cc8c3e5f7295783aa76a05abafe","ssdeep":"","tlshash":"43e0260c7d4416a36033c12b1dd2e8945010d09bb611be3ab4337f514f003960133b14","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.202507Z","times_seen":138,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lewd.ws/GBIBAH1.js","fqdn":"lewd.ws","domain":"lewd.ws","tld":"ws"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.bramb.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:28:45 GMT","end":"Sat, 21 Feb 2026 02:28:44 GMT"},"fingerprint":{"sha1":"8F:08:34:2F:3D:E0:08:BB:63:30:0B:A0:ED:B8:3D:10:FC:F4:FB:10","sha256":"59:FC:F4:3D:6D:6B:16:EC:E0:B9:87:2A:2C:15:A7:D0:3B:DB:49:F9:FF:69:6A:C0:38:2B:B0:BB:23:82:BC:4A"}}},"request":{"raw":"GET /GBIBAH1.js HTTP/1.1\r\nHost: lewd.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 77814\r\nlast-modified: Tue, 23 Dec 2025 06:18:27 GMT\r\nvary: Accept-Encoding\r\netag: \"694a3433-12ff6\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 35\r\ncf-cache-status: HIT\r\ncf-ray: 9b25c02c4af27e1c-FRA\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248445,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"e4402ff91a4c2c14641427454c831602","sha1":"720e8365191135a4745a533a843f4acd32292df9","sha256":"0019105a70cd9bed5725359fb59b243d481224ce5fc68a317a4637ca853e3829","sha512":"c5f5215cec44e91fc07547550c764cdce55e38cc3107a037840777c013266fe86b37c22f34c9687ff3198c3fce27976ae4fd7bb609e9a99ba4afd7a62ef25134","ssdeep":"3072:kg9Ou1GUClpCuDFiYLPSYOP5iXac/znNTxx7p+Qw:Ku1GrlUu5SZ4XZDx7pY","tlshash":"7634b78cb6c1b4e586a361b4023f181af3773a15744ec481b52dd6d16e7ea0fa927e3c","first_seen":"2025-12-23T13:01:17.084993Z","last_seen":"2026-02-08T15:49:19.807881Z","times_seen":441,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":88,"dns":81,"connect":15,"send":0,"wait":13,"receive":34,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"lewd.ws","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lewd.ws/api/users/453988?host=new.lewd.ninja\u0026ev=228\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fnew.lewd.ninja%2Fgame%2F62178-club-valentine-v02-vonfawks%3Fasgtbndr%3D1\u0026sid=b1c52590-5edd-42dd-acde-959060e59aeb\u0026i=1\u0026kw=free%20porn%20games%2Cadult%20games%2Cxxx%20games%20pc%2Cxxx%20games%20android%2Cporn%20game%20apk%2Cincest%20games%2Crule%2034%20comics%2Cincest%20comics%2Crule%2034%20webm%2Crule%2034%20animations%2Cr34%20incest%2Cr34%20comics%2C3dcg%2C2dcg%2C3dcg%20games%2C2dcg%20games%2Clewd%20games%2Cxxx%20manga%2Csexy%20games\u0026url=https%3A%2F%2Fnew.lewd.ninja%2Fgame%2F62178-club-valentine-v02-vonfawks%3Fasgtbndr%3D1","fqdn":"lewd.ws","domain":"lewd.ws","tld":"ws"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.bramb.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:28:45 GMT","end":"Sat, 21 Feb 2026 02:28:44 GMT"},"fingerprint":{"sha1":"8F:08:34:2F:3D:E0:08:BB:63:30:0B:A0:ED:B8:3D:10:FC:F4:FB:10","sha256":"59:FC:F4:3D:6D:6B:16:EC:E0:B9:87:2A:2C:15:A7:D0:3B:DB:49:F9:FF:69:6A:C0:38:2B:B0:BB:23:82:BC:4A"}}},"request":{"raw":"GET /api/users/453988?host=new.lewd.ninja\u0026ev=228\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fnew.lewd.ninja%2Fgame%2F62178-club-valentine-v02-vonfawks%3Fasgtbndr%3D1\u0026sid=b1c52590-5edd-42dd-acde-959060e59aeb\u0026i=1\u0026kw=free%20porn%20games%2Cadult%20games%2Cxxx%20games%20pc%2Cxxx%20games%20android%2Cporn%20game%20apk%2Cincest%20games%2Crule%2034%20comics%2Cincest%20comics%2Crule%2034%20webm%2Crule%2034%20animations%2Cr34%20incest%2Cr34%20comics%2C3dcg%2C2dcg%2C3dcg%20games%2C2dcg%20games%2Clewd%20games%2Cxxx%20manga%2Csexy%20games\u0026url=https%3A%2F%2Fnew.lewd.ninja%2Fgame%2F62178-club-valentine-v02-vonfawks%3Fasgtbndr%3D1 HTTP/1.1\r\nHost: lewd.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: nauid=F41dNGxSBS2K7XEwEOai; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":670,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (349)","md5":"801138166f87bacae8f5adc05b9561ce","sha1":"823b818e567986da5cac7fe46aac8ea9524e0d0e","sha256":"d93de5e0d976d4b355b8d610a77ea103138696f6b5b531050e7ea5d6941383be","sha512":"b2ae94ed63bc9f6bf8a3b50faf6312f08b134deaf8220541692f3be37fcd90a0b3af80b2fbd91d1342c9ea4eebe33dcce8987335be5d0a5ed3db7570d685a9bd","ssdeep":"","tlshash":"5801ddc9a6ac65fb974890b3ea3d4ea68a8d88742315500afb24071e64ce28203e0197","first_seen":"2025-12-27T21:32:12.910339Z","last_seen":"2025-12-27T21:32:12.910339Z","times_seen":1,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"lewd.ws","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/859f7d1.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:38.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/859f7d1.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test; _ga_Z2M9CGZLB6=GS2.1.s1766871097$o1$g0$t1766871097$j60$l0$h0; _ga=GA1.1.1854305219.1766871098\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:38 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.635Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"19e4-RGacHNWCjxXor9VjoMwTCTHAmPI\"\r\nage: 2195466\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed0b1bcb56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6628,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6628), with no line terminators","md5":"506d75adb5e7261416539a86a5cd5e32","sha1":"44669c1cd5828f15e8afd563a0cc130931c098f2","sha256":"6176f749b7d626f83d30567aa77a0b3468edd67943fb679d868be61654a41b97","sha512":"db0a92efe751fbfb8ccc39289d38dfd49c454777e2895ec57943324c7f64ce598d8c7373c333d94d628437ac9b701dbe70a2524770b9a6dcf2666012624bbfc8","ssdeep":"96:iOHgoX3T3zeghQVwlPfW2zcHwc3hQVwLGc5kCOJEUqtBkw06iUfAUIw6uUl4Y:aozzjQVwpu2zewcRQVwmdgBkmigYd34Y","tlshash":"2ad194387cc2a97a0f836121101b10e5e3555c89a02ed963f730cee2bad4d495a26ff6","first_seen":"2025-06-22T23:57:28.158617Z","last_seen":"2026-02-28T17:55:11.21485Z","times_seen":69,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/16x16/info-icon-16x16-05.png","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.138","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poweredby.jads.co/adshow.php?adzone=610935","date":"2025-12-27T21:31:38.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /16x16/info-icon-16x16-05.png HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poweredby.jads.co/adshow.php?adzone=610935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 27 Dec 2025 21:31:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 1279\r\nLast-Modified: Wed, 26 Nov 2025 01:16:23 GMT\r\nConnection: close\r\nETag: \"692654e7-4ff\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"56de59b8e45caf845f6e6ec2e63c1d3c","sha1":"b0da59d9279ac89588d8793c14258b7442ff4472","sha256":"e79b9cc089a4235e67a18b353c909a9145c19e67149bba22243d8962487fadda","sha512":"3a7a4e135474c75d0614c9be6ec693e34dd4498908675ab1521cc1f04895ae5371a49b8f25553974b85eeea49c5c1c4e7a3f7e98f33a23d8df692be1677769aa","ssdeep":"","tlshash":"d021958cfd41b000a219d54156fdc117893304409ec1b692beded8831cb82fc962a4cb","first_seen":"2024-11-08T16:21:27.364482Z","last_seen":"2026-04-25T21:02:38.878199Z","times_seen":561,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":130,"dns":4,"connect":35,"send":0,"wait":38,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"core.ourdream.ai/api/telemetry/view","fqdn":"core.ourdream.ai","domain":"ourdream.ai","tld":"ai"},"ip":{"addr":"66.33.22.31","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://core.ourdream.ai/api/render?uid=872b-9e2e0c0ac4ee","date":"2025-12-27T21:31:39.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"core.ourdream.ai","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 22:01:57 GMT","end":"Tue, 24 Feb 2026 22:01:56 GMT"},"fingerprint":{"sha1":"2E:1C:CC:B3:57:6F:D4:91:D5:9C:E7:A4:44:90:8A:FB:AA:B1:C4:22","sha256":"5D:71:B1:54:9E:17:8F:EE:58:70:7D:65:05:18:75:6E:EB:FB:DD:80:C7:B1:DB:47:6D:2E:A8:08:80:A2:6A:E2"}}},"request":{"raw":"POST /api/telemetry/view HTTP/1.1\r\nHost: core.ourdream.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 301\r\nOrigin: https://core.ourdream.ai\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":301,"data":"{\"req\":\"470fa220-f807-4abb-9d40-8fcfbeb87007\",\"gid\":\"a1ef1724-400b-4eb3-9c5b-22e5c74913e2\",\"asset\":\"c7d1e112-8c40-4b1c-8439-342cd42a376b\",\"uid\":\"8cf924a7-fd4d-4303-be19-1f9d348ac62a\",\"org\":\"872b\",\"prop\":\"lewdninja.com\",\"metadata\":{\"viewport_width\":300,\"viewport_height\":250,\"loaded_at\":1766871099213}}"}},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://core.ourdream.ai\r\ncontent-security-policy: default-src 'self';frame-ancestors 'self';img-src 'self' data: https:;script-src 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline';base-uri 'self';font-src 'self' https: data:;form-action 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 27 Dec 2025 21:31:39 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: railway-edge\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-railway-edge: railway/europe-west4-drams3a\r\nx-railway-request-id: suJtru7AS3-PhW8BN8N_Fg\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T15:35:17.961431Z","times_seen":14429233,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.ourdream.ai/video/cb10fc02-32a6-403c-a2ac-851cf9aabd27.mp4","fqdn":"static.ourdream.ai","domain":"ourdream.ai","tld":"ai"},"ip":{"addr":"104.18.19.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://core.ourdream.ai/api/render?uid=872b-9e2e0c0ac4ee","date":"2025-12-27T21:31:39.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"294936b6.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Nov 2025 04:48:38 GMT","end":"Sat, 31 Jan 2026 05:48:37 GMT"},"fingerprint":{"sha1":"32:42:2B:0A:3C:C2:53:C4:68:FD:FA:12:D3:7D:8B:A2:E9:1E:66:41","sha256":"88:D5:DA:E2:50:4D:78:39:3A:49:D5:C9:2C:14:F1:80:BA:C5:9D:C2:FC:CD:B5:53:DD:AD:E6:2F:CE:16:A2:A8"}}},"request":{"raw":"GET /video/cb10fc02-32a6-403c-a2ac-851cf9aabd27.mp4 HTTP/1.1\r\nHost: static.ourdream.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 27 Dec 2025 21:31:39 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 581071\r\ncf-ray: 9b4bed12bf2e0731-OSL\r\ncache-control: public, max-age=31536000\r\netag: \"eb627beae1bd44d631b27b6bdcbcc583\"\r\nlast-modified: Wed, 26 Nov 2025 07:00:10 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 835335\r\nexpires: Sun, 27 Dec 2026 21:31:39 GMT\r\ncontent-range: bytes 0-581070/581071\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":581071,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"eb627beae1bd44d631b27b6bdcbcc583","sha1":"b52e1ef8ba3fd84b31c22fdb6b40bc7d812074be","sha256":"2ee9c90754bc9d1c1dcac875da62130a70ec1f8157a1d69f51090dda0f90d6f5","sha512":"216b6e70011fd1ac6c3065b1ce94a64eb185faf64ad79163ea7759a2c1ca87ec5e4b9fdaf7e6926a94b2f2edf2447fcc02c0896292d4a8b95f6a363059bbb18f","ssdeep":"12288:r4hm4YAmAkcbsLHU09lVcJ/Crz6BTqcuhL3jkYpiCyKk/ybQcx7:8A5EkCU0mO/Crw1udz/i54N5","tlshash":"47c412107b70a8c7e622963d6df3e70c72a5f2685743624b53a83a61fcb1bc2cd915c9","first_seen":"2025-11-26T19:40:24.71632Z","last_seen":"2026-01-08T12:23:43.033757Z","times_seen":7,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":44,"dns":22,"connect":1,"send":0,"wait":17,"receive":45,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/81644a5.