{"report_id":"c2565d19-956e-4dbd-9836-2fb4b224079f","version":6,"status":"done","tags":[],"date":"2025-06-25T06:20:59Z","url":{"schema":"http","addr":"xcandid.top/beautiful-spanish-teen-ass/","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.16.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xcandid.top/beautiful-spanish-teen-ass/","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"title":"Beautiful Spanish Teen Ass – XCandid"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-03T06:20:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"blockadsnot.com","ip":{"addr":"208.95.112.254","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":32896,"first_seen":"2020-04-28T15:35:52Z","last_seen":"2025-06-23T13:52:15.183957Z","alert_count":0,"request_count":1,"received_data":257,"sent_data":1740,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.blockadsnot.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":75043,"first_seen":"2020-04-18T18:59:38Z","last_seen":"2025-06-23T01:43:28.79546Z","alert_count":0,"request_count":1,"received_data":37723,"sent_data":445,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imasdk.googleapis.com","ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":11661,"first_seen":"2014-02-25T09:02:53Z","last_seen":"2025-06-21T05:24:09.037439Z","alert_count":0,"request_count":10,"received_data":6603490,"sent_data":4955,"comment":"","tags":null,"fingerprints":null},{"fqdn":"qxpqaphee4m2.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-06-25T06:21:07.894176Z","last_seen":"2025-06-25T06:21:07.894176Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"qxpqaphee4m2.s4.adsco.re","ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-06-25T06:21:07.883055Z","last_seen":"2025-06-25T06:21:07.883055Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":8541,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-06-19T21:55:03.0827Z","alert_count":0,"request_count":1,"received_data":1787,"sent_data":442,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":19179,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2025-06-20T08:01:08.046275Z","alert_count":0,"request_count":2,"received_data":858,"sent_data":845,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xcandid.upns.pro","ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-05","domain_rank":0,"first_seen":"2025-06-25T06:21:07.902302Z","last_seen":"2025-06-25T06:21:07.902302Z","alert_count":0,"request_count":122,"received_data":12011876,"sent_data":55433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"scripts.simpleanalyticscdn.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2019-03-31","domain_rank":134219,"first_seen":"2020-01-29T19:11:47Z","last_seen":"2025-06-23T14:45:18.523101Z","alert_count":0,"request_count":1,"received_data":8512,"sent_data":424,"comment":"","tags":null,"fingerprints":null},{"fqdn":"6.adsco.re","ip":{"addr":"104.17.167.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":17812,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2025-06-19T15:51:40.781077Z","alert_count":0,"request_count":2,"received_data":991,"sent_data":845,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-06-18T15:09:39.480218Z","alert_count":0,"request_count":5,"received_data":2006348,"sent_data":2185,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.adsco.re","ip":{"addr":"104.17.167.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":16577,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2025-06-19T11:29:35.010551Z","alert_count":0,"request_count":1,"received_data":79661,"sent_data":508,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xcandid.top","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-04-22","domain_rank":0,"first_seen":"2025-06-25T06:21:07.886386Z","last_seen":"2025-06-25T06:21:07.886386Z","alert_count":0,"request_count":67,"received_data":3081673,"sent_data":42858,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-06-18T15:09:21.066788Z","alert_count":0,"request_count":5,"received_data":176479,"sent_data":2670,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-06-18T15:12:59.055183Z","alert_count":0,"request_count":1,"received_data":38386,"sent_data":525,"comment":"","tags":null,"fingerprints":null},{"fqdn":"qxpqaphee4m2.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-06-25T06:21:07.90025Z","last_seen":"2025-06-25T06:21:07.90025Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":454,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-06-25T06:20:26Z","timestamp":1750832426,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.19","port":59342,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-25T06:20:26.233357+0000\",\"flow_id\":2112284598636429,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":59342,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-06-25T06:20:26.233357+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-25T06:20:26Z","timestamp":1750832426,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.19","port":59342,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-25T06:20:26.253409+0000\",\"flow_id\":762831644057057,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":59342,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-06-25T06:20:26.253409+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-25T06:20:26Z","timestamp":1750832426,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.19","port":59342,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-25T06:20:26.273386+0000\",\"flow_id\":710785230318570,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":59342,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-06-25T06:20:26.273386+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-25T06:20:26Z","timestamp":1750832426,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.19","port":59342,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-25T06:20:26.333584+0000\",\"flow_id\":2112284598636429,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":59342,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-06-25T06:20:26.233357+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-25T06:20:26Z","timestamp":1750832426,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.19","port":59342,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-25T06:20:26.353650+0000\",\"flow_id\":762831644057057,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":59342,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-06-25T06:20:26.253409+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-25T06:20:26Z","timestamp":1750832426,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.19","port":59342,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-25T06:20:26.373662+0000\",\"flow_id\":710785230318570,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":59342,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-06-25T06:20:26.273386+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-25T06:20:26Z","timestamp":1750832426,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.19","port":59342,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-25T06:20:26.533808+0000\",\"flow_id\":2112284598636429,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":59342,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-06-25T06:20:26.233357+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-25T06:20:26Z","timestamp":1750832426,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.19","port":59342,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-25T06:20:26.553862+0000\",\"flow_id\":762831644057057,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":59342,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-06-25T06:20:26.253409+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-25T06:20:26Z","timestamp":1750832426,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.19","port":59342,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-25T06:20:26.573879+0000\",\"flow_id\":710785230318570,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":59342,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-06-25T06:20:26.273386+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_346dfc33d02645d41fb1b3e0eccf1e28.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bab0ef9ffa05827477b2b086c3f35ef5","sha1":"23075f36cb0cde323dded6afe2278694295eaffd","sha256":"23b4f45f54e13e7cb754e5a5553ccd95692b6d436cc52ec19be6a3cc8c8d62f7","sha512":"856efff35cb3c6f0e11d38e2045b8cea8ec18773dfa31a84934bfcc454840383c6c05248ceab0c7b2ae8683afdcef615d61494bcafaa2b62c7e8100f4a026cab","ssdeep":"","tlshash":"3e11120f6420a26687d7777f7ceb75037c3214669848515dc16c98844f74f18a73deb9","size":1044,"data":"","first_seen":"2023-03-07T12:08:46Z","last_seen":"2026-04-14T13:18:38.66002Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","size":99218,"data":"","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/dist/i18n.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-04-22T21:11:01.262029Z","times_seen":241481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dHJ5e2lmKGxvY2FsU3RvcmFnZS5nZXRJdGVtKHNraW5JdGVtSWQpKXt2YXIgX2cxO19nMT1kb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnZzEtbG9nby1pbnZlcnRlZC1pbWcnKTtfZzEuY2xhc3NMaXN0LnJlbW92ZSgnbGF6eWxvYWQnKTtfZzEuc2V0QXR0cmlidXRlKCdzcmMnLF9nMS5nZXRBdHRyaWJ1dGUoJ2RhdGEtc3JjJykpO19nMT1kb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnZzEtbG9nby1pbnZlcnRlZC1zb3VyY2UnKTtfZzEuc2V0QXR0cmlidXRlKCdzcmNzZXQnLF9nMS5nZXRBdHRyaWJ1dGUoJ2RhdGEtc3Jjc2V0JykpO319Y2F0Y2goZSl7fQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1abeaed411b97c82afc6157576e5a894","sha1":"2934ab124f6a4719c3a0aebf3d111dbc1417f3c3","sha256":"37a430e5fc757b7a4a586dee14a8a055fda3e9b119ef35ce9002ead44f49bb98","sha512":"004298abcf67a8d8bdb1ecb41d29c950935d6cb43ee621aef7989c1f7e5e0b7ff91bb87f2589d9f6916cfa67a772fa5379bc02c5c4189c06871649e1e0149d87","ssdeep":"","tlshash":"a8e0cd3f316caf358cd578d7b84836c0d93570b454425f71886dd405e554cda6d7d2c4","size":313,"data":"","first_seen":"2023-03-14T08:58:27Z","last_seen":"2025-12-24T15:51:45.254284Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","size":4058,"data":"","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_5f7fe32adec366147a0f2affeb4be3ba.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab1edd7799b09f144d685a9112c6631b","sha1":"84eee6bd0ddbe1034543bd676c7f5d13f1b3826c","sha256":"fb244f134afea524f720e34dd269ee18264410c04a8f155f788526b08f36c8a1","sha512":"4f2a90cedac069b8b2cbfcbb11d38a2746adc87793d53caeaff4e94cc70a564b039d856e6b9700170cdc3d703d1f27afccfebce78c65990f54477c95112adad3","ssdeep":"","tlshash":"a6614e9575f96db0c097a2b7546f23c6b0a2a19ae004c5dd6c32cec01eb4fc542a6b7d","size":3390,"data":"","first_seen":"2023-03-13T10:25:43Z","last_seen":"2025-06-25T06:21:17.755016Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"384d428c886fb8db470007a1bbfce045","sha1":"a6ea8f08b2936b9ea06f1bfdc56e400d92159374","sha256":"86951c2596101bdecb648fac6e1f0bf14de24ca168f2ba068ab75f2d9a02e949","sha512":"d1b352c8bc1990d999de70d4197358af8c192fe91dbcc69b31a036be2b002b8b2786722e97537b40cab72c4b12b6f8bd4cb3dd107f51e6497fae627c84659b44","ssdeep":"6144:o1kqpy0eCz0k8ZuBmBk46KJUltbRPVzTsf10j:EXkuBmG4LJKtbRPVz4S","tlshash":"b0a4facdb6a674629363f4f5403f014bb23ba86af408886cb249d9e16e7490d5277f7c","size":462831,"data":"","first_seen":"2025-06-25T06:21:17.727471Z","last_seen":"2025-06-25T06:21:17.727471Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_4ebb21da7b90757cbbb3e2d54edae069.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9271deaac551e5d6835f1638064a9004","sha1":"51861d97c6babd42c739df52c0e4e7d0540550f9","sha256":"6d0e8980855bed455f61823f2a98a5201f8a8f5ce167076515ae0f1941383d67","sha512":"3e24127408ea5b09f7a18c2d88ed068b7be84208f76b3eef8432a5ee79765d4e608c4a7ab781162d6f5b7474b96c1bbc2e6fb1f230b9769870dc9a70a080c6c1","ssdeep":"","tlshash":"cb71f14d71e26d7600cab195896f23427291624dc585c6fc6d32c8d50e94fc68b7afbc","size":3522,"data":"","first_seen":"2023-03-13T10:25:42Z","last_seen":"2025-06-25T06:21:17.741333Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","size":18392,"data":"","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","size":12143,"data":"","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,Ci8qIDwhW0NEQVRBWyAqLwp2YXIgY29tbWVudGFjZSA9IHsiYWpheF91cmwiOiJodHRwczpcL1wveGNhbmRpZC50b3BcL3dwLWFkbWluXC9hZG1pbi1hamF4LnBocCIsIm5vbmNlIjoiYzc5NmE2NTlmYiIsImluX2RlYnVnX21vZGUiOiIiLCJ1c2VyX2xvZ2dlZF9pbiI6IiIsImxvZ2luX3VybCI6Imh0dHBzOlwvXC94Y2FuZGlkLnRvcFwvd3AtbG9naW4ucGhwP3NuYXhfbG9naW5fcG9wdXA9b24iLCJudW1iZXJfZm9ybWF0Ijp7ImRlY2ltYWxzIjowLCJkZWNfcG9pbnQiOiIuIiwidGhvdXNhbmRzX3NlcCI6IiwifSwiaTE4biI6eyJyZW1vdmUiOiJSZW1vdmUiLCJsb2dpbl9yZXF1aXJlZCI6IllvdSBtdXN0IGJlIGxvZ2dlZCBpbiB0byBwZXJmb3JtIHRoYXQgYWN0aW9uIiwiY29waWVkX3RvX2NsaXBib2FyZCI6IkNvcGllZCB0byB5b3VyIGNsaXBib2FyZCJ9fTsKLyogXV0+ICovCg==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8e6569080b5ff24520c6f69d07be6ad","sha1":"f19b46bc8962d76575a6aefaf265624f40d15ca4","sha256":"4e7b26ccdffadcdd1ad698c52e7ff71573b1a364a0d825199c1204f5d23dfc5a","sha512":"da49c0910a77378724a926a77a522a1850b08a93d12ffa6d738556f5dc0869f850d7fb963e17c246f305e5a01d999085c91d2a01db9e611ebb0eb6abb7caff65","ssdeep":"","tlshash":"e2f0a37065ce8e4111e30fc020583f6675a811369d8c8d7f596de90c0fe5b9994e912f","size":445,"data":"","first_seen":"2025-06-25T06:21:17.79886Z","last_seen":"2025-06-25T06:21:17.79886Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","size":99218,"data":"","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#9ovelp","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9449cb0b1dd37c65a9ecbe6dcf12275","sha1":"cded313adb1648d198493a494e9db80ff8a38a94","sha256":"634de0a204a799a1919b14ad657fb1c7c767a4a8f975fbbb4b3676d64a9a998b","sha512":"125314f26d03da9644710fc873e7513c43fe0de90ae08f44441dd72f921a53cdca3458ae4d529d64433b561ffe1f764b6c94f4fae5d3a679254bcea3873d3a28","ssdeep":"","tlshash":"dcd08cac225b0cb162d73a594b3fa202705a7113a0801d203d1e6348cf20e37e794948","size":199,"data":"","first_seen":"2025-03-03T02:59:10.570762Z","last_seen":"2026-04-21T17:08:40.099535Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","size":3486,"data":"","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,Ci8qIDwhW0NEQVRBWyAqLwp2YXIgY29tbWVudGFjZV93cCA9IHsiZ3Vlc3RfY2FuX3ZvdGUiOiIiLCJjb2xsYXBzZV9yZXBsaWVzIjoiMSIsImxvYWRfbW9yZV90eXBlIjoiaW5maW5pdGVfc2Nyb2xsX29uX2RlbWFuZCJ9OwovKiBdXT4gKi8K","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f658240c7cbd4755dcc47020b219784","sha1":"4db1640ab62f945cce5d4fb51a58f598c7265cc6","sha256":"58cd05e867aec171e329f7c9f1737cd2e59d6b13d46853271fb6522abe7c6307","sha512":"674830bcbc584abeacf85d05cb551394ede6fbf23d103cdd0cb2c4c3c6808a9db778d3e9b8aa81b7381249219381a58725c62edb648d33273994fcdf64c8ecd1","ssdeep":"","tlshash":"d2c02b15c4c3fc9331f7189077cc2301d1c90140815b447d18e9850c5e83b01c201354","size":138,"data":"","first_seen":"2023-03-10T19:37:13Z","last_seen":"2026-04-20T15:53:15.426626Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","size":804,"data":"","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_d674481513d4b30efad67303812f94f9.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"269ddc68a5047f213aa470b70089379f","sha1":"3c5268adbdc1fd9af71c8de97ffbaa448398e485","sha256":"80f6df81380466af12e411fe992318b338f4d4e661f03d0a4687198f059cd688","sha512":"baa845bb63bbb4b5f6b3cb4f8ea4a24cadebcbfd8222223066becbf2842b3bae3eafac548f1e335e5647412b88516bbe1a07b516ee563a1f6cfb10e83f3e0b58","ssdeep":"","tlshash":"e3117de7f11051a141dfd237a92b679438357986cb825db0820c5edd645522fbe07b19","size":947,"data":"","first_seen":"2023-03-07T12:08:46Z","last_seen":"2026-03-31T09:15:59.255692Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,Ci8qIDwhW0NEQVRBWyAqLwp2YXIgc25heF9jb2xsZWN0aW9uc19qc19jb25maWcgPSB7ImFqYXhfdXJsIjoiaHR0cHM6XC9cL3hjYW5kaWQudG9wXC93cC1hZG1pblwvYWRtaW4tYWpheC5waHAiLCJob21lX3VybCI6Imh0dHBzOlwvXC94Y2FuZGlkLnRvcCIsInVzZXJfaWQiOiIwIiwicG9zdF9pZCI6IjYzNzMiLCJub25jZSI6ImNjMTc3ZDVmYTAiLCJoaXN0b3J5Ijoib2ZmIiwiaTE4biI6eyJhcmVfeW91X3N1cmVfcmVtb3ZlIjoiRW50aXJlIGNvbGxlY3Rpb24gd2l0aCBhbGwgaXRlbXMgd2lsbCBiZSByZW1vdmVkLiBQcm9jZWVkPyIsImFyZV95b3Vfc3VyZV9jbGVhcl9hbGwiOiJBbGwgY29sbGVjdGlvbiBpdGVtcyB3aWxsIGJlIHJlbW92ZWQuIFByb2NlZWQ/IiwicmVtb3ZlZCI6IkNvbGxlY3Rpb24gaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHJlbW92ZWQiLCJyZW1vdmluZ19pdGVtcyI6IlJlbW92aW5nIGNvbGxlY3Rpb24gaXRlbXMuLi4ifX07Ci8qIF1dPiAqLwo=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"84f4ce3d5fa81d4663e26fa05a785daa","sha1":"ea3f28834fb102d906cf74876691cb7ec8069852","sha256":"16f22a828b37889af55f9d89d2cf48be4cb19560795773af86be04a848fcf639","sha512":"e07593a35d1bc3c1d11c6d0a782d76a010f8474074a9ea6fc18534258030f0168b36e443d8ff0c785182dcaee4dfaf2f017af8aa6b493226c17c723f34b11dfe","ssdeep":"","tlshash":"bbf00e2a602b1fb232c73bd468e975d619e02241d6345c0038ffc0204d781f384a615f","size":494,"data":"","first_seen":"2025-06-25T06:21:17.800603Z","last_seen":"2025-06-25T06:21:17.800603Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/jquery/ui/core.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-22T21:11:51.128643Z","times_seen":237541,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","size":4058,"data":"","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","size":7952,"data":"","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","size":99218,"data":"","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","size":12143,"data":"","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"384d428c886fb8db470007a1bbfce045","sha1":"a6ea8f08b2936b9ea06f1bfdc56e400d92159374","sha256":"86951c2596101bdecb648fac6e1f0bf14de24ca168f2ba068ab75f2d9a02e949","sha512":"d1b352c8bc1990d999de70d4197358af8c192fe91dbcc69b31a036be2b002b8b2786722e97537b40cab72c4b12b6f8bd4cb3dd107f51e6497fae627c84659b44","ssdeep":"6144:o1kqpy0eCz0k8ZuBmBk46KJUltbRPVzTsf10j:EXkuBmG4LJKtbRPVz4S","tlshash":"b0a4facdb6a674629363f4f5403f014bb23ba86af408886cb249d9e16e7490d5277f7c","size":462831,"data":"","first_seen":"2025-06-25T06:21:17.727471Z","last_seen":"2025-06-25T06:21:17.727471Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","size":8665,"data":"","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","size":7952,"data":"","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_2bdc713b4abfcc746d20b6a8d083c07d.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db22b685b3f72918c0ec29e3ccfb4410","sha1":"5cb5a28cca0610ef17922b58728ae53e73083171","sha256":"aa73c8256d1cec5fd37db54cf933eacc3ab72028420bca3552efdf90f99beec2","sha512":"146a021eae89bbfe296a970f464158d4a8fa13b74d5773fd8654ecd0123a4a59161907096bae67e84aa29f625be579ea6c55a6f67285c13ba207ec3d0dd7841b","ssdeep":"192:kpdFsdSbP+iDbbXzchaQAlO6tpB1LTnd9vehaQfva/wKuehaQf4S4JehaQfocoo2:WdFsdKPfDvDdCo2","tlshash":"ab32766fb27d711a42079497343f020a3a3448966508d27df9bab6cd2e38b1d6432fde","size":11514,"data":"","first_seen":"2023-03-07T12:27:56Z","last_seen":"2026-03-31T09:15:59.265264Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","size":877936,"data":"","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/jquery/jquery.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-22T21:09:19.679006Z","times_seen":734717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","size":8665,"data":"","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"384d428c886fb8db470007a1bbfce045","sha1":"a6ea8f08b2936b9ea06f1bfdc56e400d92159374","sha256":"86951c2596101bdecb648fac6e1f0bf14de24ca168f2ba068ab75f2d9a02e949","sha512":"d1b352c8bc1990d999de70d4197358af8c192fe91dbcc69b31a036be2b002b8b2786722e97537b40cab72c4b12b6f8bd4cb3dd107f51e6497fae627c84659b44","ssdeep":"6144:o1kqpy0eCz0k8ZuBmBk46KJUltbRPVzTsf10j:EXkuBmG4LJKtbRPVz4S","tlshash":"b0a4facdb6a674629363f4f5403f014bb23ba86af408886cb249d9e16e7490d5277f7c","size":462831,"data":"","first_seen":"2025-06-25T06:21:17.727471Z","last_seen":"2025-06-25T06:21:17.727471Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","size":12143,"data":"","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","size":7952,"data":"","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#c5glqb","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9449cb0b1dd37c65a9ecbe6dcf12275","sha1":"cded313adb1648d198493a494e9db80ff8a38a94","sha256":"634de0a204a799a1919b14ad657fb1c7c767a4a8f975fbbb4b3676d64a9a998b","sha512":"125314f26d03da9644710fc873e7513c43fe0de90ae08f44441dd72f921a53cdca3458ae4d529d64433b561ffe1f764b6c94f4fae5d3a679254bcea3873d3a28","ssdeep":"","tlshash":"dcd08cac225b0cb162d73a594b3fa202705a7113a0801d203d1e6348cf20e37e794948","size":199,"data":"","first_seen":"2025-03-03T02:59:10.570762Z","last_seen":"2026-04-21T17:08:40.099535Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","size":877936,"data":"","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scripts.simpleanalyticscdn.com/latest.js","fqdn":"scripts.simpleanalyticscdn.com","domain":"simpleanalyticscdn.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa6014215f23cb3f6cb4902be02d081a","sha1":"44ba2453c2e980ba84602006b4b912736cfd913c","sha256":"a965bdafdcbdf6a1bc0a04fb81ee6d5fb86e1fde7a2da4e8998ab3bcf467bdb4","sha512":"483e8e0a4575808ab0c1262718d85a0b2b9d8bd76d7808ed19050cff3c13690191fe6afb1c9e93576fb153630b413aeffe9fd56bb169d66f97d7fcea1c311917","ssdeep":"96:afayldLqaMRuO24q4cVWQ4BPdTJJ6/j4YE9KQeL6lRS+LwNYzCZu2vQmaDN:abctc45PPQj4YE9uWA+Y1Zu2vQmaZ","tlshash":"4df10adcb2a1707397d3307281afd20ea33b779b398bc4555d1899d4ac7494a4027f2c","size":7515,"data":"","first_seen":"2023-05-06T11:43:24Z","last_seen":"2026-04-22T03:05:24.823389Z","times_seen":1524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_ca05eae84a6f34375c92362263247814.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f88db773474b1c35412655b0b8175e29","sha1":"dfc71b6d28eeff6bd2f03503d29aadb1654587bb","sha256":"8ff0af78d5f644f9f69e76e7c6358b65315204e01771cd46bd3be6d140023919","sha512":"d008b418be22e6c5ddf5307a0901f41a0aa519aaa8d27184185cad436614a4204c379db16ab429e7363b6af4549dc3ca4bf9ced3ee3c000104e5c8105bb109a9","ssdeep":"","tlshash":"89310e8e76e4bd7281c27621ec2f2307a190675de109c1ec687184e02ca0fc28b7a77c","size":1864,"data":"","first_seen":"2023-03-13T10:25:42Z","last_seen":"2025-06-25T06:21:17.762557Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"384d428c886fb8db470007a1bbfce045","sha1":"a6ea8f08b2936b9ea06f1bfdc56e400d92159374","sha256":"86951c2596101bdecb648fac6e1f0bf14de24ca168f2ba068ab75f2d9a02e949","sha512":"d1b352c8bc1990d999de70d4197358af8c192fe91dbcc69b31a036be2b002b8b2786722e97537b40cab72c4b12b6f8bd4cb3dd107f51e6497fae627c84659b44","ssdeep":"6144:o1kqpy0eCz0k8ZuBmBk46KJUltbRPVzTsf10j:EXkuBmG4LJKtbRPVz4S","tlshash":"b0a4facdb6a674629363f4f5403f014bb23ba86af408886cb249d9e16e7490d5277f7c","size":462831,"data":"","first_seen":"2025-06-25T06:21:17.727471Z","last_seen":"2025-06-25T06:21:17.727471Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/comment-reply.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","size":3026,"data":"","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-22T21:18:30.553734Z","times_seen":62483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#epckpc","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9449cb0b1dd37c65a9ecbe6dcf12275","sha1":"cded313adb1648d198493a494e9db80ff8a38a94","sha256":"634de0a204a799a1919b14ad657fb1c7c767a4a8f975fbbb4b3676d64a9a998b","sha512":"125314f26d03da9644710fc873e7513c43fe0de90ae08f44441dd72f921a53cdca3458ae4d529d64433b561ffe1f764b6c94f4fae5d3a679254bcea3873d3a28","ssdeep":"","tlshash":"dcd08cac225b0cb162d73a594b3fa202705a7113a0801d203d1e6348cf20e37e794948","size":199,"data":"","first_seen":"2025-03-03T02:59:10.570762Z","last_seen":"2026-04-21T17:08:40.099535Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1346292013","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71731dbc21a722884c118c5e1d556b7f","sha1":"72a423e29c62961aeb7d5f4bb1738c2180f845cc","sha256":"5ad5ef47ab9e5a70fcbf708e96c75f305af2aed98fdcf0c7f921922ac68d682e","sha512":"4a1fb2a616482e1464e3410f975199d5db6641862f57a2300c68cd6bd249095f1be86032a75e703027ebbecab5c61454fda4dad4154b1c55a98463c10b4e38be","ssdeep":"6144:gfdSK6OsJ/pBHfdD9LdE8ObYHiZZavyUhvTkrNK8/C90ktibNZQiAriowmfoYUOy:wcB/i8bC2y3wD5wmfA","tlshash":"42051bddb66274618263f4f5503f004bb23ba86af448896cb689cce17d7884a4677f7c","size":807335,"data":"","first_seen":"2025-06-19T22:19:33.04637Z","last_seen":"2025-07-10T17:53:52.695437Z","times_seen":507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_25cd6978afc6af28ec12782ffc8335ba.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"811bfec380b526450d840e079beaaa8b","sha1":"ee19f8a1c09ec6a4b29534a034b1c9fb7f8ae62b","sha256":"71cfc99e926ecd5664aa8de32c8eaa3a1e8cc508edad00dd30eb2102b0655de1","sha512":"50826cf45e8beb00574495fc620f25693ace63af1a395bbb012cfa588a03587097151c44b50fae7427a371a6e38243cffea56bc7e78aa4586fdc586675ccb9c0","ssdeep":"192:+ma9h9NZGF7E90+8OtaQbg4zuCXysZkaw5FwWDuo/LYTTBe:+ma99EI9DQQFznXXZk15FjDuo/Evg","tlshash":"81f1220631c3593549cb20b3284f16d5a3c1ae4dd5c884bdbdb5898d7ba0f69827a3bf","size":7804,"data":"","first_seen":"2025-06-25T06:21:17.794701Z","last_seen":"2025-06-25T06:21:17.794701Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","size":3486,"data":"","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4b55af0de20f8e44106fc39b5ecb640","sha1":"4f25d0a6fb509bb4438754c52faffd5336199b00","sha256":"c201b4ef67009a1b6f11e23fbac99b5c202d65edea8d9fe4348fd6f751cf3550","sha512":"49559683afb088334d6bdbbd1026af52eec3503f8b76d37b742c6879352429e36693cc78675bb4d3cfce4bca8b67d93ec14faa4e917cbbb7636cc5cfbcd0ad95","ssdeep":"","tlshash":"4731c27b726d4026668bdb8cf2aba63e76c3bd4cbe634f51729e3214d68c844da50d00","size":1526,"data":"","first_seen":"2023-03-07T13:00:40Z","last_seen":"2026-04-20T15:53:15.41409Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","size":877936,"data":"","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GSLLMQHH8G","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba773e7fc01b5c7b031b50857a23e814","sha1":"2f8710a111efa8fa6058e924cbd0aa60c9fbc58e","sha256":"ff3302304ef0d586b0a682c14beea918ea3c61c89c1d4e6f45950012a411f17f","sha512":"c2d90d49f2c38591e4d2d819e72c0ced366055ecfae5b73b0f30a1fece7dcc484855e84a29682afd4c13016bf542b9ba184241e34b4cd1dbd8a3dc5a4b156c00","ssdeep":"3072:jLaDvQJ17GCNOxikGJyCOzDl0igNc/x1+yXNFNmfoJw26GeP1P7SQ10bba7UXenQ:0QGmOxikGYx2f2EGe5SQ10Xa7UOnSHzZ","tlshash":"ae8419ce73d674225396f478503f018ba57b28a2b49cc899f189cce42e74a9a4177f7c","size":402312,"data":"","first_seen":"2025-06-25T06:21:17.794031Z","last_seen":"2025-06-25T06:21:17.794031Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,Ci8qIDwhW0NEQVRBWyAqLwp2YXIgY29tbWVudGFjZV9naWZfcGlja2VyID0geyJzZWFyY2hfdXJsIjoiaHR0cHM6XC9cL2FwaS5naXBoeS5jb21cL3YxXC9naWZzXC9zZWFyY2g/YXBpX2tleT1nbUpUY3ZnWmlFRHpScjhIcTVvdzZicE5DQlRDUTRhWiZsaW1pdD0xMCIsInRyZW5kaW5nX3VybCI6Imh0dHBzOlwvXC9hcGkuZ2lwaHkuY29tXC92MVwvZ2lmc1wvdHJlbmRpbmc/YXBpX2tleT1nbUpUY3ZnWmlFRHpScjhIcTVvdzZicE5DQlRDUTRhWiZsaW1pdD0xMCJ9OwovKiBdXT4gKi8K","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"deec1d015e895fa1e2ea97099bd9801e","sha1":"2aea2aff7083b923f847935e091969619a9f2cbd","sha256":"4863cda8ca9f1d924ed15de42041e8b0e10d650c21b699337bf0b8ff3ccd31dc","sha512":"d735661878474772f047afd8a0eb215ed34c11ef4cdbf26aa899f9309448f27b4ef8d971c7521c42c01f244938c375a179191b890e1613e46ab584ad67b43792","ssdeep":"","tlshash":"82d0a71552d5d2a9caf1b2d42c2cb320797b219e5e105e6f35cfd1aa090fd30d4aa06e","size":276,"data":"","first_seen":"2025-06-25T06:21:17.802819Z","last_seen":"2025-11-02T17:42:24.487566Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#5whfmi","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9449cb0b1dd37c65a9ecbe6dcf12275","sha1":"cded313adb1648d198493a494e9db80ff8a38a94","sha256":"634de0a204a799a1919b14ad657fb1c7c767a4a8f975fbbb4b3676d64a9a998b","sha512":"125314f26d03da9644710fc873e7513c43fe0de90ae08f44441dd72f921a53cdca3458ae4d529d64433b561ffe1f764b6c94f4fae5d3a679254bcea3873d3a28","ssdeep":"","tlshash":"dcd08cac225b0cb162d73a594b3fa202705a7113a0801d203d1e6348cf20e37e794948","size":199,"data":"","first_seen":"2025-03-03T02:59:10.570762Z","last_seen":"2026-04-21T17:08:40.099535Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","size":3486,"data":"","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dHJ5e2lmKGxvY2FsU3RvcmFnZS5nZXRJdGVtKHNraW5JdGVtSWQpKXt2YXIgX2cxO19nMT1kb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnZzEtbG9nby1tb2JpbGUtaW52ZXJ0ZWQtaW1nJyk7X2cxLmNsYXNzTGlzdC5yZW1vdmUoJ2xhenlsb2FkJyk7X2cxLnNldEF0dHJpYnV0ZSgnc3JjJyxfZzEuZ2V0QXR0cmlidXRlKCdkYXRhLXNyYycpKTtfZzE9ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ2cxLWxvZ28tbW9iaWxlLWludmVydGVkLXNvdXJjZScpO19nMS5zZXRBdHRyaWJ1dGUoJ3NyY3NldCcsX2cxLmdldEF0dHJpYnV0ZSgnZGF0YS1zcmNzZXQnKSk7fX1jYXRjaChlKXt9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1139ea31b8e53817a9622cbd3712be54","sha1":"0233ce4a1841de6b55d437d29bc3f213e59a913d","sha256":"415625bfb65192e4450237d21ee92eeb276b53f4c98d9de63f2211eca21ec463","sha512":"b46882ea07f214d899d8588781b53d94beecebc14a4dc98a1fbbf2da6d8f3bab88b7e4f21b9d02f2c5d76f9475a5c083b7ae46dd34be93403fc643b3f2a0e136","ssdeep":"","tlshash":"dde0263f262caf328cd12cd3b80426c0893030b414458f71882dc404e154cca2d392c8","size":327,"data":"","first_seen":"2023-03-14T08:58:27Z","last_seen":"2025-12-24T15:51:45.255586Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/plugins/snax/assets/js/collections.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a00fd6dd5efd53a26e2371f5bb53d6f2","sha1":"602b11ca1782aad596d9932809d021e397bdef59","sha256":"5f0989a9002df46b705fb45e14d611df0d8ecc6f6ad2f6587bfe88c1adb0ed60","sha512":"c58632da8c048b85e5874f90630166ead20d82c7a0c905e475134bb53ae4f303430f0f6a9c264155c63e391855e92f56e77eace6fb6916cf6da84d0b69a1fa18","ssdeep":"192:dsAwfcmlfYzoJt1aCBPFImljFd8qftRlCf6fXfCBf9bf9fbRx9lDw9AvR2bnazaQ:dsAUlCu15FIyjFdhtRlaSPUJBFpDw9Ep","tlshash":"60121f4d350077b601eb713654ef459b2873a9b2f1854d4025bba6aacf7ca8d6033b2f","size":9602,"data":"","first_seen":"2023-03-07T13:00:40Z","last_seen":"2026-04-20T15:53:15.326393Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","size":49074,"data":"","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/themes/bimber%20final/js/jquery.waypoints/jquery.waypoints.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43b1aa1ea2d73e79e9d45980c7920446","sha1":"1bef149aedeafff7a797e799cfba168bed0d6dc6","sha256":"9c7bd3dadf6edc19d3b8876a8e2b0b0ae6b54f403d7e987ec82b041128cfdd35","sha512":"a32d0d5ca42ddadaf3c4ca3a2570d8bc372a3494503e72f9e80043a0f742fafb083899d4f8e2ee73740fdd32409ec34a5d45d5a62b79c5160a4e28a3de8bfd42","ssdeep":"192:5BwzxsMCm1dJDl6hj8P6PEGnvfiZaLkYluY4pLyUJWZPeGz+nrFr:5BQoIJDlC8CPZnvrLkYluYTUuPeGzs","tlshash":"52026189750534221bdf90fad91f474ab3375828a80680bdb4c8d4ed28f252d676bf7a","size":8833,"data":"","first_seen":"2023-03-07T01:10:49Z","last_seen":"2026-04-22T20:34:53.983268Z","times_seen":6460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/beautiful-spanish-teen-ass/","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca007d97e505cc95eced49ea7c16de83","sha1":"19c06585f109aac034c1da16d23db36d8c1bc569","sha256":"5cdb6d01ad4baa5300f7863da00de1d3137a1140afe80661aadb3021729a4b67","sha512":"77427f44e7e5a062ce84ef22cce373a5ef84bee14d584b8af2761685a6bd31b64c84df50fe68a58577779730ea9efdde3fa28d5b66ff8ae67d748c921265ecb9","ssdeep":"","tlshash":"2611652d6c25652522d17cb4503df908746540916a9cb289bc9fd2c003b668f1867bac","size":994,"data":"","first_seen":"2025-06-25T06:21:17.804844Z","last_seen":"2025-06-25T06:21:17.804844Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.012631894558320811","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.167.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77c8287be10ff4b66a8490ca4d999917","sha1":"7fccb364c5e22958503bcd8b92cdb648d5c4c96e","sha256":"c2d43195d015b5856873b3b0c6e717ee21599ca3f03f820b7c325f27b9b6a31d","sha512":"2007ec2f0297a0479f4507af110911f7022310f757533ba1bbd40228d9b26908758bc09afa59f09471cdc254e49b84baa61f80514a010195d288f8049dface07","ssdeep":"","tlshash":"e3f050ddb475e1e955d22580bd2fbf407876526e240361e0d20cbcc1041868e871dbca","size":486,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-01-09T03:52:32.475699Z","times_seen":6630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#c5glqb","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a182b32c8c5660ef5b48da6efb0c40","sha1":"7b342b959771d7dd4a758070e220164c58c69f18","sha256":"9eead2c2f6d9c62ca4ff5adce93b3797b80ec585deb183650ad2e11132b6ad30","sha512":"4326eba36d049f1d981ffa97ece7293e34f06f545cab8e8baef7dedca2a6320e1b8429e8cd2300137c330f2debcc1e48291e7b2c72727f73eb6f9f97ee0d6173","ssdeep":"","tlshash":"0151018c5e842b11e306e6e3343384b5c62b8c2a765f503de13c783ea994f45e9ed935","size":3153,"data":"","first_seen":"2025-06-25T06:21:17.806109Z","last_seen":"2025-06-25T06:21:17.806109Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","size":804,"data":"","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blockadsnot.com/ksharer.min.css","fqdn":"www.blockadsnot.com","domain":"blockadsnot.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6aa9ae1ecb5fcddc0846c2af291ee14","sha1":"2aa80baa205f72e676c31d4eedd529bdf2b397e3","sha256":"6b40d6944c4982c0964438a7dcf75a947bfd53e5f7669dbefc345f3c3658ebd0","sha512":"1e91b98dec7bf55aa132ff7e5a1a9e25f4203eb32268cf294e192bd0c05056491c8ccabb093111d845ad32d284507adc3934f146ddb42bf971bcc8c7ef3e4268","ssdeep":"","tlshash":"e0110223c01038058163f15bbea2ed2c12f1f213e173590eba45bbaacba64d480c678d","size":1000,"data":"","first_seen":"2025-03-04T07:57:49.928237Z","last_seen":"2025-07-07T07:56:16.156Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#epckpc","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbe8835fbb7b45949a49885f3d25ff77","sha1":"b89919667b5b058fe42ca715fb38f4c138b17866","sha256":"71de8bdc46088c5df8c194cdb490fdcc5be32f7bd1b6e6ec5ddaf0a1bb43efa2","sha512":"915affbce95d40b246a4f91a5b1698388761d8e1ea393f7b8491513ca8e6e423de77f77ab45aac77a5cd2f44ea0353e578d463c7aff7d917ec10f887f57b9685","ssdeep":"","tlshash":"06e05e5824f85061c23320685eaf771a342241272a7e6d347f4ec2517f2863fc533be4","size":333,"data":"","first_seen":"2025-03-03T02:59:10.583508Z","last_seen":"2026-04-21T17:08:40.100717Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#epckpc","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a182b32c8c5660ef5b48da6efb0c40","sha1":"7b342b959771d7dd4a758070e220164c58c69f18","sha256":"9eead2c2f6d9c62ca4ff5adce93b3797b80ec585deb183650ad2e11132b6ad30","sha512":"4326eba36d049f1d981ffa97ece7293e34f06f545cab8e8baef7dedca2a6320e1b8429e8cd2300137c330f2debcc1e48291e7b2c72727f73eb6f9f97ee0d6173","ssdeep":"","tlshash":"0151018c5e842b11e306e6e3343384b5c62b8c2a765f503de13c783ea994f45e9ed935","size":3153,"data":"","first_seen":"2025-06-25T06:21:17.806109Z","last_seen":"2025-06-25T06:21:17.806109Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1346292013","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"56b0d0e8272fed6b9a44d08c14e5b1be","sha1":"0b2e66a7ca8c0319310adca7ba8d02b643526f9e","sha256":"b045c748093c314660ce2985a8dd0d6c3feb6af1026dc2b02229b2538c0da6ff","sha512":"a35fc7c77ba761303aff78d51b8fe387bbf1c8892861ad6655984ea7f43598e5d9b769c2607013d9ebdc08417e578e1a7e81043f346083de7accb7a90425f259","ssdeep":"","tlshash":"0ee0269dfa8a09384c1238a16f6f329483aa916fe228e264f81de7445f1044dd06b3e6","size":358,"data":"","first_seen":"2025-02-20T21:14:35.914719Z","last_seen":"2026-04-22T21:33:28.178895Z","times_seen":12421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1481953003","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71731dbc21a722884c118c5e1d556b7f","sha1":"72a423e29c62961aeb7d5f4bb1738c2180f845cc","sha256":"5ad5ef47ab9e5a70fcbf708e96c75f305af2aed98fdcf0c7f921922ac68d682e","sha512":"4a1fb2a616482e1464e3410f975199d5db6641862f57a2300c68cd6bd249095f1be86032a75e703027ebbecab5c61454fda4dad4154b1c55a98463c10b4e38be","ssdeep":"6144:gfdSK6OsJ/pBHfdD9LdE8ObYHiZZavyUhvTkrNK8/C90ktibNZQiAriowmfoYUOy:wcB/i8bC2y3wD5wmfA","tlshash":"42051bddb66274618263f4f5503f004bb23ba86af448896cb689cce17d7884a4677f7c","size":807335,"data":"","first_seen":"2025-06-19T22:19:33.04637Z","last_seen":"2025-07-10T17:53:52.695437Z","times_seen":507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a959b40a8c2dfcd063dd9038763ec3b7","sha1":"d88a5a4d3839d1c6a9725c28372a370ba2347246","sha256":"864162d100f980738f5fc4fdc6e01727db0d4a144675332d854f75873c4995d9","sha512":"8cdffd42689b328312f11577051106edd00ba8299270c5f4f9730dc8e2307b959b8235671f3784f9b9efccef44efbe1cd94752281e178a47e079f3d4112ec338","ssdeep":"","tlshash":"e9214506292c8ab15d51a3c12059074f76ec160cb44bcda8d7e9db3c0e65ee6c87d72f","size":1361,"data":"","first_seen":"2025-06-25T06:21:17.808472Z","last_seen":"2025-09-20T23:58:01.144906Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","size":49074,"data":"","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/dist/dom-ready.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","size":457,"data":"","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-04-22T21:15:53.169286Z","times_seen":87568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-22T20:09:37.498116Z","times_seen":9520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#9ovelp","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbe8835fbb7b45949a49885f3d25ff77","sha1":"b89919667b5b058fe42ca715fb38f4c138b17866","sha256":"71de8bdc46088c5df8c194cdb490fdcc5be32f7bd1b6e6ec5ddaf0a1bb43efa2","sha512":"915affbce95d40b246a4f91a5b1698388761d8e1ea393f7b8491513ca8e6e423de77f77ab45aac77a5cd2f44ea0353e578d463c7aff7d917ec10f887f57b9685","ssdeep":"","tlshash":"06e05e5824f85061c23320685eaf771a342241272a7e6d347f4ec2517f2863fc533be4","size":333,"data":"","first_seen":"2025-03-03T02:59:10.583508Z","last_seen":"2026-04-21T17:08:40.100717Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-22T21:09:19.70825Z","times_seen":682470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","size":18392,"data":"","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,Ci8qIDwhW0NEQVRBWyAqLwp3cC5pMThuLnNldExvY2FsZURhdGEoIHsgJ3RleHQgZGlyZWN0aW9uXHUwMDA0bHRyJzogWyAnbHRyJyBdIH0gKTsKLyogXV0+ICovCg==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"02d7d8402b7ddb8e6fe47f2a35071e8d","sha1":"174b5a8fe0ecdfa989fbf40f3ecd51f1d0117693","sha256":"8a96c1a0a8b1c2a8eab8adfa21634b7f2c4226f6bc5322df1ab7efc4f1f1af7f","sha512":"aafd7e64bba6934b73597de06bf30303d6bce9ea9e981102d881c52e8543d6ce7b5310694c6b230635e66557019cdf79b99bfed422f3397d892f5ff754500e8e","ssdeep":"","tlshash":"c5b01285308728818099e260ab62fc01499215cf064ecd4429d8df64afa2480f4c231f","size":94,"data":"","first_seen":"2023-11-08T00:42:21Z","last_seen":"2026-04-22T21:13:14.760984Z","times_seen":134611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","size":8665,"data":"","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","size":18392,"data":"","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1366190956","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71731dbc21a722884c118c5e1d556b7f","sha1":"72a423e29c62961aeb7d5f4bb1738c2180f845cc","sha256":"5ad5ef47ab9e5a70fcbf708e96c75f305af2aed98fdcf0c7f921922ac68d682e","sha512":"4a1fb2a616482e1464e3410f975199d5db6641862f57a2300c68cd6bd249095f1be86032a75e703027ebbecab5c61454fda4dad4154b1c55a98463c10b4e38be","ssdeep":"6144:gfdSK6OsJ/pBHfdD9LdE8ObYHiZZavyUhvTkrNK8/C90ktibNZQiAriowmfoYUOy:wcB/i8bC2y3wD5wmfA","tlshash":"42051bddb66274618263f4f5503f004bb23ba86af448896cb689cce17d7884a4677f7c","size":807335,"data":"","first_seen":"2025-06-19T22:19:33.04637Z","last_seen":"2025-07-10T17:53:52.695437Z","times_seen":507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_eff6f9d1acafbf45be35a0bed2201617.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e22bb7482671534e90db697d92d62343","sha1":"2887f9ce1b736d4342bfe7b6a573a71aa8ba5452","sha256":"5dd8a3f6790206af202e95686cd3238a4f0ac8bb76b5413751bb9482911c3a45","sha512":"95be991defbe60e9ec188276a50018ebe98ed7af8d1c9b4a9a37d74ab2dfdb084b566c087a2238b8b8579ddc65e1bd14a3cee604e33a9daa8bde01766bddc5ab","ssdeep":"","tlshash":"a051ef8d79e464ba815af2718d0f639b6162a34ef504c1dc30658ce14aa1fc6c7727af","size":2619,"data":"","first_seen":"2023-03-09T03:38:32Z","last_seen":"2025-06-25T06:21:17.77701Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_4629222b871dc338c67e02d7089f0f5a.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32ec4451a152834ca784ffcaf1304573","sha1":"ac1e0f81366019b559819d6b2f21bb3ce811d83d","sha256":"0b9da241e89f01f672a822b965aa40bc15e987a2913043690e529a511fd443af","sha512":"21521a8e60c7c7aaae52e4eb6b1fc99363ac91ff1e5fc163d9b83a9781842c6f6e49fca9fc686b5b6e842f9c1006b14903f1187bbab354c2bf2906fa29926e5e","ssdeep":"192:V3yEJA5yanHmHNHAHzHGmH9HHhHbRIwfkWYKKhDh2NO6+hKJnjw3:Ve5yanHmHNHAHzHGmH9HHhHbRIwfrYKc","tlshash":"3ff1312d31a8117b83a7b30cf6df9ab819bb3f11d583cf79b0ad504056e0e8165bb948","size":7675,"data":"","first_seen":"2024-06-15T05:53:51Z","last_seen":"2026-04-14T13:18:38.651165Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","size":3486,"data":"","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#5whfmi","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a182b32c8c5660ef5b48da6efb0c40","sha1":"7b342b959771d7dd4a758070e220164c58c69f18","sha256":"9eead2c2f6d9c62ca4ff5adce93b3797b80ec585deb183650ad2e11132b6ad30","sha512":"4326eba36d049f1d981ffa97ece7293e34f06f545cab8e8baef7dedca2a6320e1b8429e8cd2300137c330f2debcc1e48291e7b2c72727f73eb6f9f97ee0d6173","ssdeep":"","tlshash":"0151018c5e842b11e306e6e3343384b5c62b8c2a765f503de13c783ea994f45e9ed935","size":3153,"data":"","first_seen":"2025-06-25T06:21:17.806109Z","last_seen":"2025-06-25T06:21:17.806109Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-BTigPj2h-C_M5YE9g.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a843e1710f9dd9c18edb16035705d97","sha1":"24d9185dc9d8525fe2cb0012f52cb339f1228989","sha256":"fb3f08b8bf6f02341e6636e0e20f9f35a855e71d9da60ea0fea9f93ddf14c361","sha512":"80536faa42b43d4ebdfd78fbfd4d2e8cdb60119bd518e768970a599141272878ecdf7e566f2880f1518020502abf9e2590e84c549a4fb2b63f1b3b9f1c6a218c","ssdeep":"","tlshash":"3821cecc644d6270305b087ee9aad181ecf17b91ee351251107bb5bf59a04bb53c621e","size":1113,"data":"","first_seen":"2025-06-25T06:21:17.728364Z","last_seen":"2025-06-25T06:21:17.728364Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_6f47448212550bd3157c4265e3ebf085.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7be64f9d18755005e150a7a985ca7993","sha1":"ddb7f139862b0981bf42c7fd54d15ec8cfc6784a","sha256":"e27411d185047fde909f9eea714df690a5e57d3c4ad8248e12eba556bd0b0f1a","sha512":"ac468fa6d45b4a843e6332e9d2d29659b045edc6d6e996fee37c45ce8e2158bef41f67f1402a7151506b1c97b37d7ecf614f61113257c67ba6d57529126b02f8","ssdeep":"","tlshash":"da21e1795f1a503975e2c7a73e2b13cb5957a773a4041040c715d2e06ef2d0f62440b3","size":1184,"data":"","first_seen":"2023-11-04T22:41:28Z","last_seen":"2026-04-14T13:18:38.627566Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/jquery/ui/menu.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"284953f0e0a570aa06d6b527c45a55bb","sha1":"c4b8089261f001829f0d6e522928f6d912db7d1f","sha256":"41788f27f61aab4174275eb5fbbbcaffde0f4f0f07e6900592affad38e09b154","sha512":"81d15d80bbf4f8703e644157d74f8f44eea10e13553947437f14e9e448084d3b9a704cf87dbe0cc99d228a39820ce122a226973fa543da3c84ff70a8f504c51a","ssdeep":"192:sr91gNsoBeuLLE2mBrnYgfGGFTsPdQlJh1NmgKzH:srkjMunE7x/3sPd469","tlshash":"5422758831863a72349ba3d8291f60da6236649c9909555c70385fddee3df9023f37be","size":10199,"data":"","first_seen":"2024-07-17T06:42:32Z","last_seen":"2026-04-22T20:39:44.316493Z","times_seen":14215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#9ovelp","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a182b32c8c5660ef5b48da6efb0c40","sha1":"7b342b959771d7dd4a758070e220164c58c69f18","sha256":"9eead2c2f6d9c62ca4ff5adce93b3797b80ec585deb183650ad2e11132b6ad30","sha512":"4326eba36d049f1d981ffa97ece7293e34f06f545cab8e8baef7dedca2a6320e1b8429e8cd2300137c330f2debcc1e48291e7b2c72727f73eb6f9f97ee0d6173","ssdeep":"","tlshash":"0151018c5e842b11e306e6e3343384b5c62b8c2a765f503de13c783ea994f45e9ed935","size":3153,"data":"","first_seen":"2025-06-25T06:21:17.806109Z","last_seen":"2025-06-25T06:21:17.806109Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","size":877936,"data":"","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_5a66384935b4e94f8150690ab1933d56.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ac35135c1b8f1b1e299104839e8aebd","sha1":"704abfdaef679fbbbbc7b59f7690934d27b3f57b","sha256":"6b18e42e6ed3e49879b21ad8ff051751f65a772b6d78c5e5ea7969e569657884","sha512":"eaedb52a568abe49a9c17048f913934c33e58926b3f626c7ba80cd9e0961f37de55b226183e9845a82ae58316d8c4194f3f2264b9a2c7ef9cd65921beaf7fdf0","ssdeep":"96:SU6maf+YOM5dZF9XTUH1mIQxxQFQJ1YodDKGAQzQrQvIxufobp4kKuvIbsuBH:+map5dZbXTGmXXQuJ1YkfsUxKp4WKsut","tlshash":"1ae1f04df1e1b5360099a179844f324761a2790fa585c8fe3a31ccc45eacfc59762bbe","size":7316,"data":"","first_seen":"2023-03-13T10:25:42Z","last_seen":"2025-06-25T06:21:17.770585Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/themes/bimber%20final/js/modernizr/modernizr-custom.