{"report_id":"c4f0abcd-b88c-4b87-b10b-257d7dc1f59a","version":6,"status":"done","tags":[],"date":"2025-09-21T04:26:41Z","url":{"schema":"http","addr":"1080p.tub4us.top","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"104.21.60.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"title":"Hot Videos 人気動画-HD-VIDEOS@AV4.us"},"submit":{"url":{"schema":"http","addr":"1080p.tub4us.top","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"104.21.60.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T04:26:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":3,"urlquery":0,"analyzer":31}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-21T04:26:09Z","timestamp":1758428769,"ip_dst":{"addr":"104.21.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":35058,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO INFO .moe Domain in TLS SNI","source":"{\"timestamp\":\"2025-09-21T04:26:09.666924+0000\",\"flow_id\":1265462694447945,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":35058,\"dest_ip\":\"104.21.43.90\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2827579,\"rev\":7,\"signature\":\"ETPRO INFO .moe Domain in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_08_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"play.anh.moe\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3507,\"start\":\"2025-09-21T04:26:09.658249+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-21T04:26:12Z","timestamp":1758428772,"ip_dst":{"addr":"8.134.41.213","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.22","port":49092,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-21T04:26:12.010568+0000\",\"flow_id\":546313370568858,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":49092,\"dest_ip\":\"8.134.41.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"mlkjcrm.oss-cn-guangzhou.aliyuncs.com\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":915,\"bytes_toclient\":6610,\"start\":\"2025-09-21T04:26:11.493722+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-21T04:26:12Z","timestamp":1758428772,"ip_dst":{"addr":"8.134.41.213","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.22","port":49106,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-21T04:26:12.260023+0000\",\"flow_id\":1514268002573904,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":49106,\"dest_ip\":\"8.134.41.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"mlkjcrm.oss-cn-guangzhou.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":903,\"bytes_toclient\":3148,\"start\":\"2025-09-21T04:26:11.745040+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"c.amcdn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"awjqxiaokeai.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"awjqxiaokeai.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"img.qianju.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"img.qianju.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"uenxyaomk.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"uenxyaomk.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"uenxyaomk.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"haha888.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"haha888.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.58g.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"img.dochka.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"img.dochka.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.ssnovel.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.ssnovel.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"cacrz.4jpg.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"fixedjs.jtube.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jsjs.4jpg.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"page.phic4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"amoviemedia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"css.4jpg.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"akhwbjyshezaxck.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"akhwbjyshezaxck.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"58g.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"ajyshedfwer.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"ajyshedfwer.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"6b75nd.javdove.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"6b75nd.javdove.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"multicst.com","ip":{"addr":"104.21.94.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":160888,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":73413,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.po-kaki-to.com","ip":{"addr":"172.67.144.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":33483,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":173085,"sent_data":940,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":3691,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":175806,"sent_data":892,"comment":"","tags":null,"fingerprints":null},{"fqdn":"uenxyaomk.buzz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":1,"received_data":0,"sent_data":400,"comment":"","tags":null,"fingerprints":null},{"fqdn":"media.crazyshit.com","ip":{"addr":"45.133.44.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":2942510,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":1024279,"sent_data":1832,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.dochka.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":2,"received_data":0,"sent_data":902,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i0.wp.com","ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":841,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":226340,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.syougakuseijridol.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":6055036,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":0,"sent_data":1379,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.24-video.com","ip":{"addr":"51.222.104.21","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":5086501,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":27062,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img2.javdove.com","ip":{"addr":"172.67.199.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4994063,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":19372,"sent_data":1422,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sitemaps.brettspizzeria.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4372707,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":413,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.effedupmovies.com","ip":{"addr":"104.21.92.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":121897,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":30119,"sent_data":1804,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.3.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"cdn2.voyeurweb.com","ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":5824317,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":746,"sent_data":1050,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"two-elfs.com","ip":{"addr":"172.67.149.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":465028,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":173234,"sent_data":1244,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cav102.com","ip":{"addr":"45.145.72.132","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":211254,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":4870,"sent_data":1336,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cataphractarii.z00.monster","ip":{"addr":"51.79.99.71","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":16687,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fmtu.sltusl.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":10,"received_data":0,"sent_data":4840,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.blacktowhite.net","ip":{"addr":"192.243.63.82","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":120301,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":136924,"sent_data":951,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1678,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":223601,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"uqetyzxa.com","ip":{"addr":"208.64.217.23","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":169320,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":21993,"sent_data":1784,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.javdove.com","ip":{"addr":"172.67.199.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":127831,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":580,"sent_data":401,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sexsex61.com","ip":{"addr":"27.124.42.183","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":155642,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":4544,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"east-asia.uk","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":2102308,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":398,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rule34xyz.b-cdn.net","ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":1710936,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":79147,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"cdn.fastmediaing.my","ip":{"addr":"172.67.195.