{"report_id":"c450bf71-92aa-45b4-89b6-96f265249d2a","version":6,"status":"done","tags":[],"date":"2025-12-18T00:29:06Z","url":{"schema":"http","addr":"sasisa.org/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","fqdn":"sasisa.org","domain":"sasisa.org","tld":"org"},"ip":{"addr":"85.17.28.52","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","fqdn":"f.sasisa.cc","domain":"sasisa.cc","tld":"cc"},"title":"foto.sasisa.ru","dom":{"size":10687,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1111)","md5":"5780421412afa81cbb565cde3052d556","sha1":"1c4afe6b0e359cc96cd3e87b723de74e19a35c16","sha256":"e76004a6888fd20eed3dc21e4c3b64b91411fc20e6b9af8dce945f75bf4f1c56","sha512":"bae5534b53ba0d98f4853f2892fdad378a62de6c38a2bf63902a7dabeb81cbb4c5daa28527a7afa3b1f752c93896e112a8a99f412b1f8c7d60ccfab130b7a864","ssdeep":"192:s9Y/R/B7CvP08Yy88uMPZrolzqaLOfIoa2G6t+TUN1QJBG9N6:yMIPz12qKJL","tlshash":"3822a9772a86001a7ad6c72af510ea9437377263d9859f38beec1455df4c3e84cb628c","dom_hash":"domhash1ec1984dba44d962fa5eefb484dbc1b1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sasisa.org/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","fqdn":"sasisa.org","domain":"sasisa.org","tld":"org"},"ip":{"addr":"85.17.28.52","port":0,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-22T00:29:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"sasisa.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sasisa.org","ip":{"addr":"85.17.28.52","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2008-06-10","domain_rank":502253,"first_seen":"2014-03-11T18:44:55Z","last_seen":"2025-11-06T14:03:55.222904Z","alert_count":1,"request_count":1,"received_data":11238,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"f.sasisa.cc","ip":{"addr":"85.17.28.52","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-02-18","domain_rank":0,"first_seen":"2025-12-18T00:29:06.828517Z","last_seen":"2025-12-18T00:29:06.828517Z","alert_count":0,"request_count":8,"received_data":23438,"sent_data":4559,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"goodvibesforus.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-10-23","domain_rank":1412373,"first_seen":"2022-10-24T23:00:46Z","last_seen":"2025-08-17T13:33:22.655785Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":431,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","fqdn":"f.sasisa.cc","domain":"sasisa.cc","tld":"cc"},"ip":{"addr":"85.17.28.52","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"729f282517c955625ce9c57f49fc53de","sha1":"ce926b75ea422ca587a9142e0a8f1e30b1f204fc","sha256":"bcd7e5d9eecbd40369a6ba8fb87a1e07c3b72f4cb9a470dfcda89db4c0793cb4","sha512":"ceebc20485878afc130868908ee2d040d25e86a915c208762156a3b127fb7105bcb0512eee9dbde3ab1044946e891e73a578b4f1b4364045a16132ab8d578ee4","ssdeep":"","tlshash":"7df0f14e342928e151a3b5f733f3450c7812230f9840fc63bd1c844c1f00a51049b6dc","size":505,"data":"","first_seen":"2025-11-06T14:03:56.024833Z","last_seen":"2026-03-24T07:11:26.46299Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","fqdn":"f.sasisa.cc","domain":"sasisa.cc","tld":"cc"},"ip":{"addr":"85.17.28.52","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"144b8abc10d75ab4ae522d980dbf7c62","sha1":"ef08aed59f9647cd07ead70e8bedd030d192fdbb","sha256":"c334857fc75c1c6374e61b7b686bf6396f02d8638a4eeb7dee19a89285a597be","sha512":"ef1b00a41a603624f31b3f94e20baa070d866e09259d370d06be094b915c988d37c95a6ae936f727dc1b4f1c8072ef18678048c3aae84de84d0b070cf40df702","ssdeep":"","tlshash":"4e117b6b2ce250304213b078aa6f95147473a4175809ec197ccdc4d49fa4b6a0f36bac","size":1011,"data":"","first_seen":"2025-11-06T14:03:56.025595Z","last_seen":"2026-03-24T07:11:26.464684Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.sasisa.cc/foto/sandbox%20eval%20code","fqdn":"f.sasisa.cc","domain":"sasisa.