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be867eb3c95205f143aecc1fff7d4df6","sha1":"31c16e5fdb15452c67a8044798f6380be681888d","sha256":"2e66ce2eadd79bca0080194f87dbf2f1d01bbf996241615de43d94dfc7eb1d0d","sha512":"5b88db46f2f8ae0ba5339aa2a5d2dd25c3ae9bbbab5763e5de90d2cde9c3ab7e9867040bd787a327349f8fdf6223449cde292f558ce40168c88e3afa627b6759","ssdeep":"192:R4T/2BQ5b4NW1RM2HbUF4Sjy9kAuBnkSOVBB:GT/2BQ5bKh2HbUFTFAuBnkSOVn","tlshash":"0ce1c5c971a3b17a839b2167507f520ef8780e189e198414f069e8bdfd74de4537be28","size":7024,"data":"","first_seen":"2023-03-07T12:03:52Z","last_seen":"2026-04-20T15:53:15.329967Z","times_seen":633,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/plugins/media-ace/includes/lazy-load/assets/js/lazysizes/lazysizes.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"53b55154b4fa6fd1756393bb418173b2","sha1":"d441c7986de20fc171c4cf489974246ec3234bc9","sha256":"ff7f41fb46f8e9ecafe2c34d443535baec1dcf56cea4701d82e3e387fee68353","sha512":"de778af44eb1212fce14f19ee930a9706cf4955ba9683f061e1c78fb4026dd8525f53b192608e008183469605421411866b35be1764495b3dd5d8e7178e0328b","ssdeep":"192:sydOA8+vVJ2JmVvhaWu4sWAMfb3k4HKmVdVLRcoaqzaQOy:sy02dJ2JAhvunnMfb3bHKcdVjaqzaQOy","tlshash":"80e194ff76a67077a99378b4512f210f91327173be168825953ac4c22b3ce991137e2e","size":7380,"data":"","first_seen":"2023-03-07T12:11:03Z","last_seen":"2026-04-20T15:53:15.288284Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","size":49074,"data":"","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_09ce1b88cf9cdc1bc8377780ef0fe0a5.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eda4e638fdd1b8de8f97ec781e8242d6","sha1":"a8c0716a4bccf2805899403af14e7b9216b19573","sha256":"5423f185195f046d0f3893f674e072be43e47c6124dd6ccbe214e896b1944d43","sha512":"6b0bbb532ca0f901059517960261c0c6e1577b31f4e207c3909aba5fa0d64e03c18e5eee10f8a6773a4870cdfc3f0d642f761c8d8e7b6643d023161c23554bf2","ssdeep":"","tlshash":"30e020854d0f1f0495705baa83e90e806214c732d0f15779c78efd11769aa5820657b6","size":361,"data":"","first_seen":"2023-03-07T12:08:46Z","last_seen":"2026-04-22T16:12:40.940832Z","times_seen":712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_ae71dea852d2c5631026861731041d24.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b83721566b341f1411ba910a52baae5","sha1":"836a39f8b9e96a3192407cb0c8cc14ef32cc5b67","sha256":"552ac5765352b1d2863081df4fb1ae046f6564a29d9a57a8bbcb1ac97196b956","sha512":"d280aa39d10432456de88a3341388bb32f034296245f57b75f0c4e40b7daa02d5ae53def1a48fa530f8a0ea7c563c1fd5d7f507c22ae147e97654d5825f4898e","ssdeep":"","tlshash":"335153087bb2713281fde16d501f35063393b48bd485c4d8bb72c4e99ee895e8ba2d79","size":3134,"data":"","first_seen":"2023-03-13T10:25:42Z","last_seen":"2025-06-25T06:21:17.796057Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_a0382578e433b72b11be29cb5e4821dd.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"886ec339621598a4dcf25b598dd0e069","sha1":"31a1fb373cea8d38c86ff033d2a3b255d4a83eef","sha256":"70c5861c6590a19f45e90a3a626769cbb483457ee5cdc393b8c16e228ff76f63","sha512":"83d5b1699cb672479a8475b440cdce17885301fa920a273034002fdf0e6ef8675a548a9b271c6d334969ac29a0cfa9d6cb05e4a2618fb88625825f4bdc6a4b09","ssdeep":"192:cBxWwfSHfleA5rL8/ap9IgOtQoWRR58IXVVYO7PX/Nb0RveQbPPdb+gL7vp1g/6b:cBsOSHN/NLAXtQoyTQhLzpyAbN","tlshash":"2962a64d33aa21fdc6c7a5b9082f020cb13ae6261a0ac5d4c610f7d52e7c54ad8f3b9d","size":14950,"data":"","first_seen":"2023-03-07T12:27:56Z","last_seen":"2026-03-31T09:15:59.236387Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/themes/bimber%20final/js/enquire/enquire.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c22ea088390ceeb51ae5da21901b9df4","sha1":"2cb0ed3c356a9a2f41cf3b7c95e702c1856f5819","sha256":"324dbc3f38a9f0a20763e0c0d817aadea2b441e2b872b81c69f453857da67489","sha512":"96424868be720225136a477689b78c3fb214c8e4ca05820d70346a7c9dd72c6625a599b7d932590eb2f0996c50275028d387c68f0e6dc5c9caf37bdf3185e9d0","ssdeep":"","tlshash":"97410fddba99720162a364f2541f558f5673a1b7f00c409cf1a4dae5ed78a0d8a23f38","size":2254,"data":"","first_seen":"2023-03-07T12:03:52Z","last_seen":"2026-04-20T15:53:15.351086Z","times_seen":1187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_8a3a160d1d1717daaf54285c6693b08c.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bbbaa10c22bc231d5e363836652f8e4","sha1":"6c09160d2fe6b28546deaa7175b6e7c2296eed74","sha256":"db0aaf24b5bec64942ba044de77974ad4e6366d694c049df4dee27760de3d488","sha512":"84804f0994bf9169f139cbd98ab3802371bc4defa536fd6f573f95ccd0447e0d87062a4d764fe7a8323dd0e06a375db46f8b2ca0c002004b9617d52b98c38756","ssdeep":"","tlshash":"49511e4d75f4a9f1c0b7aa06ea1be30bf0205641c548c48ea4b7cdc40f60fc5ea72a9d","size":2785,"data":"","first_seen":"2023-03-13T10:25:43Z","last_seen":"2025-06-25T06:21:17.785816Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","size":99218,"data":"","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/dist/a11y.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d60d16abc088d80092cef147505a08e4","sha1":"681fbfeb2a611e0db7620dfc72af70a76aa67a7a","sha256":"cf1aa9163953fb477fe5cf452229042578738fa9e600c6ef64c47e4635ba78c2","sha512":"57100e48a4a04b95910cf5f2967883d8d259b2b68c82f0eaa12bbde4d6ddfbe7710cd741db8e727172cc0bb27b8825afd8a72c2a34412f242b951f6ed47b60fa","ssdeep":"","tlshash":"2f4131723450767294bf66f79c3d93c6bf358a303a47e0549e0caea93239c9a21357a1","size":2358,"data":"","first_seen":"2024-11-13T06:33:24.842079Z","last_seen":"2026-04-22T20:06:09.674951Z","times_seen":38238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1481953003","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"56b0d0e8272fed6b9a44d08c14e5b1be","sha1":"0b2e66a7ca8c0319310adca7ba8d02b643526f9e","sha256":"b045c748093c314660ce2985a8dd0d6c3feb6af1026dc2b02229b2538c0da6ff","sha512":"a35fc7c77ba761303aff78d51b8fe387bbf1c8892861ad6655984ea7f43598e5d9b769c2607013d9ebdc08417e578e1a7e81043f346083de7accb7a90425f259","ssdeep":"","tlshash":"0ee0269dfa8a09384c1238a16f6f329483aa916fe228e264f81de7445f1044dd06b3e6","size":358,"data":"","first_seen":"2025-02-20T21:14:35.914719Z","last_seen":"2026-04-22T21:33:28.178895Z","times_seen":12421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/plugins/media-ace/includes/lazy-load/assets/js/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"728be2cf7dd0e1fb913065f11f8a113c","sha1":"328fd3e7478d57b7930bdfc5bd2e44d1e845fad7","sha256":"80107f11f8fef70c5d2d2ff48293c1fddc0a7f904b00412d121d717bf454e14b","sha512":"10795e6ae880e77685f37862fbf60d4a7ee0af3be2250c4f37afb46c675a33e4ba1f2e1c8d704954919c51ad71037b50446b44bbef54a2444aeb34ab122aa8f5","ssdeep":"","tlshash":"9131617f322468337c6608f1905f550276a2f1732e099e118ae7dae4d63aece2c35618","size":1649,"data":"","first_seen":"2023-03-07T12:11:03Z","last_seen":"2026-04-21T15:18:02.917667Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GSLLMQHH8G","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5bcb42eb9dfeae9f4300c2a3396fe82","sha1":"347f965b09b90eda8492b4a566c7b17a6f17f33e","sha256":"94f550dc81ce7dc5fcedc85d134e78fe122c7e8085399b8c2099b834f452b325","sha512":"698c3559566d1636d6792b1cdeb0fff4acdecbb0dfb44e39cb0698e9fbd03a919edf6b5b31a2f610a7d59f9959621efe650c0f22a0cf1311e234c68e4a8ccf08","ssdeep":"3072:jLaEQJ17GCNOx0kGJyCOxDl0igNc/x1+yXNFNmfoJw26GeP1P7SQ10bba7UXenSV:PQGmOx0kGex2f2EGe5SQ10Xa7UOnSHzZ","tlshash":"1f8419ce73c674625396f478503f018ba57b28a2b49cc899f189cce42e74a9a4177f7c","size":399795,"data":"","first_seen":"2025-06-25T06:21:17.766051Z","last_seen":"2025-06-25T06:21:17.766051Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-22T21:11:06.685308Z","times_seen":310497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGFqYXh1cmwgPSAnaHR0cHM6Ly94Y2FuZGlkLnRvcC93cC1hZG1pbi9hZG1pbi1hamF4LnBocCc7","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b175f08f1b58eb44e447685d0bc74215","sha1":"d6746b791ac4ea0d96f7b5a4dcf03d10d93c8755","sha256":"7deb4770cd8436101bbbab05dd0611ee95551edc484f98404f848ed4e51d1fd2","sha512":"248dcb5466707b9d9b10c93f44007f3b03da9ed7d437e34f7e3f58e9bed0d8d7c4dfc9a6cc86d1dbdaf0600968e80a4c788eb5aaf1806174a7e72e57282e5f56","ssdeep":"","tlshash":"48a002774d626b5773949ae506166ea662a1a9387d655810a9521090454062bac54110","size":60,"data":"","first_seen":"2025-06-25T06:21:17.809656Z","last_seen":"2025-09-20T23:58:01.13103Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","size":8665,"data":"","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/beautiful-spanish-teen-ass/","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"538a678276f7471656a4ea08ea024bb9","sha1":"d2c281ce83f8a2fada1b40e0ffe1f4eb5738f4e4","sha256":"6b5c93eab3b74dadfbe0f6c5949ab9f1ec8f012df8f49495664b96b51881ed85","sha512":"6bb821c00d9536bc287e8e912f4d2621cb0418161d8c75f97388ea6e61a6c9f3e5e8b007bf6cda2ba06c19374a019fa4dc5b4440695a5f93ace76b7836b3218b","ssdeep":"","tlshash":"597000003a802000222300008203a20022380883030000a0022020e2e8b038328222ca","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-01T05:25:18.025829Z","times_seen":13792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","size":804,"data":"","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","size":4058,"data":"","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#q3mvff","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9449cb0b1dd37c65a9ecbe6dcf12275","sha1":"cded313adb1648d198493a494e9db80ff8a38a94","sha256":"634de0a204a799a1919b14ad657fb1c7c767a4a8f975fbbb4b3676d64a9a998b","sha512":"125314f26d03da9644710fc873e7513c43fe0de90ae08f44441dd72f921a53cdca3458ae4d529d64433b561ffe1f764b6c94f4fae5d3a679254bcea3873d3a28","ssdeep":"","tlshash":"dcd08cac225b0cb162d73a594b3fa202705a7113a0801d203d1e6348cf20e37e794948","size":199,"data":"","first_seen":"2025-03-03T02:59:10.570762Z","last_seen":"2026-04-21T17:08:40.099535Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GSLLMQHH8G","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de3503e8a13f701413988411f9447c01","sha1":"64b35e6b966c6597d3131a6890bf69e779eef999","sha256":"cecdea6a02bdb6022ab6ef9ca8cb5c02480bb3b3b07691a255e6aba72166b56a","sha512":"6c0346c2f313601eef7e844dc31137693c69eced909227ab5ebc9b9c6fed93d419180c29b85855253c36c3c5e851134a4f15ea5f15a5ff746ae39046af65f866","ssdeep":"3072:jLaEQJ17GCNOxGkGJyCOmol0igNc/x1+yXNFNmfoJw26GeP1P7SQ10bba7UXenSV:PQGmOxGkGh+2f2EGe5SQ10Xa7UOnSHzZ","tlshash":"598419ce73c674625396f478503f018ba57b28a2b49cc899f189cce42e74a9a4177f7c","size":399774,"data":"","first_seen":"2025-06-25T06:21:17.757281Z","last_seen":"2025-06-25T06:21:17.757281Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/plugins/snax/assets/js/jquery.magnific-popup/jquery.magnific-popup.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-22T21:03:38.325916Z","times_seen":57171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_88cc4ccedb57a8a11d185eda0f9871aa.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdde7e23fc071f7ff812e3bbe74d5ed9","sha1":"0fa58a4db8a5ae4b8f8c8ab6cddec6ea5eb87e5f","sha256":"d3d9068e948e759e470194e8ebc96ea7da0777644fcf2328e61bb711370abc96","sha512":"205a1b22fe4aa78767e7b970b1dded6951ed3d072d66b1ded45d7a02a0cc58c8496dea66f68f5e91df5b6e41312dd5c4185113001458d6f9f300519db0d3ae96","ssdeep":"","tlshash":"35312295b1f375729c53d1087a1f930a92933400d50ec1bc76bd84cb78babcb065a92c","size":1755,"data":"","first_seen":"2023-03-13T10:25:43Z","last_seen":"2025-06-25T06:21:17.780375Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","size":18392,"data":"","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1499094297","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71731dbc21a722884c118c5e1d556b7f","sha1":"72a423e29c62961aeb7d5f4bb1738c2180f845cc","sha256":"5ad5ef47ab9e5a70fcbf708e96c75f305af2aed98fdcf0c7f921922ac68d682e","sha512":"4a1fb2a616482e1464e3410f975199d5db6641862f57a2300c68cd6bd249095f1be86032a75e703027ebbecab5c61454fda4dad4154b1c55a98463c10b4e38be","ssdeep":"6144:gfdSK6OsJ/pBHfdD9LdE8ObYHiZZavyUhvTkrNK8/C90ktibNZQiAriowmfoYUOy:wcB/i8bC2y3wD5wmfA","tlshash":"42051bddb66274618263f4f5503f004bb23ba86af448896cb689cce17d7884a4677f7c","size":807335,"data":"","first_seen":"2025-06-19T22:19:33.04637Z","last_seen":"2025-07-10T17:53:52.695437Z","times_seen":507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#5whfmi","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbe8835fbb7b45949a49885f3d25ff77","sha1":"b89919667b5b058fe42ca715fb38f4c138b17866","sha256":"71de8bdc46088c5df8c194cdb490fdcc5be32f7bd1b6e6ec5ddaf0a1bb43efa2","sha512":"915affbce95d40b246a4f91a5b1698388761d8e1ea393f7b8491513ca8e6e423de77f77ab45aac77a5cd2f44ea0353e578d463c7aff7d917ec10f887f57b9685","ssdeep":"","tlshash":"06e05e5824f85061c23320685eaf771a342241272a7e6d347f4ec2517f2863fc533be4","size":333,"data":"","first_seen":"2025-03-03T02:59:10.583508Z","last_seen":"2026-04-21T17:08:40.100717Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","size":7952,"data":"","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1366190956","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"56b0d0e8272fed6b9a44d08c14e5b1be","sha1":"0b2e66a7ca8c0319310adca7ba8d02b643526f9e","sha256":"b045c748093c314660ce2985a8dd0d6c3feb6af1026dc2b02229b2538c0da6ff","sha512":"a35fc7c77ba761303aff78d51b8fe387bbf1c8892861ad6655984ea7f43598e5d9b769c2607013d9ebdc08417e578e1a7e81043f346083de7accb7a90425f259","ssdeep":"","tlshash":"0ee0269dfa8a09384c1238a16f6f329483aa916fe228e264f81de7445f1044dd06b3e6","size":358,"data":"","first_seen":"2025-02-20T21:14:35.914719Z","last_seen":"2026-04-22T21:33:28.178895Z","times_seen":12421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","size":18392,"data":"","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"032a0b987f8e2bd0f56563703153a19f","sha1":"4b3294fa5bbcd8c186e176e1fe600d742ad73b85","sha256":"f5581dd6262ad4f7ef338c976a24f2e861004d4360d9d316899e781b7c8c714e","sha512":"58fddccf62b15c9b49ed28e220529397a56de6280235699b351b776b9aa06faa0263373c403c140aadcb6f0c37e7eea0e3387c311b30582ccd45aef4410a06fe","ssdeep":"","tlshash":"75f0e2382510af313ac975bdb4872bc4ab760331a03c60601b6f4916a960ac986b0bdf","size":493,"data":"","first_seen":"2023-03-07T12:03:53Z","last_seen":"2026-04-20T15:53:15.400702Z","times_seen":806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_983a8ff496cfa2812a494c01309e745c.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bea662e51e737cbf3aedba74fdf37d39","sha1":"1983485083bdd7e4b8aa82b253ecb89cff19afdc","sha256":"e2d9feb1b859c71b4b9b08ee5371bf3a52a3cd04f2e783ab242d76e9ffa2ac4b","sha512":"f689756b371e0b46c3b21b2bfecc4dc4ba98e220fd21bf68342fb8ffb6a80f9b9a4acf546d1406c6d492c39f655fb8ec2fcb4d1f4723c90d3ba35d72369858c5","ssdeep":"768:wUTh2rEYidIgv3idVYfQMl0+RtNxPxLMbWoprAvKQIjaKAsl7d9bKmlXkS50aZAw:EvYigXYRjaolSW","tlshash":"c013f94c7255b4b94a9f3677985f16426533aaf3b444ac07e0b950981f38e4ae333b2f","size":43327,"data":"","first_seen":"2024-08-19T13:58:57.406123Z","last_seen":"2025-09-07T03:35:33.643975Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","size":4058,"data":"","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/beautiful-spanish-teen-ass/","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31370ae3f78a60279d29cd25e1eb8657","sha1":"34f454d9855d2dc1d71ab7101bd7a04d1b0199bf","sha256":"6682cf99413df38b7572d2f2eb9c549f33d2a52ceaa9c6a8ff723c02339380dc","sha512":"f4ebeae5d9f13044f3e78185d41c7f95f7a02f36a5fbe67b8768aedd1b9eec5a6d4d06f61f1bf2f9f4fc102fd79dc0e6cd748a4e42f32876c67e1bd701eab10d","ssdeep":"","tlshash":"32a0011a8449927276704000e61f6384a81656a5fb91f06b410b2120b27d843a0141b3","size":84,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-22T20:09:37.536879Z","times_seen":9359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","size":3486,"data":"","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","size":804,"data":"","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_80c1ddcdf84ae2b0d3a833fc079a0981.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fc2a1179836e65dce7188fc2f3841de","sha1":"b228810c8e3d538ac2943e89f373f9beaba885a2","sha256":"4bc6cee2167953b3209791a7f9e514920045091c9cc7ae3173615cc459c780b3","sha512":"0f49c0cdc8e585df659ed77bb41611f2d2eb6687d2da0cc7726ec22984640da404a88e5586670d59689235171bb94d8b613bdab0623380e89690f2b905173b84","ssdeep":"96:Hw7NpPdpjgKrdRptxRfLQ94MWywZ+9EYgbWQF4FfZpwRKyt3:QP5VrQP48EYgyQF4lwRjN","tlshash":"7ca175163308250895d232f5442f229db329db1d60e9e225e3dcc9e07d3de5ef0aad6d","size":4711,"data":"","first_seen":"2023-03-07T12:27:56Z","last_seen":"2026-04-14T13:18:38.63575Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","size":804,"data":"","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/themes/bimber%20final/js/picturefill/picturefill.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3325bc1d59dae5aedda1c5ead0cd1d6","sha1":"f4b1fea0baec4ab9b6bff45bdea81d8883357e35","sha256":"d603b6e5c404d28a9f1c12bb0b57d8c9967836a8f53cce046a2ab3fd1f3b2f52","sha512":"3b90e2cf6024a8a58aecbc38b7c0671c5ff8ec22cc3e2187f674f803a53afad647080abe8e3ddd03f36091cd4b2b71e6ad386d8c87a6c3932d32b1f0b15f2d4e","ssdeep":"192:h1Xr6SGagHW0rIEtQDvhI3t4An5C5Pr+EfWL:hFr6SGDbJ56Pr+Efi","tlshash":"eff1d7be7a6931779a9334b0a83f611bf03399a6750884e0d451c0ad7cb8e95903ff9c","size":7707,"data":"","first_seen":"2023-03-07T12:03:53Z","last_seen":"2026-04-21T11:01:05.160132Z","times_seen":1169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_5ff18ded4219199be1310ba302af7b40.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27846899019c257b6e9b409cf768e1ee","sha1":"ee13a8ab0c19801dc20fc0fb909704bbb6924803","sha256":"89d934380e1055b8f3e1528ebec520edc187998150004e4bc37430a522f7a6a8","sha512":"31bdb923ba2ee961f698386fc4afea637a04f7da77635902a4f7652aa9c3e0e4d971cb529840a57ec9eca8c6600bb1522399eb1837c1c144a0fc7fb71bd05654","ssdeep":"","tlshash":"f651630435f27a35c196d01b8d5f110a36a1a24ad141d1ecf66dc8d5aff8fc6036577a","size":2674,"data":"","first_seen":"2023-03-13T10:25:42Z","last_seen":"2025-06-25T06:21:17.774861Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_154206f1539400d94841fb097c250959.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a26968a726fb75a93e8b36bf64d2bda7","sha1":"95e258af1cd4f719520b617018f8b92c98f99add","sha256":"66e32ee875c771fee3576dc1470c53e071e652e0575016fd2d7710ec55012610","sha512":"89f17705f205c83c3a3561163af80634e36235533f9f8cf5b54caaad2b993d7c55f4e92012d7c7d027cb31d30bbf73689372b9e17b3a76b9f016c183a62331b2","ssdeep":"96:SU6maf+c0sxC7uvAt8Osert/molbtkf8nez5SxZQ5mulEygN:+magB7uvAtWeBuAxeziK1IN","tlshash":"38b175c871f26a7686e662bb64db1b4272a36145804480edfd70ccc51ab8fc657327fe","size":5111,"data":"","first_seen":"2023-03-13T10:25:42Z","last_seen":"2025-06-25T06:21:17.774143Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#c5glqb","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbe8835fbb7b45949a49885f3d25ff77","sha1":"b89919667b5b058fe42ca715fb38f4c138b17866","sha256":"71de8bdc46088c5df8c194cdb490fdcc5be32f7bd1b6e6ec5ddaf0a1bb43efa2","sha512":"915affbce95d40b246a4f91a5b1698388761d8e1ea393f7b8491513ca8e6e423de77f77ab45aac77a5cd2f44ea0353e578d463c7aff7d917ec10f887f57b9685","ssdeep":"","tlshash":"06e05e5824f85061c23320685eaf771a342241272a7e6d347f4ec2517f2863fc533be4","size":333,"data":"","first_seen":"2025-03-03T02:59:10.583508Z","last_seen":"2026-04-21T17:08:40.100717Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1119498724","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71731dbc21a722884c118c5e1d556b7f","sha1":"72a423e29c62961aeb7d5f4bb1738c2180f845cc","sha256":"5ad5ef47ab9e5a70fcbf708e96c75f305af2aed98fdcf0c7f921922ac68d682e","sha512":"4a1fb2a616482e1464e3410f975199d5db6641862f57a2300c68cd6bd249095f1be86032a75e703027ebbecab5c61454fda4dad4154b1c55a98463c10b4e38be","ssdeep":"6144:gfdSK6OsJ/pBHfdD9LdE8ObYHiZZavyUhvTkrNK8/C90ktibNZQiAriowmfoYUOy:wcB/i8bC2y3wD5wmfA","tlshash":"42051bddb66274618263f4f5503f004bb23ba86af448896cb689cce17d7884a4677f7c","size":807335,"data":"","first_seen":"2025-06-19T22:19:33.04637Z","last_seen":"2025-07-10T17:53:52.695437Z","times_seen":507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/themes/bimber%20final/js/jquery.placeholder/placeholders.jquery.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a174a677ef7798a1adbda44b740996f5","sha1":"1a3587ed5f71778c68adfb80bf3e4b2419ff2b97","sha256":"aabc30ee10c2b23a718fe443f43b051563fa5c58aa4b48cb64155a424e451468","sha512":"649a4305d36d63c5c092111b1698cf35ea4fe117e230b5b2b4c92349b284c89ce41353d2dcb73666d6a02262a450042329a035c22874153ee1358381a2cad31b","ssdeep":"96:h6LJvsVYMQHqEodWadgRA7C3rMpZtgPrUGvERRjPMv3:hJYMQHRFadg/3GzavERhPMv3","tlshash":"6db1957e324677b31da714e8f8abdc967870a3f6b10b4c60d064e492393cce956b6d48","size":5461,"data":"","first_seen":"2023-03-07T12:03:52Z","last_seen":"2026-04-20T15:53:15.350593Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/themes/bimber%20final/js/stickyfill/stickyfill.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"593e9b79f6e7ce55f18e215cee71c97b","sha1":"05c1dd24e4e71352f7ec69cbeec0dfe8dea721eb","sha256":"77bf60e84e126d1609cc0a302c3953dc25ae054aaee3514d04a4726d4f2609fe","sha512":"384baf3b44411049ac1fa9508b8cb9d19f82ab561864915df6f8d0029eca30652ca1b8055efcfe35aafbf0f7604881d29c8047d14df13c9a88cb7610b833871c","ssdeep":"192:uc6dWtkuaoqt94VK6YVIwgQSzK7OUlvH/CkUmbROm5ujZ2woogtOXnPrf:uCSuaV0VRzGOUlHam135lTorf","tlshash":"b9d183453770353281a3eb27617fa60732725498d9a3d099b02cccecae7cdc911bb978","size":6291,"data":"","first_seen":"2023-03-07T12:03:53Z","last_seen":"2026-04-20T15:53:15.380141Z","times_seen":675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"54e470dad264f32f5ae4c4d0d7a50c37","sha1":"74060228bcc368d822d477471c09e6532198acba","sha256":"f8b408218e01c04f58eecb732c85963adf7266df53111e2661424f86215c6a17","sha512":"dd714b6799c013ca3f87491ff41c2747d2d66edfd8e2bbb48377da701e2f21480faf0e4aa0562f31ad63d5c80d8ffbb19c97d19c10b8af25ae6f3a5b86272acc","ssdeep":"","tlshash":"45f0d40565c94d514392f8e07eca7c69d0f8033145954a496ad8d4490a9950d598b86f","size":475,"data":"","first_seen":"2025-06-25T06:21:17.812178Z","last_seen":"2025-09-20T23:58:01.145393Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GSLLMQHH8G","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de0439034e2b81683cf21d562185ad63","sha1":"12ae6bd32ff10d11ae93ffffd108a0de058ae731","sha256":"a5ac26ed43cbbc4daec14fccc3a39e490ba29ef68f11bdbcf24e503f54f2ef39","sha512":"c73f668db0b2958a053f974cab5f12cd755313ed8f485aeafec7eb4b0fbfd3fce9db1a85d6daa51ddd7d5e7e875cf879621f855cbf98cea0a256461c346aa2c6","ssdeep":"3072:jLaEQJ17GCNOxikGJyCOnDl0igNc/x1+yXNFNmfoJw26GeP1P7SQ10bba7UXenSV:PQGmOxikGAx2f2EGe5SQ10Xa7UOnSHzZ","tlshash":"2e8419ce73c674625396f478503f018ba57b28a2b49cc899f189cce42e74a9a4177f7c","size":399768,"data":"","first_seen":"2025-06-25T06:21:17.79096Z","last_seen":"2025-06-25T06:21:17.79096Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_d5f0c2881b18809265062c50de00ee80.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1aa03d630306f1ccda3be5eceb43d30","sha1":"e7ec7ba18d6fae5cc3467ff90bb8b55889e399a5","sha256":"3963fa63b7d12048a3dad9ce48f4b2b3e9c5538414233f14d2c686a66ff3d692","sha512":"db6a7595347207edb869051d6dd2ef50c2dcbb1d6cfcb0af422661af1d177e7d77c7b0230423addbdb58cfb63bbe93c240805ec6b080f476a836d171d21916d4","ssdeep":"","tlshash":"2921fbee3630a286610a6cd9b81a01804116a87b60c0c9f5f9b1c8157d79a0a1cb2bcf","size":1151,"data":"","first_seen":"2023-03-07T12:27:56Z","last_seen":"2025-11-11T02:38:20.764026Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_89f369588d629240d6a8d4f8788490c8.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aab98d5fba91fa41080d199d3e1d5cb","sha1":"583e4706d6ea6f99c6ec3e6547086c529a809dc9","sha256":"36f0dd8d63a28cab1826d032a40f1b0fff24379be1aff68495708af6de631218","sha512":"f43b6af5a62f24c2b5830d52ed2d2a9fc32e669fb5c34f95f7f724a441f5191933585dece992d4c2c0018447c7b666688e72a1dfe64d06484db26d09b2138105","ssdeep":"","tlshash":"a811ef385907a426ba935fed7357e2d5bd078d7d9308a411cdbe8d7424b1e53d120ce8","size":909,"data":"","first_seen":"2023-11-04T22:41:28Z","last_seen":"2026-04-20T15:35:46.688133Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","size":8665,"data":"","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#q3mvff","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbe8835fbb7b45949a49885f3d25ff77","sha1":"b89919667b5b058fe42ca715fb38f4c138b17866","sha256":"71de8bdc46088c5df8c194cdb490fdcc5be32f7bd1b6e6ec5ddaf0a1bb43efa2","sha512":"915affbce95d40b246a4f91a5b1698388761d8e1ea393f7b8491513ca8e6e423de77f77ab45aac77a5cd2f44ea0353e578d463c7aff7d917ec10f887f57b9685","ssdeep":"","tlshash":"06e05e5824f85061c23320685eaf771a342241272a7e6d347f4ec2517f2863fc533be4","size":333,"data":"","first_seen":"2025-03-03T02:59:10.583508Z","last_seen":"2026-04-21T17:08:40.100717Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#q3mvff","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a182b32c8c5660ef5b48da6efb0c40","sha1":"7b342b959771d7dd4a758070e220164c58c69f18","sha256":"9eead2c2f6d9c62ca4ff5adce93b3797b80ec585deb183650ad2e11132b6ad30","sha512":"4326eba36d049f1d981ffa97ece7293e34f06f545cab8e8baef7dedca2a6320e1b8429e8cd2300137c330f2debcc1e48291e7b2c72727f73eb6f9f97ee0d6173","ssdeep":"","tlshash":"0151018c5e842b11e306e6e3343384b5c62b8c2a765f503de13c783ea994f45e9ed935","size":3153,"data":"","first_seen":"2025-06-25T06:21:17.806109Z","last_seen":"2025-06-25T06:21:17.806109Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_8607cdb54bc34af5c41d5b202dd9a437.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62db4ae0a7b9d167ce9b05502dbc69ce","sha1":"45e27be1b244af0426b616167c9c14ef4cc0875a","sha256":"d7e14bde2832eae9f56bc36b298b72f9f913e523ced67773d7b6f5352f17329f","sha512":"3d70fd4df131e1a6f368480d47f06d8f1af7c163655f6fdc7e90ef0d877da58731a086a184f82ea346377b64645aa10c931c97cb0cd7e69a008acf0afc6dbec7","ssdeep":"384:u7QplKcwcwSbweQpjHpDDr6o+ABLBkBNvIoY:u7QHKcwcwSbw5pjHlK7ABLBkBNvIoY","tlshash":"196256287961602d897bb57fbc4f115628321f774944c40ee0e984b80fb5e09ba3fb5e","size":15102,"data":"","first_seen":"2023-03-07T12:27:56Z","last_seen":"2026-03-31T09:15:59.227769Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"384d428c886fb8db470007a1bbfce045","sha1":"a6ea8f08b2936b9ea06f1bfdc56e400d92159374","sha256":"86951c2596101bdecb648fac6e1f0bf14de24ca168f2ba068ab75f2d9a02e949","sha512":"d1b352c8bc1990d999de70d4197358af8c192fe91dbcc69b31a036be2b002b8b2786722e97537b40cab72c4b12b6f8bd4cb3dd107f51e6497fae627c84659b44","ssdeep":"6144:o1kqpy0eCz0k8ZuBmBk46KJUltbRPVzTsf10j:EXkuBmG4LJKtbRPVz4S","tlshash":"b0a4facdb6a674629363f4f5403f014bb23ba86af408886cb249d9e16e7490d5277f7c","size":462831,"data":"","first_seen":"2025-06-25T06:21:17.727471Z","last_seen":"2025-06-25T06:21:17.727471Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/dist/hooks.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-22T20:48:49.068469Z","times_seen":213860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","size":12143,"data":"","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","size":7952,"data":"","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","size":49074,"data":"","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockadsnot.com/tceinpwmsncnlxf?QWfXiIMl=BQOCAAAAAAAACZUAAq0drGYcTFoj79dZ56F4vn5BgqC8t4wAbLdyoQp-NyxwMF-z4QaA894EpLBZ4zOdNm39ERSLKKBrCD-URHu3gMAiNH1ZU35lZCnyeZjt7mKLj6TLnJeuCMZ2DjOYBM1l_vRSKMyKnJ9qo4vXcs3OGjplTHrJskWhksdlw0aXI4e_8fAZagFQ0zsA21qCxkGRUX1bKT6MsmNp6bYwGAaNAUdp03jajVR2_Nrr7C_hPq1ecqb7DZUsBwW_F0LswsdNJmX_11rEDCUyQMw863I9vqdUrqyoktyqYY5QWo_a7Ts7sTc2CsyhjbUdeaRrCj0uuX5A_V-YSKILH153UvIB-IhMUKsqHFQ0SL8Tw8lEGH5CrGEoy9s544uSQeUGr40Lmwt4FnYPYIc-MksgkMiV-nIbr9fpHV6LFcc7MuMVp_ykOTZGkm3Jfhz3BY0yL7lrPYYpKdTguLkxNP2Vux7Vz1RwvuCgYka23Ox5b2zCToMlnGJY0O6XpudzZ5zTYqQ0U2qdGS3ntu82GVSAQaFPJ01S1zubPL-bx9JkXaiXo0J1-HhERH997W1Bm8B-7cMxCU-BTBAJDf8ZZ4OQihXowa7ViHnT_CWFoOGdpK52reEEp6p9d31ylEAenF8yQLPgeqZU7zqXfqf3sYuUolW64QrUnHDaXAeb4gk4iudIRDt191V4K4f0FbXRtueG7Iki9b-5E7q_NKsY_4GXqdZeUI81cSecB5bRBgNrIpb3a2UvQ8vD5p4K2pBSrwfquz_U3OC7p9AELmXU0bZ488Ag1Z_m6y5Pa15ekrUXQC9OScAbKZySqQpb6q2tmUBEbfIkGjj8sWsF1uha1y3o1_2ohmFvnOiHcSQgxXquBeSxcLUX0oGNY4DWcDoN6Fl-x_7-ilNeJNdpm-PJqxBfziaxtnE8YIsy2x7xR8nssCx32p-0h9THB4mvkpkWRge4-0mY0YMElWEgYniEUWdEka4jwNbzqsAYHaiOUUqIqhC5XdQl2tfmh_5w0Ea4ONzeOIc5OyvTDRCW8f4QyhgOg4_SBeRQ3jofKf1do51oP64xM1w0grV2FVz8EH7QFff6K2I1IUPqwZ4f8BwXtDWZC7l_f1MY2DV4PyMttirHJraLwDgPeah1OWylt3adTnVOwS2ymPWUlb4NQquP_WH8PxxLXXn_yNjshI0pzcSw7fa7aJOH\u0026CXfocxDI=4\u0026ucvTlqow=5188393\u0026cDlsUjqd=\u0026aHrzdyeM=1:1,1:1,0\u0026DHgjFdVO=\u0026NWDxCrjq=\u0026s=1280,1024,1,1280,1024,0","fqdn":"blockadsnot.com","domain":"blockadsnot.com","tld":"com"},"ip":{"addr":"208.95.112.254","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-22T18:58:35.197279Z","times_seen":23484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_87d8462cdbc8581a6c15c4db224717e5.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b8b82b57901177e001e21d43fca93c6","sha1":"7a2fec1fd4f464ab478cf67ab8daa4c8910e4b93","sha256":"41c6ce0bbe8694ea355b45ac68820c044111a265beaf99e5d24ce3548d7becbc","sha512":"9cc85b27a238d2f7696647b546a0b27b92e1477bd8fed42fd5d3cefee39bd07a58f1d63c60a8f8b419efdd804224e2cff7fa59709842afd9a50d8155d77eb321","ssdeep":"","tlshash":"b57185667ae635f1d2db311a047f2346b1658e6f8208d048d90898a93ff1f81a5e6b2d","size":3807,"data":"","first_seen":"2023-03-09T03:38:32Z","last_seen":"2025-06-25T06:21:17.750155Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","size":877936,"data":"","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","size":49074,"data":"","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_8b5cca173e2d12b1d577e1ce80202e07.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cebc755d2d9e591a5cdb55bf262ac1ec","sha1":"adcdd1883e88dbbc32f5ea44b2b43b14e9610df9","sha256":"79e0bcbe3ba7f8ca089d206ad5e2f4c2c106bbd586866cb9a1a4d96fd19e2db7","sha512":"10693bbbcbd8fcec8ccb52ee1012d0fb2fc8f791b24cfdf962273cf642b2d53538bd81e62075342e2956770dc99694c368c13a1c992638e00e315c2ce980ee82","ssdeep":"384:LzoAHmT5jGr08Q1IngYvgId/tHKQgMjN3HyaIb:AAHqjGpQ1IgugId/JKHkN3HyPb","tlshash":"beb2e81c7330323947df72ba885f5245b7330d63c6848425e6b9449c1ef864ab5abfae","size":25227,"data":"","first_seen":"2023-03-07T12:27:56Z","last_seen":"2026-03-31T09:15:59.248496Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GSLLMQHH8G","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"932f067cabbbb874ad775e7bb65f613e","sha1":"e1a5ab5f23a246899f5eea8ebd60b07ab9516d30","sha256":"19ec9bb66f77d24ae98d9bb0190f9354ebd03c2170efabc7813aded572f592ba","sha512":"d6ea679d3554ace9bfa222365073454f1b6bc8e7385bc0d67c8f3c2b8c64521c5a09c7854d383305f79de70a4441c1e4690cb965677b430116b7efc8c8413f77","ssdeep":"3072:jLaEQJ17GCNOxGkGJyCOmyl0igNc/x1+yXNFNmfoJw26GeP1P7SQ10bba7UXenSV:PQGmOxGkGhA2f2EGe5SQ10Xa7UOnSHzZ","tlshash":"1b8419ce73c674625396f478503f018ba57b28a2b49cc899f189cce42e74a9a4177f7c","size":399774,"data":"","first_seen":"2025-06-25T06:21:17.784651Z","last_seen":"2025-06-25T06:21:17.784651Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","size":99218,"data":"","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","size":4058,"data":"","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1499094297","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"56b0d0e8272fed6b9a44d08c14e5b1be","sha1":"0b2e66a7ca8c0319310adca7ba8d02b643526f9e","sha256":"b045c748093c314660ce2985a8dd0d6c3feb6af1026dc2b02229b2538c0da6ff","sha512":"a35fc7c77ba761303aff78d51b8fe387bbf1c8892861ad6655984ea7f43598e5d9b769c2607013d9ebdc08417e578e1a7e81043f346083de7accb7a90425f259","ssdeep":"","tlshash":"0ee0269dfa8a09384c1238a16f6f329483aa916fe228e264f81de7445f1044dd06b3e6","size":358,"data":"","first_seen":"2025-02-20T21:14:35.914719Z","last_seen":"2026-04-22T21:33:28.178895Z","times_seen":12421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1119498724","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"56b0d0e8272fed6b9a44d08c14e5b1be","sha1":"0b2e66a7ca8c0319310adca7ba8d02b643526f9e","sha256":"b045c748093c314660ce2985a8dd0d6c3feb6af1026dc2b02229b2538c0da6ff","sha512":"a35fc7c77ba761303aff78d51b8fe387bbf1c8892861ad6655984ea7f43598e5d9b769c2607013d9ebdc08417e578e1a7e81043f346083de7accb7a90425f259","ssdeep":"","tlshash":"0ee0269dfa8a09384c1238a16f6f329483aa916fe228e264f81de7445f1044dd06b3e6","size":358,"data":"","first_seen":"2025-02-20T21:14:35.914719Z","last_seen":"2026-04-22T21:33:28.178895Z","times_seen":12421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/jquery/ui/autocomplete.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a53e18a345b37d4f72262a071684e79","sha1":"7269f0f9a41ca95df23387e1c4dad415f0228979","sha256":"3ab937ae57ef4a48601774b6a0cc701482a5c8bc126fcb677db4842b3a3c0003","sha512":"7f1b7ba5ebafb6e1cb9791ce8a0ad6eec1a743e6b15ad3e2d05f38ecf9a7f3437e41f398d3a91fcfbd294073cae25c4e4f6b5fc96526828071a0fc5ee0327b78","ssdeep":"192:7r2AeY1jWBoYfgZn+gSEmaAGCkHjpXCNd882E9cNS/JWmx:7r2AeSWBoYfon+gSDkrH1XCNd882E9ce","tlshash":"8102845f365a6a4156efa078616f324b623a20aa5801815cf47c9fcfad3ce1432b7d7c","size":8536,"data":"","first_seen":"2024-07-17T06:42:32Z","last_seen":"2026-04-22T20:39:44.114009Z","times_seen":13011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","size":12143,"data":"","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-hls-D8DklbTa.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=e7DTLnV76WNHfepdlJFwOoqpf1KuSUg%2BNDlmTNcvke83PNULloGknC3EB6V6y6rNKVUMGEby9Xif5sUYuqFC1fumMqJNX8aAe7uADc5jZY8flWUbQz3jBxXd6pq8E4zEexwZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-1f10\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93410\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf20e3356cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1088\u0026min_rtt=332\u0026rtt_var=197\u0026sent=2615\u0026recv=334\u0026lost=0\u0026retrans=0\u0026sent_bytes=2876235\u0026recv_bytes=34065\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4120\u0026inflight_dur=375\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7951)","md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:24.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86","sha256":"89:68:57:F4:FD:04:C3:94:84:10:59:C7:94:CB:87:1D:7C:07:51:29:D1:25:C6:75:F4:33:16:EE:2D:9F:60:3B"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\nexpires: Wed, 25 Jun 2025 06:20:24 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 7598073993838571503\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 145903\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":462831,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3524)","md5":"384d428c886fb8db470007a1bbfce045","sha1":"a6ea8f08b2936b9ea06f1bfdc56e400d92159374","sha256":"86951c2596101bdecb648fac6e1f0bf14de24ca168f2ba068ab75f2d9a02e949","sha512":"d1b352c8bc1990d999de70d4197358af8c192fe91dbcc69b31a036be2b002b8b2786722e97537b40cab72c4b12b6f8bd4cb3dd107f51e6497fae627c84659b44","ssdeep":"6144:o1kqpy0eCz0k8ZuBmBk46KJUltbRPVzTsf10j:EXkuBmG4LJKtbRPVz4S","tlshash":"b0a4facdb6a674629363f4f5403f014bb23ba86af408886cb249d9e16e7490d5277f7c","first_seen":"2025-06-25T06:21:17.727471Z","last_seen":"2025-06-25T06:21:17.727471Z","times_seen":1,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":62,"dns":43,"connect":8,"send":0,"wait":38,"receive":78,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-BTigPj2h-C_M5YE9g.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-BTigPj2h-C_M5YE9g.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tP0qPyaS7hPNwrmiJN7%2FTm9%2FN2NQ2lzjg1Ro2OFuO1B28a%2BOPJpgCbp6LOtC945bPph43WpT4SK9B04n045sn59dcMUw%2FWR%2FyCOyGsnGWz1xAF8AWEEVqI0S9zS5Dkm%2BJdiJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-459\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93407\r\ncf-cache-status: HIT\r\ncf-ray: 95525be2bc3556cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=608\u0026min_rtt=332\u0026rtt_var=84\u0026sent=839\u0026recv=191\u0026lost=0\u0026retrans=0\u0026sent_bytes=869072\u0026recv_bytes=15152\u0026delivery_rate=21769102\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=27137\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1664\u0026inflight_dur=157\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1113,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1112)","md5":"0a843e1710f9dd9c18edb16035705d97","sha1":"24d9185dc9d8525fe2cb0012f52cb339f1228989","sha256":"fb3f08b8bf6f02341e6636e0e20f9f35a855e71d9da60ea0fea9f93ddf14c361","sha512":"80536faa42b43d4ebdfd78fbfd4d2e8cdb60119bd518e768970a599141272878ecdf7e566f2880f1518020502abf9e2590e84c549a4fb2b63f1b3b9f1c6a218c","ssdeep":"","tlshash":"3821cecc644d6270305b087ee9aad181ecf17b91ee351251107bb5bf59a04bb53c621e","first_seen":"2025-06-25T06:21:17.728364Z","last_seen":"2025-06-25T06:21:17.728364Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:29.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-ui-BXPTXUP4.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iQcNMrgLqhvdPA1pZfdlQkhQUasB5BQ1bUW0oKWuNNmAZBpa4NlBgQhUtX09MmgzQK8coetlhkRTcBLokCcZOlgg8TGZFuu2uy6gdfaW7SBSFfsbykuRBrz0rBk4g%2FvkYJaL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-18392\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4\r\ncf-cache-status: HIT\r\ncf-ray: 95525bfa9ea056cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2236\u0026min_rtt=332\u0026rtt_var=504\u0026sent=3551\u0026recv=405\u0026lost=0\u0026retrans=0\u0026sent_bytes=3926814\u0026recv_bytes=44099\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=5490\u0026inflight_dur=542\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":99218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65375)","md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/uploads/2024/04/output-onlinepngtools1.png","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:28.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/output-onlinepngtools1.png HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: a=AS5K9poI3XBGhTbGU67TEtLriRnD34dT; token_QpUJAAAAAAAAGu98Hdz1l_lcSZ2rY60Ajjk9U1c=BQOCAAAAAAAACZUAAq0drGYcTFoj79dZ56F4vn5BgqC8t4wAbLdyoQp-NyxwMF-z4QaA894EpLBZ4zOdNm39ERSLKKBrCD-URHu3gMAiNH1ZU35lZCnyeZjt7mKLj6TLnJeuCMZ2DjOYBM1l_vRSKMyKnJ9qo4vXcs3OGjplTHrJskWhksdlw0aXI4e_8fAZagFQ0zsA21qCxkGRUX1bKT6MsmNp6bYwGAaNAUdp03jajVR2_Nrr7C_hPq1ecqb7DZUsBwW_F0LswsdNJmX_11rEDCUyQMw863I9vqdUrqyoktyqYY5QWo_a7Ts7sTc2CsyhjbUdeaRrCj0uuX5A_V-YSKILH153UvIB-IhMUKsqHFQ0SL8Tw8lEGH5CrGEoy9s544uSQeUGr40Lmwt4FnYPYIc-MksgkMiV-nIbr9fpHV6LFcc7MuMVp_ykOTZGkm3Jfhz3BY0yL7lrPYYpKdTguLkxNP2Vux7Vz1RwvuCgYka23Ox5b2zCToMlnGJY0O6XpudzZ5zTYqQ0U2qdGS3ntu82GVSAQaFPJ01S1zubPL-bx9JkXaiXo0J1-HhERH997W1Bm8B-7cMxCU-BTBAJDf8ZZ4OQihXowa7ViHnT_CWFoOGdpK52reEEp6p9d31ylEAenF8yQLPgeqZU7zqXfqf3sYuUolW64QrUnHDaXAeb4gk4iudIRDt191V4K4f0FbXRtueG7Iki9b-5E7q_NKsY_4GXqdZeUI81cSecB5bRBgNrIpb3a2UvQ8vD5p4K2pBSrwfquz_U3OC7p9AELmXU0bZ488Ag1Z_m6y5Pa15ekrUXQC9OScAbKZySqQpb6q2tmUBEbfIkGjj8sWsF1uha1y3o1_2ohmFvnOiHcSQgxXquBeSxcLUX0oGNY4DWcDoN6Fl-x_7-ilNeJNdpm-PJqxBfziaxtnE8YIsy2x7xR8nssCx32p-0h9THB4mvkpkWRge4-0mY0YMElWEgYniEUWdEka4jwNbzqsAYHaiOUUqIqhC5XdQl2tfmh_5w0Ea4ONzeOIc5OyvTDRCW8f4QyhgOg4_SBeRQ3jofKf1do51oP64xM1w0grV2FVz8EH7QFff6K2I1IUPqwZ4f8BwXtDWZC7l_f1MY2DV4PyMttirHJraLwDgPeah1OWylt3adTnVOwS2ymPWUlb4NQquP_WH8PxxLXXn_yNjshI0pzcSw7fa7aJOH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 1340\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TjAX78ZTDb7%2BoS4ymIa7kZrMB8V%2F2oPCxVV%2Fy61P769%2FT2fpqu%2FnzImmt3aBXltMD%2BsiC1IcKPrOIp3dnjdaIvh9aDD4ZmwDdTuNj31r97lEGV1l98vh7CJBtByJDQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 25 Dec 2024 11:05:27 GMT\r\nvary: Accept-Encoding\r\netag: \"676be6f7-53c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 44152\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf42f2d0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1425\u0026min_rtt=0\u0026rtt_var=1200\u0026sent=805\u0026recv=434\u0026lost=0\u0026retrans=3\u0026sent_bytes=616685\u0026recv_bytes=46919\u0026delivery_rate=18595440\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=27584\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=5295\u0026inflight_dur=401\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 58, 8-bit colormap, non-interlaced","md5":"a13f67d97c341361a87682b8a202b382","sha1":"f8be984dfce18204127db5c3e20d99adc617bb3e","sha256":"d02f81360bac4455432a5f8b638ffce40e3162c1cced26f2210986e8bdbbbcc1","sha512":"b7b02fa94729e7ef2c11d190e43afffde84e5561c87f540faf3d3ffeccb7580750b7a129257b86af1807eb4441a90a82bbee347d4d6f5c5474614d96f0fe41b2","ssdeep":"","tlshash":"6c21c8a7d505fd7cd5b8112f4ed7b9a5cf5a87cb0362d22100d707b0a9153342115f14","first_seen":"2025-06-25T06:21:17.72983Z","last_seen":"2026-03-26T02:35:10.549704Z","times_seen":12,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Z5O%2Ftca7h2%2BlqdsG9t%2FT1FQ4e4MTeC%2BEenMizlokufLS42MpdJajOBRwuPq6zL8wEEwIW%2B5WX8pW%2BGntj6lzNJh2OIe1Jo%2BR7KRz4G75Jb75amrm2kmXbmHhE8%2BNtA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Fri, 09 Jun 2023 15:19:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"648342fc-3509\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44149\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd50ea80b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1703\u0026min_rtt=468\u0026rtt_var=1485\u0026sent=228\u0026recv=265\u0026lost=0\u0026retrans=0\u0026sent_bytes=18659\u0026recv_bytes=17471\u0026delivery_rate=619748\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=320\u0026inflight_dur=35\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-22T21:09:19.70825Z","times_seen":682470,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/themes/bimber%20final/js/jquery.waypoints/jquery.waypoints.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/themes/bimber%20final/js/jquery.waypoints/jquery.waypoints.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nHJ5ZpgnlrP1WKXc%2BVE3aYtQjiKIJLyW5PRpmuiiFkgoicCizOHCTMxpt6SaZM692ktsFufYSp4wO0zKLVF%2BuQXMpiUJOLlbm09fZ7f39O%2B2LpVDnwrvxZn8IpCrag%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 15:19:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6846fb70-2281\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd54ec00b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=556\u0026min_rtt=0\u0026rtt_var=422\u0026sent=277\u0026recv=291\u0026lost=0\u0026retrans=0\u0026sent_bytes=73707\u0026recv_bytes=22881\u0026delivery_rate=3279773\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=15550\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=360\u0026inflight_dur=74\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8833,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8668)","md5":"43b1aa1ea2d73e79e9d45980c7920446","sha1":"1bef149aedeafff7a797e799cfba168bed0d6dc6","sha256":"9c7bd3dadf6edc19d3b8876a8e2b0b0ae6b54f403d7e987ec82b041128cfdd35","sha512":"a32d0d5ca42ddadaf3c4ca3a2570d8bc372a3494503e72f9e80043a0f742fafb083899d4f8e2ee73740fdd32409ec34a5d45d5a62b79c5160a4e28a3de8bfd42","ssdeep":"192:5BwzxsMCm1dJDl6hj8P6PEGnvfiZaLkYluY4pLyUJWZPeGz+nrFr:5BQoIJDlC8CPZnvrLkYluYTUuPeGzs","tlshash":"52026189750534221bdf90fad91f474ab3375828a80680bdb4c8d4ed28f252d676bf7a","first_seen":"2023-03-07T01:10:49Z","last_seen":"2026-04-22T20:34:53.983268Z","times_seen":6460,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:24.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-D3ltXc3a-B-Z7uahg.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wBi%2FBa6fbYXFNdznTI4gVh0dE29Mrxe0oiBkrYv8TOvee1FheaNHJTgwzd71OayzpyfrET9tKM6g0QUPK1784u6CBopsqHtCyNUTRQOSNdJFlPToRBlNHkdkCJQKEfzAHOvC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d9e\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93428\r\ncf-cache-status: HIT\r\ncf-ray: 95525bde9c1956cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1347\u0026min_rtt=332\u0026rtt_var=526\u0026sent=375\u0026recv=133\u0026lost=0\u0026retrans=0\u0026sent_bytes=356071\u0026recv_bytes=9872\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=36972\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1004\u0026inflight_dur=100\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3486,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3485)","md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1481953003","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86","sha256":"89:68:57:F4:FD:04:C3:94:84:10:59:C7:94:CB:87:1D:7C:07:51:29:D1:25:C6:75:F4:33:16:EE:2D:9F:60:3B"}}},"request":{"raw":"GET /js/core/bridge3.704.0_en.html?gdpr=1 HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-doubleclick-instream-static\"\r\nreport-to: {\"group\":\"ads-doubleclick-instream-static\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static\"}]}\r\ncontent-length: 269819\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Jun 2025 10:50:52 GMT\r\nexpires: Fri, 19 Jun 2026 10:50:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 17 Jun 2025 21:37:44 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nage: 502173\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856431,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (48645)","md5":"946da54ca510d5abc4848db183354cbc","sha1":"43c4163e2e992737558a87053b775b553f27bb8b","sha256":"2bbda1c49053e3dcd31d50f2ceba5ee2516dbc5a13e90e557f9abd5de6dd6449","sha512":"65fdfa1ff73948441ff96b0999a9e4f92c91aadea9a008235b22283cb9355aeeec62d1c0360b6eff408b7b161259b8d8524a4a03437f66944c7722baecaaa71a","ssdeep":"6144:tlIfdSK6OsJ/pBHfdD9LdE8ObYHiZZavyUhvTkrNK8/C90ktibNZQiAriowmfoYa:r4cB/i8bC2y3wD5wmf+","tlshash":"83052b9db66274258263f4b5503f004fb23ba866f40849bcf689dce16e7984a0677f7c","first_seen":"2025-06-19T22:19:32.969026Z","last_seen":"2025-07-10T17:53:52.662015Z","times_seen":495,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-D3ltXc3a-B-Z7uahg.