{"report_id":"be5f4941-0c17-4a08-8140-a9a90b357350","version":6,"status":"done","tags":[],"date":"2025-09-27T08:01:04Z","url":{"schema":"http","addr":"luluvid.com/e/mtsvgvlxyk25","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"104.21.13.40","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"luluvid.com/e/mtsvgvlxyk25","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"title":"OnlyFans-Perfect Round Ass Bela Sampaio - Lulustream.mp4 - LuluStream"},"submit":{"url":{"schema":"http","addr":"luluvid.com/e/mtsvgvlxyk25","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"104.21.13.40","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-01T08:01:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":14}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"dh8azcl753e1e.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"ak.beltsflusker.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ak.beltsflusker.com","ip":{"addr":"23.109.170.59","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-25","domain_rank":1645746,"first_seen":"2025-07-31T19:10:18.304736Z","last_seen":"2025-09-23T05:14:39.344831Z","alert_count":1,"request_count":1,"received_data":88527,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-21T22:11:31.071214Z","alert_count":0,"request_count":1,"received_data":422710,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bunkersparring.shop","ip":{"addr":"23.109.170.252","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-05-15","domain_rank":187180,"first_seen":"2025-07-22T08:24:24.149351Z","last_seen":"2025-09-23T09:32:45.279916Z","alert_count":8,"request_count":2,"received_data":2953,"sent_data":3369,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ukankingwithea.com","ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2025-09-22T00:01:12.323239Z","alert_count":2,"request_count":1,"received_data":829,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":1,"received_data":8718,"sent_data":531,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-09-21T22:18:44.028378Z","alert_count":0,"request_count":6,"received_data":13674,"sent_data":3750,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"luluvid.com","ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-29","domain_rank":598770,"first_seen":"2025-07-30T07:44:29.756526Z","last_seen":"2025-09-22T08:03:15.794148Z","alert_count":0,"request_count":16,"received_data":1054954,"sent_data":7539,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"kedasensiblemother.org","ip":{"addr":"54.240.174.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-08-08","domain_rank":0,"first_seen":"2025-09-26T13:55:41.056646Z","last_seen":"2025-09-26T13:55:41.056646Z","alert_count":0,"request_count":1,"received_data":4099,"sent_data":1020,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"parashparyro.com","ip":{"addr":"172.67.147.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2025-09-14T08:11:49.494515Z","last_seen":"2025-09-22T00:01:11.568395Z","alert_count":4,"request_count":2,"received_data":1028,"sent_data":1142,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wrathypenitis.help","ip":{"addr":"212.117.186.116","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-07-21","domain_rank":0,"first_seen":"2025-08-21T05:46:19.017165Z","last_seen":"2025-09-22T06:35:16.551049Z","alert_count":8,"request_count":2,"received_data":1071,"sent_data":1075,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":1,"received_data":4277,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dh8azcl753e1e.cloudfront.net","ip":{"addr":"3.167.7.3","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-07-12T02:52:08.866068Z","last_seen":"2025-09-23T10:03:31.484098Z","alert_count":1,"request_count":1,"received_data":232768,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2020-01-28T19:52:40Z","last_seen":"2025-09-22T00:01:11.57274Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":962,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.lulucdn.com","ip":{"addr":"104.21.31.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-19","domain_rank":356993,"first_seen":"2024-07-31T09:55:51Z","last_seen":"2025-09-23T05:14:39.368063Z","alert_count":0,"request_count":1,"received_data":149764,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"luluvid.com/e/mtsvgvlxyk25","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0261e8eb5c45537f48bf728b88d28df6","sha1":"5c220e638b0b894ce699e23bb8348777949058d9","sha256":"0767485edaad3b7c8bed57453197a157c67bd5438896fb0e9dc5f633ac2dfef4","sha512":"c78a8a8bfa7e10fdcb2dc58e6203aab1b69466d6720a3dcd04c65b93237fc143c05748f825fd35b1eabb8b958db31063f3536e5d949698157caea5ba3211f73a","ssdeep":"","tlshash":"5db0121f26ccf05cc037a53ac621b0cbfc1f20208010cb4d224420b877030052cc45ba","size":103,"data":"","first_seen":"2025-09-27T08:01:09.148766Z","last_seen":"2025-09-27T08:01:09.148766Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/e/mtsvgvlxyk25","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ddd3ba82d0b0b8f9be6b73092888927","sha1":"98dc63e85dc69b94efd3b129ec3e91d9482df209","sha256":"e0093de180b3bf2c8e20314b8024b5b857c30fdc561328b355f35ecaa2799828","sha512":"4e243da4a1cffa4d1ac51fd00943710533f8b1df9397343920bdb56fa93051cb8ca6813dbd6e5a172fc8ae0dcefa691c2d0e855238a99a13be92bd9838ef6401","ssdeep":"","tlshash":"fcd0a744212b0ca451bb1e0e0faf7e04f027318684809921294a17045f35e07da20905","size":221,"data":"","first_seen":"2025-08-06T23:45:58.509549Z","last_seen":"2025-10-26T05:04:43.696962Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/player/jw8/jwplayer.core.controls.js","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8889c5f9e2492b9c3d6f73b5bad08fe","sha1":"6b942336401bc4ecd598f91fcaa7db96c889e6b4","sha256":"43502aabf4a1ce166cb2a84a177579663aa32e1ea7db8666bc67534a53a0f368","sha512":"e09de17c7ddc72248e2e337de5be46e9722d7afa26502a6f49c7358074b865ed65288f1ab3048e639dc96c2695dfbe32443560ab91d3497519a787e34352767a","ssdeep":"6144:YhIMSOAqxEXf1nKFEGwjDwdWoYoQHwmj06n:ewOAqxEXfpKFEYdWJ0g","tlshash":"d3641a39b142323556d7a2a9625b4609733b8085b5068aacff39e9d84c7d48f30f7fb4","size":333439,"data":"","first_seen":"2023-12-06T18:00:17Z","last_seen":"2026-05-14T11:06:52.968517Z","times_seen":829,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/e/mtsvgvlxyk25","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fda1724412fd3c8db9942aa6e8e3deb","sha1":"539eed6112906a989e297d5d51c98af3dff08f2f","sha256":"3ddb9787e2d99f63e1c8169da967fa7b50e0baebb523aae738ff38899d2eaf7c","sha512":"1b6fe4694f5e61f4c298e0bf7d632c31df118d987b1643004ec2149ddf468e65c858fab779d5af8c0a9cb8941216cd977497c32351aef1cc3878796054f18158","ssdeep":"","tlshash":"c1e02e59a47301e042bba05ec30b232310a3f2833940d4d8ba8cef000f2ab228e9a1c8","size":294,"data":"","first_seen":"2024-01-26T23:16:31Z","last_seen":"2026-05-14T10:52:40.321062Z","times_seen":1850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/e/mtsvgvlxyk25","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5034d8c53e6e06bf15b29d87f6df831","sha1":"e30986d3efa1cec014cf7b7ff03e9c10313c0181","sha256":"40d849b4a602532b643d50205c059d2bfbc2f215e19b94bf637f3bd95092d28b","sha512":"938c606a3d7b27f3134fbfb1d755b8e5db6276fcda07d09bb0185838e2ff682eb9b48dc88e333b380e5bd10093789995de41d11a5b92ae9effc7ecdd7c18165d","ssdeep":"","tlshash":"d1d0a7b5b29778f1961708710f1212b917698ea5ea421450509a40591bc9c9c7852c54","size":213,"data":"","first_seen":"2025-09-27T08:01:09.152221Z","last_seen":"2025-09-27T08:01:09.152221Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/player/jw8/polyfills.webvtt.js","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3e139c07aac361115e8ec41bde7d2a5","sha1":"0c3fc8d31887dafb86ba778da788ece5cbf76f18","sha256":"1ff5585bdbea001d37f3647975a645f0594090f070915831286de90dd45949d5","sha512":"0b2a16b1b9a63ab3561c9d7e63a2a797781f6abc09c304f28530c6a8c87224083c708989534552d11948aeec3aabb36a943173fbe651c64810d56f08f2bc68b7","ssdeep":"192:gl1026oqO7yNPJUsnOGhcAsej4Du/YVLEO1mTLSRavTdU94o9pD5i:E10tvJN6cC3RPVUTLKKTdObpM","tlshash":"7222f690b2f5609d8281e49f456f0284e2399630fe8bc4cef550c5f9dc74a8a127ebb9","size":10791,"data":"","first_seen":"2023-06-27T00:33:19Z","last_seen":"2026-05-14T11:06:52.942715Z","times_seen":840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RFESL45RJX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e5a6cb6abd74d3f346dfc2fbc80bbec","sha1":"0e933154d036b00e603f398aa039d85b6242795d","sha256":"737bbe4c8fd475a90e40df85937b73f560295bce4e72c9ea9681e815fffdab5d","sha512":"e5897402d327b74c435e552a29a137960831bff0849e895c3497b5c7a6beb1ed8e18f41a540f03c6ad39269adb9bd4cabf3cfc909478ff31c366fa4d17386a36","ssdeep":"6144:7nBEpmM2/vNpvYqkD1g1/9G1SvuVcH9+23WBj:7B6mL3Yly/Lwr","tlshash":"529409ce73d674265396e078903f018ba5bb28a2f45cc899f189dce42d74a9a4137f7c","size":422106,"data":"","first_seen":"2025-09-27T08:01:09.134617Z","last_seen":"2025-09-27T08:01:09.134617Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/e/mtsvgvlxyk25","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61fa153f2827c887a48a351ae3c6cfd3","sha1":"5fbd02245cf700ea94d638c8d76924ecca52d330","sha256":"4c44d7c28ec0f6ca3e2624c6af1d3be324576d01ef6f6c2dc0af7e61664b8c2c","sha512":"cbe467dc51f0eec90d8b40bc35a1a0eb2c320ac67cc022c518b431987fa05a3d565f793c377d5f33a612555ad4d7ad66acfb4b47ba6323da26db293f095257d8","ssdeep":"","tlshash":"c650000003000000030c0000c000000000000003000030c000c0000000000000000000","size":8,"data":"","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-05-14T10:52:40.320382Z","times_seen":18735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/player/jw8/jwplayer.js?v=2","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e596630eff0374adebc068352ed362ae","sha1":"156895e17acd4652f5816db5b310b341960edbbc","sha256":"816c99b4a2b3c2d2d7adca35b602c2b1f5ef56ffed67ae1a4d29bbeefa55ee90","sha512":"625450c3bfe0ea3228565c0f32f167850d3e60a2d90c049c87143c40cf8f413ee8ded3c94740f095c4ec088477ca67c4dd08d91205b6bfd38ced4175d404ce0b","ssdeep":"1536:AFe00b3VLgXLVuRXE0D6Z17WRtekdILG0Up:X0O31gbVuR96mLIy","tlshash":"d1c370ccb1d2b4a603a770b5517f620ef23b59c5384e8194ea25e9d5bc7864e9033fac","size":120878,"data":"","first_seen":"2023-06-27T00:33:19Z","last_seen":"2026-05-14T11:06:53.06114Z","times_seen":956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kedasensiblemother.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","fqdn":"kedasensiblemother.org","domain":"kedasensiblemother.org","tld":"org"},"ip":{"addr":"54.240.174.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c8ddb94a88d0f1e466995f6822dac68","sha1":"529ad2bbb0937dc0dec01babab4bfc5e102da57c","sha256":"c731cb39390da3213d9b19097f01b53fa876f4a08ff5939334002ef07cb70c36","sha512":"ebfdf6a50baf4fd71b12874ab748bd63bfd7a81fb02c3e997dd52e813006e98b996fbfb67bd140e58e6917e0c72c3b991bded4ab39294272a16ef5aadcf1a339","ssdeep":"","tlshash":"d351f28d34f3a0c283b26025453bb996fa385aa1834cda18863d97bcbd715ed6317f4c","size":2994,"data":"","first_seen":"2025-09-27T08:01:09.155528Z","last_seen":"2025-09-27T08:01:09.155528Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/e/mtsvgvlxyk25","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fda1724412fd3c8db9942aa6e8e3deb","sha1":"539eed6112906a989e297d5d51c98af3dff08f2f","sha256":"3ddb9787e2d99f63e1c8169da967fa7b50e0baebb523aae738ff38899d2eaf7c","sha512":"1b6fe4694f5e61f4c298e0bf7d632c31df118d987b1643004ec2149ddf468e65c858fab779d5af8c0a9cb8941216cd977497c32351aef1cc3878796054f18158","ssdeep":"","tlshash":"c1e02e59a47301e042bba05ec30b232310a3f2833940d4d8ba8cef000f2ab228e9a1c8","size":294,"data":"","first_seen":"2024-01-26T23:16:31Z","last_seen":"2026-05-14T10:52:40.321062Z","times_seen":1850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/e/mtsvgvlxyk25","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61fa153f2827c887a48a351ae3c6cfd3","sha1":"5fbd02245cf700ea94d638c8d76924ecca52d330","sha256":"4c44d7c28ec0f6ca3e2624c6af1d3be324576d01ef6f6c2dc0af7e61664b8c2c","sha512":"cbe467dc51f0eec90d8b40bc35a1a0eb2c320ac67cc022c518b431987fa05a3d565f793c377d5f33a612555ad4d7ad66acfb4b47ba6323da26db293f095257d8","ssdeep":"","tlshash":"c650000003000000030c0000c000000000000003000030c000c0000000000000000000","size":8,"data":"","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-05-14T10:52:40.320382Z","times_seen":18735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/e/mtsvgvlxyk25","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d8c81442e74e2aee0929479d20170ae0","sha1":"9de4f4b80c02779e4ae982e0638d2075b48db354","sha256":"a5a0d9be349f2f79e82bb0780285442f54e42939e5e4783db7843956e2ced445","sha512":"9b29a0f8504c6d1add7120c2278afbc4f13f7505f666a23669378c6834aaeeb07c9ec1012c247a8b694caebdffa0f0f5ff2d3f135434924682de4ea6eefda8e3","ssdeep":"","tlshash":"678000080ab880b830032a00ac00002222088f80a8a03ac0380e03bb0ca2c000802a2c","size":31,"data":"","first_seen":"2024-12-27T13:53:56.215783Z","last_seen":"2026-05-14T11:06:53.09821Z","times_seen":1195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/js/jdadbl.js","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95fd065c887d003f9a169dee9876532c","sha1":"0f111b6d5e142fadb966a1feb264d519c12a59d9","sha256":"4d4c84ad505bddf4d49b1222db984d7aaa425c6702c79029801632bf31f2b80d","sha512":"cacd512fbe11ccdf89c56c164255191d88f1edf46a9cb02b1de0d690659923a6508ae8d5d1733c5452974ebfae589f4c1214be047ba67d5218db06c3fe9a25a2","ssdeep":"","tlshash":"5451215775c270a0273b60b4952f710a773a5892250b8860c3e5e9952c2c8ef9177f9b","size":2631,"data":"","first_seen":"2023-05-22T09:51:00Z","last_seen":"2026-05-14T11:06:53.038682Z","times_seen":814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/e/mtsvgvlxyk25","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1e41f0e16667ba072b8a73acb6c0f44","sha1":"4f2b5917683cb4aeaccd07f96d3b97e053b2cf01","sha256":"0ef17b9beebb471e24303a31f0496b6d81057f9de26d6d1f3930d4f38335094c","sha512":"905724804959e3b98f970f466836ea4c65c8920feef7bf8febb660e1b13a4cf51a8cc784542e399db34cc2b551d1444ec646851e749282658950039c8de93da9","ssdeep":"","tlshash":"52d022cbf1bb74a0723f2074c9230124623848eb49899ed5fdcc99040f2e587a400ba3","size":214,"data":"","first_seen":"2025-07-30T07:44:38.064185Z","last_seen":"2026-02-08T09:18:40.023062Z","times_seen":387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:55 GMT","end":"Mon, 01 Dec 2025 08:37:54 GMT"},"fingerprint":{"sha1":"D6:CA:D9:3E:AA:21:3F:46:BD:DD:2C:06:2D:20:A1:D8:5F:AB:21:B2","sha256":"6C:68:26:80:36:50:C5:E4:B6:7C:60:D3:B6:13:10:1E:1B:6B:08:94:61:55:0A:E6:3D:BC:7E:1F:F0:DD:59:5A"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:gW_1Kp5WBIqKPv4BfpXJJaG9whBOag:o0J9dSJ7Qv_aqmcb; Expires=Mon, 27-Sep-2027 08:00:42 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:00:42 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S-100467965:1758960042048640\u0026ifkv=AfYwgwWQKInlpQr1oiYK2-pliKQQuJJ_N4aco2wH8F3tLkcC5v4qq_cQ_-vHow6QR9b71CZse_O_\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: script-src 'nonce-4kwI_70odSdGXQgahJodSA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-opener-policy: unsafe-none\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T14:59:10.506438Z","times_seen":15171651,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":80,"dns":0,"connect":22,"send":0,"wait":36,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/js/jquery.cookie.js","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /js/jquery.cookie.js HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 31 May 2011 12:53:56 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzuVFYyygAHsR1KcW2MukVw0rgWFTWF%2ByPm3gdVzzMuA51YEvMzkE9A0MtoHLQ1GZypu21HFsTTGV8Q7g4CnpH85XMyoDL6T7w%3D%3D\"}]}\r\netag: W/\"10eb-4a491e5980100\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nage: 2379\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 98597802c8815689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4331,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-05-14T11:06:52.964536Z","times_seen":4433,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kedasensiblemother.