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4577577,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":52881,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.hdporns92.com","ip":{"addr":"45.194.140.13","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":15362,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.9188porn.xyz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3270384,"first_seen":"No data","last_seen":"No data","alert_count":20,"request_count":10,"received_data":0,"sent_data":4858,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.58g.top","ip":{"addr":"104.21.23.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":2142,"sent_data":397,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"twitter.yandex.com.tr","ip":{"addr":"87.250.255.11","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":1612077,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":3046,"sent_data":443,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fav-hentai.com","ip":{"addr":"104.18.29.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":75945,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":30811,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"cataphractarii.com","ip":{"addr":"104.21.38.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":293882,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":702,"sent_data":404,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.9188porn.com","ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3479355,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":9,"received_data":6551,"sent_data":4206,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"filtradas.com","ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"domain_registered":"unknown","domain_rank":184383,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":14,"received_data":834011,"sent_data":6981,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"haha888.xyz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":3,"received_data":0,"sent_data":1273,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.sexsex2.com","ip":{"addr":"27.124.42.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":4970360,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":4544,"sent_data":401,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dochka.org","ip":{"addr":"104.21.72.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":463502,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":775,"sent_data":396,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.nsk.kp.ru","ip":{"addr":"95.181.181.82","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":1304770,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1180,"sent_data":399,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"rule34vault.com","ip":{"addr":"104.21.39.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":59631,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":22289,"sent_data":401,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.twi-videos.net","ip":{"addr":"172.67.181.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3757802,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":743,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sex-studentki.live","ip":{"addr":"172.66.147.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":9449,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":164046,"sent_data":909,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.apian088.sbs","ip":{"addr":"104.238.221.35","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":4180399,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":36055,"sent_data":1849,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"c749a9571b.mjedge.net","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":5682656,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":104746,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cdn2.geefap.com","ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":4560962,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":66814,"sent_data":1434,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ansuko.net","ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":87799,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":587259,"sent_data":2802,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sexsex2.com","ip":{"addr":"202.95.16.31","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":229935,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":4544,"sent_data":397,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xvideosrei.com","ip":{"addr":"192.124.249.3","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":80835,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":534,"sent_data":1338,"comment":"","tags":null,"fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}]},{"fqdn":"159i.net","ip":{"addr":"172.67.200.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":162531,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":110757,"sent_data":2698,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"sexsex55.com","ip":{"addr":"202.95.16.31","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":409653,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":4544,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":283,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":283429,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"chezcathy.com","ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":55670,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":52490,"sent_data":2629,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"mlkjcrm.oss-cn-guangzhou.aliyuncs.com","ip":{"addr":"8.134.41.213","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":23145,"sent_data":1386,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"pic.dllzjd.cn","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3374913,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":471,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pornolomka5.com","ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":1559639,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":149,"sent_data":401,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.redd.tube","ip":{"addr":"172.67.72.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":13819,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":1486,"sent_data":823,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"eb.spreee.pro","ip":{"addr":"172.67.204.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":6146683,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":582,"sent_data":399,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"treeyork.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":453370,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":0,"sent_data":880,"comment":"","tags":null,"fingerprints":null},{"fqdn":"videopreview.chezcathy.com","ip":{"addr":"57.129.130.31","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":4588502,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":12463,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"img.tphsck.com","ip":{"addr":"185.34.144.163","port":443,"asn":7488,"as":"CNServer LLC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":284,"sent_data":966,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.sesenovel.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":403,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ljcdn.kd-pic6669.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4584013,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":0,"sent_data":908,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.youtube.com","ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":6546,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":21796,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s10.stc.yc.kpcdn.net","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":2115828,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":138699,"sent_data":636,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"akhwbjyshezaxck.buzz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":645482,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":0,"sent_data":442,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sex18.photos","ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":225743,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":224,"sent_data":398,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"baraag.net","ip":{"addr":"185.178.208.171","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":80004,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":9,"received_data":15372,"sent_data":3936,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"img.redwap-cdn.com","ip":{"addr":"172.67.128.