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1Ex%2BrUGlH6lfI01JNSWg%2FsnSM6MoK2iNeXTH5fn6lEG1OkRjtE5n7myoMJb2AeiXJD%2BhzSeyS4dysXXd0a%2FgAiZX%2F0yRmicBX6ABq%2FQKoV8paVYcih3A2ETH9tXzUZYINXTk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d9e\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93428\r\ncf-cache-status: HIT\r\ncf-ray: 95525be0ac2756cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1203\u0026min_rtt=332\u0026rtt_var=381\u0026sent=564\u0026recv=152\u0026lost=0\u0026retrans=0\u0026sent_bytes=560503\u0026recv_bytes=11025\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=22578\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1341\u0026inflight_dur=136\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3486,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3485)","md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-video-BsHN1m3I.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Fjgfo8S88fEDC5LFzr3ui4bnt0daHxBaVNEIMR0gVWwZrL1NJGzKmI3SUxaBHkoKdFzSFlNBgGXGHvSoLOMAKTv1ztMsQbRzuoMdVal6Xmj7RBHJqhz9X%2BQQlA6zaZ%2BmClhx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-fda\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93408\r\ncf-cache-status: HIT\r\ncf-ray: 95525be3ac3a56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=696\u0026min_rtt=332\u0026rtt_var=153\u0026sent=846\u0026recv=198\u0026lost=0\u0026retrans=0\u0026sent_bytes=871683\u0026recv_bytes=16207\u0026delivery_rate=21769108\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=21530\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1813\u0026inflight_dur=161\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4058,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4057)","md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-CwTj4H1w-BCQqYYxA.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jEMROiwjXu2E%2Bv0CBty9xAK7yzRpAXg8ujUSTyJ5Nu6U7Er7ZfI8BKDGTjwaHz596p5tM9%2BN3JvWXduFUwpjuVBmR91gqupQylF0d%2FEMjHKSpCc4qxs8Rkn2uU9tWBLOuivc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-21d9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43966\r\ncf-cache-status: HIT\r\ncf-ray: 95525bea0cda56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1790\u0026min_rtt=332\u0026rtt_var=1853\u0026sent=1162\u0026recv=231\u0026lost=0\u0026retrans=0\u0026sent_bytes=1226709\u0026recv_bytes=20000\u0026delivery_rate=30479456\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=50004\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=2840\u0026inflight_dur=208\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8665,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7935)","md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:27.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-hls-D8DklbTa.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5t8FQYW86H9vDv2h%2BzkGS0nQtw0eKpPjK21g5myaje68mmSv2WC2FJJF%2FbclBj22G2Y%2FkbVvVLBq2VLeQgj606MCJFEWxkbqu54Z5m1D%2BHBwae6PyRmKME%2B22FFzHGMlBr9H\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-1f10\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93410\r\ncf-cache-status: HIT\r\ncf-ray: 95525bed2d7756cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=881\u0026min_rtt=332\u0026rtt_var=397\u0026sent=1858\u0026recv=274\u0026lost=0\u0026retrans=0\u0026sent_bytes=2025836\u0026recv_bytes=25087\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3340\u0026inflight_dur=266\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7951)","md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Jun 2025 13:26:21 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\netag: W/\"685aa77d-4d7\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BDE%2FUyQaJyDtvpwylZB0GfjxRDD6QqJnWE19ywIIhTcvuWa7nZyl6xd9yOUryXWDfgsOfDUqZ0mS6gZhNhFgByQUNDXygPorez6jHD1xKlzq6em0AuIx58TE1nZ1Gg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\ncf-ray: 95525bd51eaf0b49-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Fri, 27 Jun 2025 06:20:23 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-22T21:11:06.685308Z","times_seen":310497,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/plugins/snax/assets/js/collections.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/plugins/snax/assets/js/collections.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JeqouGUoABlCZg8fmFur%2FnAoFyb1CZLdBhqEVbyzOqkfuukcGsKsE9kk%2FDI7jaCcyV5O%2FmPEitdeQTlMdNDdeTFvomFY49Z%2Fex1KjxxODQrR6mafmSH6fuBs0tQZHg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Thu, 09 Jan 2025 11:50:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677fb803-2582\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd53eb60b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1069\u0026min_rtt=0\u0026rtt_var=904\u0026sent=246\u0026recv=281\u0026lost=0\u0026retrans=0\u0026sent_bytes=39081\u0026recv_bytes=21917\u0026delivery_rate=1219405\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=16245\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=345\u0026inflight_dur=60\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9602,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9602), with no line terminators","md5":"a00fd6dd5efd53a26e2371f5bb53d6f2","sha1":"602b11ca1782aad596d9932809d021e397bdef59","sha256":"5f0989a9002df46b705fb45e14d611df0d8ecc6f6ad2f6587bfe88c1adb0ed60","sha512":"c58632da8c048b85e5874f90630166ead20d82c7a0c905e475134bb53ae4f303430f0f6a9c264155c63e391855e92f56e77eace6fb6916cf6da84d0b69a1fa18","ssdeep":"192:dsAwfcmlfYzoJt1aCBPFImljFd8qftRlCf6fXfCBf9bf9fbRx9lDw9AvR2bnazaQ:dsAUlCu15FIyjFdhtRlaSPUJBFpDw9Ep","tlshash":"60121f4d350077b601eb713654ef459b2873a9b2f1854d4025bba6aacf7ca8d6033b2f","first_seen":"2023-03-07T13:00:40Z","last_seen":"2026-04-20T15:53:15.326393Z","times_seen":165,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_983a8ff496cfa2812a494c01309e745c.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_983a8ff496cfa2812a494c01309e745c.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9jzQmuJig%2BovlkRFkPam9Lp1qZcYWrjHH1%2F8UNgECtvTTS6AovikSnhKKW3Qfzf9zWVWDWdFnbC4vmL1HAo9batdc8CopT1%2BN990Sl3LuAn86XArZRCgl9YTR0uH6A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-a93f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd53eb90b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1069\u0026min_rtt=0\u0026rtt_var=904\u0026sent=248\u0026recv=281\u0026lost=0\u0026retrans=0\u0026sent_bytes=41481\u0026recv_bytes=21917\u0026delivery_rate=1219405\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=16245\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=346\u0026inflight_dur=60\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43327,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2804)","md5":"bea662e51e737cbf3aedba74fdf37d39","sha1":"1983485083bdd7e4b8aa82b253ecb89cff19afdc","sha256":"e2d9feb1b859c71b4b9b08ee5371bf3a52a3cd04f2e783ab242d76e9ffa2ac4b","sha512":"f689756b371e0b46c3b21b2bfecc4dc4ba98e220fd21bf68342fb8ffb6a80f9b9a4acf546d1406c6d492c39f655fb8ec2fcb4d1f4723c90d3ba35d72369858c5","ssdeep":"768:wUTh2rEYidIgv3idVYfQMl0+RtNxPxLMbWoprAvKQIjaKAsl7d9bKmlXkS50aZAw:EvYigXYRjaolSW","tlshash":"c013f94c7255b4b94a9f3677985f16426533aaf3b444ac07e0b950981f38e4ae333b2f","first_seen":"2024-08-19T13:58:57.406123Z","last_seen":"2025-09-07T03:35:33.643975Z","times_seen":4,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7","sha256":"94:9A:1A:D4:CD:CE:19:77:99:6C:C9:14:BB:6E:F6:23:C5:40:A9:70:50:E6:B6:CC:DD:B0:18:CE:3F:DB:E7:A1"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Jun 2025 00:42:46 GMT\r\nexpires: Sat, 20 Jun 2026 00:42:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 452257\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-22T21:08:55.588935Z","times_seen":755428,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":216,"dns":0,"connect":9,"send":0,"wait":9,"receive":5,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/uploads/2024/04/output-onlinepngtools1.png","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:24.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/output-onlinepngtools1.png HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 1340\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d%2BrmWV33EH1nldWGJ9He%2F2YYIJ15esDWsCm8l0wcCo5XE%2FL90Ox%2FizQq%2BkfwDhBubj72QTmFzlt8O0d0sdfY9wilkNwafcjmoRvkqDbnYzSDcT4eJkGouFFHc%2FIEBQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 25 Dec 2024 11:05:27 GMT\r\nvary: Accept-Encoding\r\netag: \"676be6f7-53c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 44148\r\ncf-cache-status: HIT\r\ncf-ray: 95525bdb1ee20b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1235\u0026min_rtt=0\u0026rtt_var=789\u0026sent=461\u0026recv=349\u0026lost=0\u0026retrans=2\u0026sent_bytes=237479\u0026recv_bytes=32348\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=1284\u0026inflight_dur=220\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 58, 8-bit colormap, non-interlaced","md5":"a13f67d97c341361a87682b8a202b382","sha1":"f8be984dfce18204127db5c3e20d99adc617bb3e","sha256":"d02f81360bac4455432a5f8b638ffce40e3162c1cced26f2210986e8bdbbbcc1","sha512":"b7b02fa94729e7ef2c11d190e43afffde84e5561c87f540faf3d3ffeccb7580750b7a129257b86af1807eb4441a90a82bbee347d4d6f5c5474614d96f0fe41b2","ssdeep":"","tlshash":"6c21c8a7d505fd7cd5b8112f4ed7b9a5cf5a87cb0362d22100d707b0a9153342115f14","first_seen":"2025-06-25T06:21:17.72983Z","last_seen":"2026-03-26T02:35:10.549704Z","times_seen":12,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:28.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/prod-3EO0RhVK.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=N6BXU9VDh0CeT4sk0fyMoAi1jl1eYhCHZZcoN9ZKNoa%2FvGQoHsVHQ5HItshPoZERRFkYRGhapaSnhJvfZ8Qj4ScOrdyV7iait2d344rERRrlOvjbz4Fx0nnvP0PFZZmHBIfO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-47d8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93431\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf88e9656cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1467\u0026min_rtt=332\u0026rtt_var=911\u0026sent=3379\u0026recv=388\u0026lost=0\u0026retrans=0\u0026sent_bytes=3736741\u0026recv_bytes=42087\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=65287\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=5158\u0026inflight_dur=476\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9763)","md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_89f369588d629240d6a8d4f8788490c8.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_89f369588d629240d6a8d4f8788490c8.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=s5ZSlXwmS7wr3Vp%2FKw5YyTJGAVKVZ0kXne6Kr3MLplnqCeoy6eRMw3udQFob%2FkQWTVApDFOwT1lt2xkXInurSF8bJL61IZNHbpeErM9%2BUlBTag%2B5oOtacEwuD7qp5g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-38d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd53ebd0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1069\u0026min_rtt=0\u0026rtt_var=904\u0026sent=246\u0026recv=281\u0026lost=0\u0026retrans=0\u0026sent_bytes=39081\u0026recv_bytes=21917\u0026delivery_rate=1219405\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=16245\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=346\u0026inflight_dur=60\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":909,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (604)","md5":"3aab98d5fba91fa41080d199d3e1d5cb","sha1":"583e4706d6ea6f99c6ec3e6547086c529a809dc9","sha256":"36f0dd8d63a28cab1826d032a40f1b0fff24379be1aff68495708af6de631218","sha512":"f43b6af5a62f24c2b5830d52ed2d2a9fc32e669fb5c34f95f7f724a441f5191933585dece992d4c2c0018447c7b666688e72a1dfe64d06484db26d09b2138105","ssdeep":"","tlshash":"a811ef385907a426ba935fed7357e2d5bd078d7d9308a411cdbe8d7424b1e53d120ce8","first_seen":"2023-11-04T22:41:28Z","last_seen":"2026-04-20T15:35:46.688133Z","times_seen":32,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_2bdc713b4abfcc746d20b6a8d083c07d.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_2bdc713b4abfcc746d20b6a8d083c07d.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GBT%2BGEgwCQcJBst0LlkR%2FVuh8ugkj8%2F3a745bmQA2ArwGXz%2FZwDfDYUWwn8Q552f49JzBEhAcLTUaz%2BneIxxKLe2BoX444%2FDRpKXlk5biYu2Ht8jl1aYxIS%2Brxf9Cw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-2cfa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd56ec40b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=570\u0026min_rtt=0\u0026rtt_var=178\u0026sent=315\u0026recv=304\u0026lost=0\u0026retrans=0\u0026sent_bytes=111073\u0026recv_bytes=25455\u0026delivery_rate=3703430\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=20400\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=371\u0026inflight_dur=85\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11514,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2133)","md5":"db22b685b3f72918c0ec29e3ccfb4410","sha1":"5cb5a28cca0610ef17922b58728ae53e73083171","sha256":"aa73c8256d1cec5fd37db54cf933eacc3ab72028420bca3552efdf90f99beec2","sha512":"146a021eae89bbfe296a970f464158d4a8fa13b74d5773fd8654ecd0123a4a59161907096bae67e84aa29f625be579ea6c55a6f67285c13ba207ec3d0dd7841b","ssdeep":"192:kpdFsdSbP+iDbbXzchaQAlO6tpB1LTnd9vehaQfva/wKuehaQf4S4JehaQfocoo2:WdFsdKPfDvDdCo2","tlshash":"ab32766fb27d711a42079497343f020a3a3448966508d27df9bab6cd2e38b1d6432fde","first_seen":"2023-03-07T12:27:56Z","last_seen":"2026-03-31T09:15:59.265264Z","times_seen":12,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:28.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-ui-BXPTXUP4.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DNx0FMJY6%2FINRQvX%2FWuU5Qpvg9F%2BhR9OaxbEIjHrvkbxoj3r0OKtyzfbUuaFBedRhVZPuUTXsI2SrwpyXPm3fchDZmXm%2Fh7L2rDkL6vnD95ENxGfGY%2BofKzWX8G66qvGXxa6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-18392\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf52e8656cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1162\u0026min_rtt=332\u0026rtt_var=435\u0026sent=3026\u0026recv=367\u0026lost=0\u0026retrans=0\u0026sent_bytes=3331737\u0026recv_bytes=39242\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=91114\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4620\u0026inflight_dur=422\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":99218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65375)","md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:29.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/prod-3EO0RhVK.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rlKk7VEJcXHWz%2FMQo7KfyHalDSd8w%2BBCWHvwdCrZv4VUVbRMey%2BnK0Oz8%2BwuibqcSLd6sK%2FsKGRDtlbR5wh2H3Vr5g9%2BJ0x5dKUDUh3zGmQ0XD7LmvPyeYR61tmPWGeqRgt2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-47d8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93432\r\ncf-cache-status: HIT\r\ncf-ray: 95525bfc2ead56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2729\u0026min_rtt=332\u0026rtt_var=755\u0026sent=3584\u0026recv=413\u0026lost=0\u0026retrans=0\u0026sent_bytes=3959452\u0026recv_bytes=45157\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=5733\u0026inflight_dur=599\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9763)","md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/dist/dom-ready.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-includes/js/dist/dom-ready.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BYhGNNUrg2jvkzZSAiK6mmZx%2FgrkoZ0xpCs4k7dtpEE9%2BpLWI1VcVLu6TBhtq%2FPzyZQ9r5w4oTiyM%2BLbq%2F5gVt%2FL3fz9OomrXD9qMqhafz2oSbB2DD%2BP8%2FbYA9p%2Bdg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 31 Jan 2024 22:29:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65bac9e4-1c9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44149\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd56ec70b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=532\u0026min_rtt=0\u0026rtt_var=102\u0026sent=333\u0026recv=310\u0026lost=0\u0026retrans=0\u0026sent_bytes=129778\u0026recv_bytes=25953\u0026delivery_rate=4098488\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=19776\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=375\u0026inflight_dur=89\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":457,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (422)","md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-04-22T21:15:53.169286Z","times_seen":87568,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:26.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-BRaSsAAT.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=J8%2F5UdAsDacHOrM%2FQ6NwZo27KW2cJkuCM8emO3yzAlNnDRbSVksySz7gaWVLQ7ZJqFDGOZi4lP7bfkvAMHfrrJIySeBWTfDijNKdHvKSc%2BPrc2nlBgGRqs6Tv2SodDjvY6vE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d6570\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93432\r\ncf-cache-status: HIT\r\ncf-ray: 95525bec0d5156cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=934\u0026min_rtt=332\u0026rtt_var=340\u0026sent=1373\u0026recv=252\u0026lost=0\u0026retrans=0\u0026sent_bytes=1459403\u0026recv_bytes=22652\u0026delivery_rate=38470703\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=48063\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3157\u0026inflight_dur=240\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":877936,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64878)","md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1119498724","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:28.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86","sha256":"89:68:57:F4:FD:04:C3:94:84:10:59:C7:94:CB:87:1D:7C:07:51:29:D1:25:C6:75:F4:33:16:EE:2D:9F:60:3B"}}},"request":{"raw":"GET /js/core/bridge3.704.0_en.html?gdpr=1 HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-doubleclick-instream-static\"\r\nreport-to: {\"group\":\"ads-doubleclick-instream-static\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static\"}]}\r\ncontent-length: 269819\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Jun 2025 10:50:52 GMT\r\nexpires: Fri, 19 Jun 2026 10:50:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 17 Jun 2025 21:37:44 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nage: 502176\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856431,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (48645)","md5":"946da54ca510d5abc4848db183354cbc","sha1":"43c4163e2e992737558a87053b775b553f27bb8b","sha256":"2bbda1c49053e3dcd31d50f2ceba5ee2516dbc5a13e90e557f9abd5de6dd6449","sha512":"65fdfa1ff73948441ff96b0999a9e4f92c91aadea9a008235b22283cb9355aeeec62d1c0360b6eff408b7b161259b8d8524a4a03437f66944c7722baecaaa71a","ssdeep":"6144:tlIfdSK6OsJ/pBHfdD9LdE8ObYHiZZavyUhvTkrNK8/C90ktibNZQiAriowmfoYa:r4cB/i8bC2y3wD5wmf+","tlshash":"83052b9db66274258263f4b5503f004fb23ba866f40849bcf689dce16e7984a0677f7c","first_seen":"2025-06-19T22:19:32.969026Z","last_seen":"2025-07-10T17:53:52.662015Z","times_seen":495,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:28.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-D3ltXc3a-B-Z7uahg.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BqxQFCpULcPdqnhuJ16z6loM2yUNYY1v7qhyDFfL1AXLAG4yB44jj1qxC7BGCWyMpv9xlNyUuW1rcKigtdj7DLo0sSYPQ7sGLyyjHgyRvabMgQFXPFApRJ4dDcOSgWPlI7Hz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d9e\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93432\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf74e9056cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1110\u0026min_rtt=332\u0026rtt_var=324\u0026sent=3137\u0026recv=379\u0026lost=0\u0026retrans=0\u0026sent_bytes=3452511\u0026recv_bytes=40988\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=91114\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4957\u0026inflight_dur=453\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3486,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3485)","md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/uploads/2024/04/output-onlinepngtools1.png","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:27.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/output-onlinepngtools1.png HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: a=AS5K9poI3XBGhTbGU67TEtLriRnD34dT; token_QpUJAAAAAAAAGu98Hdz1l_lcSZ2rY60Ajjk9U1c=BQOCAAAAAAAACZUAAq0drGYcTFoj79dZ56F4vn5BgqC8t4wAbLdyoQp-NyxwMF-z4QaA894EpLBZ4zOdNm39ERSLKKBrCD-URHu3gMAiNH1ZU35lZCnyeZjt7mKLj6TLnJeuCMZ2DjOYBM1l_vRSKMyKnJ9qo4vXcs3OGjplTHrJskWhksdlw0aXI4e_8fAZagFQ0zsA21qCxkGRUX1bKT6MsmNp6bYwGAaNAUdp03jajVR2_Nrr7C_hPq1ecqb7DZUsBwW_F0LswsdNJmX_11rEDCUyQMw863I9vqdUrqyoktyqYY5QWo_a7Ts7sTc2CsyhjbUdeaRrCj0uuX5A_V-YSKILH153UvIB-IhMUKsqHFQ0SL8Tw8lEGH5CrGEoy9s544uSQeUGr40Lmwt4FnYPYIc-MksgkMiV-nIbr9fpHV6LFcc7MuMVp_ykOTZGkm3Jfhz3BY0yL7lrPYYpKdTguLkxNP2Vux7Vz1RwvuCgYka23Ox5b2zCToMlnGJY0O6XpudzZ5zTYqQ0U2qdGS3ntu82GVSAQaFPJ01S1zubPL-bx9JkXaiXo0J1-HhERH997W1Bm8B-7cMxCU-BTBAJDf8ZZ4OQihXowa7ViHnT_CWFoOGdpK52reEEp6p9d31ylEAenF8yQLPgeqZU7zqXfqf3sYuUolW64QrUnHDaXAeb4gk4iudIRDt191V4K4f0FbXRtueG7Iki9b-5E7q_NKsY_4GXqdZeUI81cSecB5bRBgNrIpb3a2UvQ8vD5p4K2pBSrwfquz_U3OC7p9AELmXU0bZ488Ag1Z_m6y5Pa15ekrUXQC9OScAbKZySqQpb6q2tmUBEbfIkGjj8sWsF1uha1y3o1_2ohmFvnOiHcSQgxXquBeSxcLUX0oGNY4DWcDoN6Fl-x_7-ilNeJNdpm-PJqxBfziaxtnE8YIsy2x7xR8nssCx32p-0h9THB4mvkpkWRge4-0mY0YMElWEgYniEUWdEka4jwNbzqsAYHaiOUUqIqhC5XdQl2tfmh_5w0Ea4ONzeOIc5OyvTDRCW8f4QyhgOg4_SBeRQ3jofKf1do51oP64xM1w0grV2FVz8EH7QFff6K2I1IUPqwZ4f8BwXtDWZC7l_f1MY2DV4PyMttirHJraLwDgPeah1OWylt3adTnVOwS2ymPWUlb4NQquP_WH8PxxLXXn_yNjshI0pzcSw7fa7aJOH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1340\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4GK6r56c7A%2FpnttLX39lckp5tbr9YavxzrTRhzmOLXIqsI6er8k2KjIVzVreGnuCD3dKnEhgZFWTdfUM89%2F5vxCmARIQpqgp4mF7mVuJWeCQfQFRIAm6%2FJ9%2B5TsugA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 25 Dec 2024 11:05:27 GMT\r\nvary: Accept-Encoding\r\netag: \"676be6f7-53c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 44151\r\ncf-cache-status: HIT\r\ncf-ray: 95525bee5f1c0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=651\u0026min_rtt=0\u0026rtt_var=97\u0026sent=634\u0026recv=407\u0026lost=0\u0026retrans=2\u0026sent_bytes=428563\u0026recv_bytes=39113\u0026delivery_rate=14876240\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=21559\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=4362\u0026inflight_dur=297\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 58, 8-bit colormap, non-interlaced","md5":"a13f67d97c341361a87682b8a202b382","sha1":"f8be984dfce18204127db5c3e20d99adc617bb3e","sha256":"d02f81360bac4455432a5f8b638ffce40e3162c1cced26f2210986e8bdbbbcc1","sha512":"b7b02fa94729e7ef2c11d190e43afffde84e5561c87f540faf3d3ffeccb7580750b7a129257b86af1807eb4441a90a82bbee347d4d6f5c5474614d96f0fe41b2","ssdeep":"","tlshash":"6c21c8a7d505fd7cd5b8112f4ed7b9a5cf5a87cb0362d22100d707b0a9153342115f14","first_seen":"2025-06-25T06:21:17.72983Z","last_seen":"2026-03-26T02:35:10.549704Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/prod-3EO0RhVK.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MYjH6kGzLfiIgP4HGe8pmIF%2BTzFjWfyl1gGlz3Mj3KQiGVYLSLLxHPlxzqdGREju4itYjkni0upPILduKMJ8OhO9UfdgNqK%2FVZlcsIgE4rmBHPh1N%2Bm8CuLeW5Qa4YWz0wLU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-47d8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93430\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf1ee2d56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=995\u0026min_rtt=332\u0026rtt_var=282\u0026sent=2593\u0026recv=326\u0026lost=0\u0026retrans=0\u0026sent_bytes=2855792\u0026recv_bytes=32518\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4093\u0026inflight_dur=357\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9763)","md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1346292013","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:29.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86","sha256":"89:68:57:F4:FD:04:C3:94:84:10:59:C7:94:CB:87:1D:7C:07:51:29:D1:25:C6:75:F4:33:16:EE:2D:9F:60:3B"}}},"request":{"raw":"GET /js/core/bridge3.704.0_en.html?gdpr=1 HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-doubleclick-instream-static\"\r\nreport-to: {\"group\":\"ads-doubleclick-instream-static\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static\"}]}\r\ncontent-length: 269819\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Jun 2025 10:50:52 GMT\r\nexpires: Fri, 19 Jun 2026 10:50:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 17 Jun 2025 21:37:44 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nage: 502177\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856431,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (48645)","md5":"946da54ca510d5abc4848db183354cbc","sha1":"43c4163e2e992737558a87053b775b553f27bb8b","sha256":"2bbda1c49053e3dcd31d50f2ceba5ee2516dbc5a13e90e557f9abd5de6dd6449","sha512":"65fdfa1ff73948441ff96b0999a9e4f92c91aadea9a008235b22283cb9355aeeec62d1c0360b6eff408b7b161259b8d8524a4a03437f66944c7722baecaaa71a","ssdeep":"6144:tlIfdSK6OsJ/pBHfdD9LdE8ObYHiZZavyUhvTkrNK8/C90ktibNZQiAriowmfoYa:r4cB/i8bC2y3wD5wmf+","tlshash":"83052b9db66274258263f4b5503f004fb23ba866f40849bcf689dce16e7984a0677f7c","first_seen":"2025-06-19T22:19:32.969026Z","last_seen":"2025-07-10T17:53:52.662015Z","times_seen":495,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:29.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-D3ltXc3a-B-Z7uahg.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XQ72gLwHMx0JlRVeJEgdODdUUwV7m%2B%2BC61WKoYx3Kb1Iu%2Fs9ZggFqp5Y3c0jzNpqMvR%2BUiPBe%2BwnL7kmXPGbbFz9jzZfv9rAOF0G5cCbskd2NlYbV%2F8HC3qh%2BfwEdGCz0nML\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d9e\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93432\r\ncf-cache-status: HIT\r\ncf-ray: 95525bfb0ea956cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2698\u0026min_rtt=332\u0026rtt_var=1063\u0026sent=3579\u0026recv=409\u0026lost=0\u0026retrans=0\u0026sent_bytes=3957231\u0026recv_bytes=44528\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=5556\u0026inflight_dur=573\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3486,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3485)","md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_4ebb21da7b90757cbbb3e2d54edae069.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_4ebb21da7b90757cbbb3e2d54edae069.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Nnr1t8WwyW2FXSsqD%2FbAnDqLT8fAj38SiSn3%2BvHu%2F0p7mvAjnCTijgfFOHPnhFXg67p%2B7XFQdvOkAoyPsPvIiqHauemChfmIk79GzNgyq8YEFUOgu7LgPr8fIUlDWg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-dc2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd5aed40b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=693\u0026min_rtt=0\u0026rtt_var=130\u0026sent=433\u0026recv=338\u0026lost=0\u0026retrans=0\u0026sent_bytes=212943\u0026recv_bytes=30980\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=413\u0026inflight_dur=120\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3522,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (668)","md5":"9271deaac551e5d6835f1638064a9004","sha1":"51861d97c6babd42c739df52c0e4e7d0540550f9","sha256":"6d0e8980855bed455f61823f2a98a5201f8a8f5ce167076515ae0f1941383d67","sha512":"3e24127408ea5b09f7a18c2d88ed068b7be84208f76b3eef8432a5ee79765d4e608c4a7ab781162d6f5b7474b96c1bbc2e6fb1f230b9769870dc9a70a080c6c1","ssdeep":"","tlshash":"cb71f14d71e26d7600cab195896f23427291624dc585c6fc6d32c8d50e94fc68b7afbc","first_seen":"2023-03-13T10:25:42Z","last_seen":"2025-06-25T06:21:17.741333Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spartan/v21/l7gfbjR61M69yt8Z2QKtlA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7","sha256":"94:9A:1A:D4:CD:CE:19:77:99:6C:C9:14:BB:6E:F6:23:C5:40:A9:70:50:E6:B6:CC:DD:B0:18:CE:3F:DB:E7:A1"}}},"request":{"raw":"GET /s/spartan/v21/l7gfbjR61M69yt8Z2QKtlA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Jun 2025 17:22:37 GMT\r\nexpires: Tue, 23 Jun 2026 17:22:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133066\r\nlast-modified: Thu, 29 May 2025 20:17:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33044,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33044, version 1.0","md5":"12fb1f6cfdec83e788279cb03e22c6a8","sha1":"30cd79cceaabe3daf373218ac483924114a5edac","sha256":"4d34849e47c7d2528e2d325526901f58e5a2dc10a4a1c019c617cd56f2045b1a","sha512":"35a1befd987096945739732443f3dc056173cf3d03d28ffd2e0f5cc049b7688f1fd5c92b89840900a1766e73fefde8e5f8750bfc212193328e5eb8f5b81eb9c8","ssdeep":"768:QskSq6TFXGc3un12tBoCDWPEFLkovz6+tRi4MakgQ2W5qQCv72N:G9qFy2tBoqFDxtRaajQDq5v8","tlshash":"17e2e18243b56066e55fb4ff0ecec81b3b524c24e4b65af1d100d39e9066b65608bbf7","first_seen":"2025-05-31T04:41:28.213414Z","last_seen":"2025-11-09T06:29:45.677505Z","times_seen":119,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":265,"dns":1,"connect":10,"send":0,"wait":9,"receive":7,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:24.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-ui-BXPTXUP4.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=P6npAxk%2BnSIt881IHg4yfsU9bfl%2BBOFxNgK%2Bxky%2BRwkcHijhHUfThAI5TqFbts9QG1JIfWiv9wM5T1%2FXJZQfhI9664oyxjs9LXSFV8H5MUhxaOCzxh%2BPkYPDZ%2BOAZF5B5mpm\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-18392\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\ncf-ray: 95525bdeac1a56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1323\u0026min_rtt=332\u0026rtt_var=761\u0026sent=475\u0026recv=145\u0026lost=0\u0026retrans=0\u0026sent_bytes=462641\u0026recv_bytes=10429\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=22578\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1081\u0026inflight_dur=122\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":99218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65375)","md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qxpqaphee4m2.l4.adsco.re/","fqdn":"qxpqaphee4m2.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Apr 2025 09:14:33 GMT","end":"Fri, 18 Jul 2025 09:14:32 GMT"},"fingerprint":{"sha1":"76:AD:98:EA:A8:8F:6F:6D:58:92:36:07:6D:91:B6:67:41:97:C1:4E","sha256":"26:2C:56:B9:5F:64:C4:20:BE:1C:50:3B:4C:EC:7D:C9:67:68:BB:55:A4:E0:55:0F:20:CE:87:11:30:D5:E3:D5"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: qxpqaphee4m2.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T21:09:24.572855Z","times_seen":14075639,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":153,"dns":56,"connect":24,"send":0,"wait":36,"receive":1,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/api/v1/info?id=epckpc","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /api/v1/info?id=epckpc HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=s%2FoqJn8iipUS49ewTdpF91fyimAQBxWCFxfeLhMQmvoLJA7Lr6Ith4qlSPvA2XjlMp7Q71t30aIBcTgCd1o6Rzw%2FxQKzKrjC%2B2BDjmQKqXOWZl%2BoeSN0TheSaQYXQcFf5MPG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: private\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,Referer,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 95525be90caf56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=830\u0026min_rtt=332\u0026rtt_var=268\u0026sent=1104\u0026recv=222\u0026lost=0\u0026retrans=0\u0026sent_bytes=1168812\u0026recv_bytes=18585\u0026delivery_rate=30479456\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=50004\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=2700\u0026inflight_dur=192\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22465,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (22464)","md5":"92fd857d79109e91d0ccc05e0eb17b99","sha1":"ffb4588584d429c9bb501e03b0c4c05cc2571ed8","sha256":"a9335e9fa069ce34905039ebb811e38f1db33f69dc954ccf83d0455af780ffbe","sha512":"538d2ac60a88f732d3d4b03221414dc183bcdc697218267d51aeca988f7300c7d634e0cc915e494048a4e69d5084d0a7306a90c9c70e4ce19a53e606714590d1","ssdeep":"384:uqH7/u2VoLf5Crt6NzfU8+pcPh/xDau1as+dPwIlMeOAoP8PalwdUAZZpv29:uqb5W5CrOzsSnlastvtPHTAtv29","tlshash":"f9a29ebc35187df73a6e0a6bde97a9e853ea37718c8f64c9946063831643760ef01c06","first_seen":"2025-06-25T06:21:17.743533Z","last_seen":"2025-06-25T06:21:17.743533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:29.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-BRaSsAAT.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PgO4lBKV%2B41a93FXIS2zDb5HpCdBDl5bqUcxdBPZilPSzevcJmnyL4MzUPBcLBt%2FicOVGcbBiuXaPdQQElYZB9FMd8Jk%2FSthPmgnCmeRwXu2r%2FM9%2BLD6EoTa%2FtLo4T6Z3lwi\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d6570\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93434\r\ncf-cache-status: HIT\r\ncf-ray: 95525bfc2eae56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2551\u0026min_rtt=332\u0026rtt_var=922\u0026sent=3592\u0026recv=414\u0026lost=0\u0026retrans=0\u0026sent_bytes=3967569\u0026recv_bytes=45203\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=5743\u0026inflight_dur=601\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":877936,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64878)","md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_4629222b871dc338c67e02d7089f0f5a.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_4629222b871dc338c67e02d7089f0f5a.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MWX7ST%2BU%2B%2B3MJr%2F4ZaULL%2FCTeCP1ZC7mwcTL0MUg2f7Cbux7gZytLJVIw%2FrH8eC4%2BSdi2T5US2dIfNf5mUbjji8kk2kYRUVYWTaovl6rRzAd11BZ%2B%2BaZcEUjwQ3hjg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-1dfb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd52eb20b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1467\u0026min_rtt=468\u0026rtt_var=747\u0026sent=238\u0026recv=274\u0026lost=0\u0026retrans=0\u0026sent_bytes=30659\u0026recv_bytes=21081\u0026delivery_rate=686800\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=17231\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=338\u0026inflight_dur=52\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7675,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2263)","md5":"32ec4451a152834ca784ffcaf1304573","sha1":"ac1e0f81366019b559819d6b2f21bb3ce811d83d","sha256":"0b9da241e89f01f672a822b965aa40bc15e987a2913043690e529a511fd443af","sha512":"21521a8e60c7c7aaae52e4eb6b1fc99363ac91ff1e5fc163d9b83a9781842c6f6e49fca9fc686b5b6e842f9c1006b14903f1187bbab354c2bf2906fa29926e5e","ssdeep":"192:V3yEJA5yanHmHNHAHzHGmH9HHhHbRIwfkWYKKhDh2NO6+hKJnjw3:Ve5yanHmHNHAHzHGmH9HHhHbRIwfrYKc","tlshash":"3ff1312d31a8117b83a7b30cf6df9ab819bb3f11d583cf79b0ad504056e0e8165bb948","first_seen":"2024-06-15T05:53:51Z","last_seen":"2026-04-14T13:18:38.651165Z","times_seen":12,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_8b5cca173e2d12b1d577e1ce80202e07.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_8b5cca173e2d12b1d577e1ce80202e07.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=51OcuwdOQ5LSIYZT78G7hxhdnDVS4tUEeSTAtOlEcumYoFUkKg1sLk7Pewe%2BsE%2FJ0sQsGYufZU0PdPoiCgIL9VLColGfx%2BJZfzddQ%2FfxSEOouRFrAlQ1Oku5ZOAl2w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-628b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd56ec20b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=532\u0026min_rtt=0\u0026rtt_var=102\u0026sent=331\u0026recv=310\u0026lost=0\u0026retrans=0\u0026sent_bytes=127378\u0026recv_bytes=25953\u0026delivery_rate=4098488\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=19776\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=375\u0026inflight_dur=89\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25227,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1518)","md5":"cebc755d2d9e591a5cdb55bf262ac1ec","sha1":"adcdd1883e88dbbc32f5ea44b2b43b14e9610df9","sha256":"79e0bcbe3ba7f8ca089d206ad5e2f4c2c106bbd586866cb9a1a4d96fd19e2db7","sha512":"10693bbbcbd8fcec8ccb52ee1012d0fb2fc8f791b24cfdf962273cf642b2d53538bd81e62075342e2956770dc99694c368c13a1c992638e00e315c2ce980ee82","ssdeep":"384:LzoAHmT5jGr08Q1IngYvgId/tHKQgMjN3HyaIb:AAHqjGpQ1IgugId/JKHkN3HyPb","tlshash":"beb2e81c7330323947df72ba885f5245b7330d63c6848425e6b9449c1ef864ab5abfae","first_seen":"2023-03-07T12:27:56Z","last_seen":"2026-03-31T09:15:59.248496Z","times_seen":14,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/red-one-pice-body-latina-gorgeous-ass/?bimber_auto_load_next_post_template=row","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:24.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /red-one-pice-body-latina-gorgeous-ass/?bimber_auto_load_next_post_template=row HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=u58m1w0ihlBZTpkwvSgTOLEYelC71ya%2BzxlDzfiHwBhCAmBOza9vONMWtybUChOQ%2Fv%2BD1gpMugqh%2FIPr6EaTH7V8iSoaHZf2GnLgdAJkXiInb1XQRTlSMTCj6G6S8Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-pingback: https://xcandid.top/xmlrpc.php\r\nlink: \u003chttps://xcandid.top/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://xcandid.top/wp-json/wp/v2/posts/6370\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://xcandid.top/?p=6370\u003e; rel=shortlink\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 95525bdd1ee60b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1304\u0026min_rtt=0\u0026rtt_var=730\u0026sent=466\u0026recv=351\u0026lost=0\u0026retrans=2\u0026sent_bytes=241746\u0026recv_bytes=32725\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=2361\u0026inflight_dur=224\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":505240,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64759)","md5":"d86bd34edca36c259dbabf1e9fbbdc4a","sha1":"6f39b7ed9a79c8411c1bf9577e4c92258645959c","sha256":"7dfdc1eb71e348a4866430f4bc87e99cebe22debec53fff1e16a6ff4ef8fd4a2","sha512":"9698bb3fe525ed76dd691ed0d9d208d0d0e4d73f42ea45d4dfb54fdd8a9117dde87ce0ab89b949becf8209faa84dbc79d7b617360fb1fd46fb2e4ed71aa28201","ssdeep":"6144:33K8ph78CaxFWBr4Qsu4x//zYnmqw1dzrn:qxCaFWBrNsu4BzYnmqwTz7","tlshash":"9bb4f772a9b4232c616bd3119ac1b3dd7614c842e6434fdaf86a9714cbeeec91473b0d","first_seen":"2025-06-25T06:21:17.74741Z","last_seen":"2025-06-25T06:21:17.74741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":977,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:28.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-CwTj4H1w-BCQqYYxA.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dWbuAm1hKJFt8vjLZUaHywyWi%2BYYuu8HRR1s%2BylvAZ7qn26l25uUFf4nQPVvMLdhYVNe8yBRzK%2BTtOK2lpJ9dzqbpWtLcWBj56OmWXp%2BnaOGndT2VfQbZA%2FYYD8SSAWFcR6y\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-21d9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43968\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf2ee6a56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1127\u0026min_rtt=332\u0026rtt_var=210\u0026sent=2676\u0026recv=343\u0026lost=0\u0026retrans=0\u0026sent_bytes=2935033\u0026recv_bytes=35690\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4266\u0026inflight_dur=384\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8665,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7935)","md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/css/autoptimize_single_d04bb03699ef5aaa9303bb13fce3288c.css","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/css/autoptimize_single_d04bb03699ef5aaa9303bb13fce3288c.css HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: text/css; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZSoiBrK1VOYpnlAKq1X6od2l2O0xKYUWbjg8XWgsH2do2Q%2FweLBIvadOCTXISDjO%2BzDHUI1LkW98sCGwO1kczfuqwJf%2Feoncz4Y8JS%2Fj28yPMBNDTtItkrQJkkfGpg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-2f92\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44149\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd50ea60b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1628\u0026min_rtt=468\u0026rtt_var=1265\u0026sent=230\u0026recv=267\u0026lost=0\u0026retrans=0\u0026sent_bytes=21059\u0026recv_bytes=18394\u0026delivery_rate=619748\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=324\u0026inflight_dur=38\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12178,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (12178), with no line terminators","md5":"a3f81a574a259ba08f0cf47dccfee47c","sha1":"1feb5de99bdfc4b53676912e6287232f8cbe12e9","sha256":"9969b7540d54770824e8075c5f89f4380401c965bd763b1aedb1c6b9c8751614","sha512":"8860c04d739cbca1f3d822b74f0fa8847f0f9f984905772a5ce58205ee1cda0d32b93851d3540982dfcd8543cf2fb3135981bbf667a74b28041a2455a377afc4","ssdeep":"192:7SBUiEparqG3ynHlZDpbH3lxNGFTfIbrjBhnIgcJu049V6b0iE8leg3dxc+Iq0a0:o+G/3ynF/bH3lxNGFMHjBhnIgcJYiE82","tlshash":"e742bf74f5bd826b251351ac2224fadb9b78edc3e9106fb4f1ae7054b0826d531bb341","first_seen":"2025-06-25T06:21:17.748139Z","last_seen":"2025-06-25T06:21:17.748139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scripts.simpleanalyticscdn.com/latest.js","fqdn":"scripts.simpleanalyticscdn.com","domain":"simpleanalyticscdn.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scripts.simpleanalyticscdn.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:11:58 GMT","end":"Thu, 18 Sep 2025 21:11:57 GMT"},"fingerprint":{"sha1":"03:AD:DC:8B:00:05:D8:E7:7A:C6:85:99:7F:81:FB:8F:22:9D:27:D1","sha256":"E3:F3:4B:59:C5:72:39:F6:15:4C:0D:BF:97:4A:A2:D6:CD:E8:77:3C:3B:AF:A4:49:7C:76:BA:07:EF:DD:2A:F7"}}},"request":{"raw":"GET /latest.js HTTP/1.1\r\nHost: scripts.simpleanalyticscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 103822\r\ncdn-uid: 621ef7c8-45de-46e4-8237-2eca0c3a2d75\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"64ab8017-1d5b\"\r\nlast-modified: Mon, 10 Jul 2023 03:50:47 GMT\r\ncdn-storageserver: DE-1022\r\ncdn-fileserver: 635\r\ncdn-proxyver: 1.28\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/04/2025 14:38:00\r\ncdn-edgestorageid: 830\r\nsimple-analytics: true\r\ncdn-requestid: eab973d1df2868caa6160a44ec778217\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7515,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7370)","md5":"aa6014215f23cb3f6cb4902be02d081a","sha1":"44ba2453c2e980ba84602006b4b912736cfd913c","sha256":"a965bdafdcbdf6a1bc0a04fb81ee6d5fb86e1fde7a2da4e8998ab3bcf467bdb4","sha512":"483e8e0a4575808ab0c1262718d85a0b2b9d8bd76d7808ed19050cff3c13690191fe6afb1c9e93576fb153630b413aeffe9fd56bb169d66f97d7fcea1c311917","ssdeep":"96:afayldLqaMRuO24q4cVWQ4BPdTJJ6/j4YE9KQeL6lRS+LwNYzCZu2vQmaDN:abctc45PPQj4YE9uWA+Y1Zu2vQmaZ","tlshash":"4df10adcb2a1707397d3307281afd20ea33b779b398bc4555d1899d4ac7494a4027f2c","first_seen":"2023-05-06T11:43:24Z","last_seen":"2026-04-22T03:05:24.823389Z","times_seen":1524,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":42,"dns":70,"connect":1,"send":0,"wait":4,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#epckpc","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CuplaWPrZilORdT13rvy6D8ShYAo%2F2r13nYepjHDkF0lnIMcCs0qHGofw7RAsFppkTmkdhhuC88%2Fy1RpSOrs90ybcUC%2BKvSb7vmVCCdQSCBDUDgVyxubminLrQ%2FmWPXLafsw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=10\r\npermissions-policy: browsing-topics=()\r\nage: 93431\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525be6fc6056cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=882\u0026min_rtt=332\u0026rtt_var=429\u0026sent=855\u0026recv=201\u0026lost=0\u0026retrans=0\u0026sent_bytes=880060\u0026recv_bytes=16614\u0026delivery_rate=21769108\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=21530\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=2351\u0026inflight_dur=166\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1312,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"1d5570ab81c86a4292fed1eca89734b6","sha1":"2845e7b58dc59fcf963b60e5a1519ab0417ffbb6","sha256":"a28df2b44d0506bee3ede4c0a20155c7b94e6078c45ede2d932fdbddca0faa10","sha512":"34f91c3144f14124fd3c39e4c0e42e9ad4820588bae062a2d99be3dbcab9cd9573c1eed821448304ac509f0bad668201aac27268fdbe49a8e10a93becec37732","ssdeep":"","tlshash":"e62133811cf0c821933322194f7ef1087897a10346599d2479de91285f45bd78ea7db8","first_seen":"2025-06-25T06:21:17.749438Z","last_seen":"2025-06-25T06:21:17.749438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-BRaSsAAT.