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","fqdn":"kedasensiblemother.org","domain":"kedasensiblemother.org","tld":"org"},"ip":{"addr":"54.240.174.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kedasensiblemother.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4A:EF:C0:D8:E0:21:7B:52:27:DE:18:C8:62:98:3E:44:55:C3:FC:CF","sha256":"A2:49:5E:3B:46:B0:42:3D:9A:BB:CE:07:4D:D6:57:F2:4C:37:65:EA:8C:21:45:A7:72:C2:3F:EE:33:F4:60:8A"}}},"request":{"raw":"GET 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 HTTP/1.1\r\nHost: kedasensiblemother.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1212\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nset-cookie: AWSALB=wDTWAWCn1mWjj7462/WU2yyTX+/QpU5t1ohxtnY1+5BOtkemZrlMhBxsLgwNLPYr09nbPoP49RI6h41xHHGnJP20kWN1PvfPs2IlplnEiENxnMTsMpNJstk+8lAU; Expires=Sat, 04 Oct 2025 08:00:41 GMT; Path=/\nAWSALBCORS=wDTWAWCn1mWjj7462/WU2yyTX+/QpU5t1ohxtnY1+5BOtkemZrlMhBxsLgwNLPYr09nbPoP49RI6h41xHHGnJP20kWN1PvfPs2IlplnEiENxnMTsMpNJstk+8lAU; Expires=Sat, 04 Oct 2025 08:00:41 GMT; Path=/; SameSite=None\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: VKqG_YEXwBWpsV_Nqyakdd4KTMJ8aQgzhJNTI3pO2ft1oST91DF0pg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3065,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3065), with no line terminators","md5":"0f676ca6c0b89b9a622bc15f17f128af","sha1":"88cd5be959bcc6a6241143d0b563a37a891d4d8d","sha256":"65bc6ddb4bf9454fdb2514491bce7545ff737f9e1e77a0ab47bc546dcf7f7b85","sha512":"79ed6baaa9cf3c3566f354cde590d1724390d566039911692678650e0bb2b7aff3299fb904a0967a40ffe0507f5bad2d1dc1eb2c303e74be11d35942dcb04902","ssdeep":"","tlshash":"1351019d34f3a0c283b27065057bb596fa288aa1934cca18863d97bcbd715ed6317f4c","first_seen":"2025-09-27T08:01:09.118421Z","last_seen":"2025-09-27T08:01:09.118421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":116,"dns":2,"connect":8,"send":0,"wait":110,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:55 GMT","end":"Mon, 01 Dec 2025 08:37:54 GMT"},"fingerprint":{"sha1":"D6:CA:D9:3E:AA:21:3F:46:BD:DD:2C:06:2D:20:A1:D8:5F:AB:21:B2","sha256":"6C:68:26:80:36:50:C5:E4:B6:7C:60:D3:B6:13:10:1E:1B:6B:08:94:61:55:0A:E6:3D:BC:7E:1F:F0:DD:59:5A"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:faEc5rdGycCR6KxvuCnnM19Eoa3sfQ:4pLpPtcIeFzxCvEU; Expires=Mon, 27-Sep-2027 08:00:42 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:00:42 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1879563009:1758960042051691\u0026ifkv=AfYwgwUMnAgnC3vBoVyKr5UlU5Xu767SXodNiuwT65KNbLesw_sOmiwCDTzEo4mhW7P2nBWPrGKJ\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-tHI8VQUSJp_EnYqAlNn0gA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T14:59:10.506438Z","times_seen":15171651,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":83,"dns":0,"connect":22,"send":0,"wait":35,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1879563009:1758960042051691\u0026ifkv=AfYwgwUMnAgnC3vBoVyKr5UlU5Xu767SXodNiuwT65KNbLesw_sOmiwCDTzEo4mhW7P2nBWPrGKJ","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:42.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:55 GMT","end":"Mon, 01 Dec 2025 08:37:54 GMT"},"fingerprint":{"sha1":"D6:CA:D9:3E:AA:21:3F:46:BD:DD:2C:06:2D:20:A1:D8:5F:AB:21:B2","sha256":"6C:68:26:80:36:50:C5:E4:B6:7C:60:D3:B6:13:10:1E:1B:6B:08:94:61:55:0A:E6:3D:BC:7E:1F:F0:DD:59:5A"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S1879563009:1758960042051691\u0026ifkv=AfYwgwUMnAgnC3vBoVyKr5UlU5Xu767SXodNiuwT65KNbLesw_sOmiwCDTzEo4mhW7P2nBWPrGKJ HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://luluvid.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:xuWtVlGOTQx_RtLWMPVN8z3PCFo7gA:05vlapdd1W5aMlDi;Path=/;Expires=Mon, 27-Sep-2027 08:00:42 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:00:42 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S1879563009%3A1758960042051691\u0026hl=en\u0026ifkv=AfYwgwUq9eOCMwfcH0SSZEBhaNIEOuW6J_XhGqo4pE2EYMHHd_kJX-iOSRNDhOXcJXqnKxhS-tJ4\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: script-src 'nonce-PLjvi-UGRTHJT81bPIUd3A' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 417\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T14:59:10.506438Z","times_seen":15171651,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/js/pop.js","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /js/pop.js HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2015 19:57:56 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbFEk2M6ssk%2FHO7UC%2BDxmzsH5mm0t0oGErYl2A3dYEX%2FxbjHVgHIpRqp9h8ZwkunUbcTlHkpw4z6VeniIUla5E0mvBER%2BUYQrA%3D%3D\"}]}\r\netag: W/\"24-5161024c91900\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nage: 3690\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 98597802c8865689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"2f8fefc6a5aed3327c395f43db6be62d","sha1":"8594728c9e75e88e1a759e8c8466df832323d963","sha256":"ff687e2177537cc8e021014af056c22a44036a19c9101350dedf64a6666d47ba","sha512":"3a7708be2e5469b92a3ad6d3de28fc5edb20586011871e4cf799135037b6f2d162f372913364adce6f7b87ff1cff25bbbbaa5a6488348e4a41938e6b43ab94a9","ssdeep":"","tlshash":"f28000ee08e2bcbec02c0000000e02a802b00c00a023ac20a00e8e0233e2e00c228c2a","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-05-14T11:06:52.979801Z","times_seen":1100,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dh8azcl753e1e.cloudfront.net/?czahd=1202196","fqdn":"dh8azcl753e1e.cloudfront.net","domain":"dh8azcl753e1e.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.3","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?czahd=1202196 HTTP/1.1\r\nHost: dh8azcl753e1e.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 79119\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 094188bf05865a3d323dcbfb7173f1f6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: -UEI7w9YZvLxv6iu2DC7JIk9ParBI8FLVD6OZnwhfTA2a4gbidaUIQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":232307,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)","md5":"593a3f6ca84ed91ceb1d995e409f344f","sha1":"adebd409b8b6431654f2d270fc51e0514269b6ab","sha256":"1bd3479b624d6e754ca9b5cc67d7a2a1756d887d16eeab1514d1c395d31c28f4","sha512":"de17b50ace373fa7c3e8633034834e0818d9acb13b350571f38a40764c5cb0520c4e8093b85fb1e33ef921a109478dc2421366a69c33c7fd554d3690a5d26558","ssdeep":"3072:XBUNPgDYzi07L02raYDbe+Y5UKS+7L0x2iF+Zc53+Zc0M8Ex:XuN4DUi07w2rnXeZU3+iAi","tlshash":"59344cc9ba923469836374b540bf124ab23f5a69bc084dd4f496d4d07db8d0a437bfac","first_seen":"2025-09-27T08:01:09.121146Z","last_seen":"2025-09-27T08:01:09.121146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":14,"dns":3,"connect":8,"send":0,"wait":182,"receive":10,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"dh8azcl753e1e.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S-100467965%3A1758960042048640\u0026hl=en\u0026ifkv=AfYwgwU1V-5YG5h9Ys-j5JfXtHCF_jtTbyiG0oVfEOgbwuVl7kAtKPt42vsuyGQODesDFYY9N5MF\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:42.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:55 GMT","end":"Mon, 01 Dec 2025 08:37:54 GMT"},"fingerprint":{"sha1":"D6:CA:D9:3E:AA:21:3F:46:BD:DD:2C:06:2D:20:A1:D8:5F:AB:21:B2","sha256":"6C:68:26:80:36:50:C5:E4:B6:7C:60:D3:B6:13:10:1E:1B:6B:08:94:61:55:0A:E6:3D:BC:7E:1F:F0:DD:59:5A"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S-100467965%3A1758960042048640\u0026hl=en\u0026ifkv=AfYwgwU1V-5YG5h9Ys-j5JfXtHCF_jtTbyiG0oVfEOgbwuVl7kAtKPt42vsuyGQODesDFYY9N5MF\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://luluvid.