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/81644a5.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.615Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"141-O2o0NsHswu6UsbftseK7+tUHDA8\"\r\nage: 1945224\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd0b0756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":321,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (321), with no line terminators","md5":"3727dbbd43a1de391911624063c6dd29","sha1":"3b6a3436c1ecc2ee94b1b7edb1e2bbfad5070c0f","sha256":"ea2b9bb0272be3ec7695cdb9795a26baaf83e82bc23760d8db139617eb3aa7be","sha512":"8c41cc04cbd833e2894a0589e1e21f42821eeda81cb3e122dd77bb83ad732ff46219b81ba4a6a4a2fe695b364aad28b5d3652400b0fc8a00c9911880659fbed5","ssdeep":"","tlshash":"ade08609770962a5913bf05b5d1035d894303596c888fd1ac0eeb697eec75e7231a7c4","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.206516Z","times_seen":135,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/d8f87be.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/d8f87be.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.688Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"39406-cUrg3gqQmA70yA1E/scH3a8TU3I\"\r\nage: 2025321\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfb5ac856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234502,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"72ec0fdb2a84cdf2659b9544f1623542","sha1":"714ae0de0a90980ef4c80d44fec707ddaf135372","sha256":"00676ac6e5b7916b4764ec2c65e2c83af3c965d2a547f192b20cf379d510fda3","sha512":"db4d3a55b4d48b9cd1da202de0df7ee803d0ae2a4e906b6ce7bfaad6d65ca9f61d52d94f1e65ac2ae95772c2d75999a55845761b90bdb416b7696c6bb0fbac57","ssdeep":"768:QXm6H29MsO0DS5doFFNG9ry05DEJaC9DKMzsRLcB73yMBgDjtWxGKqH+FB4pOrrq:QWb9MsO0DS5doFeTGqjui5t/MukdD+","tlshash":"bd34d866ed503c5f2563c42e14e0f7642b1e5588da162bfbb573e2e0864a38b1937f0e","first_seen":"2025-06-22T23:57:28.133977Z","last_seen":"2026-01-13T20:00:37.708037Z","times_seen":62,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/53580c5.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/53580c5.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.619Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"162-qFtZAYT8bMvp5pIym8puJQiNr1A\"\r\nage: 1945225\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd0b0556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":354,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (354), with no line terminators","md5":"0edda3d4d8ac571787e9e06d9d6176da","sha1":"a85b590184fc6ccbe9e692329bca6e25088daf50","sha256":"3b103c55ed03bb3e2089ccf3c721e07295d431bb21db511913652cff72f3789b","sha512":"0cbecfb1e15a28305016eff23e8a6b35a663bc9f008109723e047ab9438fb9523d350b4a57070c45dbabaf182e38744313d0e457a7f7bf17c21d0a811213a1b9","ssdeep":"","tlshash":"e4e09248842606545493610ba1f0ab4cd099d897ef3782eb62026f46ca8128b14a2e97","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.205823Z","times_seen":139,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/img/logo-ua.7e20ab7.jpg","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/img/logo-ua.7e20ab7.jpg HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1104\r\ncf-cache-status: HIT\r\nvary: accept, accept-encoding\r\netag: \"3c20-dHSo1DWAvkOyrIz36Z/bk71G2qI\"\r\nlast-modified: 2025-03-22T17:04:10.595Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\ncf-bgj: imgq:85,h2pri\r\npriority: u=5,i=?0\r\ncache-control: max-age=2678400\r\nage: 2106757\r\naccept-ranges: bytes\r\ncf-polished: ok\r\ncf-ray: 9b4bed065b8456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1104,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 52x52, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"403e7442c3c2839afa6095cda1cdbb9a","sha1":"c12e8b590d3175cf9fc7e5a701cf92591a1426ae","sha256":"27d1831d37effaf126fe1b39d331066dbfec7d170382748388e173b7182e7fa3","sha512":"d380a3254c4f715833a8fbd016deb6cb2141811afed12f1e009ba309b6dbcfbda7f66c76046aa1c371077c5e31098934e474cdf72dfc7adb45fcf57830548733","ssdeep":"","tlshash":"fc119697b35c34ba5c545781e829988a84baa446be67591f108e4de4b47168c890823a","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-04-19T16:07:27.950488Z","times_seen":125,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/e3bc540.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/e3bc540.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.656Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"b1097-lYQPJBjMt4sgZJqOWRsZnIie58U\"\r\nage: 2104221\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfb5acf56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":725143,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65485)","md5":"3b4e5bf7e08023dc8d26447737bb251a","sha1":"95840f2418ccb78b20649a8e591b199c889ee7c5","sha256":"790e164096f50df649f1174fb87f510eccdda74127c50dd1f933ee11900bcbd9","sha512":"af0126bda35ef427f7f06b1da86ad3820be4f13d4402d043655f65fb3764eac02fffdf74c4301917a53f20673c5a87ab92adfc5f16ae34916b0e31ea0323e561","ssdeep":"6144:3vGUVtRR2JsdG4aPlMA7+r3nqW6ywmVZvHSERvy/VZKbShCFaFIbaeyF:3vGUVjBG4yQm8fSW0/rCFaFIbaZ","tlshash":"acf42a8db2c5742903d761a6103f220ab33e286da80d846cf979d8e66d79d4d617bf3c","first_seen":"2025-06-22T23:57:28.142855Z","last_seen":"2026-02-28T17:55:11.209347Z","times_seen":69,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/b511cb9.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/b511cb9.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.615Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"775-FM3RUtZZTf8su60rCjel9Rg9NJs\"\r\nage: 2157341\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd0b0a56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1909,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1909), with no line terminators","md5":"28d087fb09915af676bc6b1511c6f1ce","sha1":"14cdd152d6594dff2cbbad2b0a37a5f5183d349b","sha256":"8ae431d118279d9dfa133dab4ac66c0dd1818457bb9cdbc682c4e745d06d2731","sha512":"df3f9156c57e2458314720b4ef7d1da50351337dc0a1d3146df3ec1439f99a07d550baf663c4c1de14644d0248fafa9af524e54a887a0848be5da0a3862dacdd","ssdeep":"","tlshash":"f041332826a23804803fe36969e6b7ec41304655e16beb8d942677168f8e6a31337bc4","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.195293Z","times_seen":138,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/e14266d.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/e14266d.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.607Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"24-UjIdCwzCas1ciVBoQWBwbjgIxZk\"\r\nage: 1945379\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd1b0f56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"16ad4c4ff969c4d1192df9c3858d47f6","sha1":"52321d0b0cc26acd5c8950684160706e3808c599","sha256":"3c330828890a6a8691e6806af10f14459b4e17314f8be60c605240b50f79dcff","sha512":"3eb102bae567a68e308bb9335fabe3fbfc5209c806a628cdac72a51cf0c7ec12c75739e41f015ede9946c8d9bfe563167e001aa448a5ef8d640e7f8a52f57ac2","ssdeep":"","tlshash":"4f800028ce283c38823c20ce82b82eca000bb0028c00ba008202f80200a802a3880b2b","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.218343Z","times_seen":139,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/a9513f1.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/a9513f1.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.627Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"150-Zr88ioKNy9q8KThXm2EH6TkBF6Y\"\r\nage: 2240947\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed028b6656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":336,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (336), with no line terminators","md5":"60c82c03293335b8055f593837ef86a5","sha1":"66bf3c8a828dcbdabc2938579b6107e9390117a6","sha256":"fc47fcb65bf2f7932cff1ae6646da7f4109c3c3bd6b259be0426de1d6be97a53","sha512":"9113025f1cd50723d650f05912a6e83ea54c6a7ef006cc4a5620d4eb6d87e529c59aa47d1b37af62cf9fb60f73ac47eceba171cb269da93cd4fa95a0da8e706a","ssdeep":"","tlshash":"e5e0c09934117cd74bea20e0827752c2b4bd542d0eea34a06bf1c5dc4436a0f0011cec","first_seen":"2023-11-20T01:27:33Z","last_seen":"2026-02-07T17:49:36.793647Z","times_seen":39,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"owo.lewd.ninja/images/games/b_113072_a1f008b288a95423b1697948ec803434.jpg","fqdn":"owo.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /images/games/b_113072_a1f008b288a95423b1697948ec803434.jpg HTTP/1.1\r\nHost: owo.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16156\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 13 Mar 2024 07:22:48 GMT\r\netag: \"65f15448-5149\"\r\nexpires: Tue, 20 Jan 2026 16:28:05 GMT\r\ncache-control: public, max-age=2592000\r\nlewd: yes\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=1,i=?0\r\nage: 536612\r\ncf-bgj: h2pri,imgq:85\r\nvary: accept, accept-encoding\r\ncf-polished: ok\r\ncf-ray: 9b4bed075b9156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 533x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b2194c151f24572f21a9803a174fd724","sha1":"7afd0b089137d6d838da4fbfd8fe6f3c872b22ff","sha256":"aeea222fa48955b96f2976d665c98d1d95edecd64799269db579cfb1af0a38bb","sha512":"6f310b46eac8a5afd6510842395560d924b3219ecb93405ee492ddf33e2b3792cdd43a9eb4d3926dc7b6b31a13982d32517fd340cf0eba1e837f47ca9d2a9f04","ssdeep":"384:1NnWgNJ25Yty0HwoiRQ0rdX2mCGMdxESLfWZYeTAJ0K3kfsxhi/R:15YYty0QxRHrdXxjMPLeHm0K3msn2R","tlshash":"ca72d0d22183e2e51189e447d8c15ee140f1fcbbd119ebfa6cd1a66d388e1c9c06ea7c","first_seen":"2024-08-19T15:55:40.888398Z","last_seen":"2025-12-27T21:32:12.922122Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/982e86d.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/982e86d.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.631Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"1316-hqQD7Je26H1o7EYoP/YagxNpbRU\"\r\nage: 2195471\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfb5ace56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4886,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4886), with no line terminators","md5":"965aae27d51ef742135089a5a4b1531c","sha1":"86a403ec97b6e87d68ec46283ff61a8313696d15","sha256":"c7e714291fd1928a7d33b1d51c146f6ce6cc029b9cbd2918d706e94e8428fb27","sha512":"5642f032681eda0463845151b6d430d9631b533714ad8f39a4bedd371fcb606e8d55bc01dda28ad80f4ef7f3cc7b65b31b50cf83c988c6542157dc7566472abe","ssdeep":"96:ERgh+PvV2fed6fSuNdCNRffOTz9xAJ6fSuNdCNvrqIpXjbr7TEpDcX68U:KPdmed0SuMRffOTz9KJ0SuM2gfr/CI67","tlshash":"1da1a67a37d8f8e942545e16643bf11af06829762e26d588c3edc970a838fc10166ff3","first_seen":"2025-06-22T23:57:28.099977Z","last_seen":"2026-02-28T17:55:11.20126Z","times_seen":69,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/d188683.