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xOmTotmRPqAR5JA0pLb%2FKfpcuUmhY5NJjhUdk%2F7mQWdbBJ%2B145%2BBLn%2B3K%2FkjYEGvPUBeBPkYMBVllFo1o42uHiyMyv5NsWKC364VX%2FpXcPj%2FKp5GlnCu6Q%2BzKEh79OwD%2Bh2J\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d6570\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93431\r\ncf-cache-status: HIT\r\ncf-ray: 95525be7ac6656cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=925\u0026min_rtt=332\u0026rtt_var=406\u0026sent=870\u0026recv=203\u0026lost=0\u0026retrans=0\u0026sent_bytes=894736\u0026recv_bytes=17164\u0026delivery_rate=21769108\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=21530\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=2461\u0026inflight_dur=169\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":877936,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64878)","md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_87d8462cdbc8581a6c15c4db224717e5.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_87d8462cdbc8581a6c15c4db224717e5.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WkrFzd4c%2Bkp%2FCkqkZWXOSpSzKxnX6uV54nu8k5bPuTTAZCnHel8FlhioSjKJA1nkIsZZ6qcsmwikxspRBgdj%2Fh7CNRtlsD%2BQYIYfcEbsAJKfyE8PNFjyGzNSaMWNLg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-edf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd50eaa0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1703\u0026min_rtt=468\u0026rtt_var=1485\u0026sent=228\u0026recv=265\u0026lost=0\u0026retrans=0\u0026sent_bytes=18659\u0026recv_bytes=17471\u0026delivery_rate=619748\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=321\u0026inflight_dur=35\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3807,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (845)","md5":"0b8b82b57901177e001e21d43fca93c6","sha1":"7a2fec1fd4f464ab478cf67ab8daa4c8910e4b93","sha256":"41c6ce0bbe8694ea355b45ac68820c044111a265beaf99e5d24ce3548d7becbc","sha512":"9cc85b27a238d2f7696647b546a0b27b92e1477bd8fed42fd5d3cefee39bd07a58f1d63c60a8f8b419efdd804224e2cff7fa59709842afd9a50d8155d77eb321","ssdeep":"","tlshash":"b57185667ae635f1d2db311a047f2346b1658e6f8208d048d90898a93ff1f81a5e6b2d","first_seen":"2023-03-09T03:38:32Z","last_seen":"2025-06-25T06:21:17.750155Z","times_seen":6,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/uploads/2024/04/output-onlinepngtools1.png","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:28.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/output-onlinepngtools1.png HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: a=AS5K9poI3XBGhTbGU67TEtLriRnD34dT; token_QpUJAAAAAAAAGu98Hdz1l_lcSZ2rY60Ajjk9U1c=BQOCAAAAAAAACZUAAq0drGYcTFoj79dZ56F4vn5BgqC8t4wAbLdyoQp-NyxwMF-z4QaA894EpLBZ4zOdNm39ERSLKKBrCD-URHu3gMAiNH1ZU35lZCnyeZjt7mKLj6TLnJeuCMZ2DjOYBM1l_vRSKMyKnJ9qo4vXcs3OGjplTHrJskWhksdlw0aXI4e_8fAZagFQ0zsA21qCxkGRUX1bKT6MsmNp6bYwGAaNAUdp03jajVR2_Nrr7C_hPq1ecqb7DZUsBwW_F0LswsdNJmX_11rEDCUyQMw863I9vqdUrqyoktyqYY5QWo_a7Ts7sTc2CsyhjbUdeaRrCj0uuX5A_V-YSKILH153UvIB-IhMUKsqHFQ0SL8Tw8lEGH5CrGEoy9s544uSQeUGr40Lmwt4FnYPYIc-MksgkMiV-nIbr9fpHV6LFcc7MuMVp_ykOTZGkm3Jfhz3BY0yL7lrPYYpKdTguLkxNP2Vux7Vz1RwvuCgYka23Ox5b2zCToMlnGJY0O6XpudzZ5zTYqQ0U2qdGS3ntu82GVSAQaFPJ01S1zubPL-bx9JkXaiXo0J1-HhERH997W1Bm8B-7cMxCU-BTBAJDf8ZZ4OQihXowa7ViHnT_CWFoOGdpK52reEEp6p9d31ylEAenF8yQLPgeqZU7zqXfqf3sYuUolW64QrUnHDaXAeb4gk4iudIRDt191V4K4f0FbXRtueG7Iki9b-5E7q_NKsY_4GXqdZeUI81cSecB5bRBgNrIpb3a2UvQ8vD5p4K2pBSrwfquz_U3OC7p9AELmXU0bZ488Ag1Z_m6y5Pa15ekrUXQC9OScAbKZySqQpb6q2tmUBEbfIkGjj8sWsF1uha1y3o1_2ohmFvnOiHcSQgxXquBeSxcLUX0oGNY4DWcDoN6Fl-x_7-ilNeJNdpm-PJqxBfziaxtnE8YIsy2x7xR8nssCx32p-0h9THB4mvkpkWRge4-0mY0YMElWEgYniEUWdEka4jwNbzqsAYHaiOUUqIqhC5XdQl2tfmh_5w0Ea4ONzeOIc5OyvTDRCW8f4QyhgOg4_SBeRQ3jofKf1do51oP64xM1w0grV2FVz8EH7QFff6K2I1IUPqwZ4f8BwXtDWZC7l_f1MY2DV4PyMttirHJraLwDgPeah1OWylt3adTnVOwS2ymPWUlb4NQquP_WH8PxxLXXn_yNjshI0pzcSw7fa7aJOH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 1340\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pHM5RSNkOO21nMZqFLyCwXLSMrYfTEm577LuEIZtExNuReHgHZqDVDa1cnu66VMZk4MTUyfOMiuFqcO0lAP3AhUtbHP2NIKBv8aPcxngk37IRArid5OGTbUKhbsxUw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 25 Dec 2024 11:05:27 GMT\r\nvary: Accept-Encoding\r\netag: \"676be6f7-53c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 44152\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf42f2e0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1425\u0026min_rtt=0\u0026rtt_var=1200\u0026sent=807\u0026recv=434\u0026lost=0\u0026retrans=3\u0026sent_bytes=618807\u0026recv_bytes=46919\u0026delivery_rate=18595440\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=27584\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=5296\u0026inflight_dur=401\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 58, 8-bit colormap, non-interlaced","md5":"a13f67d97c341361a87682b8a202b382","sha1":"f8be984dfce18204127db5c3e20d99adc617bb3e","sha256":"d02f81360bac4455432a5f8b638ffce40e3162c1cced26f2210986e8bdbbbcc1","sha512":"b7b02fa94729e7ef2c11d190e43afffde84e5561c87f540faf3d3ffeccb7580750b7a129257b86af1807eb4441a90a82bbee347d4d6f5c5474614d96f0fe41b2","ssdeep":"","tlshash":"6c21c8a7d505fd7cd5b8112f4ed7b9a5cf5a87cb0362d22100d707b0a9153342115f14","first_seen":"2025-06-25T06:21:17.72983Z","last_seen":"2026-03-26T02:35:10.549704Z","times_seen":12,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:29.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-D3ltXc3a-B-Z7uahg.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2ivKaCnaGRqaLN0prGHDZTonzbxjEq7P1pYhBkorGqv%2FArce4y%2B2j8T6X8rkGIZQs6N3lbFDtyyJdTu%2BPw3AVpA9avST%2F4pZTed5hkV53dObwGtHOOSEFSSccLc2iEOM%2BRGU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d9e\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93432\r\ncf-cache-status: HIT\r\ncf-ray: 95525bfa9e9f56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2135\u0026min_rtt=332\u0026rtt_var=574\u0026sent=3547\u0026recv=403\u0026lost=0\u0026retrans=0\u0026sent_bytes=3924627\u0026recv_bytes=44010\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=5485\u0026inflight_dur=536\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3486,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3485)","md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/dist/hooks.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Lwgr6M0pvZrVuKvFiBKan623twLk2Jn9bA27viSePXA0whfRMQ%2FoYyO5e7m9bPqoauPGNrgLvASu9F%2B1JJodG5crJOo4gZgxxk3n%2FpIjXj5VfMeYbZcTIsFYPIBksw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 13 Nov 2024 08:57:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673469f6-12a8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44149\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd56ec80b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=554\u0026min_rtt=0\u0026rtt_var=181\u0026sent=351\u0026recv=315\u0026lost=0\u0026retrans=0\u0026sent_bytes=144338\u0026recv_bytes=26422\u0026delivery_rate=4472911\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=14560\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=378\u0026inflight_dur=92\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4776,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-22T20:48:49.068469Z","times_seen":213860,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.167.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\naccess-control-allow-origin: https://xcandid.top\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95525be7cf1a56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":51,"dns":33,"connect":1,"send":0,"wait":7,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#q3mvff","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:27.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RGonQ0OtLbnxjOpTSvvVcrgjPC%2BLa082oi5vrkyvSm1bIR3g6gL%2Fl9dbTAvaoZx0M6GBpon7xpZ%2BfV%2BoJ%2FWecoSYcCHz6BCycu1aT%2F9so8ER7WlU7Jea3lnqrK6Q3uchQXEh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=10\r\npermissions-policy: browsing-topics=()\r\nage: 93433\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bef4dbb56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1197\u0026min_rtt=332\u0026rtt_var=330\u0026sent=1952\u0026recv=300\u0026lost=0\u0026retrans=0\u0026sent_bytes=2112880\u0026recv_bytes=29452\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3677\u0026inflight_dur=317\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1312,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"1d5570ab81c86a4292fed1eca89734b6","sha1":"2845e7b58dc59fcf963b60e5a1519ab0417ffbb6","sha256":"a28df2b44d0506bee3ede4c0a20155c7b94e6078c45ede2d932fdbddca0faa10","sha512":"34f91c3144f14124fd3c39e4c0e42e9ad4820588bae062a2d99be3dbcab9cd9573c1eed821448304ac509f0bad668201aac27268fdbe49a8e10a93becec37732","ssdeep":"","tlshash":"e62133811cf0c821933322194f7ef1087897a10346599d2479de91285f45bd78ea7db8","first_seen":"2025-06-25T06:21:17.749438Z","last_seen":"2025-06-25T06:21:17.749438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:28.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-Bq6c3Bam-CqhR3Et0.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uYLPx02Zxka7kfFG9XkGx2t%2FxkGoMqd6v86YZhmvTNuzVctUEicnWt1Xf%2BnHekM2H7USLIbnLZWiOkSiHzw51PJbzkihc51SU70MeyOMMFk%2F9wWLUEAS%2FwrB8DPER%2BBEZRDn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-2f6f\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93411\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf3ae7c56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1421\u0026min_rtt=332\u0026rtt_var=757\u0026sent=2687\u0026recv=348\u0026lost=0\u0026retrans=0\u0026sent_bytes=2940730\u0026recv_bytes=36647\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4374\u0026inflight_dur=400\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12143,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12142)","md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:30.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-hls-D8DklbTa.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=V0mXbJjestbaxGfk6d5h1jrVoCTTzpH4b2PI0ThefNYTjdsA1U4M5b%2FLXmsVGuT3Kp9E4EOW%2BqCeyzL5WomU13WiloqCkCc7TFlIM2yo11gJM07OlIRd3ZqQlzPoAan%2F0HNm\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-1f10\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93413\r\ncf-cache-status: HIT\r\ncf-ray: 95525c007eeb56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1878\u0026min_rtt=332\u0026rtt_var=688\u0026sent=3840\u0026recv=426\u0026lost=0\u0026retrans=0\u0026sent_bytes=4252218\u0026recv_bytes=47169\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=6426\u0026inflight_dur=648\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7951)","md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_d5f0c2881b18809265062c50de00ee80.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_d5f0c2881b18809265062c50de00ee80.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bd%2FVNcJ152JLriDRTCJOd9GdNDNxpOHFWkWqV9CYs4UrKBMlWhZIbgW3PXMFxnldZp1aFeCpee5HSElFkHMWeIFKJkKEJEkwm7CnK7W1QbHOvqu9sJrSy9D3bI9fhw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-47f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd51eb10b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1533\u0026min_rtt=468\u0026rtt_var=1137\u0026sent=232\u0026recv=268\u0026lost=0\u0026retrans=0\u0026sent_bytes=23459\u0026recv_bytes=18439\u0026delivery_rate=619748\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=14400\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=326\u0026inflight_dur=41\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1151,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (993)","md5":"b1aa03d630306f1ccda3be5eceb43d30","sha1":"e7ec7ba18d6fae5cc3467ff90bb8b55889e399a5","sha256":"3963fa63b7d12048a3dad9ce48f4b2b3e9c5538414233f14d2c686a66ff3d692","sha512":"db6a7595347207edb869051d6dd2ef50c2dcbb1d6cfcb0af422661af1d177e7d77c7b0230423addbdb58cfb63bbe93c240805ec6b080f476a836d171d21916d4","ssdeep":"","tlshash":"2921fbee3630a286610a6cd9b81a01804116a87b60c0c9f5f9b1c8157d79a0a1cb2bcf","first_seen":"2023-03-07T12:27:56Z","last_seen":"2025-11-11T02:38:20.764026Z","times_seen":8,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-Bq6c3Bam-CqhR3Et0.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XZXsZzyeMUusi4cAUMMumd1JApzwi93ByeQdQzD%2FN1wzr8pqIDXdp1XPIrGHMAH%2F1fqmTJ27CqJHUCR60eIB3%2BI6HZ9SK9lRCulGcQgeGkKHpJnel9YnpTh6DTMgl5%2FGZB4s\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-2f6f\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93408\r\ncf-cache-status: HIT\r\ncf-ray: 95525be3ac3c56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=696\u0026min_rtt=332\u0026rtt_var=153\u0026sent=848\u0026recv=198\u0026lost=0\u0026retrans=0\u0026sent_bytes=874077\u0026recv_bytes=16207\u0026delivery_rate=21769108\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=21530\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1814\u0026inflight_dur=161\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12143,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12142)","md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:27.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-video-BsHN1m3I.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0cCp15u1PVrNFeohmKG8I9LFeYxaWEU9Fyw6eAi5UBMYmdrA1OWmgSgX4YOKR84uyH%2BFN%2BUGz1%2F46tBS%2BvIyns5qhmwtiaunXr%2BY5W4L9UYHtuwLrdFhrtRT%2B35eLVxMgROM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-fda\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93410\r\ncf-cache-status: HIT\r\ncf-ray: 95525bed3d7856cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=881\u0026min_rtt=332\u0026rtt_var=397\u0026sent=1862\u0026recv=275\u0026lost=0\u0026retrans=0\u0026sent_bytes=2029771\u0026recv_bytes=25365\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3341\u0026inflight_dur=266\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4058,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4057)","md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-DsSvO8OB.css","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:27.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-DsSvO8OB.css HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: text/css\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gR3w8jGBekmgOuZ5pCpM48p4ND0wji7LmqbNXkV18N5%2FheOm13RVTuCycNqmykl0yHRteuI%2F3Es0VgLC1JOCzI5ccWMtZlXcuMuF7Q1gAPSfyoQci%2BWhcxfbfxdYzhkZziAb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-107f9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43968\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf0cdf856cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1214\u0026min_rtt=332\u0026rtt_var=466\u0026sent=2165\u0026recv=311\u0026lost=0\u0026retrans=0\u0026sent_bytes=2350950\u0026recv_bytes=31138\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3920\u0026inflight_dur=336\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67577,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"71d60520b4e2bd909f99d02da0ea779f","sha1":"ea28d120344bcfa8e2b1fdd9943197b6c2200f2a","sha256":"18c18ae6d606f8066f233273063edf80a2eb606f66602a98f4e9137c51135baa","sha512":"7a30d27940db7ddf540b8b7257d50ced8020a57d915b2e613b4c9efacb88e21c9b6fba6aaff28f118b3ccfcfa7a36d8b4280841b9b17894d5bfaab3679e63eaa","ssdeep":"384:NEihDpmQd+MeEeuID+MAbb4Pra5b0RvGCGQaJO1/VJFGhxDzV7a4N9QoyUTR5dP4:TxBeHoVSVJmxzuksXQJfDFMVwgjSG","tlshash":"706384e8fa4c613eb817614d1acc958ea32dfd40eed31a94e9c27128cdd7af31179684","first_seen":"2025-06-01T22:18:38.544356Z","last_seen":"2026-04-21T17:08:40.069138Z","times_seen":48,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-D3ltXc3a-B-Z7uahg.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AuvsYulJJz3i7DkLLvmi41IZWVMIUJVgHEpT7ZnjRiDbkdIwhQWOsTdXfwlBdMr4%2Bb%2Fq2VDNy8I9OfluAYbTYEArc0iWsp0O0mOaBbB04ajjo%2BIFAN4WoN%2FB5AoeP6axlMo9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d9e\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93431\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf0ddfe56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=954\u0026min_rtt=332\u0026rtt_var=430\u0026sent=2327\u0026recv=316\u0026lost=0\u0026retrans=0\u0026sent_bytes=2544224\u0026recv_bytes=31361\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3924\u0026inflight_dur=341\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3486,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3485)","md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:28.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86","sha256":"89:68:57:F4:FD:04:C3:94:84:10:59:C7:94:CB:87:1D:7C:07:51:29:D1:25:C6:75:F4:33:16:EE:2D:9F:60:3B"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\nexpires: Wed, 25 Jun 2025 06:20:28 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 7598073993838571503\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 145903\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":462831,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3524)","md5":"384d428c886fb8db470007a1bbfce045","sha1":"a6ea8f08b2936b9ea06f1bfdc56e400d92159374","sha256":"86951c2596101bdecb648fac6e1f0bf14de24ca168f2ba068ab75f2d9a02e949","sha512":"d1b352c8bc1990d999de70d4197358af8c192fe91dbcc69b31a036be2b002b8b2786722e97537b40cab72c4b12b6f8bd4cb3dd107f51e6497fae627c84659b44","ssdeep":"6144:o1kqpy0eCz0k8ZuBmBk46KJUltbRPVzTsf10j:EXkuBmG4LJKtbRPVz4S","tlshash":"b0a4facdb6a674629363f4f5403f014bb23ba86af408886cb249d9e16e7490d5277f7c","first_seen":"2025-06-25T06:21:17.727471Z","last_seen":"2025-06-25T06:21:17.727471Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/comment-reply.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GxAPcTaRuL21lsKGc42s8L%2BwpPZyJLdp5P5Pbyz013RvyckxTmYPWlEuFnnQfZJhVJ7Qucvg1SVqa8f3t3KBFlw9YIRkF3XCoGKmDWzJr9drug9RuNLPF3J%2B53pwiA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 13 Nov 2024 08:57:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673469f6-bd2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd53eba0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=830\u0026min_rtt=0\u0026rtt_var=922\u0026sent=252\u0026recv=283\u0026lost=0\u0026retrans=0\u0026sent_bytes=46281\u0026recv_bytes=22009\u0026delivery_rate=1905324\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=15933\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=348\u0026inflight_dur=62\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3026,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2991)","md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-22T21:18:30.553734Z","times_seen":62483,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_5f7fe32adec366147a0f2affeb4be3ba.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_5f7fe32adec366147a0f2affeb4be3ba.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4bBgAp%2B5uuY%2B6f8T8%2BXLygytb6Mi3ppL55owumPBRS%2FgAS8LFsqR%2BrfpmtqMvmJ3PuQoWv%2BlNymSvU7Jqhhxq3xX2kQo0zy2CNJWU29F%2BoW2fmy%2F3S9dlO3BmdzZ1A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-d3e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd5aed50b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=711\u0026min_rtt=0\u0026rtt_var=133\u0026sent=435\u0026recv=339\u0026lost=0\u0026retrans=0\u0026sent_bytes=214865\u0026recv_bytes=31024\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=415\u0026inflight_dur=121\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3390,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1133)","md5":"ab1edd7799b09f144d685a9112c6631b","sha1":"84eee6bd0ddbe1034543bd676c7f5d13f1b3826c","sha256":"fb244f134afea524f720e34dd269ee18264410c04a8f155f788526b08f36c8a1","sha512":"4f2a90cedac069b8b2cbfcbb11d38a2746adc87793d53caeaff4e94cc70a564b039d856e6b9700170cdc3d703d1f27afccfebce78c65990f54477c95112adad3","ssdeep":"","tlshash":"a6614e9575f96db0c097a2b7546f23c6b0a2a19ae004c5dd6c32cec01eb4fc542a6b7d","first_seen":"2023-03-13T10:25:43Z","last_seen":"2025-06-25T06:21:17.755016Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:28.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-default-layout-BuBwqJzH.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nik%2B0m8K7jnyj83gkVbg%2B1CQ%2BpGbOu%2BB%2Bf25WkGoorauuu8BlIN3JC64pdhxMg%2BZKDAVQmcfj1BBTpPW%2FNbtG%2F8bW7VK3WYem9JAJtMX9GCUJtpvoiuV0M75Czl0lHbH5b0h\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-bfb2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93432\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf70e8d56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1149\u0026min_rtt=332\u0026rtt_var=242\u0026sent=3085\u0026recv=374\u0026lost=0\u0026retrans=0\u0026sent_bytes=3394758\u0026recv_bytes=40511\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=91114\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4922\u0026inflight_dur=436\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49074,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4007)","md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:28.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-BRaSsAAT.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fe9uMtQMIPC652ewEmkxCXbfukqLmjVyru7z7qP8g2SYf4yRDuk89NOFOsLF61%2B2KWO6igLjTRenKAgZvDCFHBDY6eSxZpxriMV3rOO90CsU92nlMFkrxcPtdPOTjHCb51aW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d6570\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93434\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf87e9456cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1123\u0026min_rtt=332\u0026rtt_var=268\u0026sent=3148\u0026recv=382\u0026lost=0\u0026retrans=0\u0026sent_bytes=3462788\u0026recv_bytes=41570\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=91114\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=5142\u0026inflight_dur=463\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":877936,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64878)","md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:28.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/prod-3EO0RhVK.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JWU2%2FBWSsTukgM6f%2B0N5nr%2BhNX%2BEmHEC8OsXY3hXTOAMtEqZOW5O8TrDKonCjENiebg9Iir9iOVjOOpfjqy6kI7qIx0tDZQ8XJD1UbGqfSVZMmj%2BUk5CO6QR4aNIL6asXP%2FI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-47d8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93431\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf87e9356cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1123\u0026min_rtt=332\u0026rtt_var=268\u0026sent=3141\u0026recv=382\u0026lost=0\u0026retrans=0\u0026sent_bytes=3454696\u0026recv_bytes=41570\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=91114\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=5141\u0026inflight_dur=463\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9763)","md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-BRaSsAAT.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Y%2FC9yomx2STvyMmfGdFP0%2BLBB1sT5pXawJ2koRM%2FQs390OppPfz8x0JGSYw3g4jdQ04i1QMeB3z%2B9hit9ROw2r0%2FsKlbRx%2B%2Bmb6DLHOsJkBtaq9luvD1a5EoCXKm9PCUDSrL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d6570\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93430\r\ncf-cache-status: HIT\r\ncf-ray: 95525be29c2e56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1139\u0026min_rtt=332\u0026rtt_var=339\u0026sent=581\u0026recv=162\u0026lost=0\u0026retrans=0\u0026sent_bytes=570929\u0026recv_bytes=13319\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=22578\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1645\u0026inflight_dur=139\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":877936,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64878)","md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-BTigPj2h-C_M5YE9g.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-BTigPj2h-C_M5YE9g.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d3MvMg1detnR90bZSKOQI6bKaXLq4En29ti0V9mcD0y7vootJUxBW8GbRGgkyULODzM7abfGE%2BxEarFNMC%2BjBGm1OGQnsanQmxJY5zSNfe0eXMAKJaZXJ2JE6zgx8ScLLCYp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-459\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93407\r\ncf-cache-status: HIT\r\ncf-ray: 95525be2bc3656cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=669\u0026min_rtt=332\u0026rtt_var=132\u0026sent=841\u0026recv=194\u0026lost=0\u0026retrans=0\u0026sent_bytes=870339\u0026recv_bytes=15294\u0026delivery_rate=21769108\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=21530\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1666\u0026inflight_dur=160\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1113,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1112)","md5":"0a843e1710f9dd9c18edb16035705d97","sha1":"24d9185dc9d8525fe2cb0012f52cb339f1228989","sha256":"fb3f08b8bf6f02341e6636e0e20f9f35a855e71d9da60ea0fea9f93ddf14c361","sha512":"80536faa42b43d4ebdfd78fbfd4d2e8cdb60119bd518e768970a599141272878ecdf7e566f2880f1518020502abf9e2590e84c549a4fb2b63f1b3b9f1c6a218c","ssdeep":"","tlshash":"3821cecc644d6270305b087ee9aad181ecf17b91ee351251107bb5bf59a04bb53c621e","first_seen":"2025-06-25T06:21:17.728364Z","last_seen":"2025-06-25T06:21:17.728364Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockadsnot.com/tceinpwmsncnlxf?QWfXiIMl=BQOCAAAAAAAACZUAAq0drGYcTFoj79dZ56F4vn5BgqC8t4wAbLdyoQp-NyxwMF-z4QaA894EpLBZ4zOdNm39ERSLKKBrCD-URHu3gMAiNH1ZU35lZCnyeZjt7mKLj6TLnJeuCMZ2DjOYBM1l_vRSKMyKnJ9qo4vXcs3OGjplTHrJskWhksdlw0aXI4e_8fAZagFQ0zsA21qCxkGRUX1bKT6MsmNp6bYwGAaNAUdp03jajVR2_Nrr7C_hPq1ecqb7DZUsBwW_F0LswsdNJmX_11rEDCUyQMw863I9vqdUrqyoktyqYY5QWo_a7Ts7sTc2CsyhjbUdeaRrCj0uuX5A_V-YSKILH153UvIB-IhMUKsqHFQ0SL8Tw8lEGH5CrGEoy9s544uSQeUGr40Lmwt4FnYPYIc-MksgkMiV-nIbr9fpHV6LFcc7MuMVp_ykOTZGkm3Jfhz3BY0yL7lrPYYpKdTguLkxNP2Vux7Vz1RwvuCgYka23Ox5b2zCToMlnGJY0O6XpudzZ5zTYqQ0U2qdGS3ntu82GVSAQaFPJ01S1zubPL-bx9JkXaiXo0J1-HhERH997W1Bm8B-7cMxCU-BTBAJDf8ZZ4OQihXowa7ViHnT_CWFoOGdpK52reEEp6p9d31ylEAenF8yQLPgeqZU7zqXfqf3sYuUolW64QrUnHDaXAeb4gk4iudIRDt191V4K4f0FbXRtueG7Iki9b-5E7q_NKsY_4GXqdZeUI81cSecB5bRBgNrIpb3a2UvQ8vD5p4K2pBSrwfquz_U3OC7p9AELmXU0bZ488Ag1Z_m6y5Pa15ekrUXQC9OScAbKZySqQpb6q2tmUBEbfIkGjj8sWsF1uha1y3o1_2ohmFvnOiHcSQgxXquBeSxcLUX0oGNY4DWcDoN6Fl-x_7-ilNeJNdpm-PJqxBfziaxtnE8YIsy2x7xR8nssCx32p-0h9THB4mvkpkWRge4-0mY0YMElWEgYniEUWdEka4jwNbzqsAYHaiOUUqIqhC5XdQl2tfmh_5w0Ea4ONzeOIc5OyvTDRCW8f4QyhgOg4_SBeRQ3jofKf1do51oP64xM1w0grV2FVz8EH7QFff6K2I1IUPqwZ4f8BwXtDWZC7l_f1MY2DV4PyMttirHJraLwDgPeah1OWylt3adTnVOwS2ymPWUlb4NQquP_WH8PxxLXXn_yNjshI0pzcSw7fa7aJOH\u0026CXfocxDI=4\u0026ucvTlqow=5188393\u0026cDlsUjqd=\u0026aHrzdyeM=1:1,1:1,0\u0026DHgjFdVO=\u0026NWDxCrjq=\u0026s=1280,1024,1,1280,1024,0","fqdn":"blockadsnot.com","domain":"blockadsnot.com","tld":"com"},"ip":{"addr":"208.95.112.254","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:27.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blockadsnot.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1E:C1:DD:D3:65:DB:48:42:4B:E9:38:9C:2B:C9:89:AD:03:15:09:01","sha256":"52:9E:8C:A6:FC:C6:91:C5:D7:DC:4D:0A:2B:16:72:72:8F:31:B7:EA:EE:CB:E2:7C:7C:A7:F2:F2:16:11:0E:8C"}}},"request":{"raw":"GET /tceinpwmsncnlxf?QWfXiIMl=BQOCAAAAAAAACZUAAq0drGYcTFoj79dZ56F4vn5BgqC8t4wAbLdyoQp-NyxwMF-z4QaA894EpLBZ4zOdNm39ERSLKKBrCD-URHu3gMAiNH1ZU35lZCnyeZjt7mKLj6TLnJeuCMZ2DjOYBM1l_vRSKMyKnJ9qo4vXcs3OGjplTHrJskWhksdlw0aXI4e_8fAZagFQ0zsA21qCxkGRUX1bKT6MsmNp6bYwGAaNAUdp03jajVR2_Nrr7C_hPq1ecqb7DZUsBwW_F0LswsdNJmX_11rEDCUyQMw863I9vqdUrqyoktyqYY5QWo_a7Ts7sTc2CsyhjbUdeaRrCj0uuX5A_V-YSKILH153UvIB-IhMUKsqHFQ0SL8Tw8lEGH5CrGEoy9s544uSQeUGr40Lmwt4FnYPYIc-MksgkMiV-nIbr9fpHV6LFcc7MuMVp_ykOTZGkm3Jfhz3BY0yL7lrPYYpKdTguLkxNP2Vux7Vz1RwvuCgYka23Ox5b2zCToMlnGJY0O6XpudzZ5zTYqQ0U2qdGS3ntu82GVSAQaFPJ01S1zubPL-bx9JkXaiXo0J1-HhERH997W1Bm8B-7cMxCU-BTBAJDf8ZZ4OQihXowa7ViHnT_CWFoOGdpK52reEEp6p9d31ylEAenF8yQLPgeqZU7zqXfqf3sYuUolW64QrUnHDaXAeb4gk4iudIRDt191V4K4f0FbXRtueG7Iki9b-5E7q_NKsY_4GXqdZeUI81cSecB5bRBgNrIpb3a2UvQ8vD5p4K2pBSrwfquz_U3OC7p9AELmXU0bZ488Ag1Z_m6y5Pa15ekrUXQC9OScAbKZySqQpb6q2tmUBEbfIkGjj8sWsF1uha1y3o1_2ohmFvnOiHcSQgxXquBeSxcLUX0oGNY4DWcDoN6Fl-x_7-ilNeJNdpm-PJqxBfziaxtnE8YIsy2x7xR8nssCx32p-0h9THB4mvkpkWRge4-0mY0YMElWEgYniEUWdEka4jwNbzqsAYHaiOUUqIqhC5XdQl2tfmh_5w0Ea4ONzeOIc5OyvTDRCW8f4QyhgOg4_SBeRQ3jofKf1do51oP64xM1w0grV2FVz8EH7QFff6K2I1IUPqwZ4f8BwXtDWZC7l_f1MY2DV4PyMttirHJraLwDgPeah1OWylt3adTnVOwS2ymPWUlb4NQquP_WH8PxxLXXn_yNjshI0pzcSw7fa7aJOH\u0026CXfocxDI=4\u0026ucvTlqow=5188393\u0026cDlsUjqd=\u0026aHrzdyeM=1:1,1:1,0\u0026DHgjFdVO=\u0026NWDxCrjq=\u0026s=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: blockadsnot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb3\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-22T18:58:35.197279Z","times_seen":23484,"resource_available":true,"data":null}},"time_used":728,"timings":{"blocked":297,"dns":13,"connect":95,"send":0,"wait":113,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#c5glqb","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:28.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UZ8ZyEBwvbP%2FIWbChrx5NtIhNUg30ZQPnOxGVRb%2FqEQMbhCz6mDzUEGJsD0FVZmD%2FcGv5xPKgQE1Ay1EbvdSZ4DLS4s0AzokDWomcpWGhVFYyg%2FQH6idPkfaQe6vSae2n%2Bbn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=10\r\npermissions-policy: browsing-topics=()\r\nage: 93433\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bf2fe6c56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1127\u0026min_rtt=332\u0026rtt_var=210\u0026sent=2665\u0026recv=343\u0026lost=0\u0026retrans=0\u0026sent_bytes=2925005\u0026recv_bytes=35690\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4265\u0026inflight_dur=384\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1312,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"1d5570ab81c86a4292fed1eca89734b6","sha1":"2845e7b58dc59fcf963b60e5a1519ab0417ffbb6","sha256":"a28df2b44d0506bee3ede4c0a20155c7b94e6078c45ede2d932fdbddca0faa10","sha512":"34f91c3144f14124fd3c39e4c0e42e9ad4820588bae062a2d99be3dbcab9cd9573c1eed821448304ac509f0bad668201aac27268fdbe49a8e10a93becec37732","ssdeep":"","tlshash":"e62133811cf0c821933322194f7ef1087897a10346599d2479de91285f45bd78ea7db8","first_seen":"2025-06-25T06:21:17.749438Z","last_seen":"2025-06-25T06:21:17.749438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:31.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-video-BsHN1m3I.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dfy6k9qRU318Bkx1Nd3pTU5ulqo8wpZAnHdY3uuvfWhP05K6EKHiLRBknafG6WOjHtyhS%2B5EzXzg21H4CAozeEulYwZbHn6JOwmV%2FtNTVWl9WEa9puDhr6EPdrgjnqX%2BHxbf\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-fda\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93414\r\ncf-cache-status: HIT\r\ncf-ray: 95525c06bf0356cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1303\u0026min_rtt=332\u0026rtt_var=621\u0026sent=3879\u0026recv=442\u0026lost=0\u0026retrans=0\u0026sent_bytes=4278669\u0026recv_bytes=49784\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=7430\u0026inflight_dur=684\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4058,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4057)","md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GSLLMQHH8G","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:28.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:35:30 GMT","end":"Mon, 25 Aug 2025 08:35:29 GMT"},"fingerprint":{"sha1":"79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA","sha256":"F5:17:47:03:4B:39:BD:9F:79:87:88:F4:F3:FF:C3:7D:05:5D:EB:4D:D3:F5:02:E8:2B:96:3B:BA:AA:97:0D:B3"}}},"request":{"raw":"GET /gtag/js?id=G-GSLLMQHH8G HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\nexpires: Wed, 25 Jun 2025 06:20:28 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0\r\nreport-to: {\"group\":\"ascgcycc:1077:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 133067\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":399774,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6004)","md5":"de3503e8a13f701413988411f9447c01","sha1":"64b35e6b966c6597d3131a6890bf69e779eef999","sha256":"cecdea6a02bdb6022ab6ef9ca8cb5c02480bb3b3b07691a255e6aba72166b56a","sha512":"6c0346c2f313601eef7e844dc31137693c69eced909227ab5ebc9b9c6fed93d419180c29b85855253c36c3c5e851134a4f15ea5f15a5ff746ae39046af65f866","ssdeep":"3072:jLaEQJ17GCNOxGkGJyCOmol0igNc/x1+yXNFNmfoJw26GeP1P7SQ10bba7UXenSV:PQGmOxGkGh+2f2EGe5SQ10Xa7UOnSHzZ","tlshash":"598419ce73c674625396f478503f018ba57b28a2b49cc899f189cce42e74a9a4177f7c","first_seen":"2025-06-25T06:21:17.757281Z","last_seen":"2025-06-25T06:21:17.757281Z","times_seen":1,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/themes/bimber%20final/js/stickyfill/stickyfill.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/themes/bimber%20final/js/stickyfill/stickyfill.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XsFxdoY5S7WPvrak2xZR0dMAzUoi72c4ByXheceSSrk2DaiAnPiPTUybZHzOcop5pKZJ%2FvjAKeO%2BLDNuQfXYp6Y%2B8xLbVeMMNbFRPZBNiDJYCDYZzCswHHANgqAcMQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 15:19:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6846fb70-1893\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd53ebb0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=739\u0026min_rtt=0\u0026rtt_var=874\u0026sent=254\u0026recv=284\u0026lost=0\u0026retrans=0\u0026sent_bytes=48681\u0026recv_bytes=22055\u0026delivery_rate=1905324\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=15933\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=350\u0026inflight_dur=64\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6291,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6165)","md5":"593e9b79f6e7ce55f18e215cee71c97b","sha1":"05c1dd24e4e71352f7ec69cbeec0dfe8dea721eb","sha256":"77bf60e84e126d1609cc0a302c3953dc25ae054aaee3514d04a4726d4f2609fe","sha512":"384baf3b44411049ac1fa9508b8cb9d19f82ab561864915df6f8d0029eca30652ca1b8055efcfe35aafbf0f7604881d29c8047d14df13c9a88cb7610b833871c","ssdeep":"192:uc6dWtkuaoqt94VK6YVIwgQSzK7OUlvH/CkUmbROm5ujZ2woogtOXnPrf:uCSuaV0VRzGOUlHam135lTorf","tlshash":"b9d183453770353281a3eb27617fa60732725498d9a3d099b02cccecae7cdc911bb978","first_seen":"2023-03-07T12:03:53Z","last_seen":"2026-04-20T15:53:15.380141Z","times_seen":675,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/prod-3EO0RhVK.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3M3j1gji6sQhf7a6fqChq%2FBYclt%2Fzm8v0CbWL9Nmi7kmlVDSOMtxlj90GXXBYxDKNMUNFu33DcZjb6pfaNRWB6C7hF34xG9dv6d29VHw6jJsaHjB%2FgKQIHzfdix85fhtOsO8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-47d8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93427\r\ncf-cache-status: HIT\r\ncf-ray: 95525be29c2d56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1194\u0026min_rtt=332\u0026rtt_var=305\u0026sent=574\u0026recv=161\u0026lost=0\u0026retrans=0\u0026sent_bytes=562852\u0026recv_bytes=13273\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=22578\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1643\u0026inflight_dur=138\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9763)","md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:27.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-Bq6c3Bam-CqhR3Et0.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=p7iYBFsEjaTUyCiYn12%2FEUio0d7%2ByWdUh1lanWHHDzMzt6kALaUURtdLhFFcDOdDbeLbBOb6iQuQ3HdT4xnxlHZJaXaq2zJb9SBfmJhtrubHZ8F8%2Btq0xYyeV%2Bn0JG3Hys8V\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-2f6f\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93410\r\ncf-cache-status: HIT\r\ncf-ray: 95525bed3d7956cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=905\u0026min_rtt=332\u0026rtt_var=264\u0026sent=1865\u0026recv=278\u0026lost=0\u0026retrans=0\u0026sent_bytes=2032196\u0026recv_bytes=25737\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3349\u0026inflight_dur=269\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12143,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12142)","md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-default-layout-BuBwqJzH.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fkqmqlqfRAlC237dpaLFBTvNRp9gVW5IG3b5TXwY0Y00%2FQI1npfzaMpgNbhxT42LxOlFJDWo4htfiTntjPyTL%2Bl6TtFnPdvL6%2BYoGCKqISq1mXzeWGXFbq3bOjqTIvNbVKzQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-bfb2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93431\r\ncf-cache-status: HIT\r\ncf-ray: 95525bedbd7d56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1046\u0026min_rtt=332\u0026rtt_var=457\u0026sent=1878\u0026recv=283\u0026lost=0\u0026retrans=0\u0026sent_bytes=2042159\u0026recv_bytes=26428\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3428\u0026inflight_dur=275\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49074,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4007)","md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:27.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-video-BsHN1m3I.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LNaWYUcMVgndVWXLfvWBvn1BL21a28kCgROt1ObEOusMbnZFMar%2F5ePZhYc7jbEHMSrLqOKstpP0RRRVX5md5LkXaMqj%2BqVYXKjs7CpVOh%2Bc409L3tFysH%2FNGDID3uGaUBn5\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-fda\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93410\r\ncf-cache-status: HIT\r\ncf-ray: 95525beded8056cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1317\u0026min_rtt=332\u0026rtt_var=757\u0026sent=1912\u0026recv=288\u0026lost=0\u0026retrans=0\u0026sent_bytes=2076177\u0026recv_bytes=27387\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3458\u0026inflight_dur=283\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4058,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4057)","md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/themes/bimber%20final/js/enquire/enquire.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/themes/bimber%20final/js/enquire/enquire.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2B1pna1qsPmyNNslmTHkh8ZJZxrrm6J2t2NmLvlKq%2B9rnlZZaDLXNxRTgx%2FlPTCgkM61UCj8xo1b9jMaO6rHTjurxv9iwGo65uq0Lo%2Fv5CXLWDN8wsZ3wiMNSm18Sew%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 15:19:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6846fb70-8ce\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd55ec10b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=594\u0026min_rtt=0\u0026rtt_var=393\u0026sent=285\u0026recv=293\u0026lost=0\u0026retrans=0\u0026sent_bytes=83177\u0026recv_bytes=24029\u0026delivery_rate=3279773\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=15550\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=363\u0026inflight_dur=77\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2254,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2045)","md5":"c22ea088390ceeb51ae5da21901b9df4","sha1":"2cb0ed3c356a9a2f41cf3b7c95e702c1856f5819","sha256":"324dbc3f38a9f0a20763e0c0d817aadea2b441e2b872b81c69f453857da67489","sha512":"96424868be720225136a477689b78c3fb214c8e4ca05820d70346a7c9dd72c6625a599b7d932590eb2f0996c50275028d387c68f0e6dc5c9caf37bdf3185e9d0","ssdeep":"","tlshash":"97410fddba99720162a364f2541f558f5673a1b7f00c409cf1a4dae5ed78a0d8a23f38","first_seen":"2023-03-07T12:03:52Z","last_seen":"2026-04-20T15:53:15.351086Z","times_seen":1187,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/dist/i18n.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6h90hvy41IxVa4e61sBcjT5VPN%2B6FvBtypCuVL7kDwU5M6z5Hdc%2Bmhjv436ESx7lCfi6PtwZxDttn4wKnCaIifUb0nWg0AyTZ%2ByouEHkcFnqu0yXxmCC%2F8EqMJcYYg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Fri, 16 Feb 2024 02:23:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65cec714-23b5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44149\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd56ec90b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=556\u0026min_rtt=0\u0026rtt_var=138\u0026sent=358\u0026recv=316\u0026lost=0\u0026retrans=0\u0026sent_bytes=150948\u0026recv_bytes=26469\u0026delivery_rate=4472911\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=14560\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=380\u0026inflight_dur=94\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9141,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-04-22T21:11:01.262029Z","times_seen":241481,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/jquery/ui/autocomplete.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/autocomplete.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mLeoZAWiYC5ipXZ%2BUFpKyTDUsqmY7Kc%2FK%2BA6IOnEreIZ25V5kKMf2jNEpH1KcD1whZTDr7iyE2J3sZ8eueQMDUqM1%2B8LyTK1XtkOPXdQZAMBYAa%2BvmwkkX3cFQ26pg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 17 Jul 2024 03:30:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66973acb-2158\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd57ecb0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=635\u0026min_rtt=0\u0026rtt_var=111\u0026sent=386\u0026recv=323\u0026lost=0\u0026retrans=0\u0026sent_bytes=177339\u0026recv_bytes=27319\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=385\u0026inflight_dur=99\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8536,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8349)","md5":"6a53e18a345b37d4f72262a071684e79","sha1":"7269f0f9a41ca95df23387e1c4dad415f0228979","sha256":"3ab937ae57ef4a48601774b6a0cc701482a5c8bc126fcb677db4842b3a3c0003","sha512":"7f1b7ba5ebafb6e1cb9791ce8a0ad6eec1a743e6b15ad3e2d05f38ecf9a7f3437e41f398d3a91fcfbd294073cae25c4e4f6b5fc96526828071a0fc5ee0327b78","ssdeep":"192:7r2AeY1jWBoYfgZn+gSEmaAGCkHjpXCNd882E9cNS/JWmx:7r2AeSWBoYfon+gSDkrH1XCNd882E9ce","tlshash":"8102845f365a6a4156efa078616f324b623a20aa5801815cf47c9fcfad3ce1432b7d7c","first_seen":"2024-07-17T06:42:32Z","last_seen":"2026-04-22T20:39:44.114009Z","times_seen":13011,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/jquery/jquery.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DZpd7dh0MkKrmqZP0mu7t%2Bapn1R2m8liOvURMkLSbtnn5IQE7gyHERFunmN3S2RH%2F%2Br%2F6ikCUOLMxNPL5jV9cUzD4RawT654Oc7CF%2FS%2FzrJcYJ4auM0MSN2k49rhwQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 29 Aug 2023 02:44:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64ed5b88-15601\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44149\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd50ea70b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1628\u0026min_rtt=468\u0026rtt_var=1265\u0026sent=230\u0026recv=266\u0026lost=0\u0026retrans=0\u0026sent_bytes=21059\u0026recv_bytes=17516\u0026delivery_rate=619748\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=322\u0026inflight_dur=38\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-22T21:09:19.679006Z","times_seen":734717,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:24.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-default-layout-BuBwqJzH.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WgXhv22%2FGKavw4xhWrNAJ1WyhoX8xX%2FCUgcE4OAVyuMCQgU88%2FC3%2FdPqO35%2B23YIhaNygPYhOW5GGAN7KAlONUSGLAFQmd16SuG3qkDdTySqnSi8van9%2FbaabBFp6aJbSIE%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-bfb2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93428\r\ncf-cache-status: HIT\r\ncf-ray: 95525bdccc0a56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1372\u0026min_rtt=332\u0026rtt_var=1090\u0026sent=328\u0026recv=122\u0026lost=0\u0026retrans=0\u0026sent_bytes=308675\u0026recv_bytes=8128\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=36972\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=708\u0026inflight_dur=89\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49074,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4007)","md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-DqAw8m9J-CdSVB3O8.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MdMJPp3wdshDWc%2FzydPiPtj3%2B%2BYJNIvh1zWQoEu9klwr0rQmJiP%2Fsb7MifnzZPHV0sTfs5tOj7wxUx8k3QH3WwmrpVVWfaVyf%2FJsAi4Xm2GzPWuJDdk2bkE0T6uxs6AHXq0A\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\netag: W/\"685a0570-324\"\r\ncache-control: public, max-age=31536000\r\nage: 93408\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525be29c3356cb-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=941\u0026min_rtt=332\u0026rtt_var=436\u0026sent=664\u0026recv=167\u0026lost=0\u0026retrans=0\u0026sent_bytes=666041\u0026recv_bytes=13556\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=22578\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1653\u0026inflight_dur=146\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (803)","md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:28.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-CwTj4H1w-BCQqYYxA.