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:00:42 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: script-src 'nonce-CcCrubq1nfHI2xTb54mu_g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.z7CL5ywoSX0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T14:59:10.506438Z","times_seen":15171651,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/js/jdadbl.js","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /js/jdadbl.js HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Sep 2021 21:39:44 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jjE%2BPkpqkjGPeCyogJ%2FnXlMa2%2B65OL5heEGQ%2FBxoUzQEz6RtXfsrYc0R9Tin%2FLNlwY6BSJJqF5UdM5IFSsME6LEhge9qsX2MOA%3D%3D\"}]}\r\netag: W/\"a47-5cbe74da38800\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nage: 5492\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 98597802c8825689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2631,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2579)","md5":"95fd065c887d003f9a169dee9876532c","sha1":"0f111b6d5e142fadb966a1feb264d519c12a59d9","sha256":"4d4c84ad505bddf4d49b1222db984d7aaa425c6702c79029801632bf31f2b80d","sha512":"cacd512fbe11ccdf89c56c164255191d88f1edf46a9cb02b1de0d690659923a6508ae8d5d1733c5452974ebfae589f4c1214be047ba67d5218db06c3fe9a25a2","ssdeep":"","tlshash":"5451215775c270a0273b60b4952f710a773a5892250b8860c3e5e9952c2c8ef9177f9b","first_seen":"2023-05-22T09:51:00Z","last_seen":"2026-05-14T11:06:53.038682Z","times_seen":814,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/favicon.ico","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1; _ga_RFESL45RJX=GS2.1.s1758960041$o1$g0$t1758960041$j60$l0$h0; _ga=GA1.1.226768965.1758960042\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 01 Jun 2023 18:52:04 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wmj16N%2BivbrZ6i26wZFWxM6klTp8dIxrAT1XeSdKb9EOoBFZtm3844lzy3kRid%2BmLTahng5L3Y71PJ%2B8zwjNf6IO3O0sctl4ew%3D%3D\"}]}\r\netag: W/\"1c1-5fd15eeb261fb\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/vnd.microsoft.icon\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 98597806289f5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 30x30 with PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"91a7665e37c2eeb49f2ee2fbc2e2d19d","sha1":"8f93836b06e6c2fac65258b7420c1df09ad58d37","sha256":"ff27be6c1a1eba3dc17d16581d680e8faba2536b565e90ad7c09c43d62495dd7","sha512":"2fd72836b18efe830a4f6efa526e01dbe267c65845c22272c90fe5df1a12266d266a34217bc89fb9e365ee009dc06a1a572744287b5b529ae8c87af20483d151","ssdeep":"","tlshash":"ddf0d4dbf5476008c3379ed5e46380cbf13cc1d50c9a704b0175791a4d453169391717","first_seen":"2023-08-28T18:58:56Z","last_seen":"2026-04-28T09:23:48.470196Z","times_seen":435,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/player/jw8/polyfills.webvtt.js","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /player/jw8/polyfills.webvtt.js HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1; _ga_RFESL45RJX=GS2.1.s1758960041$o1$g0$t1758960041$j60$l0$h0; _ga=GA1.1.226768965.1758960042\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 07 Jun 2023 06:30:47 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ADQ%2BJGqhll3x6ktZFuT6T19eLNoQWIRjBjg3jMmaIZZBagUpgVCi8CJNF8ZoSe5peISQU1DszlOr1kQFGVPFUh4iOk1gwHiqAQ%3D%3D\"}]}\r\netag: W/\"2a27-5fd8446b4edf7\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nage: 369\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 98597805789b5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10791,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10393)","md5":"b3e139c07aac361115e8ec41bde7d2a5","sha1":"0c3fc8d31887dafb86ba778da788ece5cbf76f18","sha256":"1ff5585bdbea001d37f3647975a645f0594090f070915831286de90dd45949d5","sha512":"0b2a16b1b9a63ab3561c9d7e63a2a797781f6abc09c304f28530c6a8c87224083c708989534552d11948aeec3aabb36a943173fbe651c64810d56f08f2bc68b7","ssdeep":"192:gl1026oqO7yNPJUsnOGhcAsej4Du/YVLEO1mTLSRavTdU94o9pD5i:E10tvJN6cC3RPVUTLKKTdObpM","tlshash":"7222f690b2f5609d8281e49f456f0284e2399630fe8bc4cef550c5f9dc74a8a127ebb9","first_seen":"2023-06-27T00:33:19Z","last_seen":"2026-05-14T11:06:52.942715Z","times_seen":840,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S1879563009%3A1758960042051691\u0026hl=en\u0026ifkv=AfYwgwUq9eOCMwfcH0SSZEBhaNIEOuW6J_XhGqo4pE2EYMHHd_kJX-iOSRNDhOXcJXqnKxhS-tJ4\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:42.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S1879563009%3A1758960042051691\u0026hl=en\u0026ifkv=AfYwgwUq9eOCMwfcH0SSZEBhaNIEOuW6J_XhGqo4pE2EYMHHd_kJX-iOSRNDhOXcJXqnKxhS-tJ4\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://luluvid.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:00:42 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy: script-src 'nonce-WAPTx9L3my9Kv266g1K0Vw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.z7CL5ywoSX0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T14:59:10.506438Z","times_seen":15171651,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/player/jw8/jwplayer.js?v=2","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /player/jw8/jwplayer.js?v=2 HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 07 Jun 2023 23:02:18 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FytF8%2Bx3GDkSockFTVWSmJzTDIJzcKwUsnGQcvYm%2FjmCy9TiZA42DmO6wwlTj1OIf2uhFcf2Ima6F2kPeNkLArnzNwBhLqcjOg%3D%3D\"}]}\r\netag: W/\"1d82e-5fd9220ac069a\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nage: 6494\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 98597802c8845689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120878,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65502)","md5":"e596630eff0374adebc068352ed362ae","sha1":"156895e17acd4652f5816db5b310b341960edbbc","sha256":"816c99b4a2b3c2d2d7adca35b602c2b1f5ef56ffed67ae1a4d29bbeefa55ee90","sha512":"625450c3bfe0ea3228565c0f32f167850d3e60a2d90c049c87143c40cf8f413ee8ded3c94740f095c4ec088477ca67c4dd08d91205b6bfd38ced4175d404ce0b","ssdeep":"1536:AFe00b3VLgXLVuRXE0D6Z17WRtekdILG0Up:X0O31gbVuR96mLIy","tlshash":"d1c370ccb1d2b4a603a770b5517f620ef23b59c5384e8194ea25e9d5bc7864e9033fac","first_seen":"2023-06-27T00:33:19Z","last_seen":"2026-05-14T11:06:53.06114Z","times_seen":956,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"undefined/TkZLSngvJCgnRy97KWwNPCp2b0oIY3kMHCZ+KjAbInF+eR1/I2UpFCEzLywKISg/ZBYrMm54PgwUAwBOGjweJDAcFzsJEg8kAyQxCyIgADEoITMwLg8pch87BBYNIAgUCxobLAU+OCQwHCI7EgItIg0OQAcPHh82KA5/JT82AH0uEAQTDyAuHCMeABsHdxo7PhsiOx87IRQZeUwaDBkTIS0hDSM6NjIyHTs9Dw4zNhQMHS4xDRcJOykif3IILzkADjM+HA08HzIvIS96MA9zOghLHAIYJz0IHx4PTC8hL3o6HAsjC0sMHhgbSB8iIAM7KxcNIikaayM7On0XCg4/IQEJHzYEIzM+SBl3cnM6HQsTDSscJxIfOXYgGhxJHy07b0oMBBMcIB0Och40HwctAS4hfh16HwQEAy4/GA5zHjUbfwdsEj0pJTpFK3E8eTMiLyB/Oxg","fqdn":"undefined","domain":"undefined","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.691Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /TkZLSngvJCgnRy97KWwNPCp2b0oIY3kMHCZ+KjAbInF+eR1/I2UpFCEzLywKISg/ZBYrMm54PgwUAwBOGjweJDAcFzsJEg8kAyQxCyIgADEoITMwLg8pch87BBYNIAgUCxobLAU+OCQwHCI7EgItIg0OQAcPHh82KA5/JT82AH0uEAQTDyAuHCMeABsHdxo7PhsiOx87IRQZeUwaDBkTIS0hDSM6NjIyHTs9Dw4zNhQMHS4xDRcJOykif3IILzkADjM+HA08HzIvIS96MA9zOghLHAIYJz0IHx4PTC8hL3o6HAsjC0sMHhgbSB8iIAM7KxcNIikaayM7On0XCg4/IQEJHzYEIzM+SBl3cnM6HQsTDSscJxIfOXYgGhxJHy07b0oMBBMcIB0Och40HwctAS4hfh16HwQEAy4/GA5zHjUbfwdsEj0pJTpFK3E8eTMiLyB/Oxg HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T14:59:10.506438Z","times_seen":15171651,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/js/new100.js","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /js/new100.js HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Dec 2024 03:46:02 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CCEHCzacS%2FD3EeaXWodUGJ5IByfXMbEk8J3CCrw94eAR79rl3BcCvPX3DtTRaccVU9l6JfdhvUnhPnBl02tPL3TnEnyepOsruA%3D%3D\"}]}\r\netag: W/\"5c1-62a384d3361f7\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nage: 6711\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 98597802c8835689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1473,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"a404d12258254e435583a10baa32a8b8","sha1":"a7bde7e90a122cc61a016e3e4f94339ca866d6c3","sha256":"32df889d6099045ed25a5e32fbf53de6fbc07ff4b82ccc3363b6d06acb254b84","sha512":"594cda55bee6617a0583494ea1a651335081d4b393aaafe10764b930b9095e7f36edd4b5c82520737f47276f8cca302fd39ed0a6bbd97d400734e3765c3ed6f2","ssdeep":"","tlshash":"1931bb2b2cf4203025f7600d171b6144b0529643251deeb87adc435a3f94d6d8e76bed","first_seen":"2024-12-27T13:53:56.121207Z","last_seen":"2026-05-14T11:06:53.004218Z","times_seen":733,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.lulucdn.com/mtsvgvlxyk25_xt.jpg","fqdn":"img.lulucdn.com","domain":"lulucdn.com","tld":"com"},"ip":{"addr":"104.21.31.