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/d188683.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.607Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"11f-9cJv+3aWbB8M1L4Agwf9bS43Zio\"\r\nage: 1945224\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd1b0d56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":287,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"191b325e961c3c13f93edd94f123917e","sha1":"f5c26ffb76966c1f0cd4be008307fd6d2e37662a","sha256":"95120f69629ffe32782c8bae4577871b92e6b8c5a84bcd5589f409014df446c2","sha512":"eb5bdb599565885e5aa547c25d2d99dd360934a7c9eacc1c64dda251cbf23faeadd7220bf94d196ddbc70b09e11a069c50b750b28409bcceb4506c9679ad8907","ssdeep":"","tlshash":"f7d0cd25b084199170339509daf7fdf89406e791614cd0d2b1035bb1de091c6e04593b","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.185481Z","times_seen":139,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Poppins:400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Dec 2025 21:31:36 GMT\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2390,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"814dda10e3e399ba797acbdf4683adea","sha1":"ba9e0f951baa55f083e6e74da3a8cd72736b888d","sha256":"512a4c9738ac8a2839b28f0064d54d7bd0db5339fc8a51e9129a9b6a24a12dae","sha512":"8403ab70948f3db374da41f7d54737cfd86b650de296896c50595fb2082a3032eae4d79a066e45a33aa880dbd44f2e96017ab5f943ab2f300996dd8f2df0d6bc","ssdeep":"","tlshash":"05419bd1087bd114ab871cc223ce7d37ee0e9255b810e5746bfe0c98adabc654362b2d","first_seen":"2025-09-17T13:57:41.228625Z","last_seen":"2026-04-30T14:33:00.790322Z","times_seen":2233,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":67,"dns":1,"connect":7,"send":0,"wait":17,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lewd.ws/api/settings/453988","fqdn":"lewd.ws","domain":"lewd.ws","tld":"ws"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.bramb.site","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 02:28:45 GMT","end":"Sat, 21 Feb 2026 02:28:44 GMT"},"fingerprint":{"sha1":"8F:08:34:2F:3D:E0:08:BB:63:30:0B:A0:ED:B8:3D:10:FC:F4:FB:10","sha256":"59:FC:F4:3D:6D:6B:16:EC:E0:B9:87:2A:2C:15:A7:D0:3B:DB:49:F9:FF:69:6A:C0:38:2B:B0:BB:23:82:BC:4A"}}},"request":{"raw":"GET /api/settings/453988 HTTP/1.1\r\nHost: lewd.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new.lewd.ninja/\r\nOrigin: https://new.lewd.ninja\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1be64b6d6652effba7dcf744e90def6a","sha1":"d9fbc7d1fa49fa4733f90a3739882d63972c2352","sha256":"72d79d0ad9a70ef53c1bab65c588d44bffb1a1b5aba0eb2f9f6a886c4c3aec4f","sha512":"ff1aee5b5d4ba25f4f78a0ddc80cd878856815c1ded88b32370c72bff242e73522e6aefb60fa5e53c434f10d2611dab7679152edf9321edc2b656e0265ef7006","ssdeep":"","tlshash":"408004c00dc1545410c010f4434043150103140f535c3304d41d1701147f4d17030150","first_seen":"2023-04-06T10:58:14Z","last_seen":"2026-04-30T05:20:31.852204Z","times_seen":7372,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":69,"dns":1,"connect":18,"send":0,"wait":13,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"lewd.ws","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/01a2362.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/01a2362.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.647Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"3da-58PrxAWF4giE/RE6ih8R3xZxGC4\"\r\nage: 2169873\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed025b6056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":986,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (986), with no line terminators","md5":"ac3559571fbde34430e35f3b66390e53","sha1":"e7c3ebc40585e20884fd113a8a1f11df1671182e","sha256":"64485f3e0878eb4f822e27d73cf5819d9593a4076e9edb02dedb4c24cc1fa919","sha512":"dc7aa56d2d41803b612899e13a005f3349554c200a679002e0b66682e827f68ead6f5ab8b593152522b455aaa1df5669ceea4266343694997697dc83f3c956c0","ssdeep":"","tlshash":"e81165114e43bc6089bb40503d3678e9f3bd0f48184c646176dacda8b1b1b660e3bf2d","first_seen":"2024-06-02T08:45:47Z","last_seen":"2026-02-07T17:49:36.77789Z","times_seen":30,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/16x16/info-icon-16x16-05.png","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.138","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poweredby.jads.co/adshow.php?adzone=643057","date":"2025-12-27T21:31:38.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /16x16/info-icon-16x16-05.png HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poweredby.jads.co/adshow.php?adzone=643057\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 27 Dec 2025 21:31:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 1279\r\nLast-Modified: Wed, 26 Nov 2025 01:16:23 GMT\r\nConnection: close\r\nETag: \"692654e7-4ff\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"56de59b8e45caf845f6e6ec2e63c1d3c","sha1":"b0da59d9279ac89588d8793c14258b7442ff4472","sha256":"e79b9cc089a4235e67a18b353c909a9145c19e67149bba22243d8962487fadda","sha512":"3a7a4e135474c75d0614c9be6ec693e34dd4498908675ab1521cc1f04895ae5371a49b8f25553974b85eeea49c5c1c4e7a3f7e98f33a23d8df692be1677769aa","ssdeep":"","tlshash":"d021958cfd41b000a219d54156fdc117893304409ec1b692beded8831cb82fc962a4cb","first_seen":"2024-11-08T16:21:27.364482Z","last_seen":"2026-04-25T21:02:38.878199Z","times_seen":561,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"animeapp.org/iframe/5bc063dbba5?iframe\u0026ag_custom_domain=lewd.ninja","fqdn":"animeapp.org","domain":"animeapp.org","tld":"org"},"ip":{"addr":"172.67.159.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://poweredby.jads.co/adshow.php?adzone=610935","date":"2025-12-27T21:31:38.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"animeapp.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 01:46:14 GMT","end":"Fri, 13 Mar 2026 02:43:33 GMT"},"fingerprint":{"sha1":"AF:A9:99:C9:5F:0A:84:F6:7A:09:03:0A:AD:B2:09:06:B4:23:A6:40","sha256":"64:03:71:2A:41:EA:81:C8:6F:4D:F7:D8:31:0F:E5:56:A4:57:FD:84:A1:37:C6:61:8B:D2:07:88:AD:FE:67:FF"}}},"request":{"raw":"GET /iframe/5bc063dbba5?iframe\u0026ag_custom_domain=lewd.ninja HTTP/1.1\r\nHost: animeapp.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poweredby.jads.co/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 21:31:38 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nset-cookie: showed_15797_8458=[2511451]; Expires=Sun, 28-Dec-25 21:31:38 GMT; Domain=animeapp.org; Path=/; Secure; SameSite=None\nc_42c6c5dc38c1b7cedacbbf100964e1eb=1; Expires=Sun, 28-Dec-25 21:31:38 GMT; Domain=animeapp.org; Path=/; Secure; SameSite=None\nz_b983282c272b89d198e8af3ed33e4c89=1; Expires=Sun, 28-Dec-25 21:31:38 GMT; Domain=animeapp.org; Path=/; Secure; SameSite=None\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGY9LwA00RvpXcn3gAyWFOXtSOpy87OQ8bz0JLRM5lYLRdZij%2FPDHJ9xdtRpohWpV6ZAhmsRQYpbQvrp1CQkde0QXo2SZ7%2FgKRx7bQ%3D%3D\"}]}\r\ncf-ray: 9b4bed0ffd9f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":752,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (751)","md5":"557ac00fc840ed7a4cda42ec2e2d3d86","sha1":"f964a7a0313c1352c0c3cfc69673de3464634af5","sha256":"27e1086ba321a0e9a55e0d53cb3f653cd8961e1657f81afa995132e1520b87cc","sha512":"bfd61085c6fc7af095060e8b7db4588cb05d956f9b279240d5efa4b3ea07f8be156c01461f13522d3ceb0fb7fc2f2d28582ffd3ab8e6c5bcd181546d5992234b","ssdeep":"","tlshash":"380120f2a2d17a96c3121080df999adcf83fd27c42885a864a477876c00c6ea4c212ef","first_seen":"2025-12-27T21:32:12.930792Z","last_seen":"2025-12-27T21:32:12.930792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":72,"dns":33,"connect":1,"send":0,"wait":44,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"animeapp.org/bnr/4/3ca/6c4440/3ca6c4440177ed1872fcd90c4acf3e0b.gif","fqdn":"animeapp.org","domain":"animeapp.org","tld":"org"},"ip":{"addr":"172.67.159.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://animeapp.org/iframe/5bc063dbba5?iframe\u0026ag_custom_domain=lewd.ninja","date":"2025-12-27T21:31:39.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"animeapp.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 01:46:14 GMT","end":"Fri, 13 Mar 2026 02:43:33 GMT"},"fingerprint":{"sha1":"AF:A9:99:C9:5F:0A:84:F6:7A:09:03:0A:AD:B2:09:06:B4:23:A6:40","sha256":"64:03:71:2A:41:EA:81:C8:6F:4D:F7:D8:31:0F:E5:56:A4:57:FD:84:A1:37:C6:61:8B:D2:07:88:AD:FE:67:FF"}}},"request":{"raw":"GET /bnr/4/3ca/6c4440/3ca6c4440177ed1872fcd90c4acf3e0b.gif HTTP/1.1\r\nHost: animeapp.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://animeapp.org/iframe/5bc063dbba5?iframe\u0026ag_custom_domain=lewd.ninja\r\nCookie: showed_15797_8458=[2511451]; c_42c6c5dc38c1b7cedacbbf100964e1eb=1; z_b983282c272b89d198e8af3ed33e4c89=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:39 GMT\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 111667\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 26 Dec 2025 14:30:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cWnai1E4iE0SLVjgUYnznVzNUMjIBlC2L08xzRYsxzFzySqyUq%2FM%2FeoNSmqs3kBiri1aLdlK2nigzjD69XIGWbVeqvPhyUQIOi%2F%2FNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b4bed115d941a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":872241,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"GIF image data, version 89a, 39107 x 23042","md5":"8a148dfd2cd80657f0e9207de0620e10","sha1":"ef8fbd9867865c0869154c5c15cd2c5db3139187","sha256":"2e292dc01a8e3b6a8528d4e735f00566ab5c21602147881fa2763fe17b5da19b","sha512":"bde80927b19853cfd5c2a0e02fe498ff91db73e2fe38e219d26bebb05ea10988885ec711cb8524cd10f86c0d0704d53ac8fb9c618803a9588c3c47deca05ace8","ssdeep":"12288:vBzpYKv6VoFrBvqT6DJ8ctkDY2ksgYWWV4DNV6U3zbcME8f7lxhCVKRIEy7tG/VM:vhzlZEDJ8W+xVFPzIpSb4gwn","tlshash":"8f4501039290f3b0e175b2f9981106e4b947cb94e7c7be41d938e2a11cdb62a77de4d2","first_seen":"2025-12-27T21:32:12.934555Z","last_seen":"2025-12-27T21:32:12.934555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/favicon.ico","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.659Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"47e-gCISVnGCpqJnEdWw2/XjmHBzEhc\"\r\nage: 2172907\r\ncache-control: max-age=31536000\r\ncf-ray: 9b4bed01cb5a56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"d9616028c608050263d7dc6b4adb9f39","sha1":"802212567182a6a26711d5b0dbf5e39870731217","sha256":"47dabc9ca64738d0b691a4ce5511c6eb21824487946132baf83415ab45dccddd","sha512":"e44c5fe97d271b0c35e0e916038a0b3f228cd4c531726da9cbb9fb928d6e2875d5678979206bdeaf18784d0cdbe74824d4d4a87704cc03118329bb76b35da3d1","ssdeep":"","tlshash":"e021f0fad2d12859e59bc375401fe79ae25edc50b2a6352cc781be198ff231438854e4","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-04-25T21:02:38.91545Z","times_seen":167,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/fe93e8e.