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3022826,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":14399,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"porno-incest.tv","ip":{"addr":"185.162.11.82","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":434120,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":396028,"sent_data":849,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pornolomka2.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":230553,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":0,"sent_data":1912,"comment":"","tags":null,"fingerprints":null},{"fqdn":"asianpornxbb.sbs","ip":{"addr":"104.21.23.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":195805,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":359935,"sent_data":1602,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sorkab.com","ip":{"addr":"104.21.87.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":60433,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":48092,"sent_data":891,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.newasiaporn.com","ip":{"addr":"192.243.50.105","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"unknown","domain_rank":2680468,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":172,"sent_data":405,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.qianju.cc","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4763928,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":2,"received_data":0,"sent_data":964,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vagina.nl","ip":{"addr":"217.22.19.82","port":443,"asn":42567,"as":"Mojohost B.v.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":86473,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1807,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"images-z.embed-player.space","ip":{"addr":"37.221.208.213","port":443,"asn":41075,"as":"ATW Internet Kft.","country":"Hungary","country_code":"HU"},"domain_registered":"unknown","domain_rank":1618632,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":16989,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.tnaflix.com","ip":{"addr":"156.146.33.141","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":508372,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":19192,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"18j.tv","ip":{"addr":"172.67.73.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":25816,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":702,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sidesteamroll.com","ip":{"addr":"157.90.33.78","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":472,"sent_data":402,"comment":"","tags":null,"fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}]},{"fqdn":"m.myspree.club","ip":{"addr":"104.21.64.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":586,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ljcdn.ddljsytt.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3271371,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":0,"sent_data":904,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.ssnovel.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4005334,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":2,"received_data":0,"sent_data":922,"comment":"","tags":null,"fingerprints":null},{"fqdn":"de.chezcathy.com","ip":{"addr":"138.199.37.230","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":5293391,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":2395,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"24-video.com","ip":{"addr":"172.67.173.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":184653,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":615,"sent_data":398,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajyshedfwer.buzz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3589906,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":0,"sent_data":402,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn5-thumbs.motherlessmedia.com","ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":905009,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":19247,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"jsjs.4jpg.top","ip":{"addr":"172.67.211.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3562357,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":762,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"page.phic4.top","ip":{"addr":"172.67.190.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4536559,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":1406,"sent_data":824,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"images.embed-player.space","ip":{"addr":"51.77.85.40","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":3894588,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":21346,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fapix.porn","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":207296,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":48049,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.twi-dl.net","ip":{"addr":"172.67.152.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":124394,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":745,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"amoviemedia.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":445393,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":0,"sent_data":437,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.missvid.com","ip":{"addr":"172.83.152.9","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":4538635,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":7506,"sent_data":401,"comment":"","tags":null,"fingerprints":null},{"fqdn":"st.peppahub.com","ip":{"addr":"167.235.2.93","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":16938,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"6b75nd.javdove.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":0,"sent_data":404,"comment":"","tags":null,"fingerprints":null},{"fqdn":"awjqxiaokeai.buzz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":225783,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":0,"sent_data":403,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rrx1.com","ip":{"addr":"172.67.132.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":248909,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":95573,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn5.porno.supply","ip":{"addr":"172.67.217.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":43150,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"celebrities-small.porndig.com","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":4941455,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":75275,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.voyeurweb.com","ip":{"addr":"65.108.75.120","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"unknown","domain_rank":128839,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":263,"sent_data":403,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"www.w3schools.com","ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":2135,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":24014,"sent_data":435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"image.beckybelike.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3852212,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ak-br-pic.kwai.net","ip":{"addr":"2.21.8.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"unknown","domain_rank":810706,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":55620,"sent_data":1678,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"r34xyz.b-cdn.net","ip":{"addr":"89.187.169.47","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":1550997,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":104172,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"pornoperso.com","ip":{"addr":"104.21.41.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":25644,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":29191,"sent_data":897,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"oedy9.com","ip":{"addr":"172.83.152.8","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":150266,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":7506,"sent_data":431,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pornodrochka.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":235403,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":402,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.livegore.com","ip":{"addr":"45.14.225.17","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":33870,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":27357,"sent_data":918,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.0.