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jf9%2FGyDIDUjbnd12Dc1qZ5t77ljunOx81Ux95xkAh%2BaF9mPeu%2F1zD7y2Vzm48rArZrFL1YDGFYJx1lqjXAMfFyEroqNCGa4gW2M0jtNQ85l9sA31oHsAW44LCPd3EXU3vmuz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-21d9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43968\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf3fe7f56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1321\u0026min_rtt=332\u0026rtt_var=601\u0026sent=2696\u0026recv=352\u0026lost=0\u0026retrans=0\u0026sent_bytes=2948016\u0026recv_bytes=37356\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4435\u0026inflight_dur=403\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8665,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7935)","md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A400%2C300%2C500%2C600%2C700%2C900%7CSpartan%3A400%2C300%2C600%2C700%2C800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86","sha256":"89:68:57:F4:FD:04:C3:94:84:10:59:C7:94:CB:87:1D:7C:07:51:29:D1:25:C6:75:F4:33:16:EE:2D:9F:60:3B"}}},"request":{"raw":"GET /css?family=Roboto%3A400%2C300%2C500%2C600%2C700%2C900%7CSpartan%3A400%2C300%2C600%2C700%2C800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 25 Jun 2025 06:20:23 GMT\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37700,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"edb7d847422df8ea2d8284c937d92b63","sha1":"7c5dfc678c04392a6de8944290a80b1712e986eb","sha256":"98f23afeb93608fed0cd89d0bcbd45f6b73ea42a8d00ff60529af14cc806f775","sha512":"f3f111b032dce686ce4ee4500626bac49cb695fd24d0786620a6075362b5d5d6b872f46d9c2d3b8352cc969bf406d827aaca9b92e804edfe5ea882d8336fead2","ssdeep":"768:p90DXOU/R08toBy+Oh/EBpmv65lOa/76iTS3IUOX/u3/cZwPLOQ/Vw467m1pOG/P:P4HSZpa","tlshash":"c6031ca1041754009b834cd223cebf35fe1f92517142d0b9abfd9b6badcbca6426939d","first_seen":"2025-06-09T03:59:14.875696Z","last_seen":"2025-08-31T22:10:51.515419Z","times_seen":13,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":277,"dns":0,"connect":19,"send":0,"wait":38,"receive":0,"ssl":278},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dKUTqniYxTOcBFlwE8fAwy5GawNL7UtkYTpbCuvmXkXWMvUzwPUV3IowXhrKaUDVMumeF6iC7Yd3P3ekT7gOya7xcU2%2FV27JQ2zaN8cr7ICwlxNjf%2BisWcD42jFO0w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Thu, 26 Dec 2024 15:30:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"676d767c-2655\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd51eb00b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1628\u0026min_rtt=468\u0026rtt_var=1265\u0026sent=230\u0026recv=267\u0026lost=0\u0026retrans=0\u0026sent_bytes=21059\u0026recv_bytes=18394\u0026delivery_rate=619748\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=324\u0026inflight_dur=38\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-22T20:09:37.498116Z","times_seen":9520,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_ca05eae84a6f34375c92362263247814.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_ca05eae84a6f34375c92362263247814.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5ppwEcvKtWdOUfYCauGe0oIqY5yRN9Xt0Il4G%2BvUMK2iTUkBEX91BIGThLKK0wgZkiA0CT%2FOq3V3Id4q%2FV5m6%2F7JVFA3br6afFag8%2FcuMcj1Bc%2BoCheImLGi5haI1A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-748\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd59ecf0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=670\u0026min_rtt=0\u0026rtt_var=172\u0026sent=419\u0026recv=331\u0026lost=0\u0026retrans=0\u0026sent_bytes=205249\u0026recv_bytes=29314\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=402\u0026inflight_dur=114\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1864,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (762)","md5":"f88db773474b1c35412655b0b8175e29","sha1":"dfc71b6d28eeff6bd2f03503d29aadb1654587bb","sha256":"8ff0af78d5f644f9f69e76e7c6358b65315204e01771cd46bd3be6d140023919","sha512":"d008b418be22e6c5ddf5307a0901f41a0aa519aaa8d27184185cad436614a4204c379db16ab429e7363b6af4549dc3ca4bf9ced3ee3c000104e5c8105bb109a9","ssdeep":"","tlshash":"89310e8e76e4bd7281c27621ec2f2307a190675de109c1ec687184e02ca0fc28b7a77c","first_seen":"2023-03-13T10:25:42Z","last_seen":"2025-06-25T06:21:17.762557Z","times_seen":5,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:28.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-CwTj4H1w-BCQqYYxA.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tSxRCb9i%2FxKfPzAjIAdB60BYFUloGB6dy9oqQFlZjwHCskw9DKhukGHs3Db8a03HW5vLKCkMhFvyWAShBHXvNKQYzABKnyWHvZe%2B5wo89hxsj1v8hhP0Si%2BMnbsSITmhIlcE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-21d9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43969\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf8ce9756cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1446\u0026min_rtt=332\u0026rtt_var=621\u0026sent=3387\u0026recv=392\u0026lost=0\u0026retrans=0\u0026sent_bytes=3744855\u0026recv_bytes=42534\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=65287\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=5201\u0026inflight_dur=483\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8665,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7935)","md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/themes/bimber%20final/js/modernizr/modernizr-custom.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/themes/bimber%20final/js/modernizr/modernizr-custom.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DgwLwepI8NK90k6oPo8uGp5Zz5m04Tuc4nVYivZ7e43N5gHUAOyHwG%2FEbgtUk5rAGl6Wh0Q7d8jukqagkFibGSVqc3s9Z8VjfURhwo8Wp0gVdOXHTK%2FCOr0fIIDAMQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 15:19:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6846fb70-1b70\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd50ea90b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1703\u0026min_rtt=468\u0026rtt_var=1485\u0026sent=228\u0026recv=265\u0026lost=0\u0026retrans=0\u0026sent_bytes=18659\u0026recv_bytes=17471\u0026delivery_rate=619748\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=320\u0026inflight_dur=35\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6889)","md5":"be867eb3c95205f143aecc1fff7d4df6","sha1":"31c16e5fdb15452c67a8044798f6380be681888d","sha256":"2e66ce2eadd79bca0080194f87dbf2f1d01bbf996241615de43d94dfc7eb1d0d","sha512":"5b88db46f2f8ae0ba5339aa2a5d2dd25c3ae9bbbab5763e5de90d2cde9c3ab7e9867040bd787a327349f8fdf6223449cde292f558ce40168c88e3afa627b6759","ssdeep":"192:R4T/2BQ5b4NW1RM2HbUF4Sjy9kAuBnkSOVBB:GT/2BQ5bKh2HbUFTFAuBnkSOVn","tlshash":"0ce1c5c971a3b17a839b2167507f520ef8780e189e198414f069e8bdfd74de4537be28","first_seen":"2023-03-07T12:03:52Z","last_seen":"2026-04-20T15:53:15.329967Z","times_seen":633,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/dWs34pmfQJkvvZteRy7UkA/ck/lod39qeq/qtvfuf/poster.png","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:24.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /dWs34pmfQJkvvZteRy7UkA/ck/lod39qeq/qtvfuf/poster.png HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EPnP7GGLRmYdkv8dk6yzzQHklawaqtf1asW6YzYh%2FsFKExB%2B1pmwLB14Ih3oJJmSuRN1UBWZGChZmJdJupYGEXwkYL11lpRZloUpD4KLPP9OYObyTsIZ1ZIefNTWMrrKU7De\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 25 Apr 2025 14:22:07 GMT\r\netag: W/\"680b9a8f-21742\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 95525bde8c1756cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1480\u0026min_rtt=332\u0026rtt_var=660\u0026sent=377\u0026recv=134\u0026lost=0\u0026retrans=0\u0026sent_bytes=358196\u0026recv_bytes=9916\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=36972\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1046\u0026inflight_dur=102\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":137026,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"data","md5":"d2f29553564ee12cf29f9754fab67203","sha1":"fa02b05ece173f46b2a9dbf1346462da732aa4e7","sha256":"9fe79b52f8842ff1758cdba820a1b6e7e2ced607e22bf85dc1e46e1e301ecbd0","sha512":"b0468ba938947c47f7516c70c3182ed2d8a9471ac10540bd2eb324d867b57d6e8634411d0b4640c134cdb84ea2c2f1227ec874d12f662316709eec05c5fac91a","ssdeep":"3072:+ODc9h7fe77Mh3tchWxQKzIYp6Hivlz35KfiJ7bqMUH5QYvQvB23IC8+k59HQjjr:+Ub0H02Dz17DJ7bh+QYIw365tSqU","tlshash":"f114f101f2e2f370c29aa0faa90056d4760197a8f3e7fc50e668d6a05edf51c678f9d1","first_seen":"2025-06-25T06:21:17.764091Z","last_seen":"2025-06-25T06:21:17.764091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-DqAw8m9J-CdSVB3O8.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mpKR84yvcUbPKZemn%2FXbAwIZ259iUC1IybUqF3dXtXITaQYOM%2FintNMvL8cX4Ou8zzub%2BO5pGnD%2BZX8nF5qKMNt2a6fCWCgCKbCZTMNMsSWMu6lsu7QSvyZhc%2Fb2Oy7BY5jX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\netag: W/\"685a0570-324\"\r\ncache-control: public, max-age=31536000\r\nage: 93408\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525be3ac3b56cb-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=756\u0026min_rtt=332\u0026rtt_var=236\u0026sent=852\u0026recv=199\u0026lost=0\u0026retrans=0\u0026sent_bytes=878877\u0026recv_bytes=16252\u0026delivery_rate=21769108\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=21530\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1815\u0026inflight_dur=163\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (803)","md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/themes/bimber%20final/js/picturefill/picturefill.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/themes/bimber%20final/js/picturefill/picturefill.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=siGlvypL7rwZAVeT6rIvnPgE9U3R7PTuKM0EPzUlosif3cP5qFzyrHB99e4MQO6NAyTakhqliAw1KE80JpsThY%2F2OMxr1JlF7PKeEirZ047wdSjtuXHq9fQ0y2UtEw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 15:19:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6846fb70-1e1b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd54ebf0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=597\u0026min_rtt=0\u0026rtt_var=602\u0026sent=262\u0026recv=288\u0026lost=0\u0026retrans=0\u0026sent_bytes=58157\u0026recv_bytes=22499\u0026delivery_rate=2782247\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=15414\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=354\u0026inflight_dur=67\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7707,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7525)","md5":"d3325bc1d59dae5aedda1c5ead0cd1d6","sha1":"f4b1fea0baec4ab9b6bff45bdea81d8883357e35","sha256":"d603b6e5c404d28a9f1c12bb0b57d8c9967836a8f53cce046a2ab3fd1f3b2f52","sha512":"3b90e2cf6024a8a58aecbc38b7c0671c5ff8ec22cc3e2187f674f803a53afad647080abe8e3ddd03f36091cd4b2b71e6ad386d8c87a6c3932d32b1f0b15f2d4e","ssdeep":"192:h1Xr6SGagHW0rIEtQDvhI3t4An5C5Pr+EfWL:hFr6SGDbJ56Pr+Efi","tlshash":"eff1d7be7a6931779a9334b0a83f611bf03399a6750884e0d451c0ad7cb8e95903ff9c","first_seen":"2023-03-07T12:03:53Z","last_seen":"2026-04-21T11:01:05.160132Z","times_seen":1169,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.012631894558320811","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.167.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: text/html\r\ncache-control: public, max-age=2678400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\npermissions-policy: ch-ua=(self \"https://adsco.re\"),ch-ua-mobile=(self \"https://adsco.re\"),ch-ua-full-version=(self \"https://adsco.re\"),ch-ua-platform=(self \"https://adsco.re\"),ch-ua-platform-version=(self \"https://adsco.re\"),ch-ua-arch=(self \"https://adsco.re\"),ch-ua-model=(self \"https://adsco.re\"),ch-device-memory=(self \"https://adsco.re\"),ch-downlink=(self \"https://adsco.re\"),ch-ect=(self \"https://adsco.re\"),ch-rtt=(self \"https://adsco.re\"),ch-width=(self \"https://adsco.re\"),ch-viewport-width=(self \"https://adsco.re\"),ch-dpr=(self \"https://adsco.re\")\r\nlink: \u003c//6.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003c//4.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003c//adsco.re/\u003e;rel=preconnect\r\nexpires: Sat, 26 Jul 2025 06:20:26 GMT\r\netag: W/\"C6pTuopbpe5oM6YpwwANTg==\"\r\ncf-cache-status: HIT\r\nage: 906485\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95525be79df60b06-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78356,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (689)","md5":"0baa53ba8a5ba5ee6833a629c3000d4e","sha1":"d5de057adc1eaa7888ca975199cf0a116b923aa0","sha256":"0679a036a8577f9592e070f780d06c6bb427a8f15f58008bdeaae2277ce607b4","sha512":"a7e5a993e1e12e7d73d98ab3834fb488a1e3ce361108f3f4583cde7e4454e97768303649ae9fa22bce7cce65aed74d081b69317f169c18dc49e8093ac4d3a60b","ssdeep":"768:dsmoTk+UwrAjMo3m4MSHRJtlgfWivYb7QL19/lw3mcIwT2vB03c9MZjyQoTHKePc:pok3m4bHRDuWWL19/lw3mcKJpAGPKmjo","tlshash":"81734ba97162702a43b238e9967f5311f1ba06902c4690d0d37dc8643c74edf927bb9e","first_seen":"2025-06-14T18:46:22.558225Z","last_seen":"2025-08-28T19:40:38.269373Z","times_seen":3673,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-ui-BXPTXUP4.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oDGC7plj45uEO9L612vnsRKV4H6oFOPRt0CH7nqO7BEdmKG9jRf3T6FXwWY%2B0jidCJpcBzQhCJIObul99hGB9SrkrvhR8%2BBfGQx6NrEo47Najckc8LRHXb4g4KaZKk9PDTXi\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-18392\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1\r\ncf-cache-status: HIT\r\ncf-ray: 95525beaed0556cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1330\u0026min_rtt=332\u0026rtt_var=747\u0026sent=1236\u0026recv=240\u0026lost=0\u0026retrans=0\u0026sent_bytes=1308579\u0026recv_bytes=21112\u0026delivery_rate=30479456\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=50004\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=2992\u0026inflight_dur=232\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":99218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65375)","md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/prod-3EO0RhVK.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vFCVpfpewKiIpFyj27JRHWOGs2bcPN3W6uCNxk4FeRzC1ZnYlsoeAaP5WO%2B1rSOLU6aX0F%2B2FxS266DwnmmkziOvUnGzDbBaL23AbGZSxBJyDdBom4PoKpa%2FQwyvAUJCvbRS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-47d8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93430\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf1ce2a56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=924\u0026min_rtt=332\u0026rtt_var=350\u0026sent=2355\u0026recv=320\u0026lost=0\u0026retrans=0\u0026sent_bytes=2573765\u0026recv_bytes=31991\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4074\u0026inflight_dur=345\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9763)","md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:31.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-DqAw8m9J-CdSVB3O8.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jWR70SECMfkxrh3wymsDtXgTUOhxaRmkZLkgD5M4rSuacuMrusJXW5mQBDkZ%2B7cGqU%2BbujL6kcSsCDdbeRSWASwWrJgcLHLzunyZ3Be3t%2B9gAC8Ugm1aoPvncAsVu0Lfzgam\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\netag: W/\"685a0570-324\"\r\ncache-control: public, max-age=31536000\r\nage: 93414\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525c06cf0556cb-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1177\u0026min_rtt=332\u0026rtt_var=492\u0026sent=3888\u0026recv=445\u0026lost=0\u0026retrans=0\u0026sent_bytes=4285945\u0026recv_bytes=49925\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=7435\u0026inflight_dur=687\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (803)","md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qxpqaphee4m2.s4.adsco.re/","fqdn":"qxpqaphee4m2.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s4.adsco.re","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Jun 2025 09:14:19 GMT","end":"Wed, 17 Sep 2025 09:14:18 GMT"},"fingerprint":{"sha1":"CD:E3:30:8E:24:D4:56:97:9B:37:D3:2E:69:DE:B3:63:95:43:9A:83","sha256":"98:D6:F7:C3:B0:8D:95:56:36:FF:3A:DB:F3:F5:8F:B3:19:A5:8B:A5:83:D7:04:6B:06:EC:3B:BD:19:17:A4:33"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: qxpqaphee4m2.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Tue, 03 Oct 2023 13:29:59 GMT\r\netag: \"651c1757-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T21:09:24.572855Z","times_seen":14075639,"resource_available":true,"data":null}},"time_used":1404,"timings":{"blocked":-1,"dns":325,"connect":259,"send":0,"wait":259,"receive":0,"ssl":558},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GSLLMQHH8G","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:27.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:35:30 GMT","end":"Mon, 25 Aug 2025 08:35:29 GMT"},"fingerprint":{"sha1":"79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA","sha256":"F5:17:47:03:4B:39:BD:9F:79:87:88:F4:F3:FF:C3:7D:05:5D:EB:4D:D3:F5:02:E8:2B:96:3B:BA:AA:97:0D:B3"}}},"request":{"raw":"GET /gtag/js?id=G-GSLLMQHH8G HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\nexpires: Wed, 25 Jun 2025 06:20:27 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0\r\nreport-to: {\"group\":\"ascgcycc:1077:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 133055\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":399795,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6004)","md5":"c5bcb42eb9dfeae9f4300c2a3396fe82","sha1":"347f965b09b90eda8492b4a566c7b17a6f17f33e","sha256":"94f550dc81ce7dc5fcedc85d134e78fe122c7e8085399b8c2099b834f452b325","sha512":"698c3559566d1636d6792b1cdeb0fff4acdecbb0dfb44e39cb0698e9fbd03a919edf6b5b31a2f610a7d59f9959621efe650c0f22a0cf1311e234c68e4a8ccf08","ssdeep":"3072:jLaEQJ17GCNOx0kGJyCOxDl0igNc/x1+yXNFNmfoJw26GeP1P7SQ10bba7UXenSV:PQGmOx0kGex2f2EGe5SQ10Xa7UOnSHzZ","tlshash":"1f8419ce73c674625396f478503f018ba57b28a2b49cc899f189cce42e74a9a4177f7c","first_seen":"2025-06-25T06:21:17.766051Z","last_seen":"2025-06-25T06:21:17.766051Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:28.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-ui-BXPTXUP4.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JhpYArt8M4GGhzarsPgDLpWZAxKW33C93LfOEZATcpGGU6LlCGeYz8sCFEr5KWky4yDVbCYLVrY54t7FFG5T%2FPdCToilEdphGPIVHUyi1tDeeITPQz7yOtgRi4nCLB0L4%2FVd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-18392\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf53e8856cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1137\u0026min_rtt=332\u0026rtt_var=289\u0026sent=3055\u0026recv=369\u0026lost=0\u0026retrans=0\u0026sent_bytes=3364279\u0026recv_bytes=39336\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=91114\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4624\u0026inflight_dur=433\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":99218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65375)","md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:30.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-DqAw8m9J-CdSVB3O8.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qUoe%2BXBDKxFjNLjs%2FFITHb6XXzaBrkMeYgpeNNFRRtFLJkKeMyjl2%2F5P7twQ7WcO%2F9n9ZsijbDfA43R2J68XxuQrFMy8ngB8usSQeNrnZaZWxO3Qzd64PxvBmCrHqJ6tis2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\netag: W/\"685a0570-324\"\r\ncache-control: public, max-age=31536000\r\nage: 93413\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525c00aef156cb-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1458\u0026min_rtt=332\u0026rtt_var=687\u0026sent=3862\u0026recv=434\u0026lost=0\u0026retrans=0\u0026sent_bytes=4268586\u0026recv_bytes=48263\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=6459\u0026inflight_dur=681\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (803)","md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:31.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-video-BsHN1m3I.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oqt2lGNPBdP8yws7cjuHX4PTzxKP%2FKAm6nmTVu3IPkMnlw0UhVyG0dT5KF7Sz2bxcooGSguApHV42X8mFu%2BXRpzcCXpJXBnYxuuTJmgDr7Rx3Smk73bFNMgnjY47YgwgpeG%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-fda\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93414\r\ncf-cache-status: HIT\r\ncf-ray: 95525c070f0756cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1242\u0026min_rtt=332\u0026rtt_var=439\u0026sent=3900\u0026recv=451\u0026lost=0\u0026retrans=0\u0026sent_bytes=4292290\u0026recv_bytes=50935\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=7474\u0026inflight_dur=715\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4058,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4057)","md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#5whfmi","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=10\r\npermissions-policy: browsing-topics=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6g90zJHEISQlgDEhMe%2Fhr3puhu%2Bf5x8DtIXiEdErB0bOqfjMLm0Emcz1XmhCKvK1F5iOXrnmezXyCi5E3KbE4iVEACedPf%2BkjOujz58a\"}]}\r\nage: 93429\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd81f5a712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1312,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"1d5570ab81c86a4292fed1eca89734b6","sha1":"2845e7b58dc59fcf963b60e5a1519ab0417ffbb6","sha256":"a28df2b44d0506bee3ede4c0a20155c7b94e6078c45ede2d932fdbddca0faa10","sha512":"34f91c3144f14124fd3c39e4c0e42e9ad4820588bae062a2d99be3dbcab9cd9573c1eed821448304ac509f0bad668201aac27268fdbe49a8e10a93becec37732","ssdeep":"","tlshash":"e62133811cf0c821933322194f7ef1087897a10346599d2479de91285f45bd78ea7db8","first_seen":"2025-06-25T06:21:17.749438Z","last_seen":"2025-06-25T06:21:17.749438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":68,"dns":40,"connect":1,"send":0,"wait":21,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/themes/bimber%20final/css/9.2.5/bimber/fonts/bimber.woff","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/themes/bimber%20final/css/9.2.5/bimber/fonts/bimber.woff HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: font/woff\r\ncontent-length: 11696\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XoVtK2Pp%2FUWIxJfz6Pnm1NZf9MXo2pa%2FL%2FcP%2FBtl5UmrULymz5mLqO%2BazVV%2FZrvwhScp7r6k62X7zvEDTie%2F4EHJ7iEJsGab0%2FDdX9I%2B1d5OMCBKb1%2BbAvuy9ClzsA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 15:19:08 GMT\r\nvary: Accept-Encoding\r\netag: \"6846fb6c-2db0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 43965\r\ncf-cache-status: HIT\r\ncf-ray: 95525bd88edd0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=901\u0026min_rtt=0\u0026rtt_var=400\u0026sent=447\u0026recv=344\u0026lost=0\u0026retrans=1\u0026sent_bytes=223928\u0026recv_bytes=31570\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=877\u0026inflight_dur=167\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11696,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 11696, version 1.0","md5":"c268415894d13138a0d0e2f9a841ca8d","sha1":"b1486baf298b4540d42c57e566d094050fc38ba8","sha256":"693e2dd1818182a4c4d6af23d18118646a0aa250a9001c2e468555dcf653b982","sha512":"df422a6ca9fd429db0558b9c4afd85e7760e5f1a2d3e9260d442eb1d6078cb5a1cac2533bebda784d9a81daae700c1b2250b43851b926ce1ee428813b6df834e","ssdeep":"192:y1zT8ZGutI6ZABIxjIaAQBzAcwOntOhRZuQpP+JVdxqCqUjLHG2EP2DneKcpE5eA:yJUlImABIxK4zA7gYhRkQ5o3kdaLgzpU","tlshash":"0a32c07c8feb66f9c627d6f57069b48cb7030504381896c019fcdcc03adea8e59a1a76","first_seen":"2023-04-13T12:27:46Z","last_seen":"2026-04-19T19:54:39.442355Z","times_seen":687,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86","sha256":"89:68:57:F4:FD:04:C3:94:84:10:59:C7:94:CB:87:1D:7C:07:51:29:D1:25:C6:75:F4:33:16:EE:2D:9F:60:3B"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\nexpires: Wed, 25 Jun 2025 06:20:26 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 7598073993838571503\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 145903\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":462831,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3524)","md5":"384d428c886fb8db470007a1bbfce045","sha1":"a6ea8f08b2936b9ea06f1bfdc56e400d92159374","sha256":"86951c2596101bdecb648fac6e1f0bf14de24ca168f2ba068ab75f2d9a02e949","sha512":"d1b352c8bc1990d999de70d4197358af8c192fe91dbcc69b31a036be2b002b8b2786722e97537b40cab72c4b12b6f8bd4cb3dd107f51e6497fae627c84659b44","ssdeep":"6144:o1kqpy0eCz0k8ZuBmBk46KJUltbRPVzTsf10j:EXkuBmG4LJKtbRPVz4S","tlshash":"b0a4facdb6a674629363f4f5403f014bb23ba86af408886cb249d9e16e7490d5277f7c","first_seen":"2025-06-25T06:21:17.727471Z","last_seen":"2025-06-25T06:21:17.727471Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:31.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-hls-D8DklbTa.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=P0oLSQi0JxlqMVB96F33eL1%2Fppp2%2FlTJpxijlMbxDleEXjohMLYuXyPOXd5C01%2BQaqKAOjfOsDPhxDfvxpbQWlyZgPuJBWcHKz%2FUKub0xQxj2cHiRRsmcWnD0S8rIcAn6D9c\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-1f10\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93414\r\ncf-cache-status: HIT\r\ncf-ray: 95525c06cf0656cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1140\u0026min_rtt=332\u0026rtt_var=444\u0026sent=3890\u0026recv=446\u0026lost=0\u0026retrans=0\u0026sent_bytes=4287099\u0026recv_bytes=49973\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=7439\u0026inflight_dur=690\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7951)","md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/beautiful-spanish-teen-ass/","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-25T06:20:22.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /beautiful-spanish-teen-ass/ HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 24 Jun 2025 20:36:17 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kuBfxiTHOe58vrL%2B0YQHf7kc9D%2FW96HsMYYFefDhYBiRd1XMw%2B%2FPMPUrcQLJV%2BR5nWhQfoakLWmH6xKlTif2L75oRrJp4X20JA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: 95525bcef9eb56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":508508,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64757)","md5":"ac14f5ad5b9249941c70aa2f2a9ab8fc","sha1":"f7c2c309b9e28681337fcbeddb2a44038fe732c6","sha256":"45cb3f2400cdb8621c4d85424580da6ae10186765f0441c3d75881061c408282","sha512":"73589a88ffd556d56e1da087d56afb4c3f36b3ab79e0ffabf7b57473f887d5c18ac41a7846642054bc029bbcac9d14327b2298ecf99c7df1741d25c5481a63f9","ssdeep":"6144:83K8ph78CaxFWBr4Qsu4x//zYnmq+/zBrV:hxCaFWBrNsu4BzYnmq+rBJ","tlshash":"1bb4f772a9b4232ca16bd3119ac1b3dd7214c842e6834fdaf96a9714cbdeec9147370d","first_seen":"2025-06-25T06:21:17.767212Z","last_seen":"2025-06-25T06:21:17.767212Z","times_seen":1,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":480,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-hls-D8DklbTa.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H118Xffnl7PRskZOb%2FWZEGePqwqV%2BfOWltuD5dqakoaDk0Tu3FddFTG0KtKbIP%2BnNYJp%2F2HSMpy9XHfcfqBA0z%2BPJ3aHpG769LWL7hIcvxYzYvVXPrJNn31m%2BCOHo%2FCuUvHi\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-1f10\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93408\r\ncf-cache-status: HIT\r\ncf-ray: 95525be29c3056cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1139\u0026min_rtt=332\u0026rtt_var=339\u0026sent=600\u0026recv=162\u0026lost=0\u0026retrans=0\u0026sent_bytes=593507\u0026recv_bytes=13319\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=22578\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1646\u0026inflight_dur=139\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7951)","md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spartan/v21/l7gfbjR61M69yt8Z2QKtlA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7","sha256":"94:9A:1A:D4:CD:CE:19:77:99:6C:C9:14:BB:6E:F6:23:C5:40:A9:70:50:E6:B6:CC:DD:B0:18:CE:3F:DB:E7:A1"}}},"request":{"raw":"GET /s/spartan/v21/l7gfbjR61M69yt8Z2QKtlA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Jun 2025 17:22:37 GMT\r\nexpires: Tue, 23 Jun 2026 17:22:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133066\r\nlast-modified: Thu, 29 May 2025 20:17:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33044,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33044, version 1.0","md5":"12fb1f6cfdec83e788279cb03e22c6a8","sha1":"30cd79cceaabe3daf373218ac483924114a5edac","sha256":"4d34849e47c7d2528e2d325526901f58e5a2dc10a4a1c019c617cd56f2045b1a","sha512":"35a1befd987096945739732443f3dc056173cf3d03d28ffd2e0f5cc049b7688f1fd5c92b89840900a1766e73fefde8e5f8750bfc212193328e5eb8f5b81eb9c8","ssdeep":"768:QskSq6TFXGc3un12tBoCDWPEFLkovz6+tRi4MakgQ2W5qQCv72N:G9qFy2tBoqFDxtRaajQDq5v8","tlshash":"17e2e18243b56066e55fb4ff0ecec81b3b524c24e4b65af1d100d39e9066b65608bbf7","first_seen":"2025-05-31T04:41:28.213414Z","last_seen":"2025-11-09T06:29:45.677505Z","times_seen":119,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":127,"dns":1,"connect":8,"send":0,"wait":13,"receive":12,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qxpqaphee4m2.n4.adsco.re/","fqdn":"qxpqaphee4m2.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Jun 2025 09:14:20 GMT","end":"Wed, 17 Sep 2025 09:14:19 GMT"},"fingerprint":{"sha1":"4D:DD:91:35:47:42:EC:48:83:34:7C:65:94:27:32:74:C7:40:5B:5E","sha256":"FE:06:59:E3:BD:7E:57:1C:A3:43:CA:C3:FC:07:85:77:AC:29:C6:B1:17:9F:8F:04:CA:43:B8:79:C1:42:C0:52"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: qxpqaphee4m2.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 16 Jun 2023 08:37:42 GMT\r\netag: \"648c1f56-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T21:09:24.572855Z","times_seen":14075639,"resource_available":true,"data":null}},"time_used":887,"timings":{"blocked":395,"dns":131,"connect":87,"send":0,"wait":87,"receive":0,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:28.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-CwTj4H1w-BCQqYYxA.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ppcE%2BO8n3KDJzyQiP9cMHl8RRuN64MMeMfgAxxPdWzACaH%2FuvY7hpp2XF77oQ5R9hiun9YeFhESJmVvy7GzusFtFxboMtUTvHnJpxvLL%2FlFGjdZBEEwj9tJ%2BUI6DWz1uMWtO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-21d9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43968\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf71e8e56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1149\u0026min_rtt=332\u0026rtt_var=242\u0026sent=3098\u0026recv=374\u0026lost=0\u0026retrans=0\u0026sent_bytes=3409516\u0026recv_bytes=40511\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=91114\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4923\u0026inflight_dur=444\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8665,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7935)","md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_80c1ddcdf84ae2b0d3a833fc079a0981.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_80c1ddcdf84ae2b0d3a833fc079a0981.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=z9ea90IhpRPips0x44r7r8Az7s9fiIsn8027%2FMeJP5cTVju1h9meTvotfgVwxeKnjjZH0VlqPdOuIuNfE%2FLaBKuPVHBHjL5VjqEpFxYXLRn3shXAJUL2h1p0YO1XEw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-1267\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd53eb50b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1221\u0026min_rtt=403\u0026rtt_var=798\u0026sent=246\u0026recv=279\u0026lost=0\u0026retrans=0\u0026sent_bytes=39081\u0026recv_bytes=21573\u0026delivery_rate=1219405\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=16245\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=343\u0026inflight_dur=58\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4711,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1363)","md5":"6fc2a1179836e65dce7188fc2f3841de","sha1":"b228810c8e3d538ac2943e89f373f9beaba885a2","sha256":"4bc6cee2167953b3209791a7f9e514920045091c9cc7ae3173615cc459c780b3","sha512":"0f49c0cdc8e585df659ed77bb41611f2d2eb6687d2da0cc7726ec22984640da404a88e5586670d59689235171bb94d8b613bdab0623380e89690f2b905173b84","ssdeep":"96:Hw7NpPdpjgKrdRptxRfLQ94MWywZ+9EYgbWQF4FfZpwRKyt3:QP5VrQP48EYgyQF4lwRjN","tlshash":"7ca175163308250895d232f5442f229db329db1d60e9e225e3dcc9e07d3de5ef0aad6d","first_seen":"2023-03-07T12:27:56Z","last_seen":"2026-04-14T13:18:38.63575Z","times_seen":24,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:24.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-default-layout-BuBwqJzH.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=u6RJieD5S%2BB8uQxCD0QX%2BDBHtjgEpToELrXCTswIKYTgd5dO3MvdCriDHmtR2nrz5UVYyXs%2BicPC7%2BIw%2BMdup1rBXMQ160zSY9vFh3svODXXoPQlzTpmG47VkTNTzo00sTwV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-bfb2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93428\r\ncf-cache-status: HIT\r\ncf-ray: 95525bdcbc0856cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1372\u0026min_rtt=332\u0026rtt_var=1090\u0026sent=314\u0026recv=122\u0026lost=0\u0026retrans=0\u0026sent_bytes=293909\u0026recv_bytes=8128\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=36972\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=707\u0026inflight_dur=88\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49074,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4007)","md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:24.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-CwTj4H1w-BCQqYYxA.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=F5o5jaM%2FtyKNU60wFFotRv0y%2FG3QlRiL6gjmh5Pyj9k%2BkHoBAAf4o47rRpxWz58RWGh0qPeL9oaL%2BR8NTT6JRQUq%2FC7LTIxs4YToEM0WFqyOa067o42mlY81u4ok2z3JjbYR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-21d9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43964\r\ncf-cache-status: HIT\r\ncf-ray: 95525bdccc0956cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1325\u0026min_rtt=332\u0026rtt_var=913\u0026sent=341\u0026recv=123\u0026lost=0\u0026retrans=0\u0026sent_bytes=323417\u0026recv_bytes=8175\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=36972\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=710\u0026inflight_dur=90\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8665,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7935)","md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/plugins/media-ace/includes/lazy-load/assets/js/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/plugins/media-ace/includes/lazy-load/assets/js/lazysizes/plugins/unveilhooks/ls.unveilhooks.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nkxe0MtMCqLg%2BweU10%2FpGVZ6vI9AKGSC6XIaDOhxYxFbW7gZCRN0A5DduJYywnvg%2FKXlV1iZBDljvicVfBNSyppMYZmZjKIxSeVFqkYT8okICH%2B9%2B1vhYenqXlsucQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 27 Apr 2024 18:28:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662d43d5-671\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd52eb30b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1533\u0026min_rtt=468\u0026rtt_var=1137\u0026sent=236\u0026recv=269\u0026lost=0\u0026retrans=0\u0026sent_bytes=28259\u0026recv_bytes=19278\u0026delivery_rate=619748\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=14400\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=333\u0026inflight_dur=49\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1649,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1623)","md5":"728be2cf7dd0e1fb913065f11f8a113c","sha1":"328fd3e7478d57b7930bdfc5bd2e44d1e845fad7","sha256":"80107f11f8fef70c5d2d2ff48293c1fddc0a7f904b00412d121d717bf454e14b","sha512":"10795e6ae880e77685f37862fbf60d4a7ee0af3be2250c4f37afb46c675a33e4ba1f2e1c8d704954919c51ad71037b50446b44bbef54a2444aeb34ab122aa8f5","ssdeep":"","tlshash":"9131617f322468337c6608f1905f550276a2f1732e099e118ae7dae4d63aece2c35618","first_seen":"2023-03-07T12:11:03Z","last_seen":"2026-04-21T15:18:02.917667Z","times_seen":296,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:27.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-Bq6c3Bam-CqhR3Et0.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OVfC2CjzaoBcgYG1LLDVaXJ8DMJCDllfhhQDFK1RtycMnhwRE2lJaBbWnyXgF215oOBOyz%2B2%2BaAu3KfDGyJ529iqMaBD7D52mAlNHVnj8CpvyKHd1E08NwDciB5hYbwuBw%2Br\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-2f6f\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93410\r\ncf-cache-status: HIT\r\ncf-ray: 95525bee1d8256cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1288\u0026min_rtt=332\u0026rtt_var=524\u0026sent=1930\u0026recv=292\u0026lost=0\u0026retrans=0\u0026sent_bytes=2094341\u0026recv_bytes=28057\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3486\u0026inflight_dur=292\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12143,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12142)","md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-CwTj4H1w-BCQqYYxA.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Xz1pBOIMWM7vpUhufvfrlKAK0s%2Bn4NrFCAZUJ4SpFzZ05nzRFqem7H4fevS2TfjZunJ0hyVUfskKbIHfCo%2FisXA619lzfHDHvVQbGAIEVgSeGslQQHyuL0IOdzFtmGSTfZLn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-21d9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43967\r\ncf-cache-status: HIT\r\ncf-ray: 95525beeeda656cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1221\u0026min_rtt=332\u0026rtt_var=375\u0026sent=1946\u0026recv=297\u0026lost=0\u0026retrans=0\u0026sent_bytes=2108429\u0026recv_bytes=28810\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3613\u0026inflight_dur=315\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8665,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7935)","md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:30.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-Bq6c3Bam-CqhR3Et0.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sXT1pORiddthzSLSSAAArq%2FxV%2By8kADFe%2Fy6hNpr1XidkqkSnY%2FSgvoCWOJBMzVJ%2BR%2Bb01TwTEAiTndUoxPPN3nzeGNIDVi%2BSbJ7OuR%2Bv3srAUJFXHlXh77KxVDFnyeADD1F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-2f6f\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93413\r\ncf-cache-status: HIT\r\ncf-ray: 95525c00aef256cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1458\u0026min_rtt=332\u0026rtt_var=687\u0026sent=3863\u0026recv=434\u0026lost=0\u0026retrans=0\u0026sent_bytes=4269715\u0026recv_bytes=48263\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=6460\u0026inflight_dur=681\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12143,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12142)","md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:24.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-CwTj4H1w-BCQqYYxA.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ng0M24SULNnjN1flIf43CAyqsMXvNUfxUnKAnKfK0M8oshCddlra7Wcf3XU4LcnLYN3mms9tzIRVqJnXaORPXlVXAlHKgWYP80gT5tieVriA1GBYQFnxnRYcKuoEDUiOaHEo\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-21d9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43964\r\ncf-cache-status: HIT\r\ncf-ray: 95525bdd6c0d56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1311\u0026min_rtt=332\u0026rtt_var=606\u0026sent=368\u0026recv=129\u0026lost=0\u0026retrans=0\u0026sent_bytes=351608\u0026recv_bytes=8713\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=36972\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=814\u0026inflight_dur=97\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8665,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7935)","md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/vpl-epic-ass-teen-creepshot-in-black-shorts/?bimber_auto_load_next_post_template=row","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:27.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /vpl-epic-ass-teen-creepshot-in-black-shorts/?bimber_auto_load_next_post_template=row HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: a=AS5K9poI3XBGhTbGU67TEtLriRnD34dT; token_QpUJAAAAAAAAGu98Hdz1l_lcSZ2rY60Ajjk9U1c=BQOCAAAAAAAACZUAAq0drGYcTFoj79dZ56F4vn5BgqC8t4wAbLdyoQp-NyxwMF-z4QaA894EpLBZ4zOdNm39ERSLKKBrCD-URHu3gMAiNH1ZU35lZCnyeZjt7mKLj6TLnJeuCMZ2DjOYBM1l_vRSKMyKnJ9qo4vXcs3OGjplTHrJskWhksdlw0aXI4e_8fAZagFQ0zsA21qCxkGRUX1bKT6MsmNp6bYwGAaNAUdp03jajVR2_Nrr7C_hPq1ecqb7DZUsBwW_F0LswsdNJmX_11rEDCUyQMw863I9vqdUrqyoktyqYY5QWo_a7Ts7sTc2CsyhjbUdeaRrCj0uuX5A_V-YSKILH153UvIB-IhMUKsqHFQ0SL8Tw8lEGH5CrGEoy9s544uSQeUGr40Lmwt4FnYPYIc-MksgkMiV-nIbr9fpHV6LFcc7MuMVp_ykOTZGkm3Jfhz3BY0yL7lrPYYpKdTguLkxNP2Vux7Vz1RwvuCgYka23Ox5b2zCToMlnGJY0O6XpudzZ5zTYqQ0U2qdGS3ntu82GVSAQaFPJ01S1zubPL-bx9JkXaiXo0J1-HhERH997W1Bm8B-7cMxCU-BTBAJDf8ZZ4OQihXowa7ViHnT_CWFoOGdpK52reEEp6p9d31ylEAenF8yQLPgeqZU7zqXfqf3sYuUolW64QrUnHDaXAeb4gk4iudIRDt191V4K4f0FbXRtueG7Iki9b-5E7q_NKsY_4GXqdZeUI81cSecB5bRBgNrIpb3a2UvQ8vD5p4K2pBSrwfquz_U3OC7p9AELmXU0bZ488Ag1Z_m6y5Pa15ekrUXQC9OScAbKZySqQpb6q2tmUBEbfIkGjj8sWsF1uha1y3o1_2ohmFvnOiHcSQgxXquBeSxcLUX0oGNY4DWcDoN6Fl-x_7-ilNeJNdpm-PJqxBfziaxtnE8YIsy2x7xR8nssCx32p-0h9THB4mvkpkWRge4-0mY0YMElWEgYniEUWdEka4jwNbzqsAYHaiOUUqIqhC5XdQl2tfmh_5w0Ea4ONzeOIc5OyvTDRCW8f4QyhgOg4_SBeRQ3jofKf1do51oP64xM1w0grV2FVz8EH7QFff6K2I1IUPqwZ4f8BwXtDWZC7l_f1MY2DV4PyMttirHJraLwDgPeah1OWylt3adTnVOwS2ymPWUlb4NQquP_WH8PxxLXXn_yNjshI0pzcSw7fa7aJOH\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uyA0zCPAcRoQy60KSJDKDnbeLS6tzjC1rKaB9Vtsw7d19XmePgpFuhnDznrBDo2H6ABd3q7E0Q8iZ9Mm8IoFYIyUiIZv%2FDoEb41bsllR8KDAmskMVsyILk2u1LLHMw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-pingback: https://xcandid.top/xmlrpc.php\r\nlink: \u003chttps://xcandid.top/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://xcandid.top/wp-json/wp/v2/posts/6348\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://xcandid.top/?p=6348\u003e; rel=shortlink\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 95525bef5f1f0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2243\u0026min_rtt=0\u0026rtt_var=2536\u0026sent=725\u0026recv=424\u0026lost=0\u0026retrans=3\u0026sent_bytes=526479\u0026recv_bytes=43841\u0026delivery_rate=18595440\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=19203\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=4974\u0026inflight_dur=389\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":505840,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64759)","md5":"2201436d3c34b14da04ec0e132f5d91b","sha1":"2caea3d172410648fcaba2d910b7775faeacd1d3","sha256":"c79dc5ee489cc3d1ae946c2e63cd6bdace1f947d5ba5b63510bfe9ec25c4d247","sha512":"aad293ed10b5ba0b1e709321fb07cb5867dfcc4cd0f3a9411bf1ef72178d231db503a438daf7e1f90a5bbea327cc7f0fa2b26cd4fb8aaf78e7dfb19c72ba46ad","ssdeep":"6144:33K8ph78CaxFWBr4Qsu4x//zYnmqZZIvrn:qxCaFWBrNsu4BzYnmqZ6v7","tlshash":"e3b4f772a9b0232c616bd3119ac1b3dd3615c842f6834fdaf96a9714cbeeac9147370d","first_seen":"2025-06-25T06:21:17.769473Z","last_seen":"2025-06-25T06:21:17.769473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:28.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-D3ltXc3a-B-Z7uahg.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Eb2ZHyDXb8Dd6PVfv31z58NudQJosYS%2BGoiV4CZdxXRxpobUxNsu%2BrCqxDjfc6Bq0YyEHmcp1FII%2FGaFpWT0PlLr%2Fr%2FJnJsEdGC0T7xzRkB621aWDVC1xx%2BaUXLX%2Fr7p1j2m\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d9e\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93431\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf53e8756cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1162\u0026min_rtt=332\u0026rtt_var=435\u0026sent=3053\u0026recv=367\u0026lost=0\u0026retrans=0\u0026sent_bytes=3362140\u0026recv_bytes=39242\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=91114\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4621\u0026inflight_dur=431\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3486,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3485)","md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:27.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-default-layout-BuBwqJzH.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4ZAmWnfZ3KV%2B14cDgqpKp%2FlxCDSoboY46kdlgWHDiPvW85cE1Uet%2FSGQ8DHyNo21BrStjDnxvghcgK%2B7n%2Fel86zA%2FzXaFEMvVLpEMA56XKsiuJigPph39m3JXY3GxtleUxwt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-bfb2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93432\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf2de5d56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1081\u0026min_rtt=332\u0026rtt_var=162\u0026sent=2621\u0026recv=337\u0026lost=0\u0026retrans=0\u0026sent_bytes=2880214\u0026recv_bytes=34664\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4241\u0026inflight_dur=378\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49074,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4007)","md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:29.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-ui-BXPTXUP4.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IXwBYUYwD10tZzxpx%2BmeRvYsjwJ%2BxCW67p1iyKDootTTTQXpHw0KCc5HUB1%2FvW0YRXOu4L1yPodxlMDAnxh3NLPc3p69BeG46zWunnn8nfXdw6kSJnzYmRKc3l%2Bu5jQA6DCd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-18392\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4\r\ncf-cache-status: HIT\r\ncf-ray: 95525bfa9e9e56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2135\u0026min_rtt=332\u0026rtt_var=574\u0026sent=3521\u0026recv=403\u0026lost=0\u0026retrans=0\u0026sent_bytes=3894256\u0026recv_bytes=44010\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=5482\u0026inflight_dur=536\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":99218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65375)","md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_09ce1b88cf9cdc1bc8377780ef0fe0a5.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_09ce1b88cf9cdc1bc8377780ef0fe0a5.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3DyiIAEHq%2Be97DeyXAV1Yu6RWa%2B31fEhovbcZNsZy%2BnADyRJHCS59%2FFrNtzDCfxZ9Mjvos9FaP1TvzX52sWJCy7bz9osaX0HoflpczE4FfJT%2FbAf657TvOyP%2FJwsLA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-169\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd53eb80b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1221\u0026min_rtt=403\u0026rtt_var=798\u0026sent=246\u0026recv=279\u0026lost=0\u0026retrans=0\u0026sent_bytes=39081\u0026recv_bytes=21573\u0026delivery_rate=1219405\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=16245\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=344\u0026inflight_dur=58\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":361,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (361), with no line terminators","md5":"eda4e638fdd1b8de8f97ec781e8242d6","sha1":"a8c0716a4bccf2805899403af14e7b9216b19573","sha256":"5423f185195f046d0f3893f674e072be43e47c6124dd6ccbe214e896b1944d43","sha512":"6b0bbb532ca0f901059517960261c0c6e1577b31f4e207c3909aba5fa0d64e03c18e5eee10f8a6773a4870cdfc3f0d642f761c8d8e7b6643d023161c23554bf2","ssdeep":"","tlshash":"30e020854d0f1f0495705baa83e90e806214c732d0f15779c78efd11769aa5820657b6","first_seen":"2023-03-07T12:08:46Z","last_seen":"2026-04-22T16:12:40.940832Z","times_seen":712,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_5a66384935b4e94f8150690ab1933d56.