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/fe93e8e.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.604Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"544-9N0MQVY5fVVhMY54G/F8u8VL3C8\"\r\nage: 2242381\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed026b6356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"2c8fcb4b5e7e02b17287781552fe1203","sha1":"f4dd0c4156397d5561318e781bf17cbbc54bdc2f","sha256":"33c58720c1bcc05c5e83822a3198e4aaf67356fd85a4991fcafb80b1a6023153","sha512":"099dd89baeff76e8c19c3261c402e362efcebb8f067936e8810b71370e24c50cdc0652de8dc1accbc279d0f6e01c56cead60e462009c2be6d6d0081ed64bde25","ssdeep":"","tlshash":"4421013f6183723bd55e02220260667460752e8edf53c407bf68cd64d174e727623b5d","first_seen":"2023-11-20T01:27:34Z","last_seen":"2026-01-13T20:00:37.781393Z","times_seen":25,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"owo.lewd.ninja/images/games/62178_d7a6e16e0230050bc6d879d15ba521f3_thumb.png","fqdn":"owo.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /images/games/62178_d7a6e16e0230050bc6d879d15ba521f3_thumb.png HTTP/1.1\r\nHost: owo.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9694\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 19 Sep 2020 14:47:11 GMT\r\netag: \"5f6619ef-c9e3\"\r\nexpires: Mon, 26 Jan 2026 16:32:29 GMT\r\ncache-control: public, max-age=2592000\r\nlewd: yes\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept, accept-encoding\r\ncf-bgj: imgq:85,h2pri\r\npriority: u=4,i=?0\r\ncf-polished: ok\r\ncf-ray: 9b4bed03ab7656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 311x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ae2c9961ed5b2be13c3c1bc35ebcc8e3","sha1":"91495ae7c79a679cc1bab3feb3ef113fb9f5d877","sha256":"7f426d4dcc3a609ba3b99ddc81ebf41fc6dd9b6c004750788e7840c0493088e2","sha512":"9401482939f04e1bca667570f19ff8618ff64408b466d9de301d404a36c5f4a3b1f09b7e2a421b52dd1fe01e70d616d8dfebc4ee23395baa63b783624006033c","ssdeep":"192:bAfdRfbpDZmwGSlCdkzerT1sTulsYnIx4zLPXP3pdhM4qHij4V:UlxTGIClxakhnqCLHbhZbj4V","tlshash":"5812b073d2696398b61039dec406e5c785e7817e09e5a994b86ec173eb38cc67088243","first_seen":"2025-12-27T21:32:12.941136Z","last_seen":"2025-12-27T21:32:12.941136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"owo.lewd.ninja/images/games/62178_38e4c22bc3da0f93afc044a0700cc2db_thumb.png","fqdn":"owo.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /images/games/62178_38e4c22bc3da0f93afc044a0700cc2db_thumb.png HTTP/1.1\r\nHost: owo.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13262\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 19 Sep 2020 14:47:11 GMT\r\netag: \"5f6619ef-f268\"\r\nexpires: Mon, 26 Jan 2026 16:32:29 GMT\r\ncache-control: public, max-age=2592000\r\nlewd: yes\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept, accept-encoding\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: ok\r\ncf-ray: 9b4bed039b7556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 311x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"565f1d5463bcf766b9b44559449dbd2a","sha1":"c621a3159cb68185675dd22ebd02b6a6014850f2","sha256":"6088540152cb65d9e1599653de87daa000ece75e3a04d3ffc11caead0e9d6c6a","sha512":"e4d44d1b1eae0a3c2c149360a32c4359f9d5bd5eae0766cc6563e0c7fedb22e2862eaa9c15327c407dd05b60e2b93683ec713831f9338e84531b636ef5bd686a","ssdeep":"384:PBIEGWIYvRsuyFc3EuaXIzEQFTD+PjSfe/P5CnF:p/GWbLyK3QXuR9oU05CnF","tlshash":"f852d1ea662f3c715084d6ec8ad76391fd8658fabedcfdd307b98c15830534066548b1","first_seen":"2025-12-27T21:32:12.943255Z","last_seen":"2025-12-27T21:32:12.943255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"owo.lewd.ninja/images/games/b_166132_9e297eb58d3f48df14977ccb2b89820b.jpg","fqdn":"owo.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /images/games/b_166132_9e297eb58d3f48df14977ccb2b89820b.jpg HTTP/1.1\r\nHost: owo.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21884\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 19 Feb 2025 05:17:52 GMT\r\netag: \"67b56980-5eb2\"\r\nexpires: Sun, 25 Jan 2026 13:52:01 GMT\r\ncache-control: public, max-age=2592000\r\nlewd: yes\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nage: 113976\r\npriority: u=1,i=?0\r\ncf-polished: ok\r\ncf-bgj: imgq:85,h2pri\r\nvary: accept, accept-encoding\r\ncf-ray: 9b4bed075b9056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21884,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a025cf108e61aac16cb30837993c7595","sha1":"282c8c3ac30045b81fef591444adde618ac4c876","sha256":"5c3dfe74fd2a026a5fa209f94dc15d8faa05c67c1970d415e74f2094df92e557","sha512":"2b1e1af75fb8fd9f55b3375e89f8a1438a8d30507cd3b8a855d29291db89997ddf819e0f7417d1bf9591a91f65be03dd66826a4b30423ed030c1a6a9a6e85d51","ssdeep":"384:gyVhmyvJo2mnbFNsAFc8hDUijTIHM15OHCRB2E/+9JwndSUV7tAaSxDqMufSPPM6:lVhmtNFc8hQijTIHMD0CRs4VSpZqrfSJ","tlshash":"47a2c009831389a44f5f79cbdd15a999d9108886e0853378907fd4b4ed23bc739aa1ff","first_seen":"2025-12-27T21:32:12.945444Z","last_seen":"2025-12-27T21:32:12.945444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/0a21198.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/0a21198.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.728Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"d94-PEFx2B3VYCMRHFUjigULvBZ2BVs\"\r\nage: 2104221\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed079b9656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3444), with no line terminators","md5":"e764b4865d67c0cf26f2f161f7f418f6","sha1":"3c4171d81dd56023111c55238a050bbc1676055b","sha256":"1885e7177fba78169fc5c35298e799cf06ef6076278c274b7ba30fa1adf31cc0","sha512":"1d9a86060d2bbf7f13cee50c3e80c5036190ba9ce6f1e5254eb586a50593b91035f79a517d314d01340d5554e882f794cea1de729a3b11fab5ae578927939b91","ssdeep":"","tlshash":"0871fd0eb483a53d9b3a1000056f6675b2752fd04916d44fb9b8cca2faa4cb5a71ef78","first_seen":"2024-06-02T08:45:47Z","last_seen":"2026-02-24T03:30:51.181929Z","times_seen":36,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"core.ourdream.ai/api/render?uid=872b-9e2e0c0ac4ee","fqdn":"core.ourdream.ai","domain":"ourdream.ai","tld":"ai"},"ip":{"addr":"66.33.22.31","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://poweredby.jads.co/adshow.php?adzone=699330","date":"2025-12-27T21:31:38.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"core.ourdream.ai","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 22:01:57 GMT","end":"Tue, 24 Feb 2026 22:01:56 GMT"},"fingerprint":{"sha1":"2E:1C:CC:B3:57:6F:D4:91:D5:9C:E7:A4:44:90:8A:FB:AA:B1:C4:22","sha256":"5D:71:B1:54:9E:17:8F:EE:58:70:7D:65:05:18:75:6E:EB:FB:DD:80:C7:B1:DB:47:6D:2E:A8:08:80:A2:6A:E2"}}},"request":{"raw":"GET /api/render?uid=872b-9e2e0c0ac4ee HTTP/1.1\r\nHost: core.ourdream.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poweredby.jads.co/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: br\r\ncontent-security-policy: frame-ancestors *\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sat, 27 Dec 2025 21:31:38 GMT\r\netag: W/\"d57-lp6gWEllIiSl8kCvCsVCWwwwQp0\"\r\nexpires: 0\r\norigin-agent-cluster: ?1\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nserver: railway-edge\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-railway-edge: railway/europe-west4-drams3a\r\nx-railway-request-id: 3HMO8gKrR9OCXwaDN8N_Fg\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3415,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3415), with no line terminators","md5":"6b7b7a7b9acc41fb1b90eb3b6800e2f0","sha1":"969ea05849652224a5f240af0ac5425b0c30429d","sha256":"48d282c90d2cf58a7293af50944648f45ec704bf54149a619619106c6181441d","sha512":"4e81ae5a8895db4d26cede02141957a1b32c105c930992a220389c855d429c161014e7619532e89145fae96e01115405745ad9b473435a6226ca18916703ead9","ssdeep":"","tlshash":"0261f8d3b264782fdd2a523386f7ba0d64268422dec18c48a0d0a83648ac54fb9e16dc","first_seen":"2025-12-27T21:32:12.947652Z","last_seen":"2025-12-27T21:32:12.947652Z","times_seen":1,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":135,"dns":74,"connect":21,"send":0,"wait":167,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/f39b716.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/f39b716.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.603Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"5e-h8HKp9ycgfqvJOIRFkhxt26wpNY\"\r\nage: 2196678\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd1b1256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2b3e230b93a8c2cd1cafb4342d057624","sha1":"87c1caa7dc9c81faaf24e211164871b76eb0a4d6","sha256":"2ebf94a729552c5fb6ec4acd4bbea186c09f63e680176818392f1a26b1a0898a","sha512":"70363aeb5a9b8b3d879e72c800c6e19e0ccbf87e24a1dcb19a657964eea85758822b3aeb250f9c0e30f6bac178ed16a889e93a0045ec8b32693fc210adfba6d1","ssdeep":"","tlshash":"73b012003f4f8502307fd6204800d6340f4213cb405a001430131722074784393842c0","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.223963Z","times_seen":138,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z2M9CGZLB6\u0026l=dataLayer","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-Z2M9CGZLB6\u0026l=dataLayer HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\nexpires: Sat, 27 Dec 2025 21:31:36 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 137779\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":408378,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"6bed2d28a591e9a42a054929792ac934","sha1":"a937d0d2b724659b98af22a34fe0357ee4c43c2f","sha256":"054d3f00439d0f9565b946aed8032fa9271ac14e9c4f4aa838372d7036762436","sha512":"9dd0f65466c6c38b86fd0ef08d59771dcaa594fa74d89084c352f97ceca4c4229483e1fbd81ee1053e4f361256c80e49f38c72ae1a8be48762020e64159866e8","ssdeep":"6144:XIe7mZ2bulKY/1u99xHDmHYmyBFzvnsNO6JWoNPad4FpC1+9:4Cpbu7/1mbrnsVWbMpB","tlshash":"829419ce73c674668396f078503f118ba57b29a2b44cc895f189cce42d74aaa4237f7d","first_seen":"2025-12-27T21:32:12.95055Z","last_seen":"2025-12-27T21:32:12.95055Z","times_seen":1,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":69,"dns":11,"connect":7,"send":0,"wait":34,"receive":44,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /recaptcha/releases/7gg7H51Q-naNfhmCP3_R47ho/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://new.lewd.ninja\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 362552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Dec 2025 13:09:27 GMT\r\nexpires: Wed, 23 Dec 2026 