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"rule34.xyz","ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":25368,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":22281,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.pornhat.com","ip":{"addr":"185.240.28.22","port":443,"asn":56898,"as":"Private Host BV","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":973369,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":290,"sent_data":968,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pornolomka.com","ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":243943,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":249,"sent_data":400,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ugzaawjque.buzz","ip":{"addr":"54.215.31.113","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":5176785,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":336,"sent_data":401,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1222,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":11703,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"avatars.mds.yandex.net","ip":{"addr":"87.250.247.182","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":37773,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":51655,"sent_data":1372,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"m2.24-video.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1146439,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":592,"sent_data":401,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.cdn2025.life","ip":{"addr":"107.167.21.106","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":2977506,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":78718,"sent_data":958,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cacrz.4jpg.top","ip":{"addr":"172.67.211.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4780815,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":18890,"sent_data":834,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.bad.news","ip":{"addr":"172.67.73.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3049996,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":208659,"sent_data":3047,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"css.4jpg.top","ip":{"addr":"172.67.211.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1675736,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":4918,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.ikikiv.uk","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":2900058,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":399,"comment":"","tags":null,"fingerprints":null},{"fqdn":"motherless.com","ip":{"addr":"185.107.81.233","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":1728,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1500,"sent_data":400,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"c.amcdn.top","ip":{"addr":"104.21.53.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":34405,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"play.anh.moe","ip":{"addr":"104.21.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1995834,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":903,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.peppahub.com","ip":{"addr":"185.197.163.38","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":170,"sent_data":402,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pornodrochka.club","ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":202390,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":120470,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mc.webvisor.org","ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":99131,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":4786,"sent_data":3332,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sexsex10.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":688235,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"58g.top","ip":{"addr":"104.21.23.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":198270,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":2133,"sent_data":393,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"en.chezcathy.com","ip":{"addr":"185.111.111.160","port":443,"asn":212238,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":899677,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":2251,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"str1.sextvx.com","ip":{"addr":"195.154.199.74","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":4783078,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":296,"sent_data":1034,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.aosikaimge.com","ip":{"addr":"64.112.78.82","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":3184584,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":31191,"sent_data":1808,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fixedjs.jtube.top","ip":{"addr":"172.67.159.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3735676,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":9453,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.aisan-porn.org","ip":{"addr":"192.243.50.111","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"unknown","domain_rank":5292813,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":172,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sbzytpimg1.com","ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":160397,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":26,"received_data":1859402,"sent_data":12688,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdntube.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":1905183,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":81205,"sent_data":2898,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"www.kwai.com","ip":{"addr":"95.101.11.138","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":13387,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":3691,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"missvid.com","ip":{"addr":"172.83.152.7","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":151886,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":7506,"sent_data":397,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fqjpg4.top","ip":{"addr":"204.188.235.18","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":162173,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":466,"sent_data":960,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.sexsex61.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3526336,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":402,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i1.wp.com","ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":44421,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":109744,"sent_data":990,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.imyyds.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":400,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-21T04:26:09Z","timestamp":1758428769,"ip_dst":{"addr":"104.21.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":35058,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO INFO .moe Domain in TLS SNI","source":"{\"timestamp\":\"2025-09-21T04:26:09.666924+0000\",\"flow_id\":1265462694447945,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":35058,\"dest_ip\":\"104.21.43.90\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2827579,\"rev\":7,\"signature\":\"ETPRO INFO .moe Domain in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_08_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"play.anh.moe\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3507,\"start\":\"2025-09-21T04:26:09.658249+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-21T04:26:12Z","timestamp":1758428772,"ip_dst":{"addr":"8.134.41.213","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.22","port":49092,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-21T04:26:12.010568+0000\",\"flow_id\":546313370568858,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":49092,\"dest_ip\":\"8.134.41.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"mlkjcrm.oss-cn-guangzhou.aliyuncs.com\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":915,\"bytes_toclient\":6610,\"start\":\"2025-09-21T04:26:11.493722+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-21T04:26:12Z","timestamp":1758428772,"ip_dst":{"addr":"8.134.41.213","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.22","port":49106,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-21T04:26:12.260023+0000\",\"flow_id\":1514268002573904,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":49106,\"dest_ip\":\"8.134.41.213\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"mlkjcrm.oss-cn-guangzhou.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":903,\"bytes_toclient\":3148,\"start\":\"2025-09-21T04:26:11.745040+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fbd21f70f5847e9eb8a4aec990805d","sha1":"0a917af54252191f940aaaee2a59a4c57ec57d63","sha256":"fc6e51ce9bdfb3bbcdb66313ee22ebd9759582286b5fee17c201d6a912866595","sha512":"b2056ebd1aea0ac2c14a2fb727b38e2b1d332d5fef12155b366157409047fc3a693753c02181ec7e8e3b55627307a5f2b4461bcbb696eb0a31d2c7e906fe2c46","ssdeep":"3072:a7p41TRRo6vx04QUHyh3Ua3mfplU1TS0BIl6zGSuanWjQKbNuxxr62g:a7m1T0r4zHyhsfp+pSoOSJnWVcxxlg","tlshash":"e524d7d936927462937334b4a02f410f72be78a6f10c8958f189d9d93e789ac5237f6c","size":222462,"data":"","first_seen":"2025-09-19T20:52:30.271621Z","last_seen":"2025-10-03T16:09:40.695061Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.jtube.top/?vidjs=51qxezx","fqdn":"fixedjs.jtube.top","domain":"jtube.