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_5a66384935b4e94f8150690ab1933d56.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bUuV2XpQjl54Vwxn3RBnLyghUPOuLsOykq3PimS4Jyy27EfR3amijQlnxyZNY%2FIPilHhAObYQR9KEqf5sTDgu4tVj27hEsvILdbu6iZ8RycbxL0JFuCzeXTaaP6MIw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-1c94\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd59ed30b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=673\u0026min_rtt=0\u0026rtt_var=135\u0026sent=429\u0026recv=335\u0026lost=0\u0026retrans=0\u0026sent_bytes=210158\u0026recv_bytes=30573\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=408\u0026inflight_dur=117\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7316,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1632)","md5":"8ac35135c1b8f1b1e299104839e8aebd","sha1":"704abfdaef679fbbbbc7b59f7690934d27b3f57b","sha256":"6b18e42e6ed3e49879b21ad8ff051751f65a772b6d78c5e5ea7969e569657884","sha512":"eaedb52a568abe49a9c17048f913934c33e58926b3f626c7ba80cd9e0961f37de55b226183e9845a82ae58316d8c4194f3f2264b9a2c7ef9cd65921beaf7fdf0","ssdeep":"96:SU6maf+YOM5dZF9XTUH1mIQxxQFQJ1YodDKGAQzQrQvIxufobp4kKuvIbsuBH:+map5dZbXTGmXXQuJ1YkfsUxKp4WKsut","tlshash":"1ae1f04df1e1b5360099a179844f324761a2790fa585c8fe3a31ccc45eacfc59762bbe","first_seen":"2023-03-13T10:25:42Z","last_seen":"2025-06-25T06:21:17.770585Z","times_seen":5,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Jun 2025 06:20:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://xcandid.top\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":686,"timings":{"blocked":291,"dns":1,"connect":93,"send":0,"wait":100,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:27.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/prod-3EO0RhVK.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rzi2dOzJpC24uxPFOw78VqsASrFBOUi8lQ2p4kz3%2Bl8v2cLC1ksvxZY%2FF4yWbstvBDB1s%2BL8gH%2FT9ZBEkxoodE0%2FWdNvMgvY3iXdXPvWK50%2BoiHud4u49PQX7Dat0KT1Mqb%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-47d8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93429\r\ncf-cache-status: HIT\r\ncf-ray: 95525bed0d6556cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=884\u0026min_rtt=332\u0026rtt_var=337\u0026sent=1609\u0026recv=263\u0026lost=0\u0026retrans=0\u0026sent_bytes=1735581\u0026recv_bytes=23872\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=67974\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3313\u0026inflight_dur=252\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9763)","md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/#9ovelp","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mE6xFJa1Lb6ku4stC3xDUoSzfNMZitnszrfYAbIQhjC2qDZYmCP5BsN0QN927Cxb1Ll6hel5Zqu2XZLlRaIJyEIDvXJ0QDMdT9afGtZvovbkl4vmev8Nio0PHEPDJNgrfc9m\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=10\r\npermissions-policy: browsing-topics=()\r\nage: 93432\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525beb5d2256cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=939\u0026min_rtt=332\u0026rtt_var=440\u0026sent=1355\u0026recv=248\u0026lost=0\u0026retrans=0\u0026sent_bytes=1444638\u0026recv_bytes=21770\u0026delivery_rate=38470703\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=48063\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3043\u0026inflight_dur=239\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1312,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"1d5570ab81c86a4292fed1eca89734b6","sha1":"2845e7b58dc59fcf963b60e5a1519ab0417ffbb6","sha256":"a28df2b44d0506bee3ede4c0a20155c7b94e6078c45ede2d932fdbddca0faa10","sha512":"34f91c3144f14124fd3c39e4c0e42e9ad4820588bae062a2d99be3dbcab9cd9573c1eed821448304ac509f0bad668201aac27268fdbe49a8e10a93becec37732","ssdeep":"","tlshash":"e62133811cf0c821933322194f7ef1087897a10346599d2479de91285f45bd78ea7db8","first_seen":"2025-06-25T06:21:17.749438Z","last_seen":"2025-06-25T06:21:17.749438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/epPiIDRfOm98SSJdinTlpg/ek/r8cznpnz/iplvim/poster.png","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /epPiIDRfOm98SSJdinTlpg/ek/r8cznpnz/iplvim/poster.png HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PAnCly20u4V2SHTnu4kM8UZRA2gkBZENL22nsSL8Jmdwpa0z2ptf%2BsR0IPnVPBGJXRf3uBuuZ2RTXwYlmVYCumIfYXSkm5H7WadgTqC%2Bh3KpFb8BdKj4Ztp5%2F8LfQDEtMAOv\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 24 Apr 2025 06:50:09 GMT\r\netag: W/\"6809df21-1945c\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 95525beeeda756cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1189\u0026min_rtt=332\u0026rtt_var=355\u0026sent=2013\u0026recv=304\u0026lost=0\u0026retrans=0\u0026sent_bytes=2177224\u0026recv_bytes=30109\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3733\u0026inflight_dur=327\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103516,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"data","md5":"4c96c32bcf0bd5f02720bf7d00015330","sha1":"98a5f21f460c2b863099f0a05897a3adc0d3b644","sha256":"02b37778cd43dfddf04921eaa942dbf8e23f0f5edc5046d5d25d3dae989dad7d","sha512":"313cf3ebf2cfaab741533897d57d795331b6e94506e72533ef60047a8b8e1e83e10ec237990635f5c0b70750f78b2bdec34a8221004338ceda7cdec8c3f012db","ssdeep":"3072:OLTOidM+Mp7rJI4L61yK+a/7C+r2U7Yf5gHzqUmRz4un7XDNQlICejmVEBCseJm/:O+iW+MdrJITOaO+r2U7ERz4u7XC/ejNT","tlshash":"d2e3f1015392e330e6bd82fd141206c8710d5f88f3dabd61d665d4e12a9f62eb3ce6e2","first_seen":"2025-06-25T06:21:17.771395Z","last_seen":"2025-06-25T06:21:17.771395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:28.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-default-layout-BuBwqJzH.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3SEm%2B3RDMwI%2F7%2FfA6MSFF6OsViza3YpMfVWKrKJ9DIuCNw9yGNNQXeXr6tre3pn6AfdY9ElRuANYfpwvLb7KMkqwdkNpT2J4nwYRgm%2BRCdKaeusvlIS%2B7iXGFuvQl6yRF7iK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-bfb2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93432\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf71e8f56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1149\u0026min_rtt=332\u0026rtt_var=182\u0026sent=3102\u0026recv=375\u0026lost=0\u0026retrans=0\u0026sent_bytes=3413916\u0026recv_bytes=40556\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=91114\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4928\u0026inflight_dur=447\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49074,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4007)","md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-D3ltXc3a-B-Z7uahg.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GyaPrzSjQZaP4fcc2gnR3A3xuUI2FJvxWgsn1Ty67VIrdNMtRMphWwfy9T5x0%2BCsECo2y9LZ5OEu51YIM9gBHVdV%2B9bzrzto5O4LYoq44ITQH4LOO4DZ%2BWWe3Sm0cFz2q4JO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d9e\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93430\r\ncf-cache-status: HIT\r\ncf-ray: 95525bebfd5056cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=948\u0026min_rtt=332\u0026rtt_var=283\u0026sent=1394\u0026recv=253\u0026lost=0\u0026retrans=0\u0026sent_bytes=1484389\u0026recv_bytes=22697\u0026delivery_rate=38470703\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=48063\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3157\u0026inflight_dur=242\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3486,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3485)","md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-CwTj4H1w-BCQqYYxA.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mF6gkpOmbQibyWoIWeO%2BpVZM6viQ86054yPUB%2BzOLeDMLEb2I3xgbyy1KSRNi9GtH7ycz4sbtyreBSNQVqJaF0lVQ%2F%2B%2BE7DASPyyVLnc7%2FDlEXXOsXgaPHGu%2BEHicqYnZimu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-21d9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43967\r\ncf-cache-status: HIT\r\ncf-ray: 95525beddd7f56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1375\u0026min_rtt=332\u0026rtt_var=999\u0026sent=1893\u0026recv=285\u0026lost=0\u0026retrans=0\u0026sent_bytes=2056967\u0026recv_bytes=27009\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3445\u0026inflight_dur=280\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8665,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7935)","md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:31.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-hls-D8DklbTa.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WKtPhxGyTa2MxFZfKAwdQ1qHgLeYvKCprrGOsS%2F3IKku9YuMZdNZnXwTH91komUKO9%2BeOEjQfS97W0Rg4V76TNXCGFhezpoCykVxZign4XjO3fo%2BH8inSlsubPHpI%2FMK%2FW2d\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-1f10\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93414\r\ncf-cache-status: HIT\r\ncf-ray: 95525c06bf0256cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1303\u0026min_rtt=332\u0026rtt_var=621\u0026sent=3874\u0026recv=441\u0026lost=0\u0026retrans=0\u0026sent_bytes=4274710\u0026recv_bytes=49503\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=7428\u0026inflight_dur=684\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7951)","md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/9BB7q0pWPhMaMX1x4rlTRQ/6s/lod39qeq/lorctm/poster.png","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /9BB7q0pWPhMaMX1x4rlTRQ/6s/lod39qeq/lorctm/poster.png HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ekvnh1KLA1q3BCAgVBOwuHhdl9XKV%2BKSQBZk7gjmdRDdowVhd4sK8qqdHfJxLL8uGrpcp0cvPCX7FIH6SXH8nVujo8vnOU7UV%2Bkn%2BI%2FZAmhXSEWn%2BeKhm%2BAA9i%2B7RVqxuZTg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 25 Apr 2025 13:41:18 GMT\r\netag: W/\"680b90fe-239de\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 95525bea1cdd56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1677\u0026min_rtt=332\u0026rtt_var=1615\u0026sent=1166\u0026recv=232\u0026lost=0\u0026retrans=0\u0026sent_bytes=1231108\u0026recv_bytes=20045\u0026delivery_rate=30479456\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=50004\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=2932\u0026inflight_dur=209\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":145886,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"data","md5":"bfb75403a52fac6505a07ba8e2aee62a","sha1":"79e6d0a9bf4f5b6deeacdb2f445001681953b411","sha256":"839bd03153d6596980d03e644f59989fe298718b16b25260b077bdf289db5241","sha512":"edc472c1c583631b6539b24d5c78d8664fc6f197bf44453b8701e87c5a663df5a960d27775645317dca1ac2247bd5271a4e47caa659bbffd45a5f9c2602ed455","ssdeep":"3072:2FqrDe1qkSrHQ+jdKhn4oQjMYX3wIcMSgLSHkpqs6nieVPxeC2dUKy2Il7eKbj/z:dG19+ZE41IXZX+U9ieVYC2EhTh3l3H","tlshash":"c024f105b2a2f330d77994fe79128ae477099e88f7cbbd44d134d6926d8f12c728e890","first_seen":"2025-06-25T06:21:17.772092Z","last_seen":"2025-06-25T06:21:17.772092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/grey-joggers-skinny-redhead-teen/?bimber_auto_load_next_post_template=row","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /grey-joggers-skinny-redhead-teen/?bimber_auto_load_next_post_template=row HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: a=AS5K9poI3XBGhTbGU67TEtLriRnD34dT\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RdA%2BGpth8ypPfjIKrQzjnsIGezExZsvTKzABx7ijpyJtdThJIImBykW1mWprMer6HoAT3sH5LvYQii%2BXzlcol4xqeOVUGi79tScL%2BP5LQYlXDMPmUsKGkwddrBrirw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-pingback: https://xcandid.top/xmlrpc.php\r\nlink: \u003chttps://xcandid.top/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://xcandid.top/wp-json/wp/v2/posts/6364\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://xcandid.top/?p=6364\u003e; rel=shortlink\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 95525beb8f120b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=651\u0026min_rtt=0\u0026rtt_var=97\u0026sent=638\u0026recv=407\u0026lost=0\u0026retrans=3\u0026sent_bytes=431915\u0026recv_bytes=39113\u0026delivery_rate=14876240\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=21559\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=4389\u0026inflight_dur=320\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":505071,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64759)","md5":"813b4e5a794efa76a8e811bb58160794","sha1":"3de53e2020aa29bf03e2cb9454ba2d31d6478d9a","sha256":"f9b2ad290917ced12e7b672525bec0b5145487caaf8d9efb0253f816177f7eb0","sha512":"2398d33a8a5667e7f4939a5c2595521bca65f8fdb3b58651b09f1effebf93dc67dc22e65c396a4511c6f1161e56aa22ab1c4ca68aa3b264a7a95ecdce141bdba","ssdeep":"6144:33K8ph78CaxFWBr4Qsu4x//zYnmqGZETrn:qxCaFWBrNsu4BzYnmqGyT7","tlshash":"24b4f772a9b0232c616bd3119ac1b3dd3615c842e6834fdaf96a9714cbeeec9147370d","first_seen":"2025-06-25T06:21:17.772666Z","last_seen":"2025-06-25T06:21:17.772666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-default-layout-BuBwqJzH.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iF%2FTZcxuNCePiiF89c7FJ7ATPsociztAKQOBCBsfrIbqijyezTemZ%2B6qmfBBf5RFAToV42b7JwNPIeAEYitsfBhH%2BG023RbjQSVr4UwNzD6hL3lr8heOlnL%2FFpRtoJj1y072\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-bfb2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93431\r\ncf-cache-status: HIT\r\ncf-ray: 95525beddd7e56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1375\u0026min_rtt=332\u0026rtt_var=999\u0026sent=1897\u0026recv=285\u0026lost=0\u0026retrans=0\u0026sent_bytes=2061371\u0026recv_bytes=27009\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3446\u0026inflight_dur=280\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49074,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4007)","md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1366190956","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86","sha256":"89:68:57:F4:FD:04:C3:94:84:10:59:C7:94:CB:87:1D:7C:07:51:29:D1:25:C6:75:F4:33:16:EE:2D:9F:60:3B"}}},"request":{"raw":"GET /js/core/bridge3.704.0_en.html?gdpr=1 HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-doubleclick-instream-static\"\r\nreport-to: {\"group\":\"ads-doubleclick-instream-static\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static\"}]}\r\ncontent-length: 269819\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Jun 2025 10:50:52 GMT\r\nexpires: Fri, 19 Jun 2026 10:50:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 17 Jun 2025 21:37:44 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nage: 502175\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856431,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (48645)","md5":"946da54ca510d5abc4848db183354cbc","sha1":"43c4163e2e992737558a87053b775b553f27bb8b","sha256":"2bbda1c49053e3dcd31d50f2ceba5ee2516dbc5a13e90e557f9abd5de6dd6449","sha512":"65fdfa1ff73948441ff96b0999a9e4f92c91aadea9a008235b22283cb9355aeeec62d1c0360b6eff408b7b161259b8d8524a4a03437f66944c7722baecaaa71a","ssdeep":"6144:tlIfdSK6OsJ/pBHfdD9LdE8ObYHiZZavyUhvTkrNK8/C90ktibNZQiAriowmfoYa:r4cB/i8bC2y3wD5wmf+","tlshash":"83052b9db66274258263f4b5503f004fb23ba866f40849bcf689dce16e7984a0677f7c","first_seen":"2025-06-19T22:19:32.969026Z","last_seen":"2025-07-10T17:53:52.662015Z","times_seen":495,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-DsSvO8OB.css","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:28.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-DsSvO8OB.css HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: text/css\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xAm89uYcM0QfY853Uu5Bg4SglRGCNs1kSr5oXh0oi%2B%2Bs6P1uTVXXh1%2FS2DGyHme1XXJs2VwCg5Kh8O3EGxWyHg6vFz%2FwTyvxyZdgwUmcSYu5vpk5Ghdi0%2FirHgkluhHjvZJW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-107f9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43969\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf43e8356cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1266\u0026min_rtt=332\u0026rtt_var=561\u0026sent=2767\u0026recv=355\u0026lost=0\u0026retrans=0\u0026sent_bytes=3029946\u0026recv_bytes=37944\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4463\u0026inflight_dur=407\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67577,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"71d60520b4e2bd909f99d02da0ea779f","sha1":"ea28d120344bcfa8e2b1fdd9943197b6c2200f2a","sha256":"18c18ae6d606f8066f233273063edf80a2eb606f66602a98f4e9137c51135baa","sha512":"7a30d27940db7ddf540b8b7257d50ced8020a57d915b2e613b4c9efacb88e21c9b6fba6aaff28f118b3ccfcfa7a36d8b4280841b9b17894d5bfaab3679e63eaa","ssdeep":"384:NEihDpmQd+MeEeuID+MAbb4Pra5b0RvGCGQaJO1/VJFGhxDzV7a4N9QoyUTR5dP4:TxBeHoVSVJmxzuksXQJfDFMVwgjSG","tlshash":"706384e8fa4c613eb817614d1acc958ea32dfd40eed31a94e9c27128cdd7af31179684","first_seen":"2025-06-01T22:18:38.544356Z","last_seen":"2026-04-21T17:08:40.069138Z","times_seen":48,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_8607cdb54bc34af5c41d5b202dd9a437.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_8607cdb54bc34af5c41d5b202dd9a437.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8hP24cghp7YcVpbc5DE%2B1%2Fmrq7GMv31Jf7%2FIY3lHqY%2BHdE6QJjL1Bd0%2B%2FycxL%2B6oRH9YczRiAFWy7idHRu6sAlnTorcHLL3nYu%2B7nPozHUv2LD76WkKLYZXAzsSEqA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-3afe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd58ecd0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=600\u0026min_rtt=0\u0026rtt_var=109\u0026sent=408\u0026recv=328\u0026lost=0\u0026retrans=0\u0026sent_bytes=195956\u0026recv_bytes=28910\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=395\u0026inflight_dur=107\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1207)","md5":"62db4ae0a7b9d167ce9b05502dbc69ce","sha1":"45e27be1b244af0426b616167c9c14ef4cc0875a","sha256":"d7e14bde2832eae9f56bc36b298b72f9f913e523ced67773d7b6f5352f17329f","sha512":"3d70fd4df131e1a6f368480d47f06d8f1af7c163655f6fdc7e90ef0d877da58731a086a184f82ea346377b64645aa10c931c97cb0cd7e69a008acf0afc6dbec7","ssdeep":"384:u7QplKcwcwSbweQpjHpDDr6o+ABLBkBNvIoY:u7QHKcwcwSbw5pjHlK7ABLBkBNvIoY","tlshash":"196256287961602d897bb57fbc4f115628321f774944c40ee0e984b80fb5e09ba3fb5e","first_seen":"2023-03-07T12:27:56Z","last_seen":"2026-03-31T09:15:59.227769Z","times_seen":22,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:24.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-BRaSsAAT.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lLen62wFDfKxQCYq0hm5Sy7Ttx3Q%2FI9LC2BeHEoCwMVwqG%2FvOMBb%2BKZVByYY0dJ2Okz%2B8FMDfLEmFpl7J%2BVXZaAUWh%2BDxoHz%2B0sbESAEK4ZBE6GMk0hkYS1aYYpfs6aqGg%2BW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d6570\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93429\r\ncf-cache-status: HIT\r\ncf-ray: 95525bda8c0156cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5004\u0026min_rtt=531\u0026rtt_var=5047\u0026sent=68\u0026recv=91\u0026lost=0\u0026retrans=0\u0026sent_bytes=6708\u0026recv_bytes=5713\u0026delivery_rate=331996\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=15474\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=373\u0026inflight_dur=34\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":877936,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64878)","md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:27.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-BRaSsAAT.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7rTStHLw7q9udRArTJfOXEyI82YuqrrVBcbnMf%2FQhimIR8aLRrL02v20vfeLvU54Ig%2B5F85ObyqYZOw22qUxg4wIk19IpDA7Ex19B3DKr6zErEOU7yz80IjscNJramWoTLpC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d6570\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93433\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf0cdf556cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1214\u0026min_rtt=332\u0026rtt_var=466\u0026sent=2109\u0026recv=311\u0026lost=0\u0026retrans=0\u0026sent_bytes=2284326\u0026recv_bytes=31138\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3918\u0026inflight_dur=335\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":877936,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64878)","md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spartan/v21/l7gfbjR61M69yt8Z2QKtlA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7","sha256":"94:9A:1A:D4:CD:CE:19:77:99:6C:C9:14:BB:6E:F6:23:C5:40:A9:70:50:E6:B6:CC:DD:B0:18:CE:3F:DB:E7:A1"}}},"request":{"raw":"GET /s/spartan/v21/l7gfbjR61M69yt8Z2QKtlA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Jun 2025 17:22:37 GMT\r\nexpires: Tue, 23 Jun 2026 17:22:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133066\r\nlast-modified: Thu, 29 May 2025 20:17:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33044,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33044, version 1.0","md5":"12fb1f6cfdec83e788279cb03e22c6a8","sha1":"30cd79cceaabe3daf373218ac483924114a5edac","sha256":"4d34849e47c7d2528e2d325526901f58e5a2dc10a4a1c019c617cd56f2045b1a","sha512":"35a1befd987096945739732443f3dc056173cf3d03d28ffd2e0f5cc049b7688f1fd5c92b89840900a1766e73fefde8e5f8750bfc212193328e5eb8f5b81eb9c8","ssdeep":"768:QskSq6TFXGc3un12tBoCDWPEFLkovz6+tRi4MakgQ2W5qQCv72N:G9qFy2tBoqFDxtRaajQDq5v8","tlshash":"17e2e18243b56066e55fb4ff0ecec81b3b524c24e4b65af1d100d39e9066b65608bbf7","first_seen":"2025-05-31T04:41:28.213414Z","last_seen":"2025-11-09T06:29:45.677505Z","times_seen":119,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":66,"dns":3,"connect":8,"send":0,"wait":16,"receive":2,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-DsSvO8OB.css","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:24.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-DsSvO8OB.css HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\ncontent-type: text/css\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PBgs93DpbkQu59ng9GOFV6PYlA%2F78ZnIvNVdcWi5472HQ2HiZqtRJHu5xOnE1r8%2BUDVzijLggpJW0Pkz4%2Fj3QlIDnfsrQTh%2FIIEEOnoKRDjwPYabqIt%2Bd84TXslGT%2B7WRPHR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-107f9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43965\r\ncf-cache-status: HIT\r\ncf-ray: 95525bda9c0256cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3978\u0026min_rtt=332\u0026rtt_var=4637\u0026sent=79\u0026recv=93\u0026lost=0\u0026retrans=0\u0026sent_bytes=19908\u0026recv_bytes=5802\u0026delivery_rate=1786736\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=23874\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=377\u0026inflight_dur=39\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67577,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"71d60520b4e2bd909f99d02da0ea779f","sha1":"ea28d120344bcfa8e2b1fdd9943197b6c2200f2a","sha256":"18c18ae6d606f8066f233273063edf80a2eb606f66602a98f4e9137c51135baa","sha512":"7a30d27940db7ddf540b8b7257d50ced8020a57d915b2e613b4c9efacb88e21c9b6fba6aaff28f118b3ccfcfa7a36d8b4280841b9b17894d5bfaab3679e63eaa","ssdeep":"384:NEihDpmQd+MeEeuID+MAbb4Pra5b0RvGCGQaJO1/VJFGhxDzV7a4N9QoyUTR5dP4:TxBeHoVSVJmxzuksXQJfDFMVwgjSG","tlshash":"706384e8fa4c613eb817614d1acc958ea32dfd40eed31a94e9c27128cdd7af31179684","first_seen":"2025-06-01T22:18:38.544356Z","last_seen":"2026-04-21T17:08:40.069138Z","times_seen":48,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_154206f1539400d94841fb097c250959.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_154206f1539400d94841fb097c250959.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jlqgmanW7c%2BXADIckIUf%2BCwO6O199uFs21w4snfzx9IeF3eQHG40JLVLMYXcl7TJV0BUmhXRRmoyl1NHKBYR1NaD9HwIiAXY86MOamZX7TtzwCjz0XznnkW3zuO2Cw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-13f7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd59ece0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=659\u0026min_rtt=0\u0026rtt_var=200\u0026sent=414\u0026recv=330\u0026lost=0\u0026retrans=0\u0026sent_bytes=200923\u0026recv_bytes=29269\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=401\u0026inflight_dur=112\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1134)","md5":"a26968a726fb75a93e8b36bf64d2bda7","sha1":"95e258af1cd4f719520b617018f8b92c98f99add","sha256":"66e32ee875c771fee3576dc1470c53e071e652e0575016fd2d7710ec55012610","sha512":"89f17705f205c83c3a3561163af80634e36235533f9f8cf5b54caaad2b993d7c55f4e92012d7c7d027cb31d30bbf73689372b9e17b3a76b9f016c183a62331b2","ssdeep":"96:SU6maf+c0sxC7uvAt8Osert/molbtkf8nez5SxZQ5mulEygN:+magB7uvAtWeBuAxeziK1IN","tlshash":"38b175c871f26a7686e662bb64db1b4272a36145804480edfd70ccc51ab8fc657327fe","first_seen":"2023-03-13T10:25:42Z","last_seen":"2025-06-25T06:21:17.774143Z","times_seen":5,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_5ff18ded4219199be1310ba302af7b40.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_5ff18ded4219199be1310ba302af7b40.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EK2%2F2JJ5NpZmt7pFXhs8EGUeoFz3DdwKQJloNpPNv18XQ%2BKNX2mXV1E%2B275W1rxqmF2Sbiw35FTk64XesW6lcuP3h3Ao90s%2BNmbtN3Cd1T3x2%2FJJTq5zTNkuQ5ml1Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-a72\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd59ed20b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=659\u0026min_rtt=0\u0026rtt_var=200\u0026sent=417\u0026recv=330\u0026lost=0\u0026retrans=0\u0026sent_bytes=203436\u0026recv_bytes=29269\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=401\u0026inflight_dur=112\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2674,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1849)","md5":"27846899019c257b6e9b409cf768e1ee","sha1":"ee13a8ab0c19801dc20fc0fb909704bbb6924803","sha256":"89d934380e1055b8f3e1528ebec520edc187998150004e4bc37430a522f7a6a8","sha512":"31bdb923ba2ee961f698386fc4afea637a04f7da77635902a4f7652aa9c3e0e4d971cb529840a57ec9eca8c6600bb1522399eb1837c1c144a0fc7fb71bd05654","ssdeep":"","tlshash":"f651630435f27a35c196d01b8d5f110a36a1a24ad141d1ecf66dc8d5aff8fc6036577a","first_seen":"2023-03-13T10:25:42Z","last_seen":"2025-06-25T06:21:17.774861Z","times_seen":5,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/gym-candid-part73/?bimber_auto_load_next_post_template=row","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /gym-candid-part73/?bimber_auto_load_next_post_template=row HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: a=AS5K9poI3XBGhTbGU67TEtLriRnD34dT\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yvF542pvSzbBsx%2BItkFbo%2B4kAUlIAo8Bz39J1d6emN3b0L1BRSnkUpTRMNeF%2BcsU531H%2FzTpMyra9J%2FK910Fo3MbQKR2ivJTMZoJ%2FmahB5DLxkRirlmpgKpBvE%2FvOg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-pingback: https://xcandid.top/xmlrpc.php\r\nlink: \u003chttps://xcandid.top/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://xcandid.top/wp-json/wp/v2/posts/6367\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://xcandid.top/?p=6367\u003e; rel=shortlink\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 95525be73f010b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=547\u0026min_rtt=0\u0026rtt_var=114\u0026sent=546\u0026recv=381\u0026lost=0\u0026retrans=2\u0026sent_bytes=331954\u0026recv_bytes=34405\u0026delivery_rate=9712192\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=15492\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=3780\u0026inflight_dur=279\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":504430,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64759)","md5":"4729486b1b9c55e71f63752f581b7c5c","sha1":"a59ea6bba3db4c5a0a3fafdc90a196c5dc114645","sha256":"73d56103cabf73fad064387de2c843b168984d4e2d6d4c8d6de7edd40ebac5fa","sha512":"9d1d1017c55ec1f6bb8a678ba3c4a2d9ffd7fce20aa2ef0701f1414df49cd5257e3ccf3bd1359ad866233fc8172e811c69fc8b42ff51041cfce8d360e84409c3","ssdeep":"6144:33K8ph78CaxFWBr4Qsu4x//zYnmqPN9prn:qxCaFWBrNsu4BzYnmqPXp7","tlshash":"13b4f772a9b0232c616bd3119ac1b3dd7615c842f6834fdaf86a9714cbeee89147370d","first_seen":"2025-06-25T06:21:17.775589Z","last_seen":"2025-06-25T06:21:17.775589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:27.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-BRaSsAAT.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XoR%2BZS633RuMW5oq2Hr%2BvLaNS3dtvOFRESBXSGBtpfUJ%2FG52I6qKvANXyU%2BrlWDD1hgpyhesaUGF37xm8jRuQM%2BCWxzPWf%2B2f301gInCjqtA80RRO3uxgawjZAtwqwSfCvSV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d6570\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93432\r\ncf-cache-status: HIT\r\ncf-ray: 95525bed0d6456cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=917\u0026min_rtt=332\u0026rtt_var=319\u0026sent=1616\u0026recv=264\u0026lost=0\u0026retrans=0\u0026sent_bytes=1743672\u0026recv_bytes=23918\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=67974\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3316\u0026inflight_dur=254\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":877936,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64878)","md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/uploads/2024/04/output-onlinepngtools.png","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/output-onlinepngtools.png HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 4992\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VBvo5M45tEvwkRgHuo1DchYCAvV7lp0IFbPFYjoF5s7EjX9y30Ro9Pghsv3U4eVMBLJ7s%2BQ%2FQ085XMXrtyc89I6DJFbv4PYYnRDZ%2F%2FQf5HWOmjHzjC6R8v%2B7oAtwYw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 25 Dec 2024 11:05:19 GMT\r\nvary: Accept-Encoding\r\netag: \"676be6ef-1380\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 44148\r\ncf-cache-status: HIT\r\ncf-ray: 95525bd51eae0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1628\u0026min_rtt=468\u0026rtt_var=1265\u0026sent=230\u0026recv=267\u0026lost=0\u0026retrans=0\u0026sent_bytes=21059\u0026recv_bytes=18394\u0026delivery_rate=619748\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=324\u0026inflight_dur=38\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 299 x 61, 8-bit colormap, non-interlaced","md5":"9c07760def3a96ad0a56b462c244e38b","sha1":"e2c6137390e09a5634bb8286a2cb19c4b08b9fcb","sha256":"d1797dd3985c583fd51a9039b23283d78927cae9ac531c697e752a74131147a5","sha512":"202ccb8ba12ffafe45d7d5e537f9c05a9eee24caabed50f3141ac26b4945167cbeaf66ab5095a726361019de2ebccc51756e6ad8f6c4fb2b0425fa24401ce86a","ssdeep":"96:47FS50ymesruCHXqyszeQyToFCIdiFnfNR9CSG5AOw:47FS50ya6l/8osFFnFGlaOw","tlshash":"0da16df11588199fd6a52ebc3988ddfc0028fb3df800874e3b1974d182276ac7ba8265","first_seen":"2025-06-25T06:21:17.776331Z","last_seen":"2026-03-26T02:35:10.530959Z","times_seen":12,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/uploads/2024/04/output-onlinepngtools1.png","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:24.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/output-onlinepngtools1.png HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 1340\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rPm8VR2Uzg1kbA59BjGtR6OoDGqVP%2BW%2Bjyn7TswAqzue6%2FuAMoRYJ1idTgIkKOcyV0LDGL%2BNJ0BoqWGjlCZHcNqLMXA%2B9f17qer1mp9ElwGVxvRk%2FNMGmxj6Try0ZQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 25 Dec 2024 11:05:27 GMT\r\nvary: Accept-Encoding\r\netag: \"676be6f7-53c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 44148\r\ncf-cache-status: HIT\r\ncf-ray: 95525bdb1ee30b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1235\u0026min_rtt=0\u0026rtt_var=789\u0026sent=463\u0026recv=349\u0026lost=0\u0026retrans=2\u0026sent_bytes=239598\u0026recv_bytes=32348\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=1284\u0026inflight_dur=220\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 58, 8-bit colormap, non-interlaced","md5":"a13f67d97c341361a87682b8a202b382","sha1":"f8be984dfce18204127db5c3e20d99adc617bb3e","sha256":"d02f81360bac4455432a5f8b638ffce40e3162c1cced26f2210986e8bdbbbcc1","sha512":"b7b02fa94729e7ef2c11d190e43afffde84e5561c87f540faf3d3ffeccb7580750b7a129257b86af1807eb4441a90a82bbee347d4d6f5c5474614d96f0fe41b2","ssdeep":"","tlshash":"6c21c8a7d505fd7cd5b8112f4ed7b9a5cf5a87cb0362d22100d707b0a9153342115f14","first_seen":"2025-06-25T06:21:17.72983Z","last_seen":"2026-03-26T02:35:10.549704Z","times_seen":12,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_eff6f9d1acafbf45be35a0bed2201617.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_eff6f9d1acafbf45be35a0bed2201617.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=woUwdytDwDhurSm550Z4DBy81pZyibCNiZoqqm2oiPN91zsIpgTB%2FOjJFpAMUJIshcxwjRgWsonu188nwNcbJEx2PgElz%2FyG9NBHRUHM84D1jZKsdfgOVQqUei996Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-a3b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd50eab0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1703\u0026min_rtt=468\u0026rtt_var=1485\u0026sent=228\u0026recv=265\u0026lost=0\u0026retrans=0\u0026sent_bytes=18659\u0026recv_bytes=17471\u0026delivery_rate=619748\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=320\u0026inflight_dur=35\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2619,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1006)","md5":"e22bb7482671534e90db697d92d62343","sha1":"2887f9ce1b736d4342bfe7b6a573a71aa8ba5452","sha256":"5dd8a3f6790206af202e95686cd3238a4f0ac8bb76b5413751bb9482911c3a45","sha512":"95be991defbe60e9ec188276a50018ebe98ed7af8d1c9b4a9a37d74ab2dfdb084b566c087a2238b8b8579ddc65e1bd14a3cee604e33a9daa8bde01766bddc5ab","ssdeep":"","tlshash":"a051ef8d79e464ba815af2718d0f639b6162a34ef504c1dc30658ce14aa1fc6c7727af","first_seen":"2023-03-09T03:38:32Z","last_seen":"2025-06-25T06:21:17.77701Z","times_seen":6,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/plugins/comment-ace/assets/css/iconfont/fonts/cace.woff","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/plugins/comment-ace/assets/css/iconfont/fonts/cace.woff HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: font/woff\r\ncontent-length: 2960\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KwCB6t2yzYOrZphg%2B2dQpfTDOPUsueuRNxrub1He5K9xV3NK7TSaX%2F5pD%2Bzqmp4eDQ%2BZCSNMRKyPAn47H6%2FTgERzGqItdL2yv%2FhMdwqvNE4l4o5AJkiCxh50qrY7bg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 18 Feb 2025 09:12:28 GMT\r\nvary: Accept-Encoding\r\netag: \"67b44efc-b90\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 43965\r\ncf-cache-status: HIT\r\ncf-ray: 95525bd50ead0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1703\u0026min_rtt=468\u0026rtt_var=1485\u0026sent=226\u0026recv=265\u0026lost=0\u0026retrans=0\u0026sent_bytes=16259\u0026recv_bytes=17471\u0026delivery_rate=619748\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=319\u0026inflight_dur=32\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2960,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 2960, version 1.0","md5":"732099dfe35b4c149a021d145c2d8143","sha1":"2cc67f54b4a2d9aa886eb658ef953d2767ba4637","sha256":"20f9344a77d5b07bcb299e0441ff84c6be230c8f59ec9aec151dd3e2230eda19","sha512":"27bec41aabfd8a77312b237fe6d7c3ce62f0944784069fe9669c7cc4c137f422b0559fad2533bf6cb960778363b46bb7562f42933d22d28660419703167178f6","ssdeep":"","tlshash":"bd515baeac95aa85c0ef74bcf7d55032f3e4571a43a10e2f81dc0680a1b499f519a867","first_seen":"2023-05-04T13:36:37Z","last_seen":"2026-04-20T15:53:15.377318Z","times_seen":106,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Jun 2025 06:20:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://xcandid.top\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":701,"timings":{"blocked":296,"dns":0,"connect":101,"send":0,"wait":101,"receive":1,"ssl":198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/api/v1/info?id=9ovelp","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /api/v1/info?id=9ovelp HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5vCZozHY46tYItRvrFBEKxy%2B5ldT%2Bn%2BxiaV5HBnOrM8aujVpcgH218%2Bc8FwMljHNtbVHQ7f7JndPqNZ1SqPFFeNvnmWe0fRXkuFesev74FSGRdGiZfS8tN%2FvtT2lRxuO60h4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: private\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,Referer,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 95525bedad7c56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1329\u0026min_rtt=332\u0026rtt_var=591\u0026sent=1916\u0026recv=290\u0026lost=0\u0026retrans=0\u0026sent_bytes=2079728\u0026recv_bytes=27723\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3473\u0026inflight_dur=285\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22433,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (22432)","md5":"d8230d6c1ec012af63e4dd518312627b","sha1":"fa2da9b74590c279d205434f1cffaec1da70ac59","sha256":"61c8c7afac1d985cabd78b4f65575bf32804c20afa269e45d4892f25ea5cd16d","sha512":"6d3474fb617fb47a7c68fa3eb3163b15f60f492923b91053577b7399b47e6c2e91e518bce7bfb8f09c929f30d3d41b60858725e0579da3ef982a3468e023ac56","ssdeep":"384:ZGVLG4lOR4+cSdREv9xa1BI82TUJhwlADXKBh7xY+0klbeMbdlE49wDMJ1AX1Hq5:ZL4DSHEvaB32TUJhwemBh7FZNeM78M33","tlshash":"cba2afbdb1446ce6316e831bd9b6ed9d53a76b62878b58cd01a4a1c3059332bbd03c4e","first_seen":"2025-06-25T06:21:17.778247Z","last_seen":"2025-06-25T06:21:17.778247Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:28.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-DqAw8m9J-CdSVB3O8.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=g%2Fz5m8oyz0QezysckeB26egxRYoeFz9219GGa6NuBLKluNVx2CNh3TgRm9HaqmU8gaq9WET%2B40IKO8G%2FZTwMSkeq8UVEpqiUteLUzxsScPpuXoVbjGL19sUw39ZYP64Ah8u4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\netag: W/\"685a0570-324\"\r\ncache-control: public, max-age=31536000\r\nage: 93411\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bf39e7b56cb-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1112\u0026min_rtt=332\u0026rtt_var=186\u0026sent=2685\u0026recv=347\u0026lost=0\u0026retrans=0\u0026sent_bytes=2939576\u0026recv_bytes=36602\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4370\u0026inflight_dur=386\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (803)","md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/uploads/2024/04/output-onlinepngtools1.png","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/output-onlinepngtools1.png HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: a=AS5K9poI3XBGhTbGU67TEtLriRnD34dT\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1340\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=F7XKd7FPrmL9qgUNhU9M5U5px6CFxqhDDUbnnjROZSs3QPfQlt5MjbI4a9DfMwnGqC7b6aiGhX6V%2BikE7%2FizQegCDO8K4JDO%2FBDwrlS%2F17vHYp5zXf9zGbn684okSQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 25 Dec 2024 11:05:27 GMT\r\nvary: Accept-Encoding\r\netag: \"676be6f7-53c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 44151\r\ncf-cache-status: HIT\r\ncf-ray: 95525beadf080b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=534\u0026min_rtt=0\u0026rtt_var=49\u0026sent=574\u0026recv=389\u0026lost=0\u0026retrans=2\u0026sent_bytes=362297\u0026recv_bytes=35371\u0026delivery_rate=12140342\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=18374\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=3803\u0026inflight_dur=288\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 58, 8-bit colormap, non-interlaced","md5":"a13f67d97c341361a87682b8a202b382","sha1":"f8be984dfce18204127db5c3e20d99adc617bb3e","sha256":"d02f81360bac4455432a5f8b638ffce40e3162c1cced26f2210986e8bdbbbcc1","sha512":"b7b02fa94729e7ef2c11d190e43afffde84e5561c87f540faf3d3ffeccb7580750b7a129257b86af1807eb4441a90a82bbee347d4d6f5c5474614d96f0fe41b2","ssdeep":"","tlshash":"6c21c8a7d505fd7cd5b8112f4ed7b9a5cf5a87cb0362d22100d707b0a9153342115f14","first_seen":"2025-06-25T06:21:17.72983Z","last_seen":"2026-03-26T02:35:10.549704Z","times_seen":12,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/prod-3EO0RhVK.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RYprF9aTda8sIhDT3FyLcsBmET7oRi%2Fo%2B6OVBwhes7XVVF4soq4GSJsN9dyzgytm7TEB552zZZDj5ZRcjHykhtpDm5jkPpkS9JKDb4eCBpKdnoGrXjX5x0FQ53ow%2F3VoLljV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-47d8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93427\r\ncf-cache-status: HIT\r\ncf-ray: 95525be29c2f56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1139\u0026min_rtt=332\u0026rtt_var=339\u0026sent=600\u0026recv=162\u0026lost=0\u0026retrans=0\u0026sent_bytes=593507\u0026recv_bytes=13319\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=22578\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1646\u0026inflight_dur=139\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9763)","md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-default-layout-BuBwqJzH.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kgrTUNNnsQ32RCBVXo%2F6ktaZ22fXxfvZhhphdOL6bO1qz2RnLp3E7QC5IFU3sCctYSZGAo%2BxapswuHYQQ6i%2BT5SQ5PPcVdGNvfQP0yX0nyz3sk%2FZKPpUuozPLn0RzYj200UE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-bfb2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93430\r\ncf-cache-status: HIT\r\ncf-ray: 95525be95cb756cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1003\u0026min_rtt=332\u0026rtt_var=372\u0026sent=1146\u0026recv=228\u0026lost=0\u0026retrans=0\u0026sent_bytes=1211874\u0026recv_bytes=19336\u0026delivery_rate=30479456\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=50004\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=2723\u0026inflight_dur=199\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49074,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4007)","md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-ui-BXPTXUP4.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5TVqPQvvvaNvab96v%2BzCDE3yAsddzuVpGqzhentI0gn%2BBCJi1HQiDjOvgoDZ6LoIUxDdH7vcc7V2kWZ2%2FBYq4wUsFUyckbN6N5NqUWiR6H5dkb7nAnGLvmkhu33bDN57yW3x\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-18392\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1\r\ncf-cache-status: HIT\r\ncf-ray: 95525beaed0356cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1362\u0026min_rtt=332\u0026rtt_var=913\u0026sent=1210\u0026recv=239\u0026lost=0\u0026retrans=0\u0026sent_bytes=1278214\u0026recv_bytes=21064\u0026delivery_rate=30479456\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=50004\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=2985\u0026inflight_dur=230\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":99218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65375)","md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:31.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-DqAw8m9J-CdSVB3O8.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6%2BSWDFadVdbBjbiuqS9ZWg%2BifiJlinqzacLo7kzsmvVxfQL9HJeErT%2FeaB8BbMnW%2B3kMLtVdLWUVd7%2B1oQfMgIkxtaee1P54Tile4eBikSX6zczgyojF5Bdm4wHVmLYh6o6c\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\netag: W/\"685a0570-324\"\r\ncache-control: public, max-age=31536000\r\nage: 93414\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525c070f0856cb-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1242\u0026min_rtt=332\u0026rtt_var=439\u0026sent=3898\u0026recv=451\u0026lost=0\u0026retrans=0\u0026sent_bytes=4291134\u0026recv_bytes=50935\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=7472\u0026inflight_dur=715\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (803)","md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/plugins/media-ace/includes/lazy-load/assets/js/lazysizes/lazysizes.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/plugins/media-ace/includes/lazy-load/assets/js/lazysizes/lazysizes.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=b7D47iOS%2BdAJNnUj%2F8wOmi6nTKllGVekKB3b7qSV5hbhAc%2ByJzCBCunkNC16rlxor3avGcEzKhfEIpLCNVx02A%2BiTV%2Bsa%2BI3X0YHrDKdLKYPphL86NZLzHVj1gJyjg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sat, 27 Apr 2024 18:28:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662d43d5-1cd4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd52eb40b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1483\u0026min_rtt=468\u0026rtt_var=952\u0026sent=238\u0026recv=272\u0026lost=0\u0026retrans=0\u0026sent_bytes=30659\u0026recv_bytes=20723\u0026delivery_rate=638509\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=16165\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=335\u0026inflight_dur=51\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7380), with no line terminators","md5":"53b55154b4fa6fd1756393bb418173b2","sha1":"d441c7986de20fc171c4cf489974246ec3234bc9","sha256":"ff7f41fb46f8e9ecafe2c34d443535baec1dcf56cea4701d82e3e387fee68353","sha512":"de778af44eb1212fce14f19ee930a9706cf4955ba9683f061e1c78fb4026dd8525f53b192608e008183469605421411866b35be1764495b3dd5d8e7178e0328b","ssdeep":"192:sydOA8+vVJ2JmVvhaWu4sWAMfb3k4HKmVdVLRcoaqzaQOy:sy02dJ2JAhvunnMfb3bHKcdVjaqzaQOy","tlshash":"80e194ff76a67077a99378b4512f210f91327173be168825953ac4c22b3ce991137e2e","first_seen":"2023-03-07T12:11:03Z","last_seen":"2026-04-20T15:53:15.288284Z","times_seen":187,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:27.