13:09:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Dec 2025 05:00:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 375729\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":849529,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"ca956219876073e2f13e8fd63f0b9d26","sha1":"230a172e1fcf2036687131567200dee5fd200a09","sha256":"392c00d030e58635abc9339f903f23a2ebf2cc0ac6371363105549689dfe0206","sha512":"4bbbd3cd9f929185245ca260e7a2521763d3d90b47bbb1d1205819b40b84918e552d482ad8db91c9258e2504891a91efa190041d210c5290c63f38014adbf53c","ssdeep":"6144:QmhF4MqL/nL5k0wmjxRqyFF83/p50YFqrnMI74ggRLXal17bRc0wMwVmbIyWHVEI:zlqT1qyOEnMKabwBRIm0Epzax4XssBQ","tlshash":"040528d8b15278a2a332f4f14467241da77f966ed4084d1df29899f03fb4409a0bbeb7","first_seen":"2025-12-11T19:34:34.525691Z","last_seen":"2026-04-28T23:51:59.987409Z","times_seen":49446,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":65,"dns":5,"connect":21,"send":0,"wait":21,"receive":100,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/flag/pt.svg","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /flag/pt.svg HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.655Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"2ef-I0ACoADofB9ir7oKK7wmMAFMMMg\"\r\nage: 2157636\r\ncache-control: max-age=31536000\r\ncf-ray: 9b4bed030b6d56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":751,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccf91f66d3850a7ee8d4e288e0d5cead","sha1":"234002a000e87c1f62afba0a2bbc2630014c30c8","sha256":"2bc42d46ff6501f60ffb2e5e495e95bd8c810c62aea9f9f9486aa9fa2cafd22c","sha512":"8df1452f3c6ee05d56cd323993cb3d537d8ae2d6e195952812d482fd0898996d307bdac802d6939318d3e098d944ea82a1770cdee19ea9b5637eeea1b01e9860","ssdeep":"","tlshash":"0101dc91c6c95c2ed08d8711abb55b86a2b2c28a03a20e09c3d51c77351b8d0d7cadf8","first_seen":"2023-11-10T00:29:37Z","last_seen":"2026-04-25T21:02:38.901674Z","times_seen":99,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=643057","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.138","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /adshow.php?adzone=643057 HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 27 Dec 2025 21:31:38 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nP3P: policyref=\"/w3c/p3p.xml\", CP=\"NOI DSP COR NID CUR OUR IND STA\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4134,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"74986d4a34d0455f0708493aa0d826d7","sha1":"ece57ffcd7c6fd8c3005e7c0d0bea62059701f9a","sha256":"efc09de33c3f3eea68a41c86730aabfff34658afc912160b6d96f6a599ed836f","sha512":"4a4c7b66ce7ba223027a60410b4d3df627fb41eadfc0ca3e850b22d8188abaf31b17abab67ac87d8324a3f035fbfd910b49dcbb61464d8a43ec83b2702e6858b","ssdeep":"96:9j15gTyVDqyaQ3gY59KnMAyucPteqFdAPgnm/DWB4DK:9j4TyVDqyaQd6MAyucg0AB/DW5","tlshash":"4081b72a16fa0034a583f0749abfe70925335583955edc18786c97948f4ce790d77bec","first_seen":"2025-12-27T21:32:12.954311Z","last_seen":"2025-12-27T21:32:12.954311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":935,"timings":{"blocked":187,"dns":71,"connect":37,"send":0,"wait":559,"receive":3,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=699330","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.890Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /adshow.php?adzone=699330 HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T15:35:17.961431Z","times_seen":14429233,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=610935","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.902Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /adshow.php?adzone=610935 HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T15:35:17.961431Z","times_seen":14429233,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=610935","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.138","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /adshow.php?adzone=610935 HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 27 Dec 2025 21:31:38 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nP3P: policyref=\"/w3c/p3p.xml\", CP=\"NOI DSP COR NID CUR OUR IND STA\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3846,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"7f6759bedecceada602f2a7c52bc8940","sha1":"367e95846a7d92d3317aff413f335b73c49c6329","sha256":"4fda828240d971c447bc8b0110e7a141ee9cbebdb542a8fde3c6fbc897a73e12","sha512":"0c9463176d11c55a5e2223e54e47fcdfd0f0b436efb96ab6f7760ea9d8045bb8550c35c3dc756f8dd0691b3b9d2862834bc75cd4f0823d01b9ae40d63c6ec549","ssdeep":"","tlshash":"9881626a26fa0034b643f0349abfe30930336183a15edd5875acd6948f4ca691d7b7ed","first_seen":"2025-12-27T21:32:12.95644Z","last_seen":"2026-04-19T16:07:27.897843Z","times_seen":7,"resource_available":false,"data":null}},"time_used":947,"timings":{"blocked":200,"dns":83,"connect":37,"send":0,"wait":549,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.jads.co/1x1.gif","fqdn":"i.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poweredby.jads.co/adshow.php?adzone=699330","date":"2025-12-27T21:31:38.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /1x1.gif HTTP/1.1\r\nHost: i.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poweredby.jads.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 21:31:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27460\r\nlast-modified: Thu, 03 Nov 2016 21:36:07 GMT\r\netag: \"581badc7-6b44\"\r\nx-77-nzt: EwwBuUwJGwH36GkFAAwBuUwKCQH3E3wCAAwBJRPCNAG3xC8mAA\r\nx-77-nzt-ray: fdb54123bfd2c7dd3b505069a1d5140c\r\nx-77-cache: HIT\r\nx-77-age: 354792\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":27460,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 250x250, components 3","md5":"2acfb73fd2df022a7dad5595adef5bda","sha1":"939b803ea641bd427b7599f92a816262e7a5bf48","sha256":"3d4610a2ab69d08e54685d0d3cfcf03ec663bacff8cc89a1e0a2904a7769e641","sha512":"5978a8866bbb30d409f728c4cc1081af19e3dcaedf2e4f0e1d9e40b75c0e80ecd6474cff4204114716f30ac832bfdb6787726caf504d2305332f151664d3e15d","ssdeep":"384:EtC6Y5SnG2H+o8Lqp74pgtIeFat/EfoTDOiSQKoobxx/hjDVhVwvqMXW7C+VKq4c:/BH2XaqpsIIHHpKd9XJwnVoKqee","tlshash":"7fc2ae2963e21d4ee0ce1c56d175c2eaa3a74314c84fa660f095c5c3e3ba705b71adac","first_seen":"2023-05-07T23:47:12Z","last_seen":"2026-04-25T21:02:38.93924Z","times_seen":1234,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":483,"dns":442,"connect":8,"send":0,"wait":16,"receive":2,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/ee9a000.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/ee9a000.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.672Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"58-52TTF63Gmf/z4iJM8J90lQ4PYe8\"\r\nage: 2025322\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd1b1056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"48e85d6dfdab2e1f75f1de016528a28b","sha1":"e764d317adc699fff3e2224cf09f74950e0f61ef","sha256":"772d8beaaac95f216c341ffafec6a19f195ff86d8afc8ddbabf385dff51dd4d5","sha512":"b8fcbb5bbf6ca39ca7f49c0950ddcaaab297e9d23ca713118115b7103e8a0271ce116a5d3701d53d8278491714f6a5c40b96765b04544e8def520fbba06fe2e6","ssdeep":"","tlshash":"3db01210b43c00668253c00444dc91e10000f3829408491a2c3308048f51101ec515f1","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.225009Z","times_seen":138,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/d9a1f3e.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/d9a1f3e.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.664Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"459-0Kq/lDJCzFGDbov7j6qBNpRjM2c\"\r\nage: 2096370\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed025b5f56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1113,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1113), with no line terminators","md5":"cd8295ac405ddb994e9c1bc675abae9d","sha1":"d0aabf943242cc51836e8bfb8faa813694633367","sha256":"0193d8714451f78b9fa6c4e42e1638b7a0286d5f664aa6508edc193c4c852ebd","sha512":"22e138ff259d50d3c19baa62525ae63b3ddd69054a18bc4a80f82760e2c1af9f6254a88f4ddd32a8d319dd5893ebc300e60d6cd2f921cc5047f5c895eab73933","ssdeep":"","tlshash":"d9219b3b798be4799c2e809102651ab0e0740fe98525e083a375ce6484a0c771f2fdb8","first_seen":"2023-11-20T01:27:33Z","last_seen":"2026-02-07T17:49:36.802064Z","times_seen":39,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/bb62ad5.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/bb62ad5.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.627Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"1137-4ay5RSdRhiCyTGjzMheCtC1RN0k\"\r\nage: 2024621\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed028b6856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4407,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4407), with no line terminators","md5":"c5141679325699fda04d286d5c8aa78b","sha1":"e1acb94527518620b24c68f3321782b42d513749","sha256":"b0e46d025225b7fbbdead5bb538b883d313bc906b7ff1a5bee0e6cbc50c5c71c","sha512":"d9826d0e176ca0eaffe8648f2902f24c3c606ef3e66622c4c953456d91f7d775bdb71dfcdbf2cda50fa47e934d0caae2638476ccd6c9d9e7f3d95aa70db330e6","ssdeep":"96:04sezW113MkdtRxBCJr7AUXUDtF9/J4hmsBs7QJPKIZ8yMtIyoUg12z:XsAWftALynB4IQ1aUm","tlshash":"0791611d75c3aa7c4c0f60110a1f1a34e1b11f9a901cd5a5fa30dda19b90e68662ebbd","first_seen":"2024-06-02T08:45:48Z","last_seen":"2026-02-07T17:49:36.794193Z","times_seen":30,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/5ee7f6c.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:38.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/5ee7f6c.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test; _ga_Z2M9CGZLB6=GS2.1.s1766871097$o1$g0$t1766871097$j60$l0$h0; _ga=GA1.1.1854305219.1766871098\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:38 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.635Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"2041-RvrdRG0TnpoY1imQ3ccPXFhDHfQ\"\r\nage: 2106426\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed0b1bc756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8257,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8257), with no line terminators","md5":"ed9d61c420c06334ca26d8af2ed4b2a7","sha1":"46fadd446d139e9a18d62990ddc70f5c58431df4","sha256":"b13fb4aa0cea1dfd5a21d30ae3e6b4502498bf1727a0b849da71d6a867e37335","sha512":"97e01ab7565249e6498536c2176987b0cc33ba3353bde0947fb8bc3c270c5fa74dcefca9bd2371137b389e79533dae5e78a259fefdde29d80614bd45f0244e56","ssdeep":"192:8S0L2hFuVxELS8oelWk95a4SUpd5sbNzu1qcog0/9fiW+2HLhPrR9D:8S0L2hFuVxELhokWk9NXpdmidu/NSWH","tlshash":"af02eb4aa883fa39ce1fa062453a5170f0b01fd5812d9463fa7dce505bd4d296b3fa9c","first_seen":"2024-06-02T08:45:47Z","last_seen":"2026-02-28T17:55:11.200077Z","times_seen":103,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/a6e85c9.