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4effb8967c384e9ada36392f3dee91af","sha1":"c665f6f602bb7ef773018a9bdc9f79f1f1e7823f","sha256":"4bfca31bb9f82212b8f18cb6c8f0db6d921cfe0b2443231c5a8e59b00876ae6f","sha512":"6578c324320bb904d4fc9fdbb8de1b0a6326c533ab555486a4f7087ac25f2745da0b42abd20cc392fc3a39efa327b0d53be7d25cd55f0e2b6e949214890dae04","ssdeep":"1536:yMJTUxbKOOaZ8JKJXg2ns+VaPz4nWITNNYl2xGSKLGTEjT7idQomJUJ+LjAJLlp/:PUxbKLzBPQWjYGSKLGkTG6oKLyT8K7","tlshash":"e77395bb725d502844e106a769714244fc2be637ad91d290f96c2c306f34e2a99f7fec","size":76891,"data":"","first_seen":"2025-05-02T17:12:40.779892Z","last_seen":"2025-10-16T13:33:11.942835Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-04T03:31:35.287114Z","times_seen":118096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.4jpg.top/index.php?js=av4\u0026advertisement\u0026","fqdn":"jsjs.4jpg.top","domain":"4jpg.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"966453bdf4c6c2237f510492f991ef81","sha1":"b4b4ad9290ef6dc5a9c674e325a7182527342881","sha256":"acf6d643c33eb24bdc5c71b58711a7aa83e800819ad0e541890a60651e7147bc","sha512":"216e4e6a977ee7f8262b680932d5e0842581550505821a345cf25c4a4744d98cc12b33f6db9adc377c6dcec7450150fae280555f71c2006f64e9f179b1fd83bf","ssdeep":"3072:mhVwyzHrldnRNU/kV/wtiv414EOtsCtJNSKDm+VHG4QNx:SmyzHJ5RNU/kmivNK+VHG4QNx","tlshash":"f814d8f73608502951f312a78a768648f833a02b99816884fd1c6d751f78e7f196affc","size":190979,"data":"","first_seen":"2025-09-21T04:28:54.457156Z","last_seen":"2025-09-23T07:08:18.987525Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"6a6d49c6c2ae70af7aaf37b59e1992be","sha1":"7ec9c0209de4ee75d15551de5b41d72ef95a53d2","sha256":"01cad962eb3c779b21c51c5b10914e8f949d1c08ea965e804a60b5882846833d","sha512":"e65a14ab5a1147e6103f4f6f7b703f5d94c4d06887a51a1ec6ce33769227d9e8636b88c1d3523e3a24523bcd9896f4020be259edcd7249bf8c58ecf8ce74d1a9","ssdeep":"","tlshash":"44110000e2208a28002028332800020800020000c08008008002002000208030ea000a","size":958,"data":"","first_seen":"2025-03-21T10:58:41.402631Z","last_seen":"2025-11-24T03:08:53.460613Z","times_seen":537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.4jpg.top/index.php?js=very","fqdn":"jsjs.4jpg.top","domain":"4jpg.top","tld":"top"},"ip":{"addr":"172.67.211.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77542f8a3ada1bb8b45eb9139c5e69ef","sha1":"08556fa802dce18bec90fc57d62c7caaa4dbbdd0","sha256":"4a12c40c3eb9ed0e055519dbd5be4cb7e88ee707739484aa38e3e3284c0bdc46","sha512":"6b9938d1d6ec6dc835bab5a041396050d45888f323b9e7e4df78254d280e054bf4ecb8f296e5d9dad8e9c6d8a02511f526e41fa305aaa78c5fa45168d9981358","ssdeep":"","tlshash":"cda01210f004c43815841428c0e6074617c990cc86c3170149402b0744367d56202060","size":82,"data":"","first_seen":"2024-04-16T15:37:11Z","last_seen":"2025-10-17T05:03:07.441404Z","times_seen":1803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4b936eab4235f662d4eb756534d69d7","sha1":"4ee18cb14eaf40e117a19a7f86dcefe6291bc0cf","sha256":"f7650ed40588ee2d1128869afc47866ee4eb09d4860ce1c3e07c9860b7242d33","sha512":"8ab68f0f71a5ed1bfef35dbdad985867b7695f46cd03e3d3bbf2ebe8de35b5a95638f5fdb41fdd52b85ecca95cbcb4a341f6fa560f1cb6a39a2026e22a9af10c","ssdeep":"","tlshash":"0260003c003f00030cc03c0000c0c000c000003c000303f00f030000000003030cc00c","size":12,"data":"","first_seen":"2023-03-07T12:07:12Z","last_seen":"2026-04-03T22:52:06.981677Z","times_seen":2305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b92303a1cb08e00253e7879d304ee26","sha1":"68bdd0c37dddd5312507918516eaa994a1a1cb93","sha256":"7f10c6dc85b21ab592994c008eea9b75e836674d27bef1d026c511b4fb158432","sha512":"ea194370faf1c720d260f547d126b2beb99385dbbb29af6d954059e7bd3e622bf4040ad7731eaffea192c45551bf8816b8ba85ba40ef1a5ea1edae09e4c770e7","ssdeep":"","tlshash":"e7e0c035342d010202170260ac772a6a743dea750fc060b0d23825787684cb661596fd","size":353,"data":"","first_seen":"2024-05-18T10:55:44Z","last_seen":"2026-04-03T22:52:06.982617Z","times_seen":1351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"264d10031939cccbe6ccacad85d05572","sha1":"6ba289e4515dc98f790c54f154c41f5026e65a3d","sha256":"ca71ec20421522e662c56569f6b1de4a34668cac9465c0dbb28f347952399469","sha512":"4fa8a2033fcbfff126915701936d4656d394f6f3ad7c449f202223b455db9e60555ec46b87bdc3f12d9678610cd9feb23c26efc94d008a4b68df71e12d33ec79","ssdeep":"","tlshash":"558000e0e280a0ba00f2a20ca2002020082ac2280e83e3828c2aa0cc08008f38aeba00","size":34,"data":"","first_seen":"2025-02-08T03:33:08.473479Z","last_seen":"2026-03-29T10:32:52.1512Z","times_seen":495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea77f824de2ef57acb12e7cb6596365e","sha1":"10bad0dbdf30a0471c2c786b349daeb1dd19180e","sha256":"2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c","sha512":"cf69dd76334b7318c829868da8a7e9c2097ef261555388132fc69f95d42e91420e2988056c3d93c830b20059422ae5a82e1109e3dce9127ccb0e23cc5ca27591","ssdeep":"192:N0rZbTPe+fl9SKRGyFgkw+wi+FrZJqbzr+5rA7wbUCzebIkm:N09voK7gzi+FrZJqbzrarAyUX5m","tlshash":"7a22f8b33133fd9f8fba085ac61d61045c7dbc6f4aa94091bb0884e86af4558ead5d34","size":10687,"data":"","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-04-03T22:52:06.902225Z","times_seen":2338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-04T03:31:35.287114Z","times_seen":118096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-620120-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c428836a4d9b053c36f81e6448e26b82","sha1":"5c2ebd44c3326396b6cdd97b360096f0b1ef02ac","sha256":"7395bc1b6c02e9f1a4e49d4ed98f58fe466f8c08c1ca98a3500782fec5c2965e","sha512":"944b29ef798f8552b351b7338620f1c425864ba93cebdce8a758f9e2fd1b9aea8964b80e16bdf2e5552c0e5ed6c54695858f16047cda8b8d97c13186c3598b91","ssdeep":"","tlshash":"1911ef6b35ca3873e949936f82876b4d4efe513365453d9499ae18c041b007e5221467","size":1000,"data":"","first_seen":"2025-09-21T04:28:54.463411Z","last_seen":"2025-09-21T04:28:54.463411Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fastmediaing.my/sdk/p/?zid=9801","fqdn":"cdn.fastmediaing.my","domain":"fastmediaing.my","tld":"my"},"ip":{"addr":"172.67.195.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73335bffb57f2284842bd961d9dd6e39","sha1":"b4cc90981c025d631eba179c2949ef6c0a5d4367","sha256":"5d5f0a627eefc44d1819fbc1bbead4afd05d0bd6e360be747eda438f7fcfeb8c","sha512":"ec5beb3f1150e428e4e3d911cb87239cea01a6f0f87dec33f55906dce9011ccb09d89839543b610d80550fa202a7a0dacc1642c0062f39930ddc3c207dbb5382","ssdeep":"768:AgEZCGdaxWGkFNU6SmrvpgIzTFwu/P5zOLQNO7ntsTmNKxy4TeGZ64WNI/z4qqHP:EZCGgmyu/P5qmHLW8EgcR","tlshash":"ea3395883ed06c9813d75f7ab32fa4d4e0664d5e2e84488fe215fd6063e521feab5630","size":52284,"data":"","first_seen":"2025-09-21T04:28:54.437685Z","last_seen":"2025-09-21T04:28:54.437685Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"13b29d7aeaa1d827a9a3feeb39148a43","sha1":"da2040ef13a2d1ce62b0eef9c6ced0fe14f66b28","sha256":"d2d18329527d4d7d4acda028f92281274ac2a08bd840af1c0480620582f98338","sha512":"86dc2b9ccd6cda65753b62b83dda93aabd9272931c1cd9bae1a56ccb607d7de074a8b9873c3a91b69479abf9fb911a4e10b47e0ae7f9cd242d638ce732869c53","ssdeep":"","tlshash":"466000003333000030c00c03c0000c00cf0c00cc000030003c030c00303000030c33c3","size":14,"data":"","first_seen":"2023-03-07T12:07:12Z","last_seen":"2026-04-03T22:52:06.991651Z","times_seen":1772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1080p.tub4us.top/","fqdn":"1080p.tub4us.top","domain":"tub4us.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"2badd01f80cd03eb7ffce90487ab3f71","sha1":"1d0af7cc184466c7d86216085ea60242daeb1eb4","sha256":"e8f6c4dca8b7093bad96494bef55525265ce366c13dc6f76d9358cca8ee182d4","sha512":"ec9d7c3fe33550482bf70ec70ab0f2bb4c989ce096f4744d2e29646fae993113711dcf2c447e743ce4d422299d5b5155561522571a5b3c617d138ea55299078c","ssdeep":"","tlshash":"0b900410c47007103004550cc47573570531430d5f45171c0f10d4d3f5cf110553014c","size":43,"data":"","first_seen":"2023-03-07T12:07:12Z","last_seen":"2026-04-03T22:52:06.99386Z","times_seen":2352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"edc24b7d2fc7536422daee6621435edf","sha1":"71fd4875b509449d820e6a3dd7d83e5f6c31fac8","sha256":"ec599569faa2feb73e0954dcb1f0f7ac5ba6d49ad50d17d3932506608b86a2fc","sha512":"04c6206b3bc1bac7456e96da9d1c58b9a9173e86ff91e8c94fbcd1088b011b5660519419f7971fae6370e8f281951c046c3539ea74a00f7b29830311e0174b34","ssdeep":"","tlshash":"c79002532d0494c2214558c564a0a80f9411644a58a4869688a5051161082ec0842500","size":55,"data":"","first_seen":"2024-04-16T15:37:12Z","last_seen":"2026-04-03T22:52:06.994562Z","times_seen":2323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8da66cae5fc09ad0ad54710cd4960dbd","sha1":"01ef404d9c252491d6f0cd6900cce145d4b76db1","sha256":"90b1ab53462f9b18c6a0d06704f07055e834c86239bdc87a3708514e9a6b6762","sha512":"5d4f175963755b790e21d7765434cab11676f9d02d4d9fa2885c05dbb2dd665ec871d93e3b7d9f50f79de7ed991f8815f7e6dc1bf82f9b1c70c8d4becf28e