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-28T15:22:24.310501Z","times_seen":822453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-28T15:22:24.299092Z","times_seen":820834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sasisa.org/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","fqdn":"sasisa.org","domain":"sasisa.org","tld":"org"},"ip":{"addr":"85.17.28.52","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-18T00:28:44.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sasisa.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 08:50:18 GMT","end":"Tue, 20 Jan 2026 08:50:17 GMT"},"fingerprint":{"sha1":"DC:E6:8D:DA:21:B6:41:EF:E3:CF:CC:0E:63:A6:59:01:1B:2F:A1:8B","sha256":"08:8C:E8:FA:D4:21:18:70:B8:13:D3:FD:B1:24:4E:D6:92:6C:BF:53:87:48:A1:53:4C:FE:5D:08:E6:E8:3C:9D"}}},"request":{"raw":"GET /foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera HTTP/1.1\r\nHost: sasisa.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Thu, 18 Dec 2025 00:28:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera\r\nset-cookie: sid=ts2ge7tlu7do8po7ff3dtvs5un; path=/; domain=.sasisa.org\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10823,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T15:24:19.563648Z","times_seen":14331860,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":122,"dns":34,"connect":27,"send":0,"wait":30,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-18","alert":"Sinkholed","trigger":"sasisa.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","fqdn":"f.sasisa.cc","domain":"sasisa.cc","tld":"cc"},"ip":{"addr":"85.17.28.52","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-18T00:28:44.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sasisa.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 20:39:14 GMT","end":"Tue, 17 Mar 2026 20:39:13 GMT"},"fingerprint":{"sha1":"1A:DD:E3:86:00:4D:2F:FB:8D:AA:F0:3C:E4:41:D7:56:7A:AB:56:04","sha256":"30:6E:7F:EF:9E:FE:25:5E:82:D2:20:7E:2C:68:C6:5B:A9:D4:CF:8E:17:1B:A7:9E:6C:20:65:C5:78:90:17:27"}}},"request":{"raw":"GET /foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera HTTP/1.1\r\nHost: f.sasisa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 18 Dec 2025 00:28:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: sid=v04tkstjl7vtm2s3nh6gs7qbo8; path=/; domain=.sasisa.cc\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nlast-modified: Thu, 18 Dec 2025 00:28:44GMT\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10823,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"XML 1.0 document, Unicode text, UTF-8 text, with very long lines (1153)","md5":"d9b31bc125bdb69b8bba4a1d4a14491e","sha1":"93befd206cc82cd2d5f2860a3d005bc914ec88fa","sha256":"7a9dadc24789e6514c845224c69a4f4f546722a7cf471fc0d0f8b93676512554","sha512":"bfe8f9d1dbc4e43604cd4854aa790d908f06e232342e28bdd4582ea2a4df15e0a22656871838dab358644b75fbed5813040339137eefda01d9810643eb402e62","ssdeep":"192:ctY/R/B7CvP08Yy88bMP4TglzqUe52yxUv6G6tiTUN1QJBG9N6:aMLPA1mqKJL","tlshash":"702298362a95001a7ad6c726f620ea9437377263d9955f38beec1856df4c3e80cb538c","first_seen":"2025-12-18T00:29:08.33008Z","last_seen":"2025-12-18T00:29:08.33008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":91,"dns":14,"connect":23,"send":0,"wait":37,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.sasisa.cc/images/sock.gif","fqdn":"f.sasisa.cc","domain":"sasisa.cc","tld":"cc"},"ip":{"addr":"85.17.28.52","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","date":"2025-12-18T00:28:44.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sasisa.