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/a6e85c9.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.627Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"b0b-QZTIzf8OEgVDMU622yq2HmoeJ0Q\"\r\nage: 2024622\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed025b6156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2827,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2827), with no line terminators","md5":"25c56b0f50f4a2e15b45894ed834448c","sha1":"4194c8cdff0e120543314eb6db2ab61e6a1e2744","sha256":"0f17ceff5aba2101c8ed3ee5ad35c01628510abdc5e19125a93eb0cb3c15b538","sha512":"3d427583bbaf27a48750b16ca73eedd18d9902da1c431782f728df25c3a806b03db6e54d436f1ca5cd4c47098a89f978362f2683125b014c4a11cbd400f8e819","ssdeep":"","tlshash":"2451540bf953edb149eb0050043f7a11b2711b5a642ee1a5bb39dde549f02260377a3e","first_seen":"2025-06-22T23:57:28.124719Z","last_seen":"2026-02-07T17:49:36.763065Z","times_seen":19,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"owo.lewd.ninja/images/games/62178_eb2b866e395ba0d5f52f572afe09242a_thumb.png","fqdn":"owo.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /images/games/62178_eb2b866e395ba0d5f52f572afe09242a_thumb.png HTTP/1.1\r\nHost: owo.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15708\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 19 Sep 2020 14:47:11 GMT\r\netag: \"5f6619ef-127c1\"\r\nexpires: Mon, 26 Jan 2026 21:31:25 GMT\r\ncache-control: public, max-age=2592000\r\nlewd: yes\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: ok\r\nvary: accept, accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9b4bed039b7456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15708,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 311x175, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"93ee408870969c49111d05d394c8cbda","sha1":"485eef3c667308a12db1267a1db190258cb5cc7e","sha256":"da5ce2b0e135249a21be077b8ce043cd73a6e9ad81283be2e4709a2888934398","sha512":"37af1ba4fc3040b12a89612049a1e9586ceb98563f19a25c59f336e3c06739f9ca5e34e19365c72906e5f049fc84a82b3fe10d5d1451bae64ed298ef1d952ac7","ssdeep":"384:DdEVTyMUPJdBcZ5iR1p0Jku1ER3MB0olm:J0nenF1Qks+olm","tlshash":"6f62d1ac45041c3a6de4b9b036a81f149c2c5a188d14de3d9c3c6ec195c8f8d71b959f","first_seen":"2025-12-27T21:32:12.963755Z","last_seen":"2025-12-27T21:32:12.963755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/1015743.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/1015743.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.643Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"218-JoV8joeAUfSjZxLFxD0Rd+T3P5c\"\r\nage: 2196676\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed07ab9756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":536,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (536), with no line terminators","md5":"98c5e3ac4cb178fab79a9572d9134420","sha1":"26857c8e878051f4a36712c5c43d1177e4f73f97","sha256":"d290253811e2f364220db0ca52f2cf8f5895499962964f57974ed7c9275a3138","sha512":"50a6a9b85d3489b71777f8fb19b2dde05c148252d4d57efe75530159291ebb5820682c21b713227509e942b904436a7cf595e638baaced8c262b9c0e10c0c91b","ssdeep":"","tlshash":"21f026d8f082fc71968730a4923f3593b0be14c50e871c6019f2c4c9c67165f8105f8c","first_seen":"2024-08-19T16:48:04.497571Z","last_seen":"2025-12-27T21:32:12.96562Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/2aa4240.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/2aa4240.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T15:35:17.961431Z","times_seen":14429233,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/adshow.php?adzone=699330","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.138","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /adshow.php?adzone=699330 HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 27 Dec 2025 21:31:38 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nP3P: policyref=\"/w3c/p3p.xml\", CP=\"NOI DSP COR NID CUR OUR IND STA\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4665,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"48ff63e00aae64e0fea0675ea0dc6a4d","sha1":"072df52e3246f54454003459d2aadba74ca84ed6","sha256":"301968b1d4d8ff4b6f337b1cd798bcf39700ca93618b2f782f26fe7196b55a11","sha512":"217f957dc85ea395bd8e89009112cbc64df31d5a64156647c8a956f0978d1164ea68c6ade0d3e1ae354ba6e6435036f402ce38d3ecbddff7f04af11ce2938eb4","ssdeep":"96:6j15gTyVDqyaQ3gY59KnMAyucPteqFdAPgnmVCmKmBocQ4w4Cddo4i4b4HF4E2:6j4TyVDqyaQd6MAyucg0ABVCmdBf2","tlshash":"a2a1a97616f91035e643f478d66fba0a64330283825add14bcac9695cf8c6780d3b7ed","first_seen":"2025-11-29T10:29:37.357694Z","last_seen":"2025-12-27T21:32:12.967437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":207,"dns":92,"connect":33,"send":0,"wait":475,"receive":1,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/0c20777.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/0c20777.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.724Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"29964-iJoICV8de1bjgLJ0/z3Ct1awqto\"\r\nage: 2243198\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfb5acc56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170340,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64832), with no line terminators","md5":"54cedcfa67a283a597985c191124a1cc","sha1":"889a08095f1d7b56e380b274ff3dc2b756b0aada","sha256":"fd57b6aeaa1d315cb6ccd960b4108a9f5c291c2445afc6c8934195cbe7ced3ab","sha512":"7b8d5217b808f65b83ec5cd946b7afdd43d56e2b4f17c6865bb6ff0477107abe5c3ae17dc1642a6aea57efed37ed0ef1c61291bbefd4499c40fa63edeb4a642e","ssdeep":"1536:r83pk3GW86yq6bae2GJTph7EiyKOsCsSQCsS4ys8CtqpsEzZ5AVKiMYXl+sY6fgW:MrY+ExsPkVTQV1YNhepb4/INVEk3","tlshash":"e2f34aad72c7f02a06933161542f3006f2755ca9a04fc442b73adde678a894da177fbe","first_seen":"2025-06-22T23:57:28.148687Z","last_seen":"2026-01-13T20:00:37.79263Z","times_seen":62,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/4fac9a6.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/4fac9a6.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.619Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"20c-BloaT51t+vKTyZwHu9JsSFuO6xc\"\r\nage: 2196663\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd0b0456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":524,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (524), with no line terminators","md5":"38e124de5cbaf1738a1f238c6d22cdab","sha1":"065a1a4f9d6dfaf293c99c07bbd26c485b8eeb17","sha256":"167650990d45b391dc8cb29cf9df85af21c7660b7f4d07f8ea20ec4e35046f9e","sha512":"6fd7a76c4fe4a5372c94a6a32884ec41946f87e20a4b83d88ad1c92f4a3227390fade09fcc18202f697bd5d35c31210b49f1c5c90ed74c9394085575a1511b00","ssdeep":"","tlshash":"e1f0e22c84d81c42187be3d81abffbeb5040ab915466e7ecbc62665c9e48f635023f58","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.191452Z","times_seen":140,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:57:20 GMT","end":"Fri, 13 Feb 2026 15:57:18 GMT"},"fingerprint":{"sha1":"80:2D:1E:ED:7E:27:75:C8:26:5C:5A:67:67:AE:0B:64:50:E0:CB:35","sha256":"12:CD:2F:65:36:49:D1:F0:8F:A7:6A:68:FF:9C:96:CC:70:D2:75:FE:A5:51:07:CC:D0:AA:5A:75:18:DC:8D:61"}}},"request":{"raw":"GET /adgpt.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 865\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Dec 2025 06:18:27 GMT\r\nvary: Accept-Encoding\r\netag: \"694a3433-361\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 400332\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9b4bed00286ec759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1849,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1849), with no line terminators","md5":"8fc3ac4b260ddcb1b6c684743a2b154f","sha1":"ca0d7b66644944e5270be95b6ca7e8dd6b875bc7","sha256":"647c68c23c5d03cb19a403f4db195ea033d9db787f2fc9720749d21dd0e676f2","sha512":"9d75da9ecdd924b86911e978b8af234ef2a399787688b2221ccca52c2b7ee0ae289d4f16fd318a2935cfbdf11471129a229e9020ccf4558f697a79801a00c2e0","ssdeep":"","tlshash":"703101ee31a1edb1078b6048203f040af5acb4a0a3ade9d6dba5c9647d781444062ffe","first_seen":"2025-12-23T09:40:45.346184Z","last_seen":"2026-01-30T11:59:22.192754Z","times_seen":491,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/flag/gb.svg","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /flag/gb.svg HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.655Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"836-I2OrVz9r14mjCOc2QVLcXqUawps\"\r\nage: 2106425\r\ncache-control: max-age=31536000\r\ncf-ray: 9b4bed02fb6b56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2102,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"478d0d0999b6ac573981e5243f9a486b","sha1":"2363ab573f6bd789a308e7364152dc5ea51ac29b","sha256":"f1f572d855cdb75430ad9834fc7f9c16f7f7b0eb3e3f4a8999c2b830b12beadf","sha512":"66c5f89311cccc9e446ac6fd512187d7bd4fbc62dbac3878a6c287b95529ee63ed4bb44282c72687c5731453a04fa5f40ad3d0b171855ddd0a15fcb8c5442b5a","ssdeep":"","tlshash":"f5416ff1c9068cc8e082a19da2f0255174f7e7e397e11e05dbd1d9f22e6b820c95e9dd","first_seen":"2023-11-10T00:29:37Z","last_seen":"2026-04-25T21:02:38.87203Z","times_seen":101,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/9478b70.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:38.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/9478b70.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test; _ga_Z2M9CGZLB6=GS2.1.s1766871097$o1$g0$t1766871097$j60$l0$h0; _ga=GA1.1.1854305219.1766871098\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:38 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.631Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"3d67-3fFG7fvxdSCLldbQoW9KhMtq24c\"\r\nage: 2024167\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed0b1bca56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15719,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15719), with no line terminators","md5":"750c9452e04ae66374a3e29ae9dc82da","sha1":"ddf146edfbf175208b95d6d0a16f4a84cb6adb87","sha256":"edcb8a2478385b45bbafcc7c6657dfebdb73079170496f2a2503cfd623a8d9d6","sha512":"05ef82e2abd0560cefb7b50f55dadf14aa7fd9e57f64f109b4d3332fd44ebe12f0f29b7810c8514f7cff058af9c66454ec3da834b0027604f7f72a2d9b5f52fd","ssdeep":"192:8FXiUjpR3WP4+n6SeaQ+Fx5yKwrAdaY8Nu4A8xr1pO5DAroKCGlY:MXAP4+npeaQ+7pQC","tlshash":"ce62c54f6893e83c0a6fa112513b959cf0300b8ab015c452aa39ddf599d4db97a3fb7c","first_seen":"2025-06-22T23:57:28.088848Z","last_seen":"2026-02-28T17:55:11.189211Z","times_seen":69,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-27T21:31:35.