953","ssdeep":"","tlshash":"c1b0124b1d0c882f25319c40a552647f0072f0263510caee84b40120dc302cc4420400","size":88,"data":"","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-04-03T22:52:06.999917Z","times_seen":2422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"33e50c65bc34e7205dd72147375dd7ee","sha1":"45d7704eefa9421415ddfe589dba26be6f3e0a1e","sha256":"f17654210f6b478323ef0f08d7591e4844f6c6d9c2e00672cbc8b7d211a0d688","sha512":"18656d1462e7e19b5872d2c6f52641ba01c64fa4bba62fe302f4e420f5a75c87088aca6e13f60cbbb18b8970154765e2a0aaa920c7d04e487730e421171a4f38","ssdeep":"","tlshash":"81d0a76b0c1ff453862052e8d053601cc08ed01d93e4cd5380c384716244aea066d819","size":228,"data":"","first_seen":"2024-11-18T15:29:42.20345Z","last_seen":"2025-11-13T10:13:36.984718Z","times_seen":682,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"01dcb251aa87ce0733fea1fc0ae53b1e","sha1":"2d5f366d847815daf4dfec72a13666de040e10ae","sha256":"2f5798bfde28f406058c5b99f53885dee140638bf4edc41f2c98efda28655fd3","sha512":"5b2678bbc155529c465accca49946b7abd5fae5a9857d506217a87c70275984fb20e70adc39e47087d1b87e8da71842b64cc3cddb961a81b571cb590c6d6aaed","ssdeep":"","tlshash":"3e8000080c00a80aa8300280ea80e008caca228320bb8a83088800022000a2020aa02a","size":29,"data":"","first_seen":"2025-09-09T18:47:24.546196Z","last_seen":"2025-11-06T02:12:29.173571Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"fav-hentai.com/wp-content/uploads/2024/10/63467c96d9b6b2c5a32ef8fe1a74f4af.jpg","fqdn":"fav-hentai.com","domain":"fav-hentai.com","tld":"com"},"ip":{"addr":"104.18.29.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fav-hentai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Jul 2025 02:29:41 GMT","end":"Fri, 24 Oct 2025 03:28:48 GMT"},"fingerprint":{"sha1":"5F:AC:23:6A:3A:A1:DA:76:ED:4E:10:74:F9:6B:F5:F7:A2:88:90:69","sha256":"2A:A9:FA:F7:46:E1:06:D6:C8:44:1E:6B:E9:6D:E9:C3:A3:91:BC:0F:30:57:97:AA:B3:33:FD:7F:A1:F7:FE:99"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/63467c96d9b6b2c5a32ef8fe1a74f4af.jpg HTTP/1.1\r\nHost: fav-hentai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30012\r\ncf-ray: 9826cd645fac1525-OSL\r\ncache-control: public, max-age=31535999\r\nexpires: Mon, 21 Sep 2026 04:26:04 GMT\r\nlast-modified: Tue, 22 Oct 2024 00:16:30 GMT\r\naccept-ranges: bytes\r\nvary: User-Agent,User-Agent,Accept, Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":30012,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x405, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6b905e4fbac1067d9b9f7158a6ec8b1c","sha1":"e633cb128bc5d9b0de249db0e7c2b4163f9fd7d4","sha256":"952b271e118cae3e8fc8da189d4fadb61655c88d52d0490861c4dd06b3b0e18a","sha512":"a00880b8f6a8e0045bf8aefcc4deeeb4b05633e14e521e1841d90b5e15732f34bf388112b6ce3dd1ec97d629d59f39730465b38693e8cc24f86552f7bfa4f991","ssdeep":"768:Bo7nqDJiv6jNtk3aJ3+voSSnbTjPe3Dg8g:Bo7nmJtcWIg8g","tlshash":"00d2f19521f20e76e2b13a4d59bf15d64ed40943dd0b77d9eecb94880f81289da13308","first_seen":"2025-06-28T13:21:43.887595Z","last_seen":"2025-09-21T04:28:54.284465Z","times_seen":13,"resource_available":false,"data":null}},"time_used":2176,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":538,"receive":1,"ssl":1633},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"porno-incest.tv/video/2019/jan/91.webp","fqdn":"porno-incest.tv","domain":"porno-incest.tv","tld":"tv"},"ip":{"addr":"185.162.11.82","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"porno-incest.tv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:22:51 GMT","end":"Fri, 28 Nov 2025 23:22:50 GMT"},"fingerprint":{"sha1":"24:58:15:A7:D3:D6:E9:53:E6:45:62:29:F4:8C:DB:E3:49:74:C2:11","sha256":"E1:FB:35:14:2E:4C:4A:D0:F2:35:BB:11:6B:67:35:10:89:12:11:D2:28:36:86:71:FD:62:5F:D3:F3:7C:49:D6"}}},"request":{"raw":"GET /video/2019/jan/91.webp HTTP/1.1\r\nHost: porno-incest.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Length: 22968\r\nConnection: keep-alive\r\nLast-Modified: Wed, 11 Mar 2020 09:33:46 GMT\r\nETag: \"59b8-5a090eed8671d\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=9720000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"491b6b44917b85ce7f0b6b684241a618","sha1":"72e7f7429af9f824ea6e3591c743ad3f7d691f4f","sha256":"87708ff2cca8907063557063b52f4864ef1ffff3b0b3c740a50bfc2251c2a675","sha512":"f1ce557a6760003ef6c30eef2e6609bb86fbef3cf85605392014003a92aa63f1a5d5b5e03f61ed99abc7006b4543a8667aa71edbb2f5159afc3356903b91f49c","ssdeep":"384:JaEp1p+MbbA39PsEYfKHAFUXEGbaqmBeuEYS4SMc6padHBOgn41i:Ja09PAF3wKgFjq2REvMcIo8A","tlshash":"0da2e0e4b70904bae35e83f1679d5e2632c2b9f8912593d136019d19d35828ea393ee8","first_seen":"2025-07-08T01:24:13.129682Z","last_seen":"2026-01-15T02:29:14.834598Z","times_seen":40,"resource_available":false,"data":null}},"time_used":1671,"timings":{"blocked":-1,"dns":29,"connect":21,"send":0,"wait":20,"receive":18,"ssl":1577},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmtu.sltusl.com/upload/vod/20220903-4/a7c6645f79837c57ec91245891ef329c.jpg","fqdn":"fmtu.sltusl.com","domain":"sltusl.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.293Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20220903-4/a7c6645f79837c57ec91245891ef329c.jpg HTTP/1.1\r\nHost: fmtu.sltusl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":105,"dns":43,"connect":64,"send":0,"wait":0,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"str1.sextvx.com/6/6/7/0/0/6670001/screenshots_240x180/9-nude-beauty-her-juicy-pussy-a-fingering-fantasy.jpg","fqdn":"str1.sextvx.com","domain":"sextvx.com","tld":"com"},"ip":{"addr":"195.154.199.74","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"str1.sextvx.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 19:17:10 GMT","end":"Sat, 01 Nov 2025 19:17:09 GMT"},"fingerprint":{"sha1":"39:46:6B:E4:12:C9:79:65:80:06:D9:AE:AE:C0:58:7B:2C:DF:57:AE","sha256":"C4:28:B5:E0:29:39:19:85:93:78:FC:46:D9:36:CE:98:0E:8B:98:B2:EE:BD:51:47:98:C5:75:7A:AB:AE:95:2E"}}},"request":{"raw":"GET /6/6/7/0/0/6670001/screenshots_240x180/9-nude-beauty-her-juicy-pussy-a-fingering-fantasy.jpg HTTP/1.1\r\nHost: str1.sextvx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:07 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka2.com/uploads/posts/2022-07/medium/1657183020_00-01-32.jpg","fqdn":"pornolomka2.com","domain":"pornolomka2.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.711Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/posts/2022-07/medium/1657183020_00-01-32.jpg HTTP/1.1\r\nHost: pornolomka2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.effedupmovies.com/wp-content/uploads/2024/09/justthewind.jpg","fqdn":"www.effedupmovies.com","domain":"effedupmovies.com","tld":"com"},"ip":{"addr":"104.21.92.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effedupmovies.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 17:38:37 GMT","end":"Fri, 19 Dec 2025 18:02:54 GMT"},"fingerprint":{"sha1":"82:CE:B8:3B:23:8D:F5:3E:91:F6:66:8B:F0:81:55:64:3E:05:09:AA","sha256":"8F:98:21:23:63:91:0D:45:BF:F7:30:FA:08:BA:EF:CA:67:21:BD:97:3B:69:04:A0:56:DE:7B:7B:7D:FE:C8:37"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/justthewind.jpg HTTP/1.1\r\nHost: www.effedupmovies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 12890\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Sep 2025 18:16:39 GMT\r\netag: \"68ceef87-325a\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-protocol: HTTP/2.0\r\nx-request-id: 1a81ebf58daaa1501ae29e47d07de662\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lTjCqivgp93ipG0Qm%2F5ESfDvtribFw3O1MP9cNZviQvCMADovq0GhrWDVNIw4jwY2oycQnKIUEylw1zJ69lh90NRmoistnFzdsaWTcfKuVBSNnw%3D\"}]}\r\ncf-ray: 9826cd6a6c4356be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":12890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"ab96da12d8312559415480d1f3036eb0","sha1":"1d014a2419e02827bd13334af29578b1c9b4d6bf","sha256":"1cca498904b87c8b14e4100203f31d6bd9b9cac47da3b99ec80f6042c91b47f9","sha512":"4fc3dc1aac1efb54e7877b0bfbd23ea2db2e4f65d9fd4e5039435635caaf167f05df17cee77dbd4d44aa1d2f0911aa6384b34eb8372920dc05fa84b98acf905f","ssdeep":"384:hqhkHlVJH8TaseXN+yXLnFnbrFF7E162qFuU4Khaz5:AOr8TyI4VX2qKV","tlshash":"5042bffbdbc7842102ba18ea5ded053750b294bc0e0b1ac1e6f8634228d36810d5ef4d","first_seen":"2023-05-04T19:26:02Z","last_seen":"2026-04-03T02:29:30.276497Z","times_seen":160,"resource_available":false,"data":null}},"time_used":1562,"timings":{"blocked":170,"dns":1,"connect":1,"send":0,"wait":122,"receive":1,"ssl":1262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/get-vthumb/1437442/b25be7e7b8cd596a79ca94253621cf19/564x318_1","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"87.250.247.182","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.avatars.mds.