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 20:39:14 GMT","end":"Tue, 17 Mar 2026 20:39:13 GMT"},"fingerprint":{"sha1":"1A:DD:E3:86:00:4D:2F:FB:8D:AA:F0:3C:E4:41:D7:56:7A:AB:56:04","sha256":"30:6E:7F:EF:9E:FE:25:5E:82:D2:20:7E:2C:68:C6:5B:A9:D4:CF:8E:17:1B:A7:9E:6C:20:65:C5:78:90:17:27"}}},"request":{"raw":"GET /images/sock.gif HTTP/1.1\r\nHost: f.sasisa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera\r\nCookie: sid=v04tkstjl7vtm2s3nh6gs7qbo8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 18 Dec 2025 00:28:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1997\r\nlast-modified: Mon, 20 Feb 2023 01:25:46 GMT\r\netag: \"63f2cc1a-7cd\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1997,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 16","md5":"4c784e8b7777138c0010938e51222329","sha1":"3d36937c88ce8fb5c946661e97b1be993b45aab2","sha256":"643152bc3c806ee8a785151209fb5438e2b8b5db086421fd2889b8d6d6a1a093","sha512":"37d9b213807552562853bdecdcddc2fff65ad065a861aea1c4b7991a3711e9a7f7c4d22a4719e5b522a655d1f43ba8bf9bc1bdd7c9395c1bd9b243402357bd7b","ssdeep":"","tlshash":"5e412c16e4e9d751f5bc1372842a0058659c7be432bea73430e13634484c6eafa642fb","first_seen":"2024-12-01T13:23:16.712424Z","last_seen":"2026-03-24T07:11:26.455731Z","times_seen":8,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.sasisa.cc/foto/foto/a1173814/s/128x128_679e297f14f1d3.987510831738418559_679e297f14f236.68517931.jpg","fqdn":"f.sasisa.cc","domain":"sasisa.cc","tld":"cc"},"ip":{"addr":"85.17.28.52","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","date":"2025-12-18T00:28:44.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sasisa.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 20:39:14 GMT","end":"Tue, 17 Mar 2026 20:39:13 GMT"},"fingerprint":{"sha1":"1A:DD:E3:86:00:4D:2F:FB:8D:AA:F0:3C:E4:41:D7:56:7A:AB:56:04","sha256":"30:6E:7F:EF:9E:FE:25:5E:82:D2:20:7E:2C:68:C6:5B:A9:D4:CF:8E:17:1B:A7:9E:6C:20:65:C5:78:90:17:27"}}},"request":{"raw":"GET /foto/foto/a1173814/s/128x128_679e297f14f1d3.987510831738418559_679e297f14f236.68517931.jpg HTTP/1.1\r\nHost: f.sasisa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera\r\nCookie: sid=v04tkstjl7vtm2s3nh6gs7qbo8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 18 Dec 2025 00:28:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3624\r\nlast-modified: Sat, 01 Feb 2025 14:02:39 GMT\r\netag: \"679e297f-e28\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3624,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 128x96, components 3","md5":"ceeb0007c1ce83b0203731aa7397fdeb","sha1":"8b449ff82737cb287843829d74dff05aee11ff2d","sha256":"0fda3dd70ed7dd74dd7cb3d611e416a40b82b3527d5ca7530c89667aefbe2522","sha512":"1cd073c351c65adbe2e7d83c8c06095276681c691111b40884e6b980004773e0d9c9499b96a35e7060807e46ecc1fe0bfbbd972a654786ada88d761233bd188d","ssdeep":"","tlshash":"e0717d9938db17306b02ed3fed0a16cfe67869b5fee1fb1f547d0241c622a145404d48","first_seen":"2025-12-18T00:29:08.332352Z","last_seen":"2025-12-18T00:29:08.332352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.sasisa.cc/foto/img/k.gif","fqdn":"f.sasisa.cc","domain":"sasisa.cc","tld":"cc"},"ip":{"addr":"85.17.28.52","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","date":"2025-12-18T00:28:44.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sasisa.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 20:39:14 GMT","end":"Tue, 17 Mar 2026 20:39:13 GMT"},"fingerprint":{"sha1":"1A:DD:E3:86:00:4D:2F:FB:8D:AA:F0:3C:E4:41:D7:56:7A:AB:56:04","sha256":"30:6E:7F:EF:9E:FE:25:5E:82:D2:20:7E:2C:68:C6:5B:A9:D4:CF:8E:17:1B:A7:9E:6C:20:65:C5:78:90:17:27"}}},"request":{"raw":"GET /foto/img/k.gif HTTP/1.1\r\nHost: f.sasisa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera\r\nCookie: sid=v04tkstjl7vtm2s3nh6gs7qbo8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 18 Dec 2025 00:28:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 157\r\nlast-modified: Mon, 20 Feb 2023 01:24:58 GMT\r\netag: \"63f2cbea-9d\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 