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /game/62178-club-valentine-v02-vonfawks?asgtbndr=1 HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: -;dur=0;desc=\"Generate\", cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=8,cfOrigin;dur=270\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\nset-cookie: i18n_redirected=en; Path=/; Expires=Sun, 27 Dec 2026 21:31:35 GMT; SameSite=Lax\nauth.strategy=local; Path=/\n__cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 28 Dec 2025 21:31:35 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b4becf82ad749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":59083,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9402)","md5":"ec77cbdb338af92cc598d0fc39cb7e98","sha1":"310180f8f0872ee2283e9c2b28ba51867b246f72","sha256":"f0e9dce74631cd55db20179016f6c6865fba254a1ed913635c5dc252a23b2e2c","sha512":"b556ac98d1e115f1c0ba5c85aa5effcc2ace2ea279ad08ec0d317f830678e7df2ba943853b93ecb0cecb90679fd7ef4c5910957be2c8ee67a80f520b32f50cc4","ssdeep":"768:4eQYA9WdFmCT7uWt9YEoaodLZuJbnZ9sFbati8kJdXs0:+4FgEvohD8kJdXs0","tlshash":"d743a735b548293f0437c3dda570bb28a39bf35ef05a0865a2ed07f09b93da4e943994","first_seen":"2025-12-27T21:32:12.972502Z","last_seen":"2025-12-27T21:32:12.972502Z","times_seen":1,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":31,"dns":9,"connect":1,"send":0,"wait":284,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/8d5794a.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/8d5794a.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.700Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"4d-guJd7+GqcAT3kTL+V2zSYGjZjuE\"\r\nage: 2025714\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd0b0856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"29165efc5bdf9194f6c279fa824c866d","sha1":"82e25defe1aa7004f79132fe576cd26068d98ee1","sha256":"d282000d138914647bc82687720d1296527d53b60675dd4f4b5e564925bd8ccc","sha512":"8508f7e88250020f1c7a70fd27c2a320d7dcd74f4d5124f14fbc20d56e738ef26c47db893d01a58dc38413c38239862845bcbdd7e1ac972414a33d28f6939a79","ssdeep":"","tlshash":"0ea0027bda3e000341f394dd6090b42d124a6389884c5f747139f7189bd82e87343b35","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.222759Z","times_seen":138,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/aa37f48.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/aa37f48.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.615Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"234-bWucEDehkLTjGBxbEsN5BhnI5HA\"\r\nage: 2172946\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd0b0956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":564,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (564), with no line terminators","md5":"3c4b16061d280abb156d81fcce107046","sha1":"6d6b9c1037a190b4e3181c5b12c3790619c8e470","sha256":"8d3a1f83abc391df7622c03a917d7112a69495e4a90cbed0d360ccd81337653c","sha512":"0cb5c7e96c72649f851d935727ec68302d71307c252295f897a3529a322c067567fb33f7c2fdb614e5c35efdccc0248be3b7541714ee70381da49f7248e3de30","ssdeep":"","tlshash":"cef02b2c44c81c42187be3d809bff7e75040ab915066e7ec6c6266588e48f535123f68","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.207978Z","times_seen":139,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/16x16/info-icon-16x16-05.png","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.138","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poweredby.jads.co/adshow.php?adzone=699330","date":"2025-12-27T21:31:38.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /16x16/info-icon-16x16-05.png HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poweredby.jads.co/adshow.php?adzone=699330\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 27 Dec 2025 21:31:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 1279\r\nLast-Modified: Wed, 26 Nov 2025 01:16:23 GMT\r\nConnection: close\r\nETag: \"692654e7-4ff\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"56de59b8e45caf845f6e6ec2e63c1d3c","sha1":"b0da59d9279ac89588d8793c14258b7442ff4472","sha256":"e79b9cc089a4235e67a18b353c909a9145c19e67149bba22243d8962487fadda","sha512":"3a7a4e135474c75d0614c9be6ec693e34dd4498908675ab1521cc1f04895ae5371a49b8f25553974b85eeea49c5c1c4e7a3f7e98f33a23d8df692be1677769aa","ssdeep":"","tlshash":"d021958cfd41b000a219d54156fdc117893304409ec1b692beded8831cb82fc962a4cb","first_seen":"2024-11-08T16:21:27.364482Z","last_seen":"2026-04-25T21:02:38.878199Z","times_seen":561,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":106,"dns":1,"connect":32,"send":0,"wait":41,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.jads.co/ads/user201496/ad1446935-1762241834.gif","fqdn":"i.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poweredby.jads.co/adshow.php?adzone=643057","date":"2025-12-27T21:31:38.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /ads/user201496/ad1446935-1762241834.gif HTTP/1.1\r\nHost: i.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poweredby.jads.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 21:31:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 26554\r\nlast-modified: Tue, 04 Nov 2025 07:37:14 GMT\r\netag: \"6909ad2a-67ba\"\r\nx-77-nzt: EwwBuUwJGwH3vRMfAAwBuUwKDAH3SBQAAAwBJRPCMQG3xiYAAA\r\nx-77-nzt-ray: fdb54123bfd2c7dd3b505069de61020c\r\nx-77-cache: HIT\r\nx-77-age: 2036669\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":26554,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"57b9a899232540955d6fb76307488756","sha1":"67627ae6a5f58b2cfee5ced63ebbaa47e64d9059","sha256":"55f7ef6ef6faafa769bbde0c162eb412ba73fb28e71de8c579ee6040871deb5c","sha512":"9acb4a5049e900a4f5df31f85a68dcc552e5061136bbd8e6a554ea6c5a90064d0683f2cb9a171c910578be017b11bb2f00c3ad5517ce4448105f806495866bb5","ssdeep":"384:LD8PHiYuZq4UaRhgze9jxgPRrDQjaIMWdiJQlVqM0mnICv1Hr+IIT63ZslIf/M/p:38/i3ULzesitIJMqH47IT63kIfE/HQs","tlshash":"5ac2e134461a9a37fe7a0f571c658bbef7eca80d81a11436af58f0f0741adec00c950a","first_seen":"2024-08-14T07:51:26Z","last_seen":"2026-01-13T20:00:37.77791Z","times_seen":23,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":416,"dns":378,"connect":7,"send":0,"wait":14,"receive":2,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg-iframe.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:57:20 GMT","end":"Fri, 13 Feb 2026 15:57:18 GMT"},"fingerprint":{"sha1":"80:2D:1E:ED:7E:27:75:C8:26:5C:5A:67:67:AE:0B:64:50:E0:CB:35","sha256":"12:CD:2F:65:36:49:D1:F0:8F:A7:6A:68:FF:9C:96:CC:70:D2:75:FE:A5:51:07:CC:D0:AA:5A:75:18:DC:8D:61"}}},"request":{"raw":"GET /asg-iframe.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 37334\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Dec 2025 06:18:27 GMT\r\nvary: Accept-Encoding\r\netag: \"694a3433-91d6\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 400326\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9b4becfbfefdc759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107787,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65498), with no line terminators","md5":"c4308f130c316ea75ade208adb3126a7","sha1":"37f8058fab33f4a7e6486bb653678c1092d224c8","sha256":"db7cbee0a6b8f325cca705c58e0d233f1ea687d215b239e540b5d15c0b0448ea","sha512":"f82de2999d7d99cf00c46b29b6db7b050949e067ee3ed7fa5001ae702f6d548fcb4f48dd09d2e3cc5ca60dbfc1481bcb28c195e07f714f33fac47e4e95b2dabb","ssdeep":"1536:gnqy91uit1m/sh9gFvaRHGeNMJysrH3GS5832:mqE1uym/e9gxwCcsrWS5M2","tlshash":"abb3918cf6c2b05606e37474422f600af37b6a54b45f8481e62ad5d07dba94fa037f6d","first_seen":"2025-12-23T14:51:43.550841Z","last_seen":"2026-02-16T08:21:27.330939Z","times_seen":150,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":63,"dns":49,"connect":2,"send":0,"wait":5,"receive":2,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/flag/dk.svg","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /flag/dk.svg HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.659Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"20a-LyEenG022/YAhBM0hvWUsGxS5fM\"\r\nage: 2241283\r\ncache-control: max-age=31536000\r\ncf-ray: 9b4bed031b7056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c89ee484a8023861e5c33c6f29636266","sha1":"2f211e9c6d36dbf60084133486f594b06c52e5f3","sha256":"0b14e6c15fe9720dc4052840dabe3876b91e55d8f0589b31518ef616f01b76c2","sha512":"1153f42c5ba222ed1dc40e72496490a113274a672c69a04f0da6165560ead335b105fab1189f1c268e0a4cbfe4bc1813f6e3fbcf4933a60b334b62c8cd63f0f8","ssdeep":"","tlshash":"56f00e19d948c42c9121ca141bb4b942a33b560343d28d0cc4c02ca774cbc809d9a5da","first_seen":"2023-10-16T23:07:47Z","last_seen":"2026-02-28T17:55:11.197958Z","times_seen":85,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxx.lewd.ninja/changelog","fqdn":"xxx.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"172.66.169.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"OPTIONS /changelog HTTP/1.1\r\nHost: xxx.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nReferer: https://new.lewd.ninja/\r\nOrigin: https://new.lewd.ninja\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\nx-easter: L1\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b4bed044e68dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T15:35:17.961431Z","times_seen":14429233,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":78,"dns":21,"connect":1,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxx.lewd.ninja/game/62178/versions","fqdn":"xxx.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"172.66.169.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"OPTIONS /game/62178/versions HTTP/1.1\r\nHost: xxx.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nReferer: https://new.lewd.ninja/\r\nOrigin: https://new.lewd.ninja\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\nx-easter: L1\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b4bed044e6fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T15:35:17.961431Z","times_seen":14429233,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":77,"dns":21,"connect":1,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"owo.lewd.ninja/images/games/b_255671_5bace5fd0ea319e1ea77e1adfd09fab4.jpg","fqdn":"owo.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /images/games/b_255671_5bace5fd0ea319e1ea77e1adfd09fab4.jpg HTTP/1.1\r\nHost: owo.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35542\r\ncf-cache-status: HIT\r\nlast-modified: Mon, 19 May 2025 09:46:10 GMT\r\netag: \"682afde2-9388\"\r\nexpires: Mon, 26 Jan 2026 02:11:29 GMT\r\ncache-control: public, max-age=2592000\r\nlewd: yes\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nage: 69607\r\ncf-polished: ok\r\npriority: u=1,i=?0\r\nvary: accept, accept-encoding\r\ncf-bgj: h2pri,imgq:85\r\ncf-ray: 9b4bed076b9256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35542,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 533x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"28892f490da08526eabe4caa05d2ef29","sha1":"c785f4034e61322a8c222082494adcdcfd83ee12","sha256":"0b1b444f3497f5d7d4c5cbdf7dd71bd9af43703891241b95e28caed6e998d300","sha512":"11c12fcd0bbbbfe7557129a120c12745b82694cb125e1ba1e3f6c3b3df3a0b1c8884dfb8c03fc5d25ee8f58f1071d08ca84904906f7652809d8967a5c71730f4","ssdeep":"768:4JWTyCAepcclNPl5bBMc8o9SlqJaq15bXk5V616BbSQq5za5hJyjuEAct8ra8a87:Z2+ccDldBMc8oQxnDbHqEcuEAD7","tlshash":"5ff2f132bf0fe50ad1307225804f9f3dd3a8d22f5d1f15975d4aa6b725358c23668b25","first_seen":"2025-12-27T21:32:12.983679Z","last_seen":"2025-12-27T21:32:12.983679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"owo.