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 03 Apr 2025 14:25:03 GMT","end":"Wed, 01 Oct 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E6:CA:01:EF:27:C5:A7:B7:36:66:BC:E5:64:C2:63:12:FB:3C:8F:91","sha256":"F3:AE:1B:55:A4:70:1A:43:35:87:50:83:E5:F5:ED:99:44:E6:CE:26:D5:B1:CC:24:A7:21:CF:AC:A8:E3:2E:24"}}},"request":{"raw":"GET /get-vthumb/1437442/b25be7e7b8cd596a79ca94253621cf19/564x318_1 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17670\r\nlast-modified: Mon, 07 Apr 2025 05:20:26 GMT\r\ncache-control: max-age=604800,immutable\r\nx-request-id: 119000c7fb629473\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 600, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: {\"group\": \"network-errors\", \"max_age\": 600, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/s3_nel?datacenter=VLA\"}]}\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 564x318, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b16a99c4a165ffa3cb30cb51071d832","sha1":"f518c1bb0fda94b9ab009a026bc0032377fd7b5b","sha256":"816a896423b0db49a9486b3dac78c91611e072e126137919e5f850142d9878cc","sha512":"adbbe8bf0cf9d751ce3885a820e25e1729739319cfe3da150b9f2b61c23a194607a70528f94c33dd1432cc21e29ae7745ee86a7f210f4552fa0f02ebfc4fff25","ssdeep":"384:3dhssgt4Ar8Qhs309HcE/eWehu7GnYYk2gvJ:3dhst4A8Qq3098E/eWehKbYk2gvJ","tlshash":"8582d0405f614783e29ee8d28fdde1d09e5243ca711ae8321c8795ae376e1395db0897","first_seen":"2024-08-20T01:00:01.837605Z","last_seen":"2025-12-18T09:21:03.205451Z","times_seen":34,"resource_available":false,"data":null}},"time_used":3262,"timings":{"blocked":1573,"dns":12,"connect":55,"send":0,"wait":116,"receive":1,"ssl":1467},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka2.com/uploads/posts/2017-09/medium/1505056659_00-07-17.jpg","fqdn":"pornolomka2.com","domain":"pornolomka2.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.578Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/posts/2017-09/medium/1505056659_00-07-17.jpg HTTP/1.1\r\nHost: pornolomka2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmtu.sltusl.com/upload/vod/20220903-4/c44ff7f64594b90ddf44edb857243f4b.jpg","fqdn":"fmtu.sltusl.com","domain":"sltusl.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.653Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20220903-4/c44ff7f64594b90ddf44edb857243f4b.jpg HTTP/1.1\r\nHost: fmtu.sltusl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":1,"connect":19,"send":0,"wait":0,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"motherless.com/favicon.ico","fqdn":"motherless.com","domain":"motherless.com","tld":"com"},"ip":{"addr":"185.107.81.233","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.motherless.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Wed, 02 Apr 2025 00:00:00 GMT","end":"Sun, 03 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BC:66:10:ED:31:C2:E1:48:61:92:BF:BD:98:9C:71:7C:41:97:BB:15","sha256":"DC:4B:D9:73:E2:0F:70:E0:0F:00:83:14:04:82:39:70:D2:DC:F4:3D:ED:56:CB:DA:C8:73:69:B1:19:73:4A:D9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: motherless.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:10 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1150\r\nConnection: keep-alive\r\nLast-Modified: Thu, 20 Apr 2023 06:59:04 GMT\r\nETag: \"6440e2b8-47e\"\r\nX-Server-W: web805\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"71fed71dccb91a13bdf68a6444f25ce4","sha1":"38da7202842147ecda5521d50f094a54d1381f2c","sha256":"18f6675d329e6cb3bb7d7d1e546a1c68c5cc599f1b3ae98c2abbd21a53dc42c2","sha512":"5026edac9534773d52080439a13fe7dd5de5516c7813e062d25501d90ee67cf4cc01cf721070b90fc47f2d164a33a968c475d511c09fa528850a6294bb54795a","ssdeep":"","tlshash":"fc213e8ad700d86cc57456bce13a31f73e88ce40da20286b6f1a3c007c3522178ecc84","first_seen":"2023-05-25T17:44:41Z","last_seen":"2026-04-03T21:47:16.646322Z","times_seen":786,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":14,"connect":63,"send":0,"wait":24,"receive":0,"ssl":461},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataphractarii.com/favicon.ico","fqdn":"cataphractarii.com","domain":"cataphractarii.com","tld":"com"},"ip":{"addr":"104.21.38.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataphractarii.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 06:57:53 GMT","end":"Thu, 30 Oct 2025 07:55:35 GMT"},"fingerprint":{"sha1":"CD:7C:CA:C6:30:F9:B7:1D:95:94:4C:BE:B5:12:1C:CC:51:B8:ED:B5","sha256":"BB:76:79:BF:EF:42:97:CC:CE:04:1F:36:AD:6A:0F:8E:BE:33:99:DD:EE:53:40:34:6F:C9:8A:8E:78:F8:84:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cataphractarii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dE%2F8BKczhwBgOwyUgA9Y5L7Zs%2Fdf9rKM%2FqkWWefZOt5r5VeLHIPjtyhG8bW%2BLfKe9bV1pdXjk8WeeDN%2FGzAEjYBwvzkddfpEMAYAVCgjt3G7fA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9826cd89ce5e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":47,"dns":10,"connect":18,"send":0,"wait":30,"receive":0,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/favicon.ico","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:09.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 21 Sep 2025 04:26:09 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iNXX%2B7Z4ou%2F5g01y77IaA8WXV2rxJXjO4R1Z7WwHTN7U3mN5d7csI9eD39eqRo5YOWiWVjLNOWctAgBc0%2BUIKlM0lNDltUaLZNueq5f0Qe4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9826cd8149a25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blacktowhite.net/data/xfmg/thumbnail/121/121778-2c4fa5bebf5895bc4b190c63661e7580.jpg?1512995576","fqdn":"www.blacktowhite.net","domain":"blacktowhite.net","tld":"net"},"ip":{"addr":"192.243.63.82","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blacktowhite.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Jul 2025 00:00:00 GMT","end":"Fri, 28 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"29:7F:D6:17:0A:55:E3:DB:E8:59:A0:3D:66:88:A5:35:86:B8:EF:80","sha256":"16:D2:4C:56:09:A6:4E:FB:DC:AF:6D:06:8A:B4:A7:96:B1:B5:E6:6B:82:A7:EE:D8:13:2C:AA:59:3C:FC:F0:43"}}},"request":{"raw":"GET /data/xfmg/thumbnail/121/121778-2c4fa5bebf5895bc4b190c63661e7580.jpg?1512995576 HTTP/1.1\r\nHost: www.blacktowhite.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.17.6\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 133263\r\nlast-modified: Mon, 11 Dec 2017 12:32:56 GMT\r\netag: \"5a2e7af8-2088f\"\r\nexpires: Sun, 05 Oct 2025 04:26:04 GMT\r\ncache-control: max-age=1209600\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"3c9c39375a3252a8cb29ce3e87e8fb7e","sha1":"eb9cbdb955d04af2ffc83003290d32a074e91d18","sha256":"c24fc46e2d0c271ab652b5f394e57afec303e857ec327712442f66bfc8db5671","sha512":"a0290cdae4a4ca1551d39d0fd4ca6ef849b7e6ecc16f92b4c0e4d74c15da01529a6606dcad9d45e64407cf536be93ccbe58ca08c3f801978c39bfa73130052b9","ssdeep":"3072:PWyx3Q4fIdz+0gmAECu39aDlPhjKH7+ZKmwun6ahubOU1s:VLIBt93chjK5m/n3huls","tlshash":"d3d31222e6247cbd11f73353872f998570b6358a54ab53f26250f0dec5db8a5e39220b","first_seen":"2024-12-28T08:15:47.157991Z","last_seen":"2025-12-18T08:25:22.117228Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3730,"timings":{"blocked":1443,"dns":5,"connect":95,"send":0,"wait":185,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:08.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js?1 HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 04:05:12 GMT\r\nexpires: Sat, 19 Sep 2026 04:05:12 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 174056\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-04T03:31:35.287114Z","times_seen":118096,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":2,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/favicon.ico","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 07:11:45 GMT","end":"Tue, 25 Nov 2025 07:11:44 GMT"},"fingerprint":{"sha1":"4C:08:FF:9B:21:5C:D4:AF:F8:61:EB:02:2A:B2:41:C6:A6:FD:65:52","sha256":"49:BB:6D:F7:8D:BD:FB:E0:A8:5E:C7:46:48:E8:4D:04:0F:BF:5C:41:EF:03:99:7B:C7:F8:7D:7D:53:0E:4A:24"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-length: 1406\r\nserver: BunnyCDN-DE1-1047\r\ncdn-pullzone: 4336709\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncache-control: public, max-age=2592000\r\netag: W/\"1406-1757621867067\"\r\nlast-modified: Thu, 11 Sep 2025 20:17:47 GMT\r\nx-powered-by: Express\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/13/2025 09:11:29\r\ncdn-edgestorageid: 1334\r\ncdn-requestid: 8ac0a5f8cb50d36d08e7eae81d005737\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"8851a1b28ebe567b927c9ae6600a8fc6","sha1":"113da6a02dff45d4b9c0d3c9ae531445a8c7b687","sha256":"b545a5091485f5dd485f0e9d2abcd55a06b22f9359c6da8955b8da7b1d3c9212","sha512":"f438008028a354d1600c8af6a136e3991dcbaa188759f20c22a6c76a3170390c14578561d886272741f029f6f161b3711afb959385bbf49166ccf170e3edf95d","ssdeep":"","tlshash":"2121e1213397e353db451ef532244b944243d32906f79b9411e80685aa4f3301fbc373","first_seen":"2025-05-02T17:12:40.010154Z","last_seen":"2026-04-03T22:52:06.845802Z","times_seen":628,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.amcdn.top/OZSRO.jpeg","fqdn":"c.amcdn.top","domain":"amcdn.top","tld":"top"},"ip":{"addr":"104.21.53.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:02.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c9cd91a3.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 08:58:36 GMT","end":"Fri, 21 Nov 2025 09:58:31 GMT"},"fingerprint":{"sha1":"0C:F4:7E:F2:D8:F6:8B:07:02:E8:43:F3:52:AB:89:F9:3A:12:9A:90","sha256":"4A:3B:B4:FC:03:D5:34:95:69:BB:AA:D9:47:BC:E1:78:78:51:C1:8D:22:06:CB:91:CB:E5:08:2D:C7:52:FD:0A"}}},"request":{"raw":"GET /OZSRO.jpeg HTTP/1.1\r\nHost: c.amcdn.