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lulucdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 09:29:08 GMT","end":"Thu, 30 Oct 2025 10:27:32 GMT"},"fingerprint":{"sha1":"D9:E6:AB:5C:B3:C0:95:1C:8D:9D:CD:A8:18:4F:4B:78:54:E7:06:21","sha256":"CD:6F:8D:65:B3:CA:5C:1F:7F:8A:F3:8F:21:1C:7C:91:4F:6F:E0:22:72:88:C5:9A:CC:91:AB:A2:33:90:28:F3"}}},"request":{"raw":"GET /mtsvgvlxyk25_xt.jpg HTTP/1.1\r\nHost: img.lulucdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 148999\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 20 Sep 2025 06:06:03 GMT\r\netag: \"68ce444b-24607\"\r\nexpires: Sat, 04 Oct 2025 07:59:56 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WGcXhkEe37bIYZqUuNguYFEdcHauDWMWXvtKeo0RxlCNbt9gX4nD1P3ep8zufSNigtzmT8gQvxvD4rzzbEdV8zSdSp%2BI21nbqnFMv3jAkg%3D%3D\"}]}\r\ncf-ray: 985978049ee7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148999,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x679, components 3","md5":"b4697b9e7647fc2f5c02cd78b48e8ea6","sha1":"c1c70e02f15a0eb645d0ef7dad243c3d1175963c","sha256":"628436646e6fc7025af9352de9a53698ad327d670a5bf83fceadc114b634a614","sha512":"363417ca2b735254c4f431b83e8f8377522279a149e46d1124848cd41e70ab437e9f5eca6b8687a491acd3a761629e639f5a719aaf0e5e877e6f18ddaf9fdaca","ssdeep":"3072:I63FOwfxXx5Lml8yzYZ6LqYBBoeQW1ZWWvzDD1zOOxla7TKDpQ:I63FOW5aP9LqYBBoeN7XvzDDxOWavKW","tlshash":"32e312779c0dde0353b4d9329534776ed883e072adb67e30eca8e446a793a2613e141e","first_seen":"2025-09-27T08:01:09.126682Z","last_seen":"2025-09-27T08:01:09.126682Z","times_seen":1,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":272,"dns":3,"connect":2,"send":0,"wait":80,"receive":109,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak.beltsflusker.com/rDulnwma4CCtiWZF/84626","fqdn":"ak.beltsflusker.com","domain":"beltsflusker.com","tld":"com"},"ip":{"addr":"23.109.170.59","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ak.beltsflusker.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 07:59:02 GMT","end":"Thu, 23 Oct 2025 07:59:01 GMT"},"fingerprint":{"sha1":"6D:DC:BB:60:47:86:74:81:29:0F:5E:CA:31:F5:66:3B:AE:EE:F9:B5","sha256":"24:1A:A7:67:C8:4C:76:E4:DE:0F:E0:AD:31:5A:D0:EB:DC:CA:3E:E5:CF:82:DC:06:C3:0A:27:A7:BA:F7:8E:56"}}},"request":{"raw":"GET /rDulnwma4CCtiWZF/84626 HTTP/1.1\r\nHost: ak.beltsflusker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://luluvid.com\r\naccess-control-allow-headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWdcFnYQDeASKQHj1xSv4SAr9g3Wh3ZQKensbE32bTH6T8TwvKB7g78kZ4Sdv8MRY13Z1U3VlPXa8GoaubZtyaLqSVc00NbiTW2%2F5sJCNcNpWbmxv9wiXmRQZOfajFpTh0am%2F5qr0oSLEg%2BFKZIhXJ5YM6WD0sZEpQkSKr4T0VRqa9JcT%2FEMbhOy5dlkql%2F0Sgd6KMD8jfZNKuGV%2BQcDKPE883N8Wbidt1l6KxEc8Gy4I%2FgtOI7c0a%2FONVNB2tfoG6EX0%2F%2F73ODxYiUTQLkdCrO07mR%2B4dk3m; expires=Sun, 28-Sep-2025 08:00:41 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyLEKwjAURuHcSwmIWX6oe5%2BgWrRgV%2BsoydAnqDVIoSQhiYpvb10OfEcIwaUCzwHq3NRdW69tuhPoCdYGPDlI7eNn%2FIIi%2BHAER4etSYuvev9yef0Tir9BM5S5mKEywTptM9glbPrxvtj9dbiBghTg7CWD06MUoLfc%2FQD8TBxp; expires=Sun, 28-Sep-2025 08:00:41 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87150,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"6c9c78afffac6134b0253276e3212aee","sha1":"c59d339e26406fc1a3e32c91ae6b02538ef67f25","sha256":"edcf90ada8409f9165888ab3ba6da9a858c117de8b767dc245bfa95aa667a4b5","sha512":"d687cb8f160158fe838fd4863f150001365a97a9d108403809d523c44f5c837d18d0083f52821bc6aefd7dbe6ba3fe9bc20b837c512b110220d817f87dd27b92","ssdeep":"1536:hB7BzzFI/qGxPJqvIVvhifTOsxDyvHubd8UT3+7yT0GaXK5RQH5QLp:pxISGx4vnyfBUCD5QF","tlshash":"83831db1b77672798f9640e6e1329122d22e0c80308ddcb0e26f5d607f916cad5bd6f9","first_seen":"2025-09-27T08:01:09.127998Z","last_seen":"2025-09-27T08:01:09.127998Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":114,"dns":78,"connect":20,"send":0,"wait":39,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"ak.beltsflusker.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parashparyro.com/VWxkZk56UwcVcwxeDC8fOQQ8MRY9GwYKPjcJVzA9AgBVUCoCC0ISJzFRVVR+Z11dUWglBQBbf21KFxIvIRkXW39zBQoAIWhKElt/e1xKVGBgShFbf3MYFAcpaF1CFjohAFlXeWBUXVB+ZVhVUHlj","fqdn":"parashparyro.com","domain":"parashparyro.com","tld":"com"},"ip":{"addr":"172.67.147.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parashparyro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 09:26:17 GMT","end":"Fri, 07 Nov 2025 10:24:46 GMT"},"fingerprint":{"sha1":"32:C6:41:72:32:7B:A7:C6:2C:35:1E:3A:D5:70:8F:39:E4:A3:1D:09","sha256":"D2:C7:33:5D:A8:F9:66:BE:B5:67:9E:B3:44:BC:B2:8B:43:94:6A:85:E6:1E:44:C6:1A:C9:13:30:F1:EA:CA:7E"}}},"request":{"raw":"GET /VWxkZk56UwcVcwxeDC8fOQQ8MRY9GwYKPjcJVzA9AgBVUCoCC0ISJzFRVVR+Z11dUWglBQBbf21KFxIvIRkXW39zBQoAIWhKElt/e1xKVGBgShFbf3MYFAcpaF1CFjohAFlXeWBUXVB+ZVhVUHlj HTTP/1.1\r\nHost: parashparyro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ysdqF8oI7lSTw8d29e6r7LeY%2B7WFIKE%2BZLbk8qeG7o1nkPeB4U0GIx0ZEouy5CYFmUh6hTcSEFW9pa6KOaPVBFd%2FBCidJC0kDN%2FGlNpk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98597804cb885684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T14:59:10.506438Z","times_seen":15171651,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/srt/empty.srt","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /srt/empty.srt HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1; _ga_RFESL45RJX=GS2.1.s1758960041$o1$g0$t1758960041$j60$l0$h0; _ga=GA1.1.226768965.1758960042\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Jul 2016 15:03:06 GMT\r\netag: \"2a-537211991fe80\"\r\naccept-ranges: bytes\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\ncontent-type: text/vtt; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zbwnlrPgI6qOde4hK6A9%2BsZg%2FIZObVOaYVPfOIVM7%2Bb2moyMdbr99jvwJ61ykeoJUmb0UAfN1PO1OBbpoln7bSDh2yyMCgi4EA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98597805789a5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"text/vtt; charset=utf-8","magic":"SubRip, ASCII text, with CRLF line terminators","md5":"7f8501e8cf0fd2262e1ec59fa6653797","sha1":"5ea9200f583b21ec2008fc44447b2a15ab31f246","sha256":"f3adadb235f7ecab4a68f4d0961640c155c0d2057d28fe24e19d36b04904ddc6","sha512":"23ad6074030e0fc1cf24cd1085b974d27d25db4f336b432da5f79706208ba9c7945419d78c34b2ae88c2196f4b37bdcac53f8407e95bd8cf1ff98b9cdba54cd7","ssdeep":"","tlshash":"c29004d1ff314f51d4143340145033473151c4070dc550103050d051f5c5701c4013c7","first_seen":"2023-04-20T01:47:48Z","last_seen":"2026-05-14T11:06:52.941718Z","times_seen":888,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/css/main.css","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 18 May 2023 18:01:36 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vGWbZOoxXMyHI%2Fo%2BDBFycPMdZux03ifWPeNHHOoOLv8Inz7LwUBs5VyLsAtv49pzOn71p6Svi05h6YQdT3RdXO6XGvVQlMIGEQ%3D%3D\"}]}\r\netag: W/\"c05b-5fbfb986a0000\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 753\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 98597802c87e5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49243,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"40fa099cd62886ddda0afde4ef18cc84","sha1":"4c53f2b1e903260eeeff8c4f78b1562e015e1951","sha256":"57fd276195b1343bb4664915c74396b2331de23b3a778e05e85c149db2332d55","sha512":"d360bcb45964adc2756e33f7402775cc883e4710864d945a60caba1e33cd70b530de7613ffb853ed062f43dfbf2e471472e92174ec9b392b8200d23dba92f7a0","ssdeep":"1536:AQV8FxnYgp9ry2vYsRwq9AOOGvC4DONaY93Rz:AQVMxnYSy2v/AOOk4Rz","tlshash":"aa238422a7812c0cf06bd1b67d6197d6233e4053d92b1f7c7ab93578c28e4e85173b9a","first_seen":"2023-10-26T04:52:23Z","last_seen":"2026-05-14T11:06:52.978028Z","times_seen":931,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RFESL45RJX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-RFESL45RJX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nexpires: Sat, 27 Sep 2025 08:00:41 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140793\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":422106,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"0e5a6cb6abd74d3f346dfc2fbc80bbec","sha1":"0e933154d036b00e603f398aa039d85b6242795d","sha256":"737bbe4c8fd475a90e40df85937b73f560295bce4e72c9ea9681e815fffdab5d","sha512":"e5897402d327b74c435e552a29a137960831bff0849e895c3497b5c7a6beb1ed8e18f41a540f03c6ad39269adb9bd4cabf3cfc909478ff31c366fa4d17386a36","ssdeep":"6144:7nBEpmM2/vNpvYqkD1g1/9G1SvuVcH9+23WBj:7B6mL3Yly/Lwr","tlshash":"529409ce73d674265396e078903f018ba5bb28a2f45cc899f189dce42d74a9a4137f7c","first_seen":"2025-09-27T08:01:09.134617Z","last_seen":"2025-09-27T08:01:09.134617Z","times_seen":1,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":154,"dns":0,"connect":15,"send":0,"wait":50,"receive":44,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S-100467965:1758960042048640\u0026ifkv=AfYwgwWQKInlpQr1oiYK2-pliKQQuJJ_N4aco2wH8F3tLkcC5v4qq_cQ_-vHow6QR9b71CZse_O_","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:42.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:55 GMT","end":"Mon, 01 Dec 2025 08:37:54 GMT"},"fingerprint":{"sha1":"D6:CA:D9:3E:AA:21:3F:46:BD:DD:2C:06:2D:20:A1:D8:5F:AB:21:B2","sha256":"6C:68:26:80:36:50:C5:E4:B6:7C:60:D3:B6:13:10:1E:1B:6B:08:94:61:55:0A:E6:3D:BC:7E:1F:F0:DD:59:5A"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S-100467965:1758960042048640\u0026ifkv=AfYwgwWQKInlpQr1oiYK2-pliKQQuJJ_N4aco2wH8F3tLkcC5v4qq_cQ_-vHow6QR9b71CZse_O_ HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://luluvid.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:5op4leOyc1Cg7HnP0aq-as-FY9a_PQ:cxBtDPk8S7CiVjIL;Path=/;Expires=Mon, 27-Sep-2027 08:00:42 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Sep 2025 08:00:42 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S-100467965%3A1758960042048640\u0026hl=en\u0026ifkv=AfYwgwU1V-5YG5h9Ys-j5JfXtHCF_jtTbyiG0oVfEOgbwuVl7kAtKPt42vsuyGQODesDFYY9N5MF\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-x7X3qFwG5pzQ15LLe25M9w' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 414\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T14:59:10.506438Z","times_seen":15171651,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wrathypenitis.help/cuid/?f=https%3A%2F%2Fluluvid.com","fqdn":"wrathypenitis.help","domain":"wrathypenitis.help","tld":"help"},"ip":{"addr":"212.117.186.116","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wrathypenitis.help","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 21:21:47 GMT","end":"Wed, 24 Dec 2025 21:21:46 GMT"},"fingerprint":{"sha1":"AB:7F:25:A4:47:EA:FD:C0:FD:04:9D:5B:DE:04:FB:AC:82:37:67:A1","sha256":"8C:B6:C9:8F:CE:4F:DB:23:24:8F:04:DB:40:06:BA:C3:2B:0E:91:55:37:A9:E1:FF:A6:E7:DF:7F:FE:FD:BB:65"}}},"request":{"raw":"OPTIONS /cuid/?f=https%3A%2F%2Fluluvid.com HTTP/1.1\r\nHost: wrathypenitis.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://luluvid.com/\r\nOrigin: https://luluvid.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://luluvid.com\r\naccess-control-allow-headers: content-type, megageocheckolololo, x-forwarded-for\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T14:59:10.506438Z","times_seen":15171651,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":53,"dns":5,"connect":20,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bunkersparring.shop/gd/84626?md=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\u0026fc=YNDyDwXYtQqUoUY8cnnGmw\u0026pr=KLtIvqNiDuSSch5zkIWibQ","fqdn":"bunkersparring.shop","domain":"bunkersparring.shop","tld":"shop"},"ip":{"addr":"23.109.170.252","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bunkersparring.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 00:53:21 GMT","end":"Tue, 23 Dec 2025 00:53:20 GMT"},"fingerprint":{"sha1":"D4:1F:24:AA:9C:8A:98:1D:7A:D9:5C:BA:16:C8:5C:DB:CF:AD:7C:14","sha256":"5F:E1:2A:F5:32:CD:96:E1:97:E9:3C:53:8A:AF:11:E6:59:FA:A7:BC:EA:E9:82:89:8B:97:0D:C0:96:DD:95:ED"}}},"request":{"raw":"OPTIONS /gd/84626?md=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\u0026fc=YNDyDwXYtQqUoUY8cnnGmw\u0026pr=KLtIvqNiDuSSch5zkIWibQ HTTP/1.1\r\nHost: bunkersparring.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://luluvid.com/\r\nOrigin: https://luluvid.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://luluvid.com\r\naccess-control-allow-headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"0d7a61a5ae2424f444691dfa38e694ae","sha1":"dfb2f770cb7740844d94d2a2517af244b34c56ae","sha256":"e3c083d0e62029a9fc90700e7effced43eb213718ad4e7517e5b05a5a0ad9e49","sha512":"dc4531ceee0347383f28990bd01470ce323b0338a83b5b51e2640e3a9d1509346e23fe490ebfaeb4d7a86fd8ef22d2d6465990e6cb6583468d47174b97d25d03","ssdeep":"","tlshash":"8a30000000000000000000c0000000000000000000000000000300000c0c000c000000","first_seen":"2025-06-10T16:02:54.181066Z","last_seen":"2026-05-12T00:34:11.130426Z","times_seen":1599,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":48,"dns":2,"connect":20,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/player/jw8/jw8-theme.css","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /player/jw8/jw8-theme.css HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 05:34:02 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2FG3RTzCkE6urGtHJER96MVeAxN3PlhKavQh3ImBrem1BsyN1DZphdYaJB14fcKZRTKfc%2FZiI%2BP9MmrN7RCQ4Hd0xk2QKAhIpA%3D%3D\"}]}\r\netag: W/\"5f3b-612e330968823\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 1870\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9859780338895689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24379,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (938), with CRLF line terminators","md5":"fe5e9757de5bbdd3f8157ce67950d325","sha1":"f7e4ea57093c9f84ecb4b2e11f5f548cfd62bad7","sha256":"0422fca1202e71e489ae82a3b4c530935be8b8685c532cfcafeced89f08d537b","sha512":"e8941f56e78e4ccbc1a5c42fd14b9d37049eb6781d7750a3e68b895237b5882ed7935a482834158cbc9d43723f0a40cc5212b49da18bf9515962c21466cedbf0","ssdeep":"384:tyqynyuymyHyoywyfyCy5yAyqyPybyiy/yJy9yDyDyDyRyOyJyTyJyDy8ymyCyUj:tyqynyuymyHyoywyfyCy5yAyqyPybyiA","tlshash":"73b273969242822c2d3b5678ff233a04ebaf7557d749a3e4be7c611c8b71183f0e5a50","first_seen":"2024-04-15T00:22:36Z","last_seen":"2026-05-14T11:06:52.993464Z","times_seen":759,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/player/jw8/provider.hlsjs.js","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /player/jw8/provider.hlsjs.js HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 07 Jun 2023 06:30:49 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tczAsHY267L7nxWn9iwShcxbe4oDtzGw0kUrDohKptCqOOK0Mm1XmdFl2d1dq6Oqz4PqVo%2BziDGgYx0Nxm%2BWULifNobuF%2FT1PA%3D%3D\"}]}\r\netag: W/\"5e59e-5fd8446d199fb\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nage: 369\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 98597803488a5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386462,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"e133e8e7b97079d4bc7ec71fae611795","sha1":"14f34839087df4a3a09ba2f11a768f0d14af979d","sha256":"f0d08bd0271c5d085f5d1419b1af887eb9c250aac800cadc4d5ea64c3a348e97","sha512":"c9d584c81ef63afa75e386a97e6467969aec410d4819ef8053e2c740785c03028338e5cf0f278b874bcf116a31ddb9451bf521c8a1cb30bc5d9cefe99f33c34a","ssdeep":"6144:saY41OZdKOOf+nSIY/4nN/Aq5YrOue7stE6KgT/:pY+/4BAq5Yr1eG","tlshash":"1d842adeb695b0664283b1a4903f5607633b7d0a7409c1acfb27e5d61db8889b03bf74","first_seen":"2023-03-08T14:31:25Z","last_seen":"2026-05-14T11:06:53.018739Z","times_seen":956,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parashparyro.com/VnlNTWp5Ri4+VwwuFyMIZysuFVsYIxchOAQsIXwDA0gHKDI7MGs5AzJEfH9aZEh0e0wmEClwW3AKOSweIwpwfEw/FysiV3APcHxEZU1jflx4T2s4V2dfOT0LMUR8axoiDSFwW2FMdXRcZkl5fFxhSQ","fqdn":"parashparyro.com","domain":"parashparyro.com","tld":"com"},"ip":{"addr":"172.67.147.