14 x 16","md5":"a073bd86c5b1618f315971797138162e","sha1":"d243cceb205f5801a2d5673c8523bb0f041f6077","sha256":"80c81de1b9e3aa212ae0a2c63566252243f32ab8021cb553650f977da0286339","sha512":"ff5798dcd1bc2b45115b8474755aa9ee14f097eb55c3bd712e5c483bfdd9e18d7ac88b05219f8bbe06f316e939b5bad8c5e448f3bd68edccbfa10280c79b405e","ssdeep":"","tlshash":"fbc02b00e4a6c010c006d0705c11c0fe62507ccdd81401473bf0af1fb13c10bd800480","first_seen":"2025-12-18T00:29:08.333446Z","last_seen":"2025-12-18T00:29:08.333446Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.sasisa.cc/foto/img/co.gif","fqdn":"f.sasisa.cc","domain":"sasisa.cc","tld":"cc"},"ip":{"addr":"85.17.28.52","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","date":"2025-12-18T00:28:44.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sasisa.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 20:39:14 GMT","end":"Tue, 17 Mar 2026 20:39:13 GMT"},"fingerprint":{"sha1":"1A:DD:E3:86:00:4D:2F:FB:8D:AA:F0:3C:E4:41:D7:56:7A:AB:56:04","sha256":"30:6E:7F:EF:9E:FE:25:5E:82:D2:20:7E:2C:68:C6:5B:A9:D4:CF:8E:17:1B:A7:9E:6C:20:65:C5:78:90:17:27"}}},"request":{"raw":"GET /foto/img/co.gif HTTP/1.1\r\nHost: f.sasisa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera\r\nCookie: sid=v04tkstjl7vtm2s3nh6gs7qbo8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 18 Dec 2025 00:28:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 57\r\nlast-modified: Mon, 20 Feb 2023 01:24:58 GMT\r\netag: \"63f2cbea-39\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 10 x 10","md5":"a4de0bc1e7f2b89e11a8f3209161659c","sha1":"ec0f0bbcff6de45a840a846b0167ce8477ca2115","sha256":"941143c3cb5927e29ed264bef43e9ff8555691f31ac2af0bf436595eab57f33d","sha512":"96aa1a619141ec90a132c9acc10e827e69977a21409434eba9c084b32dc8f10bb678d9330e94e19d19a10345d4f4c686a932a511c44c485f68df3db21bf7a810","ssdeep":"","tlshash":"18900201fdd1d4a2d431913455ea13907715864106091b511055949c5ced262540b065","first_seen":"2025-12-18T00:29:08.334506Z","last_seen":"2025-12-18T00:29:08.334506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.sasisa.cc/foto/foto/a1173814/s/80x80_679e2972a46358.969482891738418546_679e2972a46394.67486637.jpg","fqdn":"f.sasisa.cc","domain":"sasisa.cc","tld":"cc"},"ip":{"addr":"85.17.28.52","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","date":"2025-12-18T00:28:44.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sasisa.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 20:39:14 GMT","end":"Tue, 17 Mar 2026 20:39:13 GMT"},"fingerprint":{"sha1":"1A:DD:E3:86:00:4D:2F:FB:8D:AA:F0:3C:E4:41:D7:56:7A:AB:56:04","sha256":"30:6E:7F:EF:9E:FE:25:5E:82:D2:20:7E:2C:68:C6:5B:A9:D4:CF:8E:17:1B:A7:9E:6C:20:65:C5:78:90:17:27"}}},"request":{"raw":"GET /foto/foto/a1173814/s/80x80_679e2972a46358.969482891738418546_679e2972a46394.67486637.jpg HTTP/1.1\r\nHost: f.sasisa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera\r\nCookie: sid=v04tkstjl7vtm2s3nh6gs7qbo8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 18 Dec 2025 00:28:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1876\r\nlast-modified: Sat, 01 Feb 2025 14:02:26 GMT\r\netag: \"679e2972-754\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1876,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 80x60, components 3","md5":"a05cea56b9724c1a1cd323eb67805f90","sha1":"8656c32123d2bab1d344bb72ba93add78146d2b2","sha256":"5b9e04f86dcebe1063c04430cf6cf4ebc471da62e3510189de2d8e8b8d132f27","sha512":"dd8f8626b336a97504e7adc98f8ec3271cdf52eafcf004f0f2cccf39a695ae5e05a060f0f8f2e6e4457f7338d4fcf2045f567460aed92a294f9192afc37cdab3","ssdeep":"","tlshash":"47312ba6331007724e72ef7a1ab7a046f0bee8a27e943a0c7e521455cc20ed5a71d44f","first_seen":"2025-12-18T00:29:08.335543Z","last_seen":"2025-12-18T00:29:08.335543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.sasisa.cc/foto/foto/a1173814/s/80x80_679e298d5922e5.499866661738418573_679e298d592329.82544129.jpg","fqdn":"f.sasisa.cc","domain":"sasisa.cc","tld":"cc"},"ip":{"addr":"85.17.28.52","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","date":"2025-12-18T00:28:44.