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/pug.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /pug.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: application/javascript\r\netag: W/\"19-hu7uUrlEO233yv+/n9SnAx//XMw\"\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.736Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b4becfb4ac756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"acb8501274106c8c5d25141dd0dc252a","sha1":"86eeee52b9443b6df7caffbf9fd4a7031fff5ccc","sha256":"615ee8ac2cde2b20b7ae8fbb6ef33a9128193f07590540b77e514627be7ae1cd","sha512":"fc132d309cceab4afb51f33774638dd6faf711ab435c38ec751edb0ec46a4010c5b58724a3dceb985e1682aa2b9ddf5dc28d778ba1242bdba60db34b96030ed6","ssdeep":"","tlshash":"c97000288802202083fa0388820c000e220202008b208a0020c82822e380c008220c00","first_seen":"2023-10-16T23:07:46Z","last_seen":"2026-04-25T21:02:38.913615Z","times_seen":166,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/890f189.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/890f189.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.631Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"45708-1T9jVbxPcxJefKUxPij7OERaxNo\"\r\nage: 2195471\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfb5acd56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":284424,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65485)","md5":"0eddeb3849dc25c7427243bbeebf885f","sha1":"d53f6355bc4f73125e7ca5313e28fb38445ac4da","sha256":"d519350852dd2f6f60ad5d05b16c5c6d5390c5bfadb3e10aa75c1d4ea4d343f5","sha512":"e1b5569fc9e944676ac4785bb170b0d6d8006ee0d9e0acdff30386dc5289e9142117a9e1d518dcc21bd2a09f05df81fd68a86b0f39143932c51fb47b453cffdf","ssdeep":"3072:rZXPmb3TVcwgoAPbvQbfLP1bC1QvixhY4uyYm:dtoebvqwsixhlurm","tlshash":"c254b3cdf695b0b103e720b4407f560bf27aa955b84a8590e262e4d07cbd98ea137f3d","first_seen":"2025-06-22T23:57:28.16309Z","last_seen":"2026-02-28T17:55:11.196918Z","times_seen":69,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/b5cdb68.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/b5cdb68.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.607Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"8a6-LsmlGKh7YwMvak3hzbTkYQQp0b8\"\r\nage: 2157636\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd1b0c56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2214,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2214), with no line terminators","md5":"69ba4042131c5d09cb9e08eb04b6c7bc","sha1":"2ec9a518a87b63032f6a4de1cdb4e4610429d1bf","sha256":"f9068e533b5d9b4ad5b42b2458fbee6f3260121f8b7891c356ccda750c9dfbee","sha512":"f19543b1fba1bf2503776b25812e0d3a372afebc1c5434f03129d9069d08179db72ea73a53056bc4992a754091c5f3ac1e209f6b7753d0d8c30db7e930031471","ssdeep":"","tlshash":"284100e33e8d1108e673a0eeb596bddc1e0162439acc07d8ef197832ad8fe757112540","first_seen":"2024-06-07T00:41:54Z","last_seen":"2026-02-28T17:55:11.197448Z","times_seen":98,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/e3f02c2.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/e3f02c2.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.599Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"51c8-d9x7Ierm7Ms1mOq7TGkFFAsceoM\"\r\nage: 2024627\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becffbb3956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20936,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20936), with no line terminators","md5":"f6df3a3774489b7722d2bb547c5064b7","sha1":"77dc7b21eae6eccb3598eabb4c6905140b1c7a83","sha256":"b81546d7b01c40a8870d2ea9b4299add6ca70cb7a069b645ee9e92da71a3f222","sha512":"643cde3e09aefbe173c98286075640e6e95c0a46cd2480b5f78b69c2c654fb9dbec7c6b3a3bc5bcad006b808822881fefbb97ea788742ebd9e2d0f58157d3cb0","ssdeep":"192:mxCpsfm6+p/Ps3hbN8oNFHgDUsVXaT8LABfcRbeOpTyuUyQ+ev+uzNeQGkKuCI5C:cCm+h28oNFHgYs9aTB4xrk15C","tlshash":"1592b6af6ac1f4398a366010291fb1d4e3711fd640484886f27ec89977b8d78567bb3c","first_seen":"2025-06-22T23:57:28.12598Z","last_seen":"2026-02-24T03:30:51.225962Z","times_seen":23,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://new.lewd.ninja\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Dec 2025 21:59:25 GMT\r\nexpires: Thu, 24 Dec 2026 21:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 257531\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-30T15:36:54.320146Z","times_seen":316881,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":86,"dns":8,"connect":7,"send":0,"wait":8,"receive":1,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/40d1211.js","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/40d1211.js HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.639Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"b08-0FwzC33WHEjpTHY9xpjW59YBRSc\"\r\nage: 2243198\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4bed023b5d56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2824,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2824), with no line terminators","md5":"68dfed94eb97d8021c9845b2e1288c90","sha1":"d05c330b7dd61c48e94c763dc698d6e7d6014527","sha256":"8eb283e8cb5ca8c3338307ffa5e460e88d3f35924ed4db36be62d3155dd6599f","sha512":"3080117aae5c2a63e67a7e45b82a7cfb415141d2c2c163975e6451d3764564a0da95306a0244702b7716f6b1ee3aab272ae27fccba536dbd2d22398d33d1f6fa","ssdeep":"","tlshash":"6151430a7087a83bce2d1050215f7a7672b21fda8849c643f165cca0a6b8c71523fb7c","first_seen":"2024-06-02T08:45:47Z","last_seen":"2026-02-07T17:49:36.762564Z","times_seen":30,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/flag/br.svg","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:36.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /flag/br.svg HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt; test=test\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:36 GMT\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T17:04:10.659Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"3ca-e0spMFwxuqEnj9m5L03FvlzUs4Y\"\r\nage: 2106425\r\ncache-control: max-age=31536000\r\ncf-ray: 9b4bed031b6f56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":970,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce463b88d5fd6320719a4688d6a8dcb8","sha1":"7b4b29305c31baa1278fd9b92f4dc5be5cd4b386","sha256":"8efd41013a46a78013fbb52e853397b45e1cc4b82372a637b15d09a235544b27","sha512":"e7a434dc7b5999ff69a07a8aa2afba26f98c4770db877844ff8c1d2b868427cad5c6def5baedfd6256af759928bc726567507e7080b4dd78f52dbc453688fed3","ssdeep":"","tlshash":"50115490c168585ee0d9c6049b6673ee3235d0ab07e50d949b6008bf302f491955b6e8","first_seen":"2024-05-20T12:54:29Z","last_seen":"2026-04-25T21:02:38.909451Z","times_seen":96,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxx.lewd.ninja/changelog","fqdn":"xxx.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"172.66.169.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:37.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /changelog HTTP/1.1\r\nHost: xxx.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://new.lewd.ninja\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 21:31:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"62-PWFoVgm1+zlCcVO5roTJadVtX+g\"\r\nx-easter: L1\r\nvary: accept-encoding\r\nage: 13900\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b4bed04df7adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7226d72d5260c201655a44c23d6b2616","sha1":"3d61685609b5fb39427153b9ae84c969d56d5fe8","sha256":"de27eaf38eae3e3476b7deebda97277e894518749e4c6e61c54d33d4c591bca9","sha512":"cf1b4e85525c0377371b2ca5069cc52eb627a53f60c95186f51ff199439121a7d75d5fc671aa68a39426cda07014c544d0d5ca2cc2e10870b4a97d7b6c2ab137","ssdeep":"","tlshash":"65b012120508ffbd0b5307527440f4607b70848128159003011f01844f5168905af186","first_seen":"2023-07-05T06:52:16Z","last_seen":"2026-04-25T21:02:38.855781Z","times_seen":112,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"xxx.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new.lewd.ninja/_nuxt/css/58cee63.css","fqdn":"new.lewd.ninja","domain":"lewd.ninja","tld":"ninja"},"ip":{"addr":"104.20.44.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lewd.ninja","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 07:18:54 GMT","end":"Fri, 20 Feb 2026 08:17:47 GMT"},"fingerprint":{"sha1":"7A:AF:00:37:37:15:26:8C:5C:7F:81:3D:C1:4E:0D:A2:21:F8:93:81","sha256":"B1:3F:34:83:96:D0:8F:72:69:B3:7C:67:22:B5:C8:3E:16:C9:6A:4B:99:72:EF:47:60:E5:10:46:99:E5:68:82"}}},"request":{"raw":"GET /_nuxt/css/58cee63.css HTTP/1.1\r\nHost: new.lewd.ninja\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1\r\nCookie: i18n_redirected=en; auth.strategy=local; __cflb=0H28umQBjLg4nPDxub3vkrjj5PsbRi13Wi3sDBYNZJt\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nlast-modified: 2025-03-22T16:37:42.700Z\r\nserver-timing: -;dur=0;desc=\"Generate\", cfExtPri\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *, *\r\netag: W/\"185-7dSrYt5SmEz3fQpITXJzPWrYcI8\"\r\nage: 1945364\r\ncache-control: max-age=2678400\r\ncf-ray: 9b4becfd0b0656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (389), with no line terminators","md5":"56a5485ddcdcc44d7a08a3d63ffbce43","sha1":"edd4ab62de52984cf77d0a484d72733d6ad8708f","sha256":"807aec1f916e8cfd01a35c5704972740c3728eebda257167f55a89decec738d3","sha512":"3a09f137d99d8f91b4bd0f0779f15de56f16fc3495db424f2084278eca0249b8a1df5d7efed24ffa0e417c7f152ce8ebc8c68988f035cf3984afd7b48235e1e1","ssdeep":"","tlshash":"4be068223e981241d4afd26849725acc8e36848fe3121e082aa347f307cf850406c199","first_seen":"2023-04-30T21:34:43Z","last_seen":"2026-02-28T17:55:11.222157Z","times_seen":139,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"new.lewd.ninja","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new.lewd.ninja/game/62178-club-valentine-v02-vonfawks?asgtbndr=1","date":"2025-12-27T21:31:35.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://new.lewd.ninja\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new.lewd.ninja/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 21:31:35 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b4becfbbd2d5685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-30T15:10:42.423293Z","times_seen":334312,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":15,"dns":3,"connect":1,"send":0,"wait":13,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}