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parashparyro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 09:26:17 GMT","end":"Fri, 07 Nov 2025 10:24:46 GMT"},"fingerprint":{"sha1":"32:C6:41:72:32:7B:A7:C6:2C:35:1E:3A:D5:70:8F:39:E4:A3:1D:09","sha256":"D2:C7:33:5D:A8:F9:66:BE:B5:67:9E:B3:44:BC:B2:8B:43:94:6A:85:E6:1E:44:C6:1A:C9:13:30:F1:EA:CA:7E"}}},"request":{"raw":"GET /VnlNTWp5Ri4+VwwuFyMIZysuFVsYIxchOAQsIXwDA0gHKDI7MGs5AzJEfH9aZEh0e0wmEClwW3AKOSweIwpwfEw/FysiV3APcHxEZU1jflx4T2s4V2dfOT0LMUR8axoiDSFwW2FMdXRcZkl5fFxhSQ HTTP/1.1\r\nHost: parashparyro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GA6XGzMfmReLsT73LoXVAJkYVo708pW0f6aEwnQqBv3fyprSV0Il%2FR7VRKMrCoEgRslBkrCHJnEN1tak%2FaVzYxZ9sghtV%2BaucyBlDa43\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98597804cb875684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T14:59:10.506438Z","times_seen":15171651,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":54,"dns":5,"connect":2,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"parashparyro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 14:13:33 GMT","end":"Sun, 23 Nov 2025 15:11:16 GMT"},"fingerprint":{"sha1":"1A:11:63:8A:09:D9:A9:1F:C1:06:34:29:E0:E0:95:E7:BA:BC:63:A3","sha256":"20:A6:48:1D:DB:42:37:88:BF:13:AD:64:91:6B:C4:6D:02:EA:D4:98:E1:E5:88:85:C0:D3:03:48:B4:F1:11:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://luluvid.com/\r\nOrigin: https://luluvid.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:42 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://luluvid.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M5Z114Edc9t2scRP807eOPEluiLnQIunLAtL%2FyJ04Uohcs9M1OcUKMiaV5T8hS0szgga2AV2Zclrb0DbsqeWg3AuGCes7BnW9AVnj9cMSypomA%3D%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: csu=926463009694624@1@1758960042; SameSite=None; Secure; Max-Age=31104000\r\ncf-ray: 9859780689082678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"2579373ab3a487750278f007541c1bbb","sha1":"78de163b6640eff8065fd14a8e54418024f87676","sha256":"a3223943afa2d275a902b62d4ec1121fd9689f2f2cf1e1a76aaa7ef985968a92","sha512":"2b1824a43b6f9bfbc18d086175381d15c3aa0bbd9a5c67ded64858e0f9ebedb7bda99db8bc29e86c4bb9eda65e9fa2f1a9704b1896d6a3e38ce8043c92c7da2d","ssdeep":"","tlshash":"1d8000a22008e0f202220a8302a02282ca8020238c0802000002be003ccf30080b8208","first_seen":"2025-09-27T08:01:09.138374Z","last_seen":"2025-09-27T08:01:09.138374Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":52,"dns":5,"connect":2,"send":0,"wait":124,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/js/xupload.js","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /js/xupload.js HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Nov 2024 21:12:37 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ny7goElbn7dzNiaPoSoOfEFXG9sBfnPtSVGpDc4WNn3b%2Bjm4UhEaZYB4dgo6O3SWehj3UmMYUqyxDHQmb%2BuhCoPVDn10wVAQZw%3D%3D\"}]}\r\netag: W/\"2a10-626d1cb18bf4f\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nage: 6711\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 98597802c8805689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10768,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"36d53d0f509d1642267ebb68b36165a6","sha1":"18534c979b23a500124e316d07db0f42e4d72bdd","sha256":"435e82278b5b2cf7980b025827e97d4edeb310b8fe31ef18f8a4535f36ba298f","sha512":"e45c543c6b137c234ca332cf4cda2ffae6af1d8fdb83e900e8508f7407914e96e67bb3b81b4bfd5dada10cceefa1344aa4e7c47125577d605ad2bc9634b77279","ssdeep":"192:7IKE9YGs1qGHh+6IsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQi:EGCi6BlV9GRebVReDyYS7OsaaF10fq3f","tlshash":"f122654abaa339912a7730390bbf52043b398407114ace54bd5c96c4af8452897fbbfd","first_seen":"2024-12-01T00:07:19.913985Z","last_seen":"2026-05-14T11:06:52.967776Z","times_seen":746,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/player/jw8/jwplayer.core.controls.js","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /player/jw8/jwplayer.core.controls.js HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 28 Nov 2023 20:20:44 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PglkLa1xr8u7dFyTWjtBsfxIoEBLTiU6Z2eL3LRXL29zk2R1JfbLHChxJP44ONSWqpmeK%2FafZBMugOMSbRz3QfbF43zXjrqPhg%3D%3D\"}]}\r\netag: W/\"5167f-60b3c274227f4\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nage: 5492\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9859780338885689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":333439,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"a8889c5f9e2492b9c3d6f73b5bad08fe","sha1":"6b942336401bc4ecd598f91fcaa7db96c889e6b4","sha256":"43502aabf4a1ce166cb2a84a177579663aa32e1ea7db8666bc67534a53a0f368","sha512":"e09de17c7ddc72248e2e337de5be46e9722d7afa26502a6f49c7358074b865ed65288f1ab3048e639dc96c2695dfbe32443560ab91d3497519a787e34352767a","ssdeep":"6144:YhIMSOAqxEXf1nKFEGwjDwdWoYoQHwmj06n:ewOAqxEXfpKFEYdWJ0g","tlshash":"d3641a39b142323556d7a2a9625b4609733b8085b5068aacff39e9d84c7d48f30f7fb4","first_seen":"2023-12-06T18:00:17Z","last_seen":"2026-05-14T11:06:52.968517Z","times_seen":829,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/js/dnsads.js?ads=1\u0026AdType=1\u0026cbrandom=2\u0026clicktag=http","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /js/dnsads.js?ads=1\u0026AdType=1\u0026cbrandom=2\u0026clicktag=http HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Sep 2021 15:50:14 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E55WO40C25Kld2dMvx8eYEpUTJbq3YIbmFoJDHhf3PfNSIiTsJz6RV1xr8LdGz5chxjjpSPX7%2FasV0AZQQ0y4rEqX2AYQvFQPw%3D%3D\"}]}\r\netag: W/\"26-5cbe26bbab980\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nage: 6494\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 98597802c8855689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"99eccae6afa72c589ae54b5c3890282a","sha1":"0f102f8f5b556635de65d16cf70fa8269c6761b4","sha256":"b74a58316385de04b054737776e71c160cd60d2d01b5440b32c21651fb0ab8d3","sha512":"01bc413c1695c125b8ab111c60974da99989b618fb674631d998db519996966c569503efb97a3c760b50069e87b6b42891985b00c64810a43935ada075a19d24","ssdeep":"","tlshash":"eb8000ee08e2bcbec02c0000000e02a802b00c00a023ac20a00e8e0233e2e20c228c3a","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-05-14T11:06:52.989154Z","times_seen":2631,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Sep 2025 08:00:41 GMT\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3591,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"937c14ba7b5ca80d7955c6b5a4e1f283","sha1":"26375ff63193982affe1912f2918a20440b8d207","sha256":"c30b5f4bf7fc73369abceb72ecb439446e79be7f42cf749d79fbc0c7fd490937","sha512":"ff0824b0ccecfd65f0123d255d5578e6e281b47d14ca78dad739bc781123b12e33ab8263f7ee76a9fe8248d7a7a2571a87a5635e2a5c49a85f8090034e31cd88","ssdeep":"","tlshash":"79719cd1087be1149b831cc123cf6d37ee0e9255b810e5786bfe0c98adabc654362b2d","first_seen":"2025-09-17T02:36:20.355897Z","last_seen":"2026-05-14T15:01:37.29623Z","times_seen":1955,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":170,"dns":1,"connect":16,"send":0,"wait":107,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wrathypenitis.help/cuid/?f=https%3A%2F%2Fluluvid.com","fqdn":"wrathypenitis.help","domain":"wrathypenitis.help","tld":"help"},"ip":{"addr":"212.117.186.116","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wrathypenitis.help","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 21:21:47 GMT","end":"Wed, 24 Dec 2025 21:21:46 GMT"},"fingerprint":{"sha1":"AB:7F:25:A4:47:EA:FD:C0:FD:04:9D:5B:DE:04:FB:AC:82:37:67:A1","sha256":"8C:B6:C9:8F:CE:4F:DB:23:24:8F:04:DB:40:06:BA:C3:2B:0E:91:55:37:A9:E1:FF:A6:E7:DF:7F:FE:FD:BB:65"}}},"request":{"raw":"POST /cuid/?f=https%3A%2F%2Fluluvid.com HTTP/1.1\r\nHost: wrathypenitis.