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sasisa.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 20:39:14 GMT","end":"Tue, 17 Mar 2026 20:39:13 GMT"},"fingerprint":{"sha1":"1A:DD:E3:86:00:4D:2F:FB:8D:AA:F0:3C:E4:41:D7:56:7A:AB:56:04","sha256":"30:6E:7F:EF:9E:FE:25:5E:82:D2:20:7E:2C:68:C6:5B:A9:D4:CF:8E:17:1B:A7:9E:6C:20:65:C5:78:90:17:27"}}},"request":{"raw":"GET /foto/foto/a1173814/s/80x80_679e298d5922e5.499866661738418573_679e298d592329.82544129.jpg HTTP/1.1\r\nHost: f.sasisa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera\r\nCookie: sid=v04tkstjl7vtm2s3nh6gs7qbo8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 18 Dec 2025 00:28:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2059\r\nlast-modified: Sat, 01 Feb 2025 14:02:53 GMT\r\netag: \"679e298d-80b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 80x60, components 3","md5":"55928eeebcef4adfa8bdf5a293d55b83","sha1":"454750fd95d7afe18d14df444fbdcd38078f3417","sha256":"8038980e9b32cd9e5f73f0d7b0a42db7322fc7591507a67110aab2285f7235e1","sha512":"403fdfe4e85d60d0a84382616f9cf6921e5b383c4859c8332d5e6fe8589dedf66b33d87273837c33e7ffa7fd77865bb931f0ab2142e8837d431b9af0ddc8ebad","ssdeep":"","tlshash":"3441e626f74653412c92d4fb266891e6fbef6d477d64ab0d2b70a23a000a49b250d68c","first_seen":"2025-12-18T00:29:08.336517Z","last_seen":"2025-12-18T00:29:08.336517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goodvibesforus.com/?re=ge3tmmtfmq5ha3ddf44dqojy","fqdn":"goodvibesforus.com","domain":"goodvibesforus.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","date":"2025-12-18T00:28:44.793Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?re=ge3tmmtfmq5ha3ddf44dqojy HTTP/1.1\r\nHost: goodvibesforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.sasisa.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T15:24:19.563648Z","times_seen":14331860,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.sasisa.cc/favicon.ico","fqdn":"f.sasisa.cc","domain":"sasisa.cc","tld":"cc"},"ip":{"addr":"85.17.28.52","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera","date":"2025-12-18T00:28:44.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sasisa.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 20:39:14 GMT","end":"Tue, 17 Mar 2026 20:39:13 GMT"},"fingerprint":{"sha1":"1A:DD:E3:86:00:4D:2F:FB:8D:AA:F0:3C:E4:41:D7:56:7A:AB:56:04","sha256":"30:6E:7F:EF:9E:FE:25:5E:82:D2:20:7E:2C:68:C6:5B:A9:D4:CF:8E:17:1B:A7:9E:6C:20:65:C5:78:90:17:27"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: f.sasisa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.sasisa.cc/foto/foto.php?fid=8940541\u0026utm_medium=organic\u0026utm_source=yasmartcamera\r\nCookie: sid=v04tkstjl7vtm2s3nh6gs7qbo8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 18 Dec 2025 00:28:44 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 894\r\nlast-modified: Mon, 20 Feb 2023 01:37:23 GMT\r\netag: \"63f2ced3-37e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"3a0d064e4c8c1c5d93e5b63b796a0a4a","sha1":"c67b0c7285cf91065880514887a1f0a667976298","sha256":"795c2d77d19ea8113c2d955546dc73dbd82b44e18818276fb9b71730c34e85a9","sha512":"42bfb3a3f7b838c5359881730ddd7ac7029adaa2e9e3b2b626d5443da44192aee54a29fc1f52d477329ad4754558896637232187358e109ca9bb2366891d454f","ssdeep":"","tlshash":"f61132152e450859c4fc1bfd023bbbe0b05882b8f54462d4e7b7b4170e5ebedd429578","first_seen":"2025-11-06T14:03:56.022534Z","last_seen":"2026-03-24T07:11:26.460903Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