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-hls-D8DklbTa.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Y%2FOOxsIQsguJJSRbCtCUT3Y5zQtvW44X%2FRUbrorD8b7i0jskD74FN632TMcdHSiE6nt4az2KldkqFRB2dQam1P0%2Fez11LlNd6ZHKJKfDSO%2FlLKwA%2BJ61gAumvAsomEolaVUo\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-1f10\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93410\r\ncf-cache-status: HIT\r\ncf-ray: 95525bed4d7b56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=900\u0026min_rtt=332\u0026rtt_var=219\u0026sent=1872\u0026recv=280\u0026lost=0\u0026retrans=0\u0026sent_bytes=2038178\u0026recv_bytes=25828\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3353\u0026inflight_dur=272\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7951)","md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:30.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-DqAw8m9J-CdSVB3O8.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XgfLcoT%2BZgKvx%2FQE5lOSP%2FdgxyZBRpwakO0oKD1dfEI1Xm%2F0dmJcFIcWGzEzw2rTiOJDzzGQOXKYDEvs%2B%2Bww%2FZ1v6PWnwueqFp68M4e5Ngv3R2IS4RL3jlo8t%2FHR%2FfkrEMB%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\netag: W/\"685a0570-324\"\r\ncache-control: public, max-age=31536000\r\nage: 93413\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525c007eee56cb-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1598\u0026min_rtt=332\u0026rtt_var=767\u0026sent=3851\u0026recv=429\u0026lost=0\u0026retrans=0\u0026sent_bytes=4261016\u0026recv_bytes=47305\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=6433\u0026inflight_dur=652\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (803)","md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-ui-BXPTXUP4.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4qvOhFP8%2BcdXjl4Gs8TEsd%2BMaAIcZy0zrOgiHzCV1Pu0szqkMPAA5X50bEHXL0B42TEZkG7MnNqsHxVsXZe2cbPpofDGeurEDGQxS%2B723sZClVc%2BiPBShDoaAMeVKYQ8v7Lx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-18392\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 2\r\ncf-cache-status: HIT\r\ncf-ray: 95525bef5dbc56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1144\u0026min_rtt=332\u0026rtt_var=353\u0026sent=1957\u0026recv=303\u0026lost=0\u0026retrans=0\u0026sent_bytes=2114297\u0026recv_bytes=30061\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3687\u0026inflight_dur=319\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":99218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65375)","md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/api/v1/info?id=c5glqb","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:28.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /api/v1/info?id=c5glqb HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XF6Xzn3fQanGOloIl7So2j%2FWU06brgvDmi%2BcImVuAvAxqYKF3FUZgpKoKWzm3n05yNIUTJN7b5m2mcJE%2BR%2FH929Imi5jR%2BpUndyTIi%2FFxQcQ8kg%2FUxkoaKvwYrpujFOC%2FaMh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: private\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,Referer,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 95525bf6fe8c56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1214\u0026min_rtt=332\u0026rtt_var=266\u0026sent=3115\u0026recv=376\u0026lost=0\u0026retrans=0\u0026sent_bytes=3428672\u0026recv_bytes=40602\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=91114\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4933\u0026inflight_dur=450\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22465,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (22464)","md5":"4966dd686e66663d2d0e15d54b8e5b71","sha1":"9e3ebf96ffe03d69607946294b8a8522a4b27028","sha256":"999ab1b6eab4a5fa57cea11a015e9d72968f47f8e7b08247bf03833fbd343562","sha512":"9e69b3ba8b334f6016748de0897325dbe0346766cea49f5e397ae107add24773a91bce41a6e3e5ed8189e03236f427b1b8d4eb135ae01e771240bb0b02934e43","ssdeep":"384:uqH7/u2VoLf5Crt6NzfU8+pcPh/xDau1as+dPwIlMeOAoP8PaOFlIEY/08VrPHyU:uqb5W5CrOzsSnlastvtPHOFlIEYPVE6","tlshash":"eda28df831047de6367b6a5fdaa378bd13f63772895b94c88455a3830a93771ee01805","first_seen":"2025-06-25T06:21:17.77957Z","last_seen":"2025-06-25T06:21:17.77957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:30.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-video-BsHN1m3I.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nIm44eYGlnIh8ut7KnZrudXKzC5ndD780xnl4Kf2%2FT0eOuf0lbJdqQfiiD4JvJbt4HPJ%2Bp%2FmFWhO%2F51lMU%2BnW15V3l8b95p5EAybFDadgH9PGsHa%2BzoGCATFEij0TCk9JyBz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-fda\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93413\r\ncf-cache-status: HIT\r\ncf-ray: 95525c00aef056cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1458\u0026min_rtt=332\u0026rtt_var=687\u0026sent=3860\u0026recv=434\u0026lost=0\u0026retrans=0\u0026sent_bytes=4266187\u0026recv_bytes=48263\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=6459\u0026inflight_dur=681\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4058,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4057)","md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:31.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-Bq6c3Bam-CqhR3Et0.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZsySn4pzyYlOvrpP9i%2BPVbz41spVuFvP%2Bzk7oQRzTTivpenBxOYYEL9Ki50YYCSrU%2BRYbQMLR9XHd26q6wTHtteZNVCCXURNaqdVix9OSR8jFEt3PSU1iGd0KjIbJuTHZjUv\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-2f6f\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93414\r\ncf-cache-status: HIT\r\ncf-ray: 95525c070f0956cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1164\u0026min_rtt=332\u0026rtt_var=380\u0026sent=3904\u0026recv=453\u0026lost=0\u0026retrans=0\u0026sent_bytes=4294736\u0026recv_bytes=51025\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=7480\u0026inflight_dur=718\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12143,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12142)","md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_88cc4ccedb57a8a11d185eda0f9871aa.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_88cc4ccedb57a8a11d185eda0f9871aa.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wWONl6KnCefUW3chmJFuq6Ipiqyp0LG2Ssb11nAiFcA2dM0TOBkZo4z60tQIO6oUsz7QuwZUEZr4%2BPAX7GgWfrakneLc%2Fy%2BWQpHAm9bt2Oh7DwccIhyJ5NHQdWqd4g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-6db\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd59ed00b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=673\u0026min_rtt=0\u0026rtt_var=135\u0026sent=426\u0026recv=334\u0026lost=0\u0026retrans=0\u0026sent_bytes=208700\u0026recv_bytes=30260\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=407\u0026inflight_dur=116\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1755,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (888)","md5":"cdde7e23fc071f7ff812e3bbe74d5ed9","sha1":"0fa58a4db8a5ae4b8f8c8ab6cddec6ea5eb87e5f","sha256":"d3d9068e948e759e470194e8ebc96ea7da0777644fcf2328e61bb711370abc96","sha512":"205a1b22fe4aa78767e7b970b1dded6951ed3d072d66b1ded45d7a02a0cc58c8496dea66f68f5e91df5b6e41312dd5c4185113001458d6f9f300519db0d3ae96","ssdeep":"","tlshash":"35312295b1f375729c53d1087a1f930a92933400d50ec1bc76bd84cb78babcb065a92c","first_seen":"2023-03-13T10:25:43Z","last_seen":"2025-06-25T06:21:17.780375Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.704.0_en.html?gdpr=1#fid=goog_1499094297","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86","sha256":"89:68:57:F4:FD:04:C3:94:84:10:59:C7:94:CB:87:1D:7C:07:51:29:D1:25:C6:75:F4:33:16:EE:2D:9F:60:3B"}}},"request":{"raw":"GET /js/core/bridge3.704.0_en.html?gdpr=1 HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-doubleclick-instream-static\"\r\nreport-to: {\"group\":\"ads-doubleclick-instream-static\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static\"}]}\r\ncontent-length: 269819\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Jun 2025 10:50:52 GMT\r\nexpires: Fri, 19 Jun 2026 10:50:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 17 Jun 2025 21:37:44 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nage: 502174\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856431,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (48645)","md5":"946da54ca510d5abc4848db183354cbc","sha1":"43c4163e2e992737558a87053b775b553f27bb8b","sha256":"2bbda1c49053e3dcd31d50f2ceba5ee2516dbc5a13e90e557f9abd5de6dd6449","sha512":"65fdfa1ff73948441ff96b0999a9e4f92c91aadea9a008235b22283cb9355aeeec62d1c0360b6eff408b7b161259b8d8524a4a03437f66944c7722baecaaa71a","ssdeep":"6144:tlIfdSK6OsJ/pBHfdD9LdE8ObYHiZZavyUhvTkrNK8/C90ktibNZQiAriowmfoYa:r4cB/i8bC2y3wD5wmf+","tlshash":"83052b9db66274258263f4b5503f004fb23ba866f40849bcf689dce16e7984a0677f7c","first_seen":"2025-06-19T22:19:32.969026Z","last_seen":"2025-07-10T17:53:52.662015Z","times_seen":495,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-ui-BXPTXUP4.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NR3Unu0hbsT5Ea4RGKt83hLKC0kGZsvB%2Ffn%2BCjfzA46Tys%2Fkc2nRxAy9GTj95gEkO2baWkRnkWf0cp3cX1PyDztGaVfjQEaSyNc4cm139dVFvo12Q3n1x8EThQIdkxba6NAw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-18392\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 2\r\ncf-cache-status: HIT\r\ncf-ray: 95525bef5dbe56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1144\u0026min_rtt=332\u0026rtt_var=353\u0026sent=1986\u0026recv=303\u0026lost=0\u0026retrans=0\u0026sent_bytes=2146828\u0026recv_bytes=30061\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3691\u0026inflight_dur=321\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":99218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65375)","md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-DqAw8m9J-CdSVB3O8.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6Rp1Er70rmA6brTSUrbRsNMGkOlW6UsMWZK0sGpwIgCA41WUuYiNN8DMJptQRhbhNI11f6JM7lQlNOEb82Syb64W2bDRDvirFtU0tASYxkdZF948ZpukVnkCGm5r3Cfzj5%2Fd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\netag: W/\"685a0570-324\"\r\ncache-control: public, max-age=31536000\r\nage: 93411\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bf1fe3256cb-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1088\u0026min_rtt=332\u0026rtt_var=197\u0026sent=2614\u0026recv=334\u0026lost=0\u0026retrans=0\u0026sent_bytes=2875112\u0026recv_bytes=34065\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4119\u0026inflight_dur=375\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (803)","md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-Bq6c3Bam-CqhR3Et0.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jfBrEo1Wr1v2s4KXawr%2BqW7CTrzBZTbSL3sxTav32s4BYtOCDXr4kWFB9Z9quAwI8hMbx47mraCixGOCMSSFY2lXnWb3DFdL%2Fdz4JENVUC6TXtXWOwF9zZ9aRY0l7BjyBVre\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-2f6f\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93411\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf1fe3156cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1072\u0026min_rtt=332\u0026rtt_var=260\u0026sent=2609\u0026recv=332\u0026lost=0\u0026retrans=0\u0026sent_bytes=2870284\u0026recv_bytes=33975\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4116\u0026inflight_dur=372\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12143,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12142)","md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_346dfc33d02645d41fb1b3e0eccf1e28.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_346dfc33d02645d41fb1b3e0eccf1e28.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aDdHR%2F%2BHCQTVRAYNWg%2F3AHiE%2FypnnjEmTIGoAataeNzxy4X200gh1qbrDgOQT%2B024W9KbBp4AdS1t%2Fo9u%2BPuil%2B97K3%2BkCy%2FLoRngquKRbtUlzV6NUj8fNKiYhBgGw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-414\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd58ecc0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=600\u0026min_rtt=0\u0026rtt_var=109\u0026sent=405\u0026recv=328\u0026lost=0\u0026retrans=0\u0026sent_bytes=194644\u0026recv_bytes=28910\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=393\u0026inflight_dur=104\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1044,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (765)","md5":"bab0ef9ffa05827477b2b086c3f35ef5","sha1":"23075f36cb0cde323dded6afe2278694295eaffd","sha256":"23b4f45f54e13e7cb754e5a5553ccd95692b6d436cc52ec19be6a3cc8c8d62f7","sha512":"856efff35cb3c6f0e11d38e2045b8cea8ec18773dfa31a84934bfcc454840383c6c05248ceab0c7b2ae8683afdcef615d61494bcafaa2b62c7e8100f4a026cab","ssdeep":"","tlshash":"3e11120f6420a26687d7777f7ceb75037c3214669848515dc16c98844f74f18a73deb9","first_seen":"2023-03-07T12:08:46Z","last_seen":"2026-04-14T13:18:38.66002Z","times_seen":33,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-CwTj4H1w-BCQqYYxA.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-CwTj4H1w-BCQqYYxA.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ERJ00R4yPMnRCcp0jJE8fOY%2Bcx6dY4QPc04MGpMY%2BGi5Qau%2FKzZNW6GVNl8m7B2ogPz5Ykrezr5Wuwf6nSR87Uf9jMi17g7zgNTFrMQVK1Nse2nYFQPyLxXrIAh5H5eFsg3u\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-21d9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43966\r\ncf-cache-status: HIT\r\ncf-ray: 95525be94cb656cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1009\u0026min_rtt=332\u0026rtt_var=481\u0026sent=1142\u0026recv=227\u0026lost=0\u0026retrans=0\u0026sent_bytes=1207478\u0026recv_bytes=19291\u0026delivery_rate=30479456\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=50004\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=2719\u0026inflight_dur=198\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8665,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7935)","md5":"038f0f31daa2aafc8011f42ae4cdc0d7","sha1":"5ba751ff3d50448bc71d35993cb55559986ebab7","sha256":"e7a0273d5a99614531bea75f79c671aa0cb6963cd674bee50269019b2f4d43ed","sha512":"f9c0dbc0c280a1158d6dd9bec5eaf01c5760cf0dcfaec348eeb6345f451e46798feb483909800222a4ce1aa92fdb0157a43dc2287fec2036a0ac091d63a1ec5b","ssdeep":"192:jK9J4ijK/C/6XEvgLcm3S0MztsR9OJkVtSaK8H7indS:jK9J4qK/CAEvgLc8oztsR9OJkV7rH7io","tlshash":"49027258b6fd59e12691cae1d837015fe21170503826a06cb2ae7def6a38f0270fdb75","first_seen":"2025-06-01T22:18:38.528498Z","last_seen":"2026-04-21T17:08:40.057947Z","times_seen":50,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:27.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-DqAw8m9J-CdSVB3O8.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VXd4Q1H1Jq1kcC%2FSbuKAdlot4WIMcWCCYD8%2FZjsTDUTtfWim6Zjetbkf7wetZ4ZAEVLg3YU05wyU7OuDflbF4RRSe7Oh%2BmFRkwkgso5oI%2FcwW44372LL2CKJtdEIAjMiYOd3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\netag: W/\"685a0570-324\"\r\ncache-control: public, max-age=31536000\r\nage: 93410\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bedfd8156cb-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1329\u0026min_rtt=332\u0026rtt_var=591\u0026sent=1915\u0026recv=290\u0026lost=0\u0026retrans=0\u0026sent_bytes=2078601\u0026recv_bytes=27723\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3467\u0026inflight_dur=285\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (803)","md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/plugins/snax/assets/js/jquery.magnific-popup/jquery.magnific-popup.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/plugins/snax/assets/js/jquery.magnific-popup/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tFaxLw1PlpdarOMyxBZirFPVkc0VzO3B9wVfnANIJ63PGtwC0WfVEY799ox20u%2FK6FyD7JYAqOBrgDDDEPIFtKWwQt2bJ1bhO%2BUz8fSRSnrTuNLyb3%2Be8qEVZVCMZQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Thu, 09 Jan 2025 11:50:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677fb803-4ef8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd53eb70b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1221\u0026min_rtt=403\u0026rtt_var=798\u0026sent=246\u0026recv=279\u0026lost=0\u0026retrans=0\u0026sent_bytes=39081\u0026recv_bytes=21573\u0026delivery_rate=1219405\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=16245\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=344\u0026inflight_dur=58\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-22T21:03:38.325916Z","times_seen":57171,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_6f47448212550bd3157c4265e3ebf085.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_6f47448212550bd3157c4265e3ebf085.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0zAiImrhJjVJwkjvcYcVYPi8d7kGciJgQKnjPfwTjCdqp0b4Mre0bkQNq1xx%2FfU0RsXZR3affSAM2rL31PNYXPiyXdVnXg91eTLTOUXezN69i8tR%2FZQ4pPipcTiwiQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-4a0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd53ebe0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=942\u0026min_rtt=0\u0026rtt_var=932\u0026sent=250\u0026recv=282\u0026lost=0\u0026retrans=0\u0026sent_bytes=43881\u0026recv_bytes=21963\u0026delivery_rate=1524258\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=16106\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=347\u0026inflight_dur=61\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1184,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (634)","md5":"7be64f9d18755005e150a7a985ca7993","sha1":"ddb7f139862b0981bf42c7fd54d15ec8cfc6784a","sha256":"e27411d185047fde909f9eea714df690a5e57d3c4ad8248e12eba556bd0b0f1a","sha512":"ac468fa6d45b4a843e6332e9d2d29659b045edc6d6e996fee37c45ce8e2158bef41f67f1402a7151506b1c97b37d7ecf614f61113257c67ba6d57529126b02f8","ssdeep":"","tlshash":"da21e1795f1a503975e2c7a73e2b13cb5957a773a4041040c715d2e06ef2d0f62440b3","first_seen":"2023-11-04T22:41:28Z","last_seen":"2026-04-14T13:18:38.627566Z","times_seen":26,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:30.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-hls-D8DklbTa.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9Of5BlDvhf5tGsjOil8ei1pjcDZ6uqDoJVaqcrqlgEx%2BX7kaZwKOQAkH%2BfAy7gZTXUMlhm3plz61GOIioYY1m3Ep96P78tY4taTlK4QpXrmS1XuX%2BNT31kYekEsq98SJDFhb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-1f10\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93413\r\ncf-cache-status: HIT\r\ncf-ray: 95525c008eef56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1598\u0026min_rtt=332\u0026rtt_var=767\u0026sent=3851\u0026recv=429\u0026lost=0\u0026retrans=0\u0026sent_bytes=4261016\u0026recv_bytes=47305\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=6433\u0026inflight_dur=652\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7951)","md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/jquery/ui/menu.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/menu.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7RGEYJDfCuVgW8DiFOyUTK4Eq0pcr5G2bDiXYXmtD79aEgyyLFiWkYwHgH9tTNGZDXvqMM8YUlxWcqgsGK65V9VEjrpsImS%2BZTnYdDMIKV3H4%2FwB2V2gsuxDj3YhOA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 17 Jul 2024 03:30:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66973acb-27d7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd56ec60b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=554\u0026min_rtt=0\u0026rtt_var=181\u0026sent=349\u0026recv=315\u0026lost=0\u0026retrans=0\u0026sent_bytes=142634\u0026recv_bytes=26422\u0026delivery_rate=4472911\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=14560\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=378\u0026inflight_dur=91\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10199,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10020)","md5":"284953f0e0a570aa06d6b527c45a55bb","sha1":"c4b8089261f001829f0d6e522928f6d912db7d1f","sha256":"41788f27f61aab4174275eb5fbbbcaffde0f4f0f07e6900592affad38e09b154","sha512":"81d15d80bbf4f8703e644157d74f8f44eea10e13553947437f14e9e448084d3b9a704cf87dbe0cc99d228a39820ce122a226973fa543da3c84ff70a8f504c51a","ssdeep":"192:sr91gNsoBeuLLE2mBrnYgfGGFTsPdQlJh1NmgKzH:srkjMunE7x/3sPd469","tlshash":"5422758831863a72349ba3d8291f60da6236649c9909555c70385fddee3df9023f37be","first_seen":"2024-07-17T06:42:32Z","last_seen":"2026-04-22T20:39:44.316493Z","times_seen":14215,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/uploads/2024/04/output-onlinepngtools1.png","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:27.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/output-onlinepngtools1.png HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: a=AS5K9poI3XBGhTbGU67TEtLriRnD34dT; token_QpUJAAAAAAAAGu98Hdz1l_lcSZ2rY60Ajjk9U1c=BQOCAAAAAAAACZUAAq0drGYcTFoj79dZ56F4vn5BgqC8t4wAbLdyoQp-NyxwMF-z4QaA894EpLBZ4zOdNm39ERSLKKBrCD-URHu3gMAiNH1ZU35lZCnyeZjt7mKLj6TLnJeuCMZ2DjOYBM1l_vRSKMyKnJ9qo4vXcs3OGjplTHrJskWhksdlw0aXI4e_8fAZagFQ0zsA21qCxkGRUX1bKT6MsmNp6bYwGAaNAUdp03jajVR2_Nrr7C_hPq1ecqb7DZUsBwW_F0LswsdNJmX_11rEDCUyQMw863I9vqdUrqyoktyqYY5QWo_a7Ts7sTc2CsyhjbUdeaRrCj0uuX5A_V-YSKILH153UvIB-IhMUKsqHFQ0SL8Tw8lEGH5CrGEoy9s544uSQeUGr40Lmwt4FnYPYIc-MksgkMiV-nIbr9fpHV6LFcc7MuMVp_ykOTZGkm3Jfhz3BY0yL7lrPYYpKdTguLkxNP2Vux7Vz1RwvuCgYka23Ox5b2zCToMlnGJY0O6XpudzZ5zTYqQ0U2qdGS3ntu82GVSAQaFPJ01S1zubPL-bx9JkXaiXo0J1-HhERH997W1Bm8B-7cMxCU-BTBAJDf8ZZ4OQihXowa7ViHnT_CWFoOGdpK52reEEp6p9d31ylEAenF8yQLPgeqZU7zqXfqf3sYuUolW64QrUnHDaXAeb4gk4iudIRDt191V4K4f0FbXRtueG7Iki9b-5E7q_NKsY_4GXqdZeUI81cSecB5bRBgNrIpb3a2UvQ8vD5p4K2pBSrwfquz_U3OC7p9AELmXU0bZ488Ag1Z_m6y5Pa15ekrUXQC9OScAbKZySqQpb6q2tmUBEbfIkGjj8sWsF1uha1y3o1_2ohmFvnOiHcSQgxXquBeSxcLUX0oGNY4DWcDoN6Fl-x_7-ilNeJNdpm-PJqxBfziaxtnE8YIsy2x7xR8nssCx32p-0h9THB4mvkpkWRge4-0mY0YMElWEgYniEUWdEka4jwNbzqsAYHaiOUUqIqhC5XdQl2tfmh_5w0Ea4ONzeOIc5OyvTDRCW8f4QyhgOg4_SBeRQ3jofKf1do51oP64xM1w0grV2FVz8EH7QFff6K2I1IUPqwZ4f8BwXtDWZC7l_f1MY2DV4PyMttirHJraLwDgPeah1OWylt3adTnVOwS2ymPWUlb4NQquP_WH8PxxLXXn_yNjshI0pzcSw7fa7aJOH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1340\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2F2Zxci%2FCSF0JS1y7yWIeYO1FRQ%2FjhJ6bu80L9eNAohWU%2FLOXJj8B8SOoD0pzO9%2F7jo4HGawwdPBCryB99gdZA1OOveyx3NQ%2BNayLNbBVZUIS2lulw76C37Mza0czzw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 25 Dec 2024 11:05:27 GMT\r\nvary: Accept-Encoding\r\netag: \"676be6f7-53c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 44152\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf14f210b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2445\u0026min_rtt=0\u0026rtt_var=2843\u0026sent=721\u0026recv=423\u0026lost=0\u0026retrans=3\u0026sent_bytes=522241\u0026recv_bytes=43796\u0026delivery_rate=18595440\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=19203\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=4829\u0026inflight_dur=382\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 58, 8-bit colormap, non-interlaced","md5":"a13f67d97c341361a87682b8a202b382","sha1":"f8be984dfce18204127db5c3e20d99adc617bb3e","sha256":"d02f81360bac4455432a5f8b638ffce40e3162c1cced26f2210986e8bdbbbcc1","sha512":"b7b02fa94729e7ef2c11d190e43afffde84e5561c87f540faf3d3ffeccb7580750b7a129257b86af1807eb4441a90a82bbee347d4d6f5c5474614d96f0fe41b2","ssdeep":"","tlshash":"6c21c8a7d505fd7cd5b8112f4ed7b9a5cf5a87cb0362d22100d707b0a9153342115f14","first_seen":"2025-06-25T06:21:17.72983Z","last_seen":"2026-03-26T02:35:10.549704Z","times_seen":12,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:29.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/prod-3EO0RhVK.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4KM9oL%2BoWYQjfQx1XcmWBaL3yA3VcrPCId07nUHP0hmYz8CI5uDrBx1S4Rj3ZGXEPJNnL0qpoyuBeUUUjPCE8lfmQm3MyxZt7HcTkEaEhEaMG1RQA4EmyZ9GS3d381yuOL7Q\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-47d8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93432\r\ncf-cache-status: HIT\r\ncf-ray: 95525bfc4eb056cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1888\u0026min_rtt=332\u0026rtt_var=936\u0026sent=3825\u0026recv=420\u0026lost=0\u0026retrans=0\u0026sent_bytes=4241576\u0026recv_bytes=45724\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=5758\u0026inflight_dur=621\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9763)","md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-DsSvO8OB.css","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-DsSvO8OB.css HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: text/css\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Qg2fSOeN5a9tPsbhaQVSIGcXNg2M9UixuWaBCGOTr99Ft8ZBRCmTn1nWDNbLWhMsjFUf246stG84NriEpXznjwLREYAFhm40c5qkSi5mr97QyMb9d4FdbFPu8DucGUhCrIcq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-107f9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43967\r\ncf-cache-status: HIT\r\ncf-ray: 95525be7ac6556cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=925\u0026min_rtt=332\u0026rtt_var=406\u0026sent=858\u0026recv=203\u0026lost=0\u0026retrans=0\u0026sent_bytes=881417\u0026recv_bytes=17164\u0026delivery_rate=21769108\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=21530\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=2459\u0026inflight_dur=168\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67577,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"71d60520b4e2bd909f99d02da0ea779f","sha1":"ea28d120344bcfa8e2b1fdd9943197b6c2200f2a","sha256":"18c18ae6d606f8066f233273063edf80a2eb606f66602a98f4e9137c51135baa","sha512":"7a30d27940db7ddf540b8b7257d50ced8020a57d915b2e613b4c9efacb88e21c9b6fba6aaff28f118b3ccfcfa7a36d8b4280841b9b17894d5bfaab3679e63eaa","ssdeep":"384:NEihDpmQd+MeEeuID+MAbb4Pra5b0RvGCGQaJO1/VJFGhxDzV7a4N9QoyUTR5dP4:TxBeHoVSVJmxzuksXQJfDFMVwgjSG","tlshash":"706384e8fa4c613eb817614d1acc958ea32dfd40eed31a94e9c27128cdd7af31179684","first_seen":"2025-06-01T22:18:38.544356Z","last_seen":"2026-04-21T17:08:40.069138Z","times_seen":48,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/uploads/2024/04/output-onlinepngtools1.png","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:27.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/output-onlinepngtools1.png HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: a=AS5K9poI3XBGhTbGU67TEtLriRnD34dT; token_QpUJAAAAAAAAGu98Hdz1l_lcSZ2rY60Ajjk9U1c=BQOCAAAAAAAACZUAAq0drGYcTFoj79dZ56F4vn5BgqC8t4wAbLdyoQp-NyxwMF-z4QaA894EpLBZ4zOdNm39ERSLKKBrCD-URHu3gMAiNH1ZU35lZCnyeZjt7mKLj6TLnJeuCMZ2DjOYBM1l_vRSKMyKnJ9qo4vXcs3OGjplTHrJskWhksdlw0aXI4e_8fAZagFQ0zsA21qCxkGRUX1bKT6MsmNp6bYwGAaNAUdp03jajVR2_Nrr7C_hPq1ecqb7DZUsBwW_F0LswsdNJmX_11rEDCUyQMw863I9vqdUrqyoktyqYY5QWo_a7Ts7sTc2CsyhjbUdeaRrCj0uuX5A_V-YSKILH153UvIB-IhMUKsqHFQ0SL8Tw8lEGH5CrGEoy9s544uSQeUGr40Lmwt4FnYPYIc-MksgkMiV-nIbr9fpHV6LFcc7MuMVp_ykOTZGkm3Jfhz3BY0yL7lrPYYpKdTguLkxNP2Vux7Vz1RwvuCgYka23Ox5b2zCToMlnGJY0O6XpudzZ5zTYqQ0U2qdGS3ntu82GVSAQaFPJ01S1zubPL-bx9JkXaiXo0J1-HhERH997W1Bm8B-7cMxCU-BTBAJDf8ZZ4OQihXowa7ViHnT_CWFoOGdpK52reEEp6p9d31ylEAenF8yQLPgeqZU7zqXfqf3sYuUolW64QrUnHDaXAeb4gk4iudIRDt191V4K4f0FbXRtueG7Iki9b-5E7q_NKsY_4GXqdZeUI81cSecB5bRBgNrIpb3a2UvQ8vD5p4K2pBSrwfquz_U3OC7p9AELmXU0bZ488Ag1Z_m6y5Pa15ekrUXQC9OScAbKZySqQpb6q2tmUBEbfIkGjj8sWsF1uha1y3o1_2ohmFvnOiHcSQgxXquBeSxcLUX0oGNY4DWcDoN6Fl-x_7-ilNeJNdpm-PJqxBfziaxtnE8YIsy2x7xR8nssCx32p-0h9THB4mvkpkWRge4-0mY0YMElWEgYniEUWdEka4jwNbzqsAYHaiOUUqIqhC5XdQl2tfmh_5w0Ea4ONzeOIc5OyvTDRCW8f4QyhgOg4_SBeRQ3jofKf1do51oP64xM1w0grV2FVz8EH7QFff6K2I1IUPqwZ4f8BwXtDWZC7l_f1MY2DV4PyMttirHJraLwDgPeah1OWylt3adTnVOwS2ymPWUlb4NQquP_WH8PxxLXXn_yNjshI0pzcSw7fa7aJOH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1340\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QIaMLX3ITMh7Jz1Xpj2YwJ1tE7LgU5vEiNeQ3QtC7eBAizeRXvIl96EKa%2FiQOn3sy7luVr8p%2BDxYD1TPsHzCb5trtBI1iWMo5IOuIzGj5VsY71jXRJDbiZtmuQlEMA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 25 Dec 2024 11:05:27 GMT\r\nvary: Accept-Encoding\r\netag: \"676be6f7-53c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 44152\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf14f220b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2445\u0026min_rtt=0\u0026rtt_var=2843\u0026sent=723\u0026recv=423\u0026lost=0\u0026retrans=3\u0026sent_bytes=524363\u0026recv_bytes=43796\u0026delivery_rate=18595440\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=19203\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=4829\u0026inflight_dur=382\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 58, 8-bit colormap, non-interlaced","md5":"a13f67d97c341361a87682b8a202b382","sha1":"f8be984dfce18204127db5c3e20d99adc617bb3e","sha256":"d02f81360bac4455432a5f8b638ffce40e3162c1cced26f2210986e8bdbbbcc1","sha512":"b7b02fa94729e7ef2c11d190e43afffde84e5561c87f540faf3d3ffeccb7580750b7a129257b86af1807eb4441a90a82bbee347d4d6f5c5474614d96f0fe41b2","ssdeep":"","tlshash":"6c21c8a7d505fd7cd5b8112f4ed7b9a5cf5a87cb0362d22100d707b0a9153342115f14","first_seen":"2025-06-25T06:21:17.72983Z","last_seen":"2026-03-26T02:35:10.549704Z","times_seen":12,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:28.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-video-BsHN1m3I.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6REIVx14oDJXsB4x4wnpnBAob67aGgXLUj9wJ5ge2HzzqyIDpfEGy%2BQVdzbuhQ0b%2BnArGP9EfmPN%2F3fyS7PG8oMp%2BPXUv5FWjebbVULtsdfgBlOt8MXo5j%2FRZ2J45Kl4CwDS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-fda\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93411\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf39e7a56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1372\u0026min_rtt=332\u0026rtt_var=667\u0026sent=2692\u0026recv=349\u0026lost=0\u0026retrans=0\u0026sent_bytes=2945563\u0026recv_bytes=36693\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4378\u0026inflight_dur=402\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4058,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4057)","md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/jquery/ui/core.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jWazoIi7%2FarAQzELQ1FfRcx6%2Bx%2BmGcPaEDNzkelaG372O8I0a6ri%2FgxpZ3JzmC%2FOPoUZjncA%2BUzwuXHF77YWipTUn2IUE2n8V0TmUceH2XWY8CGMZ%2FWohhys6pkgow%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 16 Apr 2025 03:29:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67ff2433-53d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd56ec50b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=532\u0026min_rtt=0\u0026rtt_var=102\u0026sent=331\u0026recv=310\u0026lost=0\u0026retrans=0\u0026sent_bytes=127378\u0026recv_bytes=25953\u0026delivery_rate=4098488\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=19776\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=375\u0026inflight_dur=89\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-22T21:11:51.128643Z","times_seen":237541,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GSLLMQHH8G","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:24.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:35:30 GMT","end":"Mon, 25 Aug 2025 08:35:29 GMT"},"fingerprint":{"sha1":"79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA","sha256":"F5:17:47:03:4B:39:BD:9F:79:87:88:F4:F3:FF:C3:7D:05:5D:EB:4D:D3:F5:02:E8:2B:96:3B:BA:AA:97:0D:B3"}}},"request":{"raw":"GET /gtag/js?id=G-GSLLMQHH8G HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\nexpires: Wed, 25 Jun 2025 06:20:24 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0\r\nreport-to: {\"group\":\"ascgcycc:1077:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 133066\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":399774,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6004)","md5":"932f067cabbbb874ad775e7bb65f613e","sha1":"e1a5ab5f23a246899f5eea8ebd60b07ab9516d30","sha256":"19ec9bb66f77d24ae98d9bb0190f9354ebd03c2170efabc7813aded572f592ba","sha512":"d6ea679d3554ace9bfa222365073454f1b6bc8e7385bc0d67c8f3c2b8c64521c5a09c7854d383305f79de70a4441c1e4690cb965677b430116b7efc8c8413f77","ssdeep":"3072:jLaEQJ17GCNOxGkGJyCOmyl0igNc/x1+yXNFNmfoJw26GeP1P7SQ10bba7UXenSV:PQGmOxGkGhA2f2EGe5SQ10Xa7UOnSHzZ","tlshash":"1b8419ce73c674625396f478503f018ba57b28a2b49cc899f189cce42e74a9a4177f7c","first_seen":"2025-06-25T06:21:17.784651Z","last_seen":"2025-06-25T06:21:17.784651Z","times_seen":1,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":94,"dns":1,"connect":15,"send":0,"wait":52,"receive":47,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spartan/v21/l7gfbjR61M69yt8Z2QKtlA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7","sha256":"94:9A:1A:D4:CD:CE:19:77:99:6C:C9:14:BB:6E:F6:23:C5:40:A9:70:50:E6:B6:CC:DD:B0:18:CE:3F:DB:E7:A1"}}},"request":{"raw":"GET /s/spartan/v21/l7gfbjR61M69yt8Z2QKtlA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Jun 2025 17:22:37 GMT\r\nexpires: Tue, 23 Jun 2026 17:22:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133067\r\nlast-modified: Thu, 29 May 2025 20:17:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33044,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33044, version 1.0","md5":"12fb1f6cfdec83e788279cb03e22c6a8","sha1":"30cd79cceaabe3daf373218ac483924114a5edac","sha256":"4d34849e47c7d2528e2d325526901f58e5a2dc10a4a1c019c617cd56f2045b1a","sha512":"35a1befd987096945739732443f3dc056173cf3d03d28ffd2e0f5cc049b7688f1fd5c92b89840900a1766e73fefde8e5f8750bfc212193328e5eb8f5b81eb9c8","ssdeep":"768:QskSq6TFXGc3un12tBoCDWPEFLkovz6+tRi4MakgQ2W5qQCv72N:G9qFy2tBoqFDxtRaajQDq5v8","tlshash":"17e2e18243b56066e55fb4ff0ecec81b3b524c24e4b65af1d100d39e9066b65608bbf7","first_seen":"2025-05-31T04:41:28.213414Z","last_seen":"2025-11-09T06:29:45.677505Z","times_seen":119,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":285,"dns":0,"connect":8,"send":0,"wait":8,"receive":4,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-hls-D8DklbTa.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2B52urCdrMRHBhOUxg2i0IVy5btcuWrUCP4HrZkJQYijSn0ASZjgcTpu1xptR0tQmzMHornqz11wP0mcZiOXZGTlJQm68uod1Ic71DhE80yV4kqe5t58OXke7xr3pYbbRz6hU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-1f10\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93410\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf1fe3056cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1045\u0026min_rtt=332\u0026rtt_var=275\u0026sent=2603\u0026recv=331\u0026lost=0\u0026retrans=0\u0026sent_bytes=2863963\u0026recv_bytes=33930\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4111\u0026inflight_dur=362\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7951)","md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:28.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-BRaSsAAT.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sUgRaFXfbAHfPUTrMJNVu7LKzczgYsZQSdpo9Dy%2FKjTAQ9wdz8ye%2F7OOrGLvohSrIbJccUNiRZHKRhXz3xVuq8HpUgFy51fHRK36XL7cWvIppbPk6a52bZdRQQ%2FiZTFh7DdK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d6570\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93433\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf42e8256cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1266\u0026min_rtt=332\u0026rtt_var=561\u0026sent=2702\u0026recv=355\u0026lost=0\u0026retrans=0\u0026sent_bytes=2952467\u0026recv_bytes=37944\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4460\u0026inflight_dur=405\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":877936,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64878)","md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_8a3a160d1d1717daaf54285c6693b08c.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_8a3a160d1d1717daaf54285c6693b08c.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DzieJQwEgEqR2xMMK3fEI7sl7ukwek%2F3DxfOA6npuLjvq7PzAPqdSiHFI7qk9mwpn2ovDaQ4VD%2BHR%2BnsIqIXgKm6qjTcSUcU4JTg4IGeMolvl04tyFL1sO3r6i%2FezA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-ae1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd5aed70b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=711\u0026min_rtt=0\u0026rtt_var=133\u0026sent=441\u0026recv=339\u0026lost=0\u0026retrans=0\u0026sent_bytes=219861\u0026recv_bytes=31024\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=416\u0026inflight_dur=121\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2785,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1210)","md5":"8bbbaa10c22bc231d5e363836652f8e4","sha1":"6c09160d2fe6b28546deaa7175b6e7c2296eed74","sha256":"db0aaf24b5bec64942ba044de77974ad4e6366d694c049df4dee27760de3d488","sha512":"84804f0994bf9169f139cbd98ab3802371bc4defa536fd6f573f95ccd0447e0d87062a4d764fe7a8323dd0e06a375db46f8b2ca0c002004b9617d52b98c38756","ssdeep":"","tlshash":"49511e4d75f4a9f1c0b7aa06ea1be30bf0205641c548c48ea4b7cdc40f60fc5ea72a9d","first_seen":"2023-03-13T10:25:43Z","last_seen":"2025-06-25T06:21:17.785816Z","times_seen":5,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-D3ltXc3a-B-Z7uahg.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LkB0eWH0olOFe%2F416mA1IDsir%2F08qjrkzXOmkZsESAx3XPiqnUl5lwiGQIA5RC7UB11o8mC61ImTDd8QLaQs5fFkasEkEO33p%2Bxh%2BPxHOObYWfPg%2Bv%2FJpkCrXIkvJVGARm4X\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d9e\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93430\r\ncf-cache-status: HIT\r\ncf-ray: 95525beaed0456cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1349\u0026min_rtt=332\u0026rtt_var=1184\u0026sent=1208\u0026recv=238\u0026lost=0\u0026retrans=0\u0026sent_bytes=1276077\u0026recv_bytes=21019\u0026delivery_rate=30479456\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=50004\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=2977\u0026inflight_dur=212\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3486,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3485)","md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86","sha256":"89:68:57:F4:FD:04:C3:94:84:10:59:C7:94:CB:87:1D:7C:07:51:29:D1:25:C6:75:F4:33:16:EE:2D:9F:60:3B"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\nexpires: Wed, 25 Jun 2025 06:20:27 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 7598073993838571503\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 145903\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":462831,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3524)","md5":"384d428c886fb8db470007a1bbfce045","sha1":"a6ea8f08b2936b9ea06f1bfdc56e400d92159374","sha256":"86951c2596101bdecb648fac6e1f0bf14de24ca168f2ba068ab75f2d9a02e949","sha512":"d1b352c8bc1990d999de70d4197358af8c192fe91dbcc69b31a036be2b002b8b2786722e97537b40cab72c4b12b6f8bd4cb3dd107f51e6497fae627c84659b44","ssdeep":"6144:o1kqpy0eCz0k8ZuBmBk46KJUltbRPVzTsf10j:EXkuBmG4LJKtbRPVz4S","tlshash":"b0a4facdb6a674629363f4f5403f014bb23ba86af408886cb249d9e16e7490d5277f7c","first_seen":"2025-06-25T06:21:17.727471Z","last_seen":"2025-06-25T06:21:17.727471Z","times_seen":1,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/uploads/2024/04/output-onlinepngtools1.png","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:27.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/output-onlinepngtools1.png HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: a=AS5K9poI3XBGhTbGU67TEtLriRnD34dT; token_QpUJAAAAAAAAGu98Hdz1l_lcSZ2rY60Ajjk9U1c=BQOCAAAAAAAACZUAAq0drGYcTFoj79dZ56F4vn5BgqC8t4wAbLdyoQp-NyxwMF-z4QaA894EpLBZ4zOdNm39ERSLKKBrCD-URHu3gMAiNH1ZU35lZCnyeZjt7mKLj6TLnJeuCMZ2DjOYBM1l_vRSKMyKnJ9qo4vXcs3OGjplTHrJskWhksdlw0aXI4e_8fAZagFQ0zsA21qCxkGRUX1bKT6MsmNp6bYwGAaNAUdp03jajVR2_Nrr7C_hPq1ecqb7DZUsBwW_F0LswsdNJmX_11rEDCUyQMw863I9vqdUrqyoktyqYY5QWo_a7Ts7sTc2CsyhjbUdeaRrCj0uuX5A_V-YSKILH153UvIB-IhMUKsqHFQ0SL8Tw8lEGH5CrGEoy9s544uSQeUGr40Lmwt4FnYPYIc-MksgkMiV-nIbr9fpHV6LFcc7MuMVp_ykOTZGkm3Jfhz3BY0yL7lrPYYpKdTguLkxNP2Vux7Vz1RwvuCgYka23Ox5b2zCToMlnGJY0O6XpudzZ5zTYqQ0U2qdGS3ntu82GVSAQaFPJ01S1zubPL-bx9JkXaiXo0J1-HhERH997W1Bm8B-7cMxCU-BTBAJDf8ZZ4OQihXowa7ViHnT_CWFoOGdpK52reEEp6p9d31ylEAenF8yQLPgeqZU7zqXfqf3sYuUolW64QrUnHDaXAeb4gk4iudIRDt191V4K4f0FbXRtueG7Iki9b-5E7q_NKsY_4GXqdZeUI81cSecB5bRBgNrIpb3a2UvQ8vD5p4K2pBSrwfquz_U3OC7p9AELmXU0bZ488Ag1Z_m6y5Pa15ekrUXQC9OScAbKZySqQpb6q2tmUBEbfIkGjj8sWsF1uha1y3o1_2ohmFvnOiHcSQgxXquBeSxcLUX0oGNY4DWcDoN6Fl-x_7-ilNeJNdpm-PJqxBfziaxtnE8YIsy2x7xR8nssCx32p-0h9THB4mvkpkWRge4-0mY0YMElWEgYniEUWdEka4jwNbzqsAYHaiOUUqIqhC5XdQl2tfmh_5w0Ea4ONzeOIc5OyvTDRCW8f4QyhgOg4_SBeRQ3jofKf1do51oP64xM1w0grV2FVz8EH7QFff6K2I1IUPqwZ4f8BwXtDWZC7l_f1MY2DV4PyMttirHJraLwDgPeah1OWylt3adTnVOwS2ymPWUlb4NQquP_WH8PxxLXXn_yNjshI0pzcSw7fa7aJOH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 1340\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2OyyfVJggz%2FMsZxUm0rNocV%2Bbt%2FDbd8emg1I%2FW25jT%2BTGpO3eH85STPw9z2s%2BLyXFC6ukjYhAaBGWASoLxoP3dX8Yr%2Bpub7jRYd%2FdJB3M2pRM8yZwTtu0WOwNnOCjQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 25 Dec 2024 11:05:27 GMT\r\nvary: Accept-Encoding\r\netag: \"676be6f7-53c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 44151\r\ncf-cache-status: HIT\r\ncf-ray: 95525bee5f1b0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=651\u0026min_rtt=0\u0026rtt_var=97\u0026sent=632\u0026recv=407\u0026lost=0\u0026retrans=2\u0026sent_bytes=426441\u0026recv_bytes=39113\u0026delivery_rate=14876240\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=21559\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=4362\u0026inflight_dur=297\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 58, 8-bit colormap, non-interlaced","md5":"a13f67d97c341361a87682b8a202b382","sha1":"f8be984dfce18204127db5c3e20d99adc617bb3e","sha256":"d02f81360bac4455432a5f8b638ffce40e3162c1cced26f2210986e8bdbbbcc1","sha512":"b7b02fa94729e7ef2c11d190e43afffde84e5561c87f540faf3d3ffeccb7580750b7a129257b86af1807eb4441a90a82bbee347d4d6f5c5474614d96f0fe41b2","ssdeep":"","tlshash":"6c21c8a7d505fd7cd5b8112f4ed7b9a5cf5a87cb0362d22100d707b0a9153342115f14","first_seen":"2025-06-25T06:21:17.72983Z","last_seen":"2026-03-26T02:35:10.549704Z","times_seen":12,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-D3ltXc3a-B-Z7uahg.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-D3ltXc3a-B-Z7uahg.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MyifDT321EcjvVyUptcEOKzujrJahxLU9r%2FPYJxVIaoCmE3hkoiBp%2BR7pmyfEVEr0wweUxcw1oI6i7CnR%2FwI67awSgB9M2imanH0YmrWOmun7y2kjhrwJuV0wa1XIO7jFSNG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d9e\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93430\r\ncf-cache-status: HIT\r\ncf-ray: 95525bef5dbd56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1144\u0026min_rtt=332\u0026rtt_var=353\u0026sent=1984\u0026recv=303\u0026lost=0\u0026retrans=0\u0026sent_bytes=2144696\u0026recv_bytes=30061\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3689\u0026inflight_dur=319\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3486,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3485)","md5":"60be291d3c359423dd3f7744fe014fe2","sha1":"bfd4cb2ab83e58388f3b358877329f97121cd5c3","sha256":"dc675fcdc0f592b358cd9b2d241b2a3e3395111f9802cdf8efbdc73bf8210e31","sha512":"2c2e367d3bfcd7c857688cd25d2bf2d214c26cbd89d42472a7d6a014bfdfa0f53ae0acc7f190d68f48da03a4cedd6ab1a51f68de776dd6d84f3d032a950d71df","ssdeep":"","tlshash":"2a71662eb316a56d9de36de8050c0d10742b27373457cc98b06dcea9ba9668f213ca7c","first_seen":"2025-06-25T06:21:17.73163Z","last_seen":"2025-06-25T06:21:17.73163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:24.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-ui-BXPTXUP4.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZmZmlDeEQOCnijhwkShjr%2BwA2%2FccXWzGZFxgIyfj5EOPMSNJDRlAiKJddRkCFJ8x69GTgWzEQ4gtjAtlrE5Cn22OzVmbx6Ia%2BOJgKIGziQ5KGXqvlnjFInxqZUvydDFFnTnK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-18392\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 95525bde9c1856cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1323\u0026min_rtt=332\u0026rtt_var=761\u0026sent=464\u0026recv=145\u0026lost=0\u0026retrans=0\u0026sent_bytes=449733\u0026recv_bytes=10429\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=22578\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1081\u0026inflight_dur=122\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":99218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65375)","md5":"10fa5176a3a44d6ef2abdc7d05dcccd7","sha1":"78355eb059e78ec739434f35f9803c38e0636099","sha256":"cea34649217515e5394e2b5fe1e59122f715b8543f8d20e445235a4be095c27b","sha512":"c9ac8057754aa2f879f90bab609493b6bf8950bb9b76362ef3f80ec55a4d0102b545f41805f71702c41bec418aeb0a6eb7cc99609402f2c7c07ea22be2463207","ssdeep":"1536:sTBlxERMGFEzHrm72EWxf+QnLaONezuSl5mw4OttvcK:sdlxEt2EhQnLzNJSl5mw4WtvcK","tlshash":"47a3d788b25771be9af3a6f4402ec501e13a2b657407c894b0bdcbb42db6446527dff8","first_seen":"2025-06-25T06:21:17.729107Z","last_seen":"2025-06-25T06:21:17.729107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 2363\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Jun 2025 06:20:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK nyc123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://xcandid.top\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1212), with no line terminators","md5":"1ee02e64f2fcd66299fd770f54b2b204","sha1":"bb9d601d4d4c791260ae158bf7613a6af0ec5173","sha256":"a31a6145f22ac8513cb7ee9f599c81faf7bccf19210be59fcd0b86826a8b631b","sha512":"0317f162780665ac974b17d0b8e5dbb1a8061467716b3e9597e9362e9be4d8a5194f4d1de685859ce00493641e509b59d0b80cabcc42af6f280a91696950d172","ssdeep":"","tlshash":"7921ea715d5e51272c3910df8e90ef40cf9059aa762991d67085319b86f4463297c13c","first_seen":"2025-06-25T06:21:17.786942Z","last_seen":"2025-06-25T06:21:17.786942Z","times_seen":1,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":288,"dns":2,"connect":98,"send":0,"wait":121,"receive":1,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/api/v1/info?id=q3mvff","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:27.