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://luluvid.com/\r\nContent-Type: application/json\r\nContent-Length: 10\r\nOrigin: https://luluvid.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\ncontent-type: application/json\r\ncontent-length: 32\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://luluvid.com\r\naccess-control-allow-headers: content-type, megageocheckolololo, x-forwarded-for\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: a97fa794a0f9=67d0e2761e24b97d1e3c78; expires=Sat, 01 Feb 2053 13:39:16 GMT; domain=wrathypenitis.help; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"89c2e9d39ef170baef53ee4091365af3","sha1":"879083f6ec21b3c096976d0cf47a305c666074b4","sha256":"2711f071978b04e9193b7d553fe698735577db850b9f6a59a815e31b157bed50","sha512":"10d8c77078677fcca87862e2191ecec5254447600b920874df24fb7e71df5698d8d5b20e14255044c7d6ed780ca4544dff59e5e49ee68cf73d0dfa4dfeeb04e0","ssdeep":"","tlshash":"9280002833fc00a232e30c282c0ba82b0f0220b0c008ab880020222a0000a3088a88a2","first_seen":"2025-09-27T08:01:09.142509Z","last_seen":"2025-09-27T08:01:09.142509Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":6,"connect":20,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bunkersparring.shop/gd/84626?md=eyJhIjozMDIxLCJzIjoiMTI4MHgxMDI0IiwiYiI6IjEyODB4MTAyNCIsInIiOiIiLCJxIjoiaHR0cHM6Ly9sdWx1dmlkLmNvbS9lL210c3Zndmx4eWsyNSIsImgiOjM2MTgsImwiOiJlbi1VUyIsInQiOjAsInoiOjc1MjIsImsiOjAsInUiOiIiLCJmIjpmYWxzZSwid2giOiJub3QgaW4gaWZyYW1lIiwiaWgiOiIxMjgweDEwMjQiLCJlIjoidXpzdjU0azFidzZobHkyIiwibyI6dHJ1ZSwibSI6MTc1ODk2MDA0MTc0MSwidyI6IiU3QiUyMnRpdGxlJTIyJTNBJTIyT25seUZhbnMtUGVyZmVjdCUyMFJvdW5kJTIwQXNzJTIwQmVsYSUyMFNhbXBhaW8lMjAtJTIwTHVsdXN0cmUlMjIlMkMlMjJrZXl3b3JkcyUyMiUzQSU1QiU1RCUyQyUyMnRvcHdvcmRzJTIyJTNBJTVCJTIydGVzdCUzQTIlMjIlMkMlMjJkaXNhYmxlJTNBMSUyMiUyQyUyMmFkYmxvY2slM0ExJTIyJTJDJTIycGx1Z2luJTNBMSUyMiUyQyUyMmFuZCUzQTElMjIlMkMlMjJjbGljayUzQTElMjIlMkMlMjJhbHdheXMlM0ExJTIyJTJDJTIyYWxsb3clM0ExJTIyJTJDJTIycG9wLXVwcyUzQTElMjIlMkMlMjJ5b3VyJTNBMSUyMiUyQyUyMmJyb3dzZXIlM0ExJTIyJTJDJTIyd2F0Y2glM0ExJTIyJTJDJTIydmlkZW8lM0ExJTIyJTVEJTdEIiwidHMiOjAsInByIjoxLCJoYyI6MzIsImJsIjotMSwiYmMiOjMsInZ2IjoiTWVzYSIsInZyIjoibGx2bXBpcGUiLCJhYyI6MCwiY3QiOiJ1bmtub3duIiwiY2V0IjoidW5rbm93biIsImNkbG0iOi0xLCJjZGwiOi0xLCJjcnR0IjotMSwidG1zIjoxMjAsImNlIjp0cnVlLCJjZCI6MjQsIm9yIjoibGFuZHNjYXBlLXByaW1hcnkiLCJmcyI6bnVsbCwiZnNvIjpudWxsLCJpbSI6dHJ1ZX0\u0026fc=YNDyDwXYtQqUoUY8cnnGmw\u0026pr=KLtIvqNiDuSSch5zkIWibQ","fqdn":"bunkersparring.shop","domain":"bunkersparring.shop","tld":"shop"},"ip":{"addr":"23.109.170.252","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bunkersparring.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 00:53:21 GMT","end":"Tue, 23 Dec 2025 00:53:20 GMT"},"fingerprint":{"sha1":"D4:1F:24:AA:9C:8A:98:1D:7A:D9:5C:BA:16:C8:5C:DB:CF:AD:7C:14","sha256":"5F:E1:2A:F5:32:CD:96:E1:97:E9:3C:53:8A:AF:11:E6:59:FA:A7:BC:EA:E9:82:89:8B:97:0D:C0:96:DD:95:ED"}}},"request":{"raw":"POST /gd/84626?md=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\u0026fc=YNDyDwXYtQqUoUY8cnnGmw\u0026pr=KLtIvqNiDuSSch5zkIWibQ HTTP/1.1\r\nHost: bunkersparring.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://luluvid.com/\r\nContent-Type: application/json\r\nContent-Length: 82\r\nOrigin: https://luluvid.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\ncontent-type: application/json\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://luluvid.com\r\naccess-control-allow-headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWdcFnYQDeASKQHj1xSv4SAr9g3Wh3ZQKensbE32bTH6T8TwvKB7g78kZ4Sdv8MRY13Z1U3VlPXa8GoaubZtyaLqSVc00NbiTW2%2F5sJCNcNpWbmxv9wiXmRQZOfajFpTh0am%2F5qr0oSLEg%2BFKZIhXJ5YM6WD0sZEpQkSKr4T0VRqa9JcT%2FEMbhOy5dlkql%2F0Sgd6KMD8jfZNKuGV%2BQcDKPE883N8Wbidt1l6KxEc8Gy4I%2FgtOI7c0a%2FONVNB2tfoG6EX0%2F%2F73ODxYiUTQLkdCrO07mR%2B4dk3m; expires=Sun, 28-Sep-2025 08:00:41 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyLEKwjAURuHcSwmIWX6oe5%2BgWrRgV%2BsoydAnqDVIoSQhiYpvb10OfEcIwaUCzwHq3NRdW69tuhPoCdYGPDlI7eNn%2FIIi%2BHAER4etSYuvev9yef0Tir9BM5S5mKEywTptM9glbPrxvtj9dbiBghTg7CWD06MUoLfc%2FQD8TBxp; expires=Sun, 28-Sep-2025 08:00:41 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":938,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"97e497f68bf3cee9788965874507fce2","sha1":"447b308dbdf2a651693f6e17219940cc12318dfc","sha256":"5932932904dbe60632d1a5f953959712c60b38e9272010190e8ffc9530c7a0de","sha512":"a1c5a2bc98261430c280ad48bd1e32476bfaea736010c9aa34d14eac2e0b312a0e6dd24b0c7207d11bbeb3cab410b007251faedad2454778343a0b6221cea2b8","ssdeep":"","tlshash":"e711c4d8268a57daaadb0d881c1f00beb62be40bed0158a894c0f154908772ca56c488","first_seen":"2025-09-27T08:01:09.143838Z","last_seen":"2025-09-27T08:01:09.143838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":4,"connect":20,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://luluvid.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 00:01:34 GMT\r\nexpires: Thu, 24 Sep 2026 00:01:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 287947\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-05-14T14:58:46.637467Z","times_seen":333130,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":85,"dns":0,"connect":16,"send":0,"wait":15,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/e/mtsvgvlxyk25","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-27T08:00:41.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /e/mtsvgvlxyk25 HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Fri, 26 Sep 2025 08:00:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MIny%2FP1%2FVitDT23rVACWRm4vY29fCRJm5f3QUHD1wD62gxTr6NkhAnikmPICutwpTgJh7WXfw6X32kKyb3Vu%2BzTXqBclD1K7tQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: lang=1; HttpOnly; Path=/; Domain=luluvid.com\r\ncf-ray: 98597801fd94568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9746,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (322), with CRLF, LF line terminators","md5":"c328d3997758ce4232725960d461cf85","sha1":"80361b393d3ed01e6db3667f58da0c7762bba9b5","sha256":"fb7c9427e33e87465faa5c783b441b83cae6134a50b3aa30a67990a5659b269c","sha512":"8e571a9ab87ecda8c4a42394afa388bf803370b53f1a1650648d4a9dfa7371c82eae2ff0f3326bbae122d845df46def784dd98d560843f93d3a2095d84a1861a","ssdeep":"192:5gCbvXTjIdCIACuJiRnXuFpp1ejzjtqnW7ySi34eyh:GcI1Dht/dFR","tlshash":"2712e847fdd49424e07752f47d76f10c603e4547eb09de98f6a961242f493ce5c9258c","first_seen":"2025-09-27T08:01:09.145491Z","last_seen":"2025-09-27T08:01:09.145491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":11,"dns":0,"connect":1,"send":0,"wait":70,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luluvid.com/js/jquery.min.js","fqdn":"luluvid.com","domain":"luluvid.com","tld":"com"},"ip":{"addr":"172.67.197.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luluvid.com/e/mtsvgvlxyk25","date":"2025-09-27T08:00:41.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luluvid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 10:35:35 GMT","end":"Thu, 25 Dec 2025 11:32:46 GMT"},"fingerprint":{"sha1":"06:35:19:EC:63:F1:3B:8F:FD:00:55:69:5E:26:2A:BB:A6:C5:B4:3B","sha256":"3E:46:01:59:51:E4:E9:2B:68:AD:BE:B6:11:BA:B5:D9:24:94:37:FC:92:D7:78:E7:B6:34:00:66:A6:32:C9:87"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: luluvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luluvid.com/e/mtsvgvlxyk25\r\nCookie: lang=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 08:00:41 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Mar 2021 00:27:20 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TYEk2ojIrtk2TW4mOvYw7kH4F7RTuu1AzuNtTRw7vzT2fP8lXTFugGKJz38meSqa1MtLlrgt5VBmMc02F2S%2B2Bvo1to26we46A%3D%3D\"}]}\r\netag: W/\"15d9d-5bc96e9f7ca00\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nage: 753\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 98597802c87f5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-14T14:57:49.269347Z","times_seen":467894,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}