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /api/v1/info?id=q3mvff HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BMYntj1OmR%2F%2FCPV9oJBUDbTGCBx8x9i1qcLKCZkKnyEEpW6ikJ7MVsXCWh6FwpyF2iyLwf7zb%2Fe2Fl%2BH3QW4WFuUhsSrmb%2BtDU5W0Rn268I%2BlC0YAsk6mFD%2FWbchSlY54Hj4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: private\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,Referer,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 95525bf2be5756cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1080\u0026min_rtt=332\u0026rtt_var=123\u0026sent=2637\u0026recv=340\u0026lost=0\u0026retrans=0\u0026sent_bytes=2895051\u0026recv_bytes=35282\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4253\u0026inflight_dur=380\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22465,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (22464)","md5":"2bd7ff5c445736b3989f5eb869e6e792","sha1":"aa0ec4e5d9c9a1e805be28b95e126c7807da629f","sha256":"bb56089b84bd7b9c89ad50bb3af1c4fb42222a5ff707d2d86199744938827d5f","sha512":"253dbe164ba48f3bffa3fba2f9b2dad92e8301cc5c7e17ee7a1d3c1bdbed7937b916bc38d540e7e52b1a73ad7df3a532e4196f886fa04d682e20b2796a1f6901","ssdeep":"384:iaa/NAsF2el5WZ7cqALQFGL3hlq7uuTcLH+MVVl3g4c3H+pLLHGQ5kWxFWMQ8Y7G:iaalfzlQcHQFGTPqDieMVVls3Yy0jWMl","tlshash":"f7a28fb439501e96117e833fc529ede913a62326ea8be4ce54f9a3c705f3636ef41805","first_seen":"2025-06-25T06:21:17.787885Z","last_seen":"2025-06-25T06:21:17.787885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:28.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-default-layout-BuBwqJzH.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0xqxzwAqqDj%2F4pzSjRWt%2FcAymQyzRJeQFScaJjoEMLwwUEQ1nunt18L1JXKtcnu38h%2FEq0XhaLw37kacOY7fVkysu7aFjEDuTmPOPv%2FtE3Yv1L4n5WezR6zrCbweQX6sWnHc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-bfb2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93432\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf2fe6b56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1147\u0026min_rtt=332\u0026rtt_var=226\u0026sent=2651\u0026recv=342\u0026lost=0\u0026retrans=0\u0026sent_bytes=2910224\u0026recv_bytes=35645\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4263\u0026inflight_dur=382\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49074,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4007)","md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/0vgxq4bI-pcQOZEtN1aSAA/xq/lod39qeq/ip9rgl/poster.png","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:28.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /0vgxq4bI-pcQOZEtN1aSAA/xq/lod39qeq/ip9rgl/poster.png HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BZwkuZrb4xxNzFoqJ%2Bu1hPXnCmMK88%2FRnlWlTvWlwyJLzxiZsenrVb4u0ubDYOIYOBVTTJHMCEOz%2FldLDzrtClK4n66680qPuW6z0fjmge4ZcJVLkMZ2oWxoRlFeoGMxf%2FgD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 25 Apr 2025 14:22:03 GMT\r\netag: W/\"680b9a8b-15b1c\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 95525bf41e8156cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1040\u0026min_rtt=332\u0026rtt_var=501\u0026sent=2944\u0026recv=362\u0026lost=0\u0026retrans=0\u0026sent_bytes=3239720\u0026recv_bytes=38291\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=91114\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4544\u0026inflight_dur=415\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88860,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"data","md5":"285e696ccae5fb94666ddf1768651ea9","sha1":"dabd7767518ed81cf1e51609d9dc37d23e32877e","sha256":"ae6d682b4669f7e56fa88d79292c9e88ed5f137663f2999be3bcab97fa54b87b","sha512":"9bd41e794dec65fab2738129b174505035418b28d2731b0c03812876196b467b07030f1e991fae7a05f65adf286aba11d4f63cb60eebb214f17263909e98074e","ssdeep":"3072:FDxCcdlpEEGgLsq/hYeG/pJgIL0RMPPIW+Krjswz6wv6V:Jrdlhds6hfG/pJg80FSswG66V","tlshash":"aed3f1816140f334c1bf41f9490252d8b05959d9f7cbbad0c678dba029ae22dbadf9d3","first_seen":"2025-06-25T06:21:17.789144Z","last_seen":"2025-06-25T06:21:17.789144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/plugins/snax/css/snaxicon/fonts/snaxicon.woff","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/plugins/snax/css/snaxicon/fonts/snaxicon.woff HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: font/woff\r\ncontent-length: 12796\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lsczajQ6u5zp5dGIgGCDBYqbsRaYk95fBRBpf0LtESEFnblJAmo0b0afKWRVJktPk0MAMJlcIFjEUvOY1Bfry90yCY7N0GqRvwM9C2krJ%2BvPCazbIhUwiASYNBdhqA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Thu, 09 Jan 2025 11:50:27 GMT\r\nvary: Accept-Encoding\r\netag: \"677fb803-31fc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 43965\r\ncf-cache-status: HIT\r\ncf-ray: 95525bd50eac0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1703\u0026min_rtt=468\u0026rtt_var=1485\u0026sent=228\u0026recv=265\u0026lost=0\u0026retrans=0\u0026sent_bytes=18659\u0026recv_bytes=17471\u0026delivery_rate=619748\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=322\u0026inflight_dur=35\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12796,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 12796, version 1.0","md5":"85941a4fc5dd91e76500d657b8440f41","sha1":"6e1e27708c523c7f125754849a00aee95e15d4c6","sha256":"a7eb4dfaeb3a5b3370523b353c14853d801722a62325eb88ef60b3fd08f016f4","sha512":"60f6ea93ded76cd78e0200bab0166dd59f093bf95a21cc5e82d7382dae31dea089c4f4e91af5938852f847d575183dc5c23db49f672cf88155a55f79e1d2fd04","ssdeep":"384:gq4ZJEI2kX3fh9mK8IkbAyXUwm21GXm06:giIVHZ83eyXUuGXH6","tlshash":"6342b075cec84909eb7392e9b78f7a8276c2062c79069e43cd186ebb4a34331bf75504","first_seen":"2023-05-04T13:36:37Z","last_seen":"2026-04-20T15:53:15.382901Z","times_seen":222,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blockadsnot.com/ksharer.min.css","fqdn":"www.blockadsnot.com","domain":"blockadsnot.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1158060716.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Apr 2025 02:52:47 GMT","end":"Tue, 15 Jul 2025 02:52:46 GMT"},"fingerprint":{"sha1":"D6:68:88:78:D5:18:B9:BC:6F:69:01:F9:29:EE:74:87:59:09:27:C6","sha256":"BF:6D:53:C6:FC:82:C7:94:58:1B:A9:EA:20:67:1F:CF:03:CD:13:D9:2B:41:10:42:62:FB:3B:7C:CD:69:D5:FB"}}},"request":{"raw":"GET /ksharer.min.css HTTP/1.1\r\nHost: www.blockadsnot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb8\r\nexpires: Sun, 29 Jun 2025 07:57:03 GMT\r\naccess-control-allow-origin: https://xcandid.top\r\nlink: \u003chttps://blockadsnot.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwwBX63NDQH36dgDAAwBuUwKEwH37QQAAAwBw7WvAgG3AgAAAA\r\nx-77-nzt-ray: 2a494a157d4724994c955b68efc5a027\r\nx-77-cache: HIT\r\nx-77-age: 252137\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37174,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"5aabe2b67c325b7e6438f4af977f11a0","sha1":"4073cb288731b516875494c811722631b59b9c27","sha256":"7ad4859a3f14db84bcdeffc0c3da6ee53ef0c7157936d2e16d9b7e4af927fea4","sha512":"5f52da0cde01bcd20cd0a4063f9e1de019b85538697e8c08b63d6dd5cb7c703ed480465c31eea8fc76245b861a3a2fac2c8c3224b196e5bca2b4aa49a3949099","ssdeep":"768:uOAu+1lQ5lQ/ybHUzdfn+4jf4wyXjZRoLO+cjhc90nk5bqgpxONnbWlqjL:yiwEWhVf4wyXjZRoLOPQ6","tlshash":"2bf23b67b296241500eb10ba503f731ab3331116b9025499fdb9cde85e3edca617bbbc","first_seen":"2025-06-25T06:21:17.790219Z","last_seen":"2025-06-25T06:21:17.790219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":50,"dns":20,"connect":4,"send":0,"wait":5,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-hls-D8DklbTa.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-hls-D8DklbTa.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/index-BRaSsAAT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xKyL2rxd8G9xepFCmAMTGthTDDkEmb4VT%2FLbFoBzhrl%2BXrsMhaZPmvERELp2jd5l1Hsj%2FgXE0qV4bp%2FrYctMXNmr2kUs%2Bf5J0g6wP%2FHR1pCnJS5ODJhxUhx6O4JQFr9XsBAx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-1f10\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93408\r\ncf-cache-status: HIT\r\ncf-ray: 95525be2ac3456cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=830\u0026min_rtt=332\u0026rtt_var=286\u0026sent=720\u0026recv=172\u0026lost=0\u0026retrans=0\u0026sent_bytes=731349\u0026recv_bytes=14027\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=38881\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1656\u0026inflight_dur=149\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7952,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7951)","md5":"5ca16aaaccccc8a87e8464a20e9e62d1","sha1":"fb4f1f8da05d6904630d8e888a7def487594e8df","sha256":"8f3446a9eaddf9ca98d1a3430e4864bf20ab9ac32945c1e1347668d2e53fec88","sha512":"2441909e5d730aa66ee0501325e0d87719abe323c6c3bcaa3b18d1c15086e0355cb530ab7756d9deb286d081206932100cbe132286f73254c9371d59cc5c4fd2","ssdeep":"192:ZXb0nTp5TlX0KPvDoOI1Mur1G4KEJbUTB10IX75ZGvBvgMtfatcT:ZL0nT750coOOMuB7PJbU9RXPGpvgMtCi","tlshash":"7bf1e69db3b7a19991b2add0601d0d03953b67673886ccc8f12ccf6217ba2439635b3a","first_seen":"2025-06-25T06:21:17.726141Z","last_seen":"2025-06-25T06:21:17.726141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GSLLMQHH8G","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:26.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:35:30 GMT","end":"Mon, 25 Aug 2025 08:35:29 GMT"},"fingerprint":{"sha1":"79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA","sha256":"F5:17:47:03:4B:39:BD:9F:79:87:88:F4:F3:FF:C3:7D:05:5D:EB:4D:D3:F5:02:E8:2B:96:3B:BA:AA:97:0D:B3"}}},"request":{"raw":"GET /gtag/js?id=G-GSLLMQHH8G HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\nexpires: Wed, 25 Jun 2025 06:20:26 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0\r\nreport-to: {\"group\":\"ascgcycc:1077:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 132936\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":399768,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6004)","md5":"de0439034e2b81683cf21d562185ad63","sha1":"12ae6bd32ff10d11ae93ffffd108a0de058ae731","sha256":"a5ac26ed43cbbc4daec14fccc3a39e490ba29ef68f11bdbcf24e503f54f2ef39","sha512":"c73f668db0b2958a053f974cab5f12cd755313ed8f485aeafec7eb4b0fbfd3fce9db1a85d6daa51ddd7d5e7e875cf879621f855cbf98cea0a256461c346aa2c6","ssdeep":"3072:jLaEQJ17GCNOxikGJyCOnDl0igNc/x1+yXNFNmfoJw26GeP1P7SQ10bba7UXenSV:PQGmOxikGAx2f2EGe5SQ10Xa7UOnSHzZ","tlshash":"2e8419ce73c674625396f478503f018ba57b28a2b49cc899f189cce42e74a9a4177f7c","first_seen":"2025-06-25T06:21:17.79096Z","last_seen":"2025-06-25T06:21:17.79096Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:28.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:36:37 GMT","end":"Mon, 25 Aug 2025 08:36:36 GMT"},"fingerprint":{"sha1":"58:09:05:96:27:31:E2:3D:AB:89:AD:1C:2E:C3:03:82:B0:27:3D:86","sha256":"89:68:57:F4:FD:04:C3:94:84:10:59:C7:94:CB:87:1D:7C:07:51:29:D1:25:C6:75:F4:33:16:EE:2D:9F:60:3B"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Jun 2025 06:20:28 GMT\r\nexpires: Wed, 25 Jun 2025 06:20:28 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 7598073993838571503\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 145903\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":462831,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3524)","md5":"384d428c886fb8db470007a1bbfce045","sha1":"a6ea8f08b2936b9ea06f1bfdc56e400d92159374","sha256":"86951c2596101bdecb648fac6e1f0bf14de24ca168f2ba068ab75f2d9a02e949","sha512":"d1b352c8bc1990d999de70d4197358af8c192fe91dbcc69b31a036be2b002b8b2786722e97537b40cab72c4b12b6f8bd4cb3dd107f51e6497fae627c84659b44","ssdeep":"6144:o1kqpy0eCz0k8ZuBmBk46KJUltbRPVzTsf10j:EXkuBmG4LJKtbRPVz4S","tlshash":"b0a4facdb6a674629363f4f5403f014bb23ba86af408886cb249d9e16e7490d5277f7c","first_seen":"2025-06-25T06:21:17.727471Z","last_seen":"2025-06-25T06:21:17.727471Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-DsSvO8OB.css","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:26.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-DsSvO8OB.css HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: text/css\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IWcocilpSItlUtzOrRL2vgahP%2F2%2FKQNw1u7bcYd77Y0qexHqbFon3Wh5c5r3jw2%2BrkZ8mHHaSq%2BSmlS5%2Bu5oQOJdI7mg4Fb1NG%2B1LPqbo2Ke64TwAirTjxJ583UxYGo6p0sq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-107f9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 43967\r\ncf-cache-status: HIT\r\ncf-ray: 95525bec0d5256cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=934\u0026min_rtt=332\u0026rtt_var=340\u0026sent=1360\u0026recv=252\u0026lost=0\u0026retrans=0\u0026sent_bytes=1446047\u0026recv_bytes=22652\u0026delivery_rate=38470703\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=48063\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3155\u0026inflight_dur=240\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67577,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"71d60520b4e2bd909f99d02da0ea779f","sha1":"ea28d120344bcfa8e2b1fdd9943197b6c2200f2a","sha256":"18c18ae6d606f8066f233273063edf80a2eb606f66602a98f4e9137c51135baa","sha512":"7a30d27940db7ddf540b8b7257d50ced8020a57d915b2e613b4c9efacb88e21c9b6fba6aaff28f118b3ccfcfa7a36d8b4280841b9b17894d5bfaab3679e63eaa","ssdeep":"384:NEihDpmQd+MeEeuID+MAbb4Pra5b0RvGCGQaJO1/VJFGhxDzV7a4N9QoyUTR5dP4:TxBeHoVSVJmxzuksXQJfDFMVwgjSG","tlshash":"706384e8fa4c613eb817614d1acc958ea32dfd40eed31a94e9c27128cdd7af31179684","first_seen":"2025-06-01T22:18:38.544356Z","last_seen":"2026-04-21T17:08:40.069138Z","times_seen":48,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/index-BRaSsAAT.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/index-BRaSsAAT.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JnyxKjnhja6BPolwfI3oIoEcThx4CdRsZ%2F6ZIIF5EUCKNIhMCrIRauRJPDqT7F1mt88PcMBJg1Q9rmjwEX0FSln1QG2vIwUKEvNf5dbC7HEbQgi4KS6lCamr6U2WjkqH6n7w\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-d6570\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93433\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf1ce2c56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=977\u0026min_rtt=332\u0026rtt_var=369\u0026sent=2363\u0026recv=322\u0026lost=0\u0026retrans=0\u0026sent_bytes=2581878\u0026recv_bytes=32322\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4082\u0026inflight_dur=347\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":877936,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (64878)","md5":"dbfd345b12ae3d2ba6c531c68909f44e","sha1":"5b451bbfd3d3d28e6f6d970882612d5d93390378","sha256":"bcffcf475d1f87a388230e9f82c286c419dc72371da550d4a0cba7913719a35b","sha512":"07c1f84d530b5b594473ee918714847b15ce84e8e06c5e7302b801758b3a4750685362f7bd6e1d947293c75c61b41d23aa8234ea67adf22393068ba6bb4f780f","ssdeep":"24576:167HI4z2l7k1f4M1ftmidx/AXxAl9Ax1sYdHQaQFlHf35I:167HI4Cl7k1f4M1ftmidx/AXxAl9AxKq","tlshash":"0c155dd533aa646792e196ca603a421273387c563408c4ecfa3dfdeb2e26945e07df74","first_seen":"2025-06-25T06:21:17.740599Z","last_seen":"2025-06-25T06:21:17.740599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:30.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-Bq6c3Bam-CqhR3Et0.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=85l5ZpkPFaVa7nHyn1ICaukclV4gStLXFgnsdoGnlW8utM3gpbrRkxJGF2y2VGvDVACtitSf5KSQGD2DWXdxrMfH%2B6aqo5SAHo35JQBB2gSJHWM80b1bLJxYSgvRSDih2mf2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-2f6f\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93413\r\ncf-cache-status: HIT\r\ncf-ray: 95525c007eed56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1844\u0026min_rtt=332\u0026rtt_var=583\u0026sent=3845\u0026recv=427\u0026lost=0\u0026retrans=0\u0026sent_bytes=4256169\u0026recv_bytes=47215\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=6427\u0026inflight_dur=650\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12143,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12142)","md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/themes/bimber%20final/js/jquery.placeholder/placeholders.jquery.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/themes/bimber%20final/js/jquery.placeholder/placeholders.jquery.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=h7kDrF656cwvnXuL%2BHoyELvzvdtHFzhZ07L%2BddsmngnA38l9kd6vh%2F0ndQxs8Xvsk21UoQvlD50oUaN%2BP8wdY2qA%2FdHFB%2BkGCQWdcxiFL4L8Q3SRcNykVfHb%2BhMEMw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 09 Jun 2025 15:19:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6846fb70-1555\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44149\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd53ebc0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=739\u0026min_rtt=0\u0026rtt_var=874\u0026sent=254\u0026recv=284\u0026lost=0\u0026retrans=0\u0026sent_bytes=48681\u0026recv_bytes=22055\u0026delivery_rate=1905324\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=15933\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=351\u0026inflight_dur=64\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5461,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4289)","md5":"a174a677ef7798a1adbda44b740996f5","sha1":"1a3587ed5f71778c68adfb80bf3e4b2419ff2b97","sha256":"aabc30ee10c2b23a718fe443f43b051563fa5c58aa4b48cb64155a424e451468","sha512":"649a4305d36d63c5c092111b1698cf35ea4fe117e230b5b2b4c92349b284c89ce41353d2dcb73666d6a02262a450042329a035c22874153ee1358381a2cad31b","ssdeep":"96:h6LJvsVYMQHqEodWadgRA7C3rMpZtgPrUGvERRjPMv3:hJYMQHRFadg/3GzavERhPMv3","tlshash":"6db1957e324677b31da714e8f8abdc967870a3f6b10b4c60d064e492393cce956b6d48","first_seen":"2023-03-07T12:03:52Z","last_seen":"2026-04-20T15:53:15.350593Z","times_seen":766,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-includes/js/dist/a11y.min.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-includes/js/dist/a11y.min.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uuOpye51Hzm2679pb2aXzidWZ86vqdp428fZw5QvyaVEZ9zNzB1oU%2F2xoDphdsXpat5OehhPzvW%2FcgCy2iq3RaTNxrl6Q%2FSvY7lJe%2FUQoLsUml2AdAgH59ngIFuxzQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 13 Nov 2024 08:57:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673469f6-936\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44149\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd56eca0b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=604\u0026min_rtt=0\u0026rtt_var=199\u0026sent=366\u0026recv=317\u0026lost=0\u0026retrans=0\u0026sent_bytes=159114\u0026recv_bytes=26514\u0026delivery_rate=4472911\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=21136\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=381\u0026inflight_dur=95\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2358,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2322)","md5":"d60d16abc088d80092cef147505a08e4","sha1":"681fbfeb2a611e0db7620dfc72af70a76aa67a7a","sha256":"cf1aa9163953fb477fe5cf452229042578738fa9e600c6ef64c47e4635ba78c2","sha512":"57100e48a4a04b95910cf5f2967883d8d259b2b68c82f0eaa12bbde4d6ddfbe7710cd741db8e727172cc0bb27b8825afd8a72c2a34412f242b951f6ed47b60fa","ssdeep":"","tlshash":"2f4131723450767294bf66f79c3d93c6bf358a303a47e0549e0caea93239c9a21357a1","first_seen":"2024-11-13T06:33:24.842079Z","last_seen":"2026-04-22T20:06:09.674951Z","times_seen":38238,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/uploads/2024/04/output-onlinepngtools1.png","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/output-onlinepngtools1.png HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: a=AS5K9poI3XBGhTbGU67TEtLriRnD34dT\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1340\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cohzQM0VawS7mrk%2Fyu6Lq8%2Bz97L9VIjEvy%2BHomhrPiD5v6Y7hFDTrDBuujRueQUYtpDDMfCfnW%2FplfLknhBDwJoCC0sYWp1F3qlAwl4bfRS667hlUfIXDNp7%2F7ZuIg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 25 Dec 2024 11:05:27 GMT\r\nvary: Accept-Encoding\r\netag: \"676be6f7-53c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 44151\r\ncf-cache-status: HIT\r\ncf-ray: 95525beadf070b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=534\u0026min_rtt=0\u0026rtt_var=49\u0026sent=572\u0026recv=389\u0026lost=0\u0026retrans=2\u0026sent_bytes=360179\u0026recv_bytes=35371\u0026delivery_rate=12140342\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=18374\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=3802\u0026inflight_dur=282\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 58, 8-bit colormap, non-interlaced","md5":"a13f67d97c341361a87682b8a202b382","sha1":"f8be984dfce18204127db5c3e20d99adc617bb3e","sha256":"d02f81360bac4455432a5f8b638ffce40e3162c1cced26f2210986e8bdbbbcc1","sha512":"b7b02fa94729e7ef2c11d190e43afffde84e5561c87f540faf3d3ffeccb7580750b7a129257b86af1807eb4441a90a82bbee347d4d6f5c5474614d96f0fe41b2","ssdeep":"","tlshash":"6c21c8a7d505fd7cd5b8112f4ed7b9a5cf5a87cb0362d22100d707b0a9153342115f14","first_seen":"2025-06-25T06:21:17.72983Z","last_seen":"2026-03-26T02:35:10.549704Z","times_seen":12,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_a0382578e433b72b11be29cb5e4821dd.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_a0382578e433b72b11be29cb5e4821dd.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9nEN1%2FIZi30e1wEoOQlak%2BeiSla6KpYkgdTFD8PLQbvF4HtfSt7MkmQ2leG2iZSLOWj%2F5iI2C4ajxxqLtryP%2BcKRP%2BbhmAG2TT75Ew1WKcz2Pp5M3mAKlUcBE%2FyPxg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-3a66\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd56ec30b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=536\u0026min_rtt=0\u0026rtt_var=204\u0026sent=319\u0026recv=306\u0026lost=0\u0026retrans=0\u0026sent_bytes=114994\u0026recv_bytes=25774\u0026delivery_rate=4098488\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=19855\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=372\u0026inflight_dur=85\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14950,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2196)","md5":"886ec339621598a4dcf25b598dd0e069","sha1":"31a1fb373cea8d38c86ff033d2a3b255d4a83eef","sha256":"70c5861c6590a19f45e90a3a626769cbb483457ee5cdc393b8c16e228ff76f63","sha512":"83d5b1699cb672479a8475b440cdce17885301fa920a273034002fdf0e6ef8675a548a9b271c6d334969ac29a0cfa9d6cb05e4a2618fb88625825f4bdc6a4b09","ssdeep":"192:cBxWwfSHfleA5rL8/ap9IgOtQoWRR58IXVVYO7PX/Nb0RveQbPPdb+gL7vp1g/6b:cBsOSHN/NLAXtQoyTQhLzpyAbN","tlshash":"2962a64d33aa21fdc6c7a5b9082f020cb13ae6261a0ac5d4c610f7d52e7c54ad8f3b9d","first_seen":"2023-03-07T12:27:56Z","last_seen":"2026-03-31T09:15:59.236387Z","times_seen":13,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/api/v1/info?id=5whfmi","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:24.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /api/v1/info?id=5whfmi HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:24 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GA4kNUYaAm4tYc9lHOzKIn8B9BQr%2BEJ8%2B38TeBqXYADQ38i%2FDwsmefQgExIToCI8CcSo7GPS1t2JEozE9WhSs4%2FM8GWtBHiu7rHLozaozfSw0mBtjnjSBYB%2FOjUydnkN6EE9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: private\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,Referer,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 95525bdc8c0556cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1230\u0026min_rtt=332\u0026rtt_var=554\u0026sent=345\u0026recv=126\u0026lost=0\u0026retrans=0\u0026sent_bytes=327809\u0026recv_bytes=8316\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=36972\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=723\u0026inflight_dur=92\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22433,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (22432)","md5":"797ea1ceccbe8003362874a4b4e8bed1","sha1":"1a07840aa69d9db664e6d1f622a50f077729ccdd","sha256":"229ac6adca5106706b385874596cc8dea63e8fd5dc92b37fe5d8e77d5331b099","sha512":"074de692a94bc89e7d06e2dcf6dd64a7e2de9670676ae406527645db1804d0ae1a77bba7210d79affc7bbd1bd0233a950c338cd7c84b9c7bd187d3eafb590d13","ssdeep":"384:B8W7H9hE37cWKOWzUYB7ThXdhDdldJn2usnj+2mwXgWwZ3G/y24lrYo:PdhEIr3YYPXjdlKJj+2mIgxZ3rYo","tlshash":"45a29eb47604bde55bff426edd9a6ded03b62b12994f94c8402573c71863276ee07c08","first_seen":"2025-06-25T06:21:17.793362Z","last_seen":"2025-06-25T06:21:17.793362Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-Bq6c3Bam-CqhR3Et0.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2bP2YbXauKRjDNeq0cJFfg5lJ8ucg5g6hiRN0mVxEADve%2F6Dk9B0tR7r4ML3qr2VadGqcDNAGf5Kg8N51alNr3u0OhVdVEJQXUQAK7MEpOTcrSRbY9SbNPZQmgEEtBEV%2Fbxh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-2f6f\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93408\r\ncf-cache-status: HIT\r\ncf-ray: 95525be29c3256cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1091\u0026min_rtt=332\u0026rtt_var=349\u0026sent=620\u0026recv=163\u0026lost=0\u0026retrans=0\u0026sent_bytes=616085\u0026recv_bytes=13366\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=22578\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1648\u0026inflight_dur=141\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12143,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12142)","md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-player-default-layout-BuBwqJzH.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-player-default-layout-BuBwqJzH.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Z1PKEmNHc4I9b5OKORuIhz8Ig9bQV88pQjomFguYucEhgXoGaNNEvx7DF1HbXYhYXiaB4FZPDJdPYw3O5xHO8UfO2lXN2CzpsseLIUC1oaZ2f%2B33qz%2Fddccc2d%2FLt%2Bhbr0%2B%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-bfb2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93430\r\ncf-cache-status: HIT\r\ncf-ray: 95525be93cb556cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=843\u0026min_rtt=332\u0026rtt_var=226\u0026sent=1117\u0026recv=223\u0026lost=0\u0026retrans=0\u0026sent_bytes=1183399\u0026recv_bytes=18629\u0026delivery_rate=30479456\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=50004\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=2703\u0026inflight_dur=194\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49074,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4007)","md5":"25b6f476fa0acf6a6883e2f684f207d2","sha1":"4c8b099b663516b3ae3b3e3d4c2176695edda6cb","sha256":"b76fda5fa1cfc4d276c039aab9a7234817f5de2ab4ce96d3c589515b202553af","sha512":"61e5d821ba13e2705de24cde761136e4861102305b0a36f8db963f4a82ef6857078092fc64354867927ea368fde3dd1e5e5747ce848e6a80e467b200dcf998ea","ssdeep":"768:RnidMcniNbJ08Cy6NOxf6mlpRQ+QWt5hZ9OW4CpRwMzcqbb2uCSdu1eqy2JWRWPG:RPai08Cy6NY6WgOpyC8MH/Q1eqIYODmA","tlshash":"9223b596b0e322718a9340d8a47fa202b3398d47d9075074b5adafc96fb5c4583f7f68","first_seen":"2025-06-25T06:21:17.75591Z","last_seen":"2025-06-25T06:21:17.75591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/prod-3EO0RhVK.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:27.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/prod-3EO0RhVK.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/assets/vidstack-player-ui-BXPTXUP4.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fZfKv%2F1SUpTDsJaBw%2BT6OhS3zUV4wdTIzg4GNQOAi5boB%2FwPewwGUhoN5V1uP4U62pM2W0S7EOU3UdMwsVMQHXnUY9i6wOeILBrkT4PAhMC3yNTZff54pCniauBqUjVBoPXp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-47d8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93429\r\ncf-cache-status: HIT\r\ncf-ray: 95525bed0d6856cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=942\u0026min_rtt=332\u0026rtt_var=289\u0026sent=1731\u0026recv=265\u0026lost=0\u0026retrans=0\u0026sent_bytes=1879620\u0026recv_bytes=23966\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=67974\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3321\u0026inflight_dur=258\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9763)","md5":"0c89e23fc35fca0c02fa56c124ad50ce","sha1":"4b3622db02f1a79a5df933372c395e4df0f12ded","sha256":"03c8c3c91286a6ab443f576cba675bfc7dd4236cfc181f3b26e48f255e31c1dd","sha512":"0038e3504cebfe5ccf9aadafc8ef1b2feb53d9d596472deb9ecf7623d38e141756ff2dfb83c912cde570e5eb226d53fd2b2797f2bcb87c8535202f85236a3e91","ssdeep":"384:GweuniokEyCp7OBFczYZE1XPltgLOip2uhuoSTPWhLhHQj8XLQVgseNG:GuniokEyC4BeYZE1XPgNp2aMW1QVgseY","tlshash":"7a82f8483156a43a92a187df601b0101972569117d4aecedb2bddfe7bd2088332faff5","first_seen":"2025-06-25T06:21:17.736742Z","last_seen":"2025-06-25T06:21:17.736742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GSLLMQHH8G","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:26.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:35:30 GMT","end":"Mon, 25 Aug 2025 08:35:29 GMT"},"fingerprint":{"sha1":"79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA","sha256":"F5:17:47:03:4B:39:BD:9F:79:87:88:F4:F3:FF:C3:7D:05:5D:EB:4D:D3:F5:02:E8:2B:96:3B:BA:AA:97:0D:B3"}}},"request":{"raw":"GET /gtag/js?id=G-GSLLMQHH8G HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\nexpires: Wed, 25 Jun 2025 06:20:26 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0\r\nreport-to: {\"group\":\"ascgcycc:1077:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 133508\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":402312,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6004)","md5":"ba773e7fc01b5c7b031b50857a23e814","sha1":"2f8710a111efa8fa6058e924cbd0aa60c9fbc58e","sha256":"ff3302304ef0d586b0a682c14beea918ea3c61c89c1d4e6f45950012a411f17f","sha512":"c2d90d49f2c38591e4d2d819e72c0ced366055ecfae5b73b0f30a1fece7dcc484855e84a29682afd4c13016bf542b9ba184241e34b4cd1dbd8a3dc5a4b156c00","ssdeep":"3072:jLaDvQJ17GCNOxikGJyCOzDl0igNc/x1+yXNFNmfoJw26GeP1P7SQ10bba7UXenQ:0QGmOxikGYx2f2EGe5SQ10Xa7UOnSHzZ","tlshash":"ae8419ce73d674225396f478503f018ba57b28a2b49cc899f189cce42e74a9a4177f7c","first_seen":"2025-06-25T06:21:17.794031Z","last_seen":"2025-06-25T06:21:17.794031Z","times_seen":1,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-Bq6c3Bam-CqhR3Et0.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#q3mvff","date":"2025-06-25T06:20:31.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-Bq6c3Bam-CqhR3Et0.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OGsi4JqhYzdu%2BSZXDmggfKCezeqLcIifk5v2tNva6iVAiXVbviC3BLmSHbdr0BvzrapSQ%2FvnmitGRcbqvABi1bsCz5CCDq%2B%2BOFIXRLqc2pN6AS7RMYiDCLsxgLq3Oz8ZDonf\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-2f6f\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93414\r\ncf-cache-status: HIT\r\ncf-ray: 95525c06cf0456cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1177\u0026min_rtt=332\u0026rtt_var=492\u0026sent=3883\u0026recv=445\u0026lost=0\u0026retrans=0\u0026sent_bytes=4281115\u0026recv_bytes=49925\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=7435\u0026inflight_dur=687\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12143,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12142)","md5":"d02f0dfcdfdbaec27883ed654a1beb81","sha1":"d413326d608185ad8cf65aa08315bebabfae0248","sha256":"d7068a9c371cb6b07f70be13df220e66c26ef0d3319f7e338ba16bbda18671bc","sha512":"759bf7d2f77a9f0f70671cad67cde8e183114437531b262380ed37100ce5183619743d42aa0b432215d0b4bc390aa1c12269b6266344bd05e434a411082ef9aa","ssdeep":"192:ulqLAx18I+nNGGh0FdqaqUEiT+NhbzhwqR+6ymvK6KOEEsF6tym5F3bYOhVkkA/x:aqLq18pAC0TqaqUEiTqh3ewy6KOEEsFJ","tlshash":"c742b9c87363b2e8a473fede547f660091352b1f38068548b57d7b941ab2a0a6036f7d","first_seen":"2025-06-25T06:21:17.752362Z","last_seen":"2025-06-25T06:21:17.752362Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_25cd6978afc6af28ec12782ffc8335ba.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_25cd6978afc6af28ec12782ffc8335ba.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kHxMI3JX1aYtVEfByIjnZI6l8Ubz9IAmF2LFzCeGX9kJEsu4iY1xhjM83Kn5GhFECu4fQFB9CMn3wxwj2nXQDMVwfsFQVPkOGcFC53eFrLQUWor6vk948YJTGGmW1Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-1e7c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd5aed60b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=711\u0026min_rtt=0\u0026rtt_var=133\u0026sent=435\u0026recv=339\u0026lost=0\u0026retrans=0\u0026sent_bytes=214865\u0026recv_bytes=31024\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=415\u0026inflight_dur=121\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7804,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (846)","md5":"811bfec380b526450d840e079beaaa8b","sha1":"ee19f8a1c09ec6a4b29534a034b1c9fb7f8ae62b","sha256":"71cfc99e926ecd5664aa8de32c8eaa3a1e8cc508edad00dd30eb2102b0655de1","sha512":"50826cf45e8beb00574495fc620f25693ace63af1a395bbb012cfa588a03587097151c44b50fae7427a371a6e38243cffea56bc7e78aa4586fdc586675ccb9c0","ssdeep":"192:+ma9h9NZGF7E90+8OtaQbg4zuCXysZkaw5FwWDuo/LYTTBe:+ma99EI9DQQFznXXZk15FjDuo/Evg","tlshash":"81f1220631c3593549cb20b3284f16d5a3c1ae4dd5c884bdbdb5898d7ba0f69827a3bf","first_seen":"2025-06-25T06:21:17.794701Z","last_seen":"2025-06-25T06:21:17.794701Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.167.186","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:26.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xcandid.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:26 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\naccess-control-allow-origin: https://xcandid.top\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95525be7cd1c56c5-OSL\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":50,"dns":28,"connect":5,"send":0,"wait":14,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-DqAw8m9J-CdSVB3O8.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#epckpc","date":"2025-06-25T06:20:27.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-DqAw8m9J-CdSVB3O8.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LwRT7xm5Sr%2BwFoSJJioB%2FqwtxxV0OuBQvkcy5uanpVn3uu9gS0hqOyT48jPoBUAxvw2OrnUFATak0QH1ePNgb9AolNy1sv1TVMDeb2Wcl4Lp8G3Azr6SGfwfwx9yIVqRe6ya\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\netag: W/\"685a0570-324\"\r\ncache-control: public, max-age=31536000\r\nage: 93410\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bed3d7a56cb-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=905\u0026min_rtt=332\u0026rtt_var=264\u0026sent=1869\u0026recv=278\u0026lost=0\u0026retrans=0\u0026sent_bytes=2036996\u0026recv_bytes=25737\u0026delivery_rate=43352721\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=66624\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=3350\u0026inflight_dur=269\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (803)","md5":"abccad0930c81e570c4072db255bbcdd","sha1":"e4997182780ade908350b15f950ea26b4381d06c","sha256":"b676dd8720789b8fe02e16b0ce12142dd66d699a6de0693940c458afaf42cffd","sha512":"aba0c8eeb559efade4e6d0b1020313a4f80feb0d05a77d6e14f9c343ba6191bbf96ae54c85b1cbb4c0d3744d425a4c58357e51c2e147059364c35c6d592d8fc7","ssdeep":"","tlshash":"9101b1cd83b2a57396725e76c04d431a7c23d63c1e4ed920716c5f0b43600c202793b5","first_seen":"2025-06-25T06:21:17.760863Z","last_seen":"2025-06-25T06:21:17.760863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:30.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-video-BsHN1m3I.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XtaqCm%2FegQ4nkmER4WxRu%2FE7Q%2BL2mM5fdAOoFDToh78oFh9GZcOs9amSLf38Tj2oE7Ef5fkg1J3eebjMw81oHQgNm%2FDXcDDCi2HYolhJGjCXuyRCNBbo9no4ywUiMy7dwWSt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-fda\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93413\r\ncf-cache-status: HIT\r\ncf-ray: 95525c007eec56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1878\u0026min_rtt=332\u0026rtt_var=688\u0026sent=3837\u0026recv=426\u0026lost=0\u0026retrans=0\u0026sent_bytes=4249794\u0026recv_bytes=47169\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=68654\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=6424\u0026inflight_dur=648\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4058,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4057)","md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_d674481513d4b30efad67303812f94f9.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_d674481513d4b30efad67303812f94f9.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sD7O1q4ICIgf%2F17m6mDbOB68J7M4zZKxiPpFXTv%2B32BM31FdWZLMwqoW6kUnZDhlqvr9QkSONFnxOvYUOoXZ5bDUOMOAcgAnzop%2BPGHzoCFnZUdEMwAZ%2BZkRq88HQQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-3b3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 44148\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd5aed80b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=697\u0026min_rtt=0\u0026rtt_var=128\u0026sent=444\u0026recv=340\u0026lost=0\u0026retrans=0\u0026sent_bytes=221593\u0026recv_bytes=31068\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=417\u0026inflight_dur=122\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":947,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (437)","md5":"269ddc68a5047f213aa470b70089379f","sha1":"3c5268adbdc1fd9af71c8de97ffbaa448398e485","sha256":"80f6df81380466af12e411fe992318b338f4d4e661f03d0a4687198f059cd688","sha512":"baa845bb63bbb4b5f6b3cb4f8ea4a24cadebcbfd8222223066becbf2842b3bae3eafac548f1e335e5647412b88516bbe1a07b516ee563a1f6cfb10e83f3e0b58","ssdeep":"","tlshash":"e3117de7f11051a141dfd237a92b679438357986cb825db0820c5edd645522fbe07b19","first_seen":"2023-03-07T12:08:46Z","last_seen":"2026-03-31T09:15:59.255692Z","times_seen":36,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#5whfmi","date":"2025-06-25T06:20:25.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-video-BsHN1m3I.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mzX1P3CIrRkK%2BGFrIg3wrm99wKHmR%2BDyp3yos0HpO%2B15yReaoG8qZTI3XntirRImGywrOXFc5RF9VJ9qbxPK6yXaeWwsY85qQsyZHQLvsivj8ABpCVmCk5YvJzEtFqPx7PWy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-fda\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93408\r\ncf-cache-status: HIT\r\ncf-ray: 95525be29c3156cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1091\u0026min_rtt=332\u0026rtt_var=349\u0026sent=620\u0026recv=163\u0026lost=0\u0026retrans=0\u0026sent_bytes=616085\u0026recv_bytes=13366\u0026delivery_rate=22750021\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=22578\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=1648\u0026inflight_dur=141\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4058,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4057)","md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.top/wp-content/cache/autoptimize/js/autoptimize_single_ae71dea852d2c5631026861731041d24.js","fqdn":"xcandid.top","domain":"xcandid.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.top/beautiful-spanish-teen-ass/","date":"2025-06-25T06:20:23.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xcandid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Jun 2025 19:24:55 GMT","end":"Wed, 10 Sep 2025 20:23:07 GMT"},"fingerprint":{"sha1":"B9:2D:89:1D:51:66:2B:B4:76:3F:36:E5:97:90:43:02:54:67:DD:B7","sha256":"60:FC:4A:3C:E8:91:2C:7C:A7:0A:10:E4:A8:BA:43:F8:29:DE:8D:E6:74:7E:CF:27:1C:41:CE:79:0C:C3:18:19"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_ae71dea852d2c5631026861731041d24.js HTTP/1.1\r\nHost: xcandid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.top/beautiful-spanish-teen-ass/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LvaFO3l%2BwqcnqtWeJQszqXYIxj9tjseQSxxox9MAAWQt9bHpQnX5kpv1GOMSs1GDFz1%2FdN8Iw6BS8%2BZ1IGVcWuUAAFV4xvnRb%2B%2FXXhhAQ3%2B7L2%2F9zv8NXLWTDpMIcA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 17:15:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685add21-c3e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nage: 45426\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95525bd59ed10b49-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=673\u0026min_rtt=0\u0026rtt_var=135\u0026sent=423\u0026recv=333\u0026lost=0\u0026retrans=0\u0026sent_bytes=206819\u0026recv_bytes=29672\u0026delivery_rate=5598590\u0026ss_exit_cwnd=14904\u0026ss_exit_reason=2\u0026cwnd=23102\u0026unsent_bytes=0\u0026cid=478fa77258783661\u0026ts=405\u0026inflight_dur=116\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3134,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1192)","md5":"9b83721566b341f1411ba910a52baae5","sha1":"836a39f8b9e96a3192407cb0c8cc14ef32cc5b67","sha256":"552ac5765352b1d2863081df4fb1ae046f6564a29d9a57a8bbcb1ac97196b956","sha512":"d280aa39d10432456de88a3341388bb32f034296245f57b75f0c4e40b7daa02d5ae53def1a48fa530f8a0ea7c563c1fd5d7f507c22ae147e97654d5825f4898e","ssdeep":"","tlshash":"335153087bb2713281fde16d501f35063393b48bd485c4d8bb72c4e99ee895e8ba2d79","first_seen":"2023-03-13T10:25:42Z","last_seen":"2025-06-25T06:21:17.796057Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/assets/vidstack-video-BsHN1m3I.js","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#9ovelp","date":"2025-06-25T06:20:27.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /assets/vidstack-video-BsHN1m3I.js HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xcandid.upns.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Bmm6I05EUTWcweQ%2BzWu4c5Xog2AFl2og%2FuZGXadmE0l3QDy%2BK3mN%2BBWQUAaEWtsrGP%2B1sbCOVvLliIC8kyOTQ09M5PQxBXTJLwM5QoOc3Nk3KShPmP6uS8ADJrszwkxZMqTx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 24 Jun 2025 01:54:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a0570-fda\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nage: 93411\r\ncf-cache-status: HIT\r\ncf-ray: 95525bf1fe2f56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1072\u0026min_rtt=332\u0026rtt_var=260\u0026sent=2607\u0026recv=332\u0026lost=0\u0026retrans=0\u0026sent_bytes=2867885\u0026recv_bytes=33975\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=77479\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=4115\u0026inflight_dur=372\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4058,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4057)","md5":"baa30a43396650dcc9cf4a6936110dda","sha1":"b9c71ecfdda40efb1101f9a7948e83aaef07b90a","sha256":"5f4a97956c25499aa8ae5a7bd0e5bcf80ccb0b2c48ff7bf0647923cbcd900b99","sha512":"01925f92a0d337bbbc0ea9ec5d0e399ef6fb7a848c82a1a0aa31442eb760372f396d1dbe5efc741d2d53cfa4a8d8b04f3832ca2e6b4a88542a387fd0cd257e1d","ssdeep":"","tlshash":"a68186986bf3f0a24577dde7916d0102f87e6a741c4ec84ab21c4b2a27b2106927def5","first_seen":"2025-06-25T06:21:17.733101Z","last_seen":"2025-06-25T06:21:17.733101Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xcandid.upns.pro/OXC87gt57VaCBBM2v1BgQA/vz/xieumnsm/xiehhb/poster.png","fqdn":"xcandid.upns.pro","domain":"upns.pro","tld":"pro"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://xcandid.upns.pro/#c5glqb","date":"2025-06-25T06:20:29.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upns.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Apr 2025 11:59:16 GMT","end":"Tue, 29 Jul 2025 12:56:52 GMT"},"fingerprint":{"sha1":"57:0B:DF:88:02:A3:85:B7:17:BE:D1:DC:84:FF:45:DB:47:8E:E4:40","sha256":"44:91:14:D8:1C:29:82:95:65:07:08:62:30:65:A7:0F:AD:3F:7F:52:D8:17:F7:D3:FC:4F:FA:53:27:CE:63:8F"}}},"request":{"raw":"GET /OXC87gt57VaCBBM2v1BgQA/vz/xieumnsm/xiehhb/poster.png HTTP/1.1\r\nHost: xcandid.upns.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xcandid.upns.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Jun 2025 06:20:29 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ApQx3S34%2BJCA5uDM395zQEdEyLfZtmkPeDdr%2FdB2GSPJM49m4KZXd7wOAHPyAXhYq5ElVdAwD4990Mcl3jT5ujOxb4AYunp1FuJSROd%2FOC5rTDRDZwLF8ulbGa%2FYDZAa4iaq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 23 Apr 2025 06:06:29 GMT\r\netag: W/\"68088365-2246d\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 95525bf96e9b56cb-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1494\u0026min_rtt=332\u0026rtt_var=561\u0026sent=3392\u0026recv=394\u0026lost=0\u0026retrans=0\u0026sent_bytes=3749282\u0026recv_bytes=42893\u0026delivery_rate=43691405\u0026ss_exit_cwnd=26274\u0026ss_exit_reason=2\u0026cwnd=65287\u0026unsent_bytes=0\u0026cid=678d8fec24ac2330\u0026ts=5339\u0026inflight_dur=496\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":140397,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"data","md5":"3671dc9c3c1e4dcc504df78d00d943b8","sha1":"b7718367c91caac17796b06741e4bf32b60ca568","sha256":"f4405792014671397fbd7479c8f22a4cfa3320a28d110aa3e8983fc3fb94a8e7","sha512":"b380429695e545bd13b27f03ee2fd95a48565260a9bcb21a2fe36c8309ccd42e4e54d5bf1257da054423a02085d4da79ae06c0d5d9e5cb8cbe4dd402b64442ca","ssdeep":"6144:ZtwHXuaUXbOj/QhWqHC3ApTPkNGnnSYsD0UA:QeD6LqC3qrkNSSYsD0UA","tlshash":"3514f1015352f3b096aaa0fa5d020ad8370aaf98e7db7d14c524d2e02e9f53d67de4d2","first_seen":"2025-06-25T06:21:17.796987Z","last_seen":"2025-06-25T06:21:17.796987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}