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33747\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLTWXL2IzRyvIKwZDXNpP2CZJCQDPcBwFzgSX5cDiqeSYGOrPEJsrkk4DOCsRxgSOmFteBiw0yKXAWkPbn46gR4VOKhhCjagcQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"969e5856b344f837632d57cb10ba92bd\"\r\nlast-modified: Fri, 22 Aug 2025 14:02:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 106934\r\ncache-control: max-age=86400\r\ncf-ray: 9826cd57cc44712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33747,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 720x1280, components 3","md5":"969e5856b344f837632d57cb10ba92bd","sha1":"2340f45c368a0db6358ff4b64408c9aab980f310","sha256":"55b9e14feb94192b47c5565fba1b1b8295718ba91b11271745991ddd625c85e0","sha512":"892af11d9bfbbf27bd7d03e3ee4bfd88b4f5621b33ab72bc3635883a1b5bc8bac93b44e968e83ad119b0793b4a4b0ab567e5f964007910b7478eefa4d0efc28f","ssdeep":"768:lLvfrpT6UtXy8/MW8DKJoEq8xr3MA/v0r6oO0e:FIUtX/EWsOoEq8h3b/v0rhve","tlshash":"94e2f129de87198bc939683e24c583de3a0f366bfb8bc51d7d47a28248df415ac4d590","first_seen":"2024-12-08T10:57:50.549839Z","last_seen":"2025-09-21T04:28:54.303019Z","times_seen":5,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":24,"connect":2,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"c.amcdn.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"treeyork.com/374109/374109.jpg","fqdn":"treeyork.com","domain":"treeyork.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"development.treeyork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 22:01:00 GMT","end":"Mon, 08 Dec 2025 22:00:59 GMT"},"fingerprint":{"sha1":"D0:E9:42:C8:2D:20:9E:DF:C1:B3:CD:8D:AE:80:86:CA:5F:AF:2E:73","sha256":"1B:F7:D6:A1:E7:71:0D:7B:01:A4:15:FC:4F:BE:A0:16:D9:19:C3:8F:FD:3D:B6:91:88:6C:49:C5:C9:48:93:DE"}}},"request":{"raw":"GET /374109/374109.jpg HTTP/1.1\r\nHost: treeyork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":2113,"timings":{"blocked":61,"dns":4,"connect":105,"send":0,"wait":0,"receive":0,"ssl":1934},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asianpornxbb.sbs/wohesangenverdemenghuanshenghuozhongyujiangguitousaijinlesangongzhudechunvmoliyuanchushou/thumbnails_001.jpg","fqdn":"asianpornxbb.sbs","domain":"asianpornxbb.sbs","tld":"sbs"},"ip":{"addr":"104.21.23.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0b45ee2e.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:04:12 GMT","end":"Mon, 27 Oct 2025 12:04:05 GMT"},"fingerprint":{"sha1":"9E:33:52:5F:4A:DE:5B:B0:7C:5D:C1:66:E4:50:65:4A:1B:B3:9C:42","sha256":"80:68:D6:B7:54:92:5A:F8:74:63:26:7D:33:1D:CE:E7:1F:48:FB:DA:C3:33:14:A8:8A:C8:55:B4:88:C0:74:4B"}}},"request":{"raw":"GET /wohesangenverdemenghuanshenghuozhongyujiangguitousaijinlesangongzhudechunvmoliyuanchushou/thumbnails_001.jpg HTTP/1.1\r\nHost: asianpornxbb.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28649\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wSRA1HUHUQ0lQTQGMVhAA%2F8mbwcicGAMK7yhnTUn0K5G8XswogzXI00nQrOS6aMGAjB4UMUo9DduBQ%2BYOoBpqd%2FwLGMJj0afn4iN1iw4Okw%3D\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"401f9675d2d22ccaa242c77a4fd6dce6\"\r\nlast-modified: Sat, 04 May 2024 05:24:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 1985916\r\ncache-control: max-age=31536000\r\ncf-ray: 9826cd63ded176ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28649,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 600x452, components 3","md5":"401f9675d2d22ccaa242c77a4fd6dce6","sha1":"c6555e9b9e40c8333f8633d1b89a5e1cd4eaeb4d","sha256":"9c7d7986092d0414528bebdfca8e256dd9005d827066f18c583ffdd12eced97e","sha512":"05f6ce9cdd116e7a7fd4c6421b2e41f4ec9af613ab48edd4974bb89df395d183a02d437ed62eea20f72354cb6054ae0b3a87c7e0175bf3433352a5f7a1f51a02","ssdeep":"768:6xT36IFw33qn0a+bkSuzitM/F1N9s9UiA4bdp1lE9/O4hu6:4OIFw33q0boYM89UiA4Zbla/l","tlshash":"dfd2f167795690bce3380620d9a38ddc83c7adcce6fe56ad39221bc5001136dfe5e648","first_seen":"2025-07-07T18:15:50.334512Z","last_seen":"2025-11-26T07:53:44.45177Z","times_seen":36,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":700,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240611-1/5fd81f270e2f752a108621ede2bb8d53.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240611-1/5fd81f270e2f752a108621ede2bb8d53.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 103904\r\nlast-modified: Tue, 11 Jun 2024 04:00:33 GMT\r\nvary: Accept-Encoding\r\netag: \"6667cbe1-195e0\"\r\nexpires: Mon, 13 Oct 2025 21:19:48 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103904,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"5ab6b95ae08a0438c330ea81a8a84d25","sha1":"17b2adf4e73405ef6904fdc066db7ade91abad6f","sha256":"bd6aab032b71772cb4c94d828c67ea9de2123d656d50da89613517333f766a13","sha512":"4206942fa306bd8d3098ce3c56eb21ead4056fb169e80098f3208f80410888724a60f63d100320e3d9725f833e087077df596c56a6476cb76adff152c0ebf5ed","ssdeep":"3072:cbVF0zF1UTq+Gfsyo7rDzrwvAC9TOvoPTmkJ+4jY/u:cKxNs3Lz096vobmkOu","tlshash":"23a312091fc45ba67fd51ee8c52af87c5bc04c3bf33de7d50a730114aaa2642a9ad2d1","first_seen":"2025-02-14T10:18:08.813709Z","last_seen":"2025-12-18T05:23:28.855775Z","times_seen":39,"resource_available":false,"data":null}},"time_used":1886,"timings":{"blocked":765,"dns":0,"connect":0,"send":0,"wait":658,"receive":463,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:05.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/yandex-metrica-watch/watch.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 87736\r\ncf-ray: 9826cd6dac7b56aa-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.406.0\r\nx-jsd-version-type: version\r\netag: W/\"36501-/gdngrem3Hj1WTQb/qP9Ouk6iBg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220112-FRA, cache-rtm-ehrd2290039-RTM\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 38013\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NVSWoD17TkRYPTEXi7DKADlznzTDTYOHlmtNtk7eJVk02E50f2RZq4gs1KBfFaZDZKDjVbdAeOSsWaptm3iFFeifZi53P%2FrAnpQ6mN5sgMX5F05%2BYecfC6PL4pMIu5wvYM4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222465,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"c6fbd21f70f5847e9eb8a4aec990805d","sha1":"0a917af54252191f940aaaee2a59a4c57ec57d63","sha256":"fc6e51ce9bdfb3bbcdb66313ee22ebd9759582286b5fee17c201d6a912866595","sha512":"b2056ebd1aea0ac2c14a2fb727b38e2b1d332d5fef12155b366157409047fc3a693753c02181ec7e8e3b55627307a5f2b4461bcbb696eb0a31d2c7e906fe2c46","ssdeep":"3072:a7p41TRRo6vx04QUHyh3Ua3mfplU1TS0BIl6zGSuanWjQKbNuxxr62g:a7m1T0r4zHyhsfp+pSoOSJnWVcxxlg","tlshash":"e524d7d936927462937334b4a02f410f72be78a6f10c8958f189d9d93e789ac5237f6c","first_seen":"2025-09-19T20:52:30.271621Z","last_seen":"2025-10-03T16:09:40.695061Z","times_seen":51,"resource_available":true,"data":null}},"time_used":1056,"timings":{"blocked":-1,"dns":3,"connect":46,"send":0,"wait":19,"receive":4,"ssl":962},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/4/40a97a4302f5d190412ea76b5acfec98892a19f8.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/2X/4/40a97a4302f5d190412ea76b5acfec98892a19f8.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 76087\r\nlast-modified: Wed, 30 Jul 2025 18:20:43 GMT\r\nexpires: Mon, 21 Sep 2026 04:26:03 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76087,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1902, components 3","md5":"ebb56050c43ffa47600f28a530c8b464","sha1":"40a97a4302f5d190412ea76b5acfec98892a19f8","sha256":"43e2167c70309fd3fce1a2c4242d1b44fc6af3207fefdacd802c0a647c74750c","sha512":"5c55c1b498aed5c4f86bbec3c78fae4c749cb14aa16198a9863bc907e30fb2801fc51ebe55286f9fb8e5c982a5d406bd668e39df49220b8423e92cd70680362d","ssdeep":"1536:qEFrzK2ZY24gZfz67fr0b1BGI84hqajlrLO7984AYC+BHnitpdW4PKB:qENh4gZS0BBk+hHO7RAYC+dCpdW4CB","tlshash":"0c7302bf11476069e938d3fd8dd69032134e7d3b0bbe4a4b72e6cc47895119a85dea80","first_seen":"2025-08-24T18:54:16.012101Z","last_seen":"2025-09-21T08:27:47.488545Z","times_seen":11,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"porno-incest.tv/favicon.ico","fqdn":"porno-incest.tv","domain":"porno-incest.tv","tld":"tv"},"ip":{"addr":"185.162.11.82","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"porno-incest.tv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:22:51 GMT","end":"Fri, 28 Nov 2025 23:22:50 GMT"},"fingerprint":{"sha1":"24:58:15:A7:D3:D6:E9:53:E6:45:62:29:F4:8C:DB:E3:49:74:C2:11","sha256":"E1:FB:35:14:2E:4C:4A:D0:F2:35:BB:11:6B:67:35:10:89:12:11:D2:28:36:86:71:FD:62:5F:D3:F3:7C:49:D6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: porno-incest.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:10 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 372526\r\nConnection: keep-alive\r\nLast-Modified: Wed, 11 Mar 2020 09:33:46 GMT\r\nETag: \"5af2e-5a090eedbf15f\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=9720000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":372526,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 7 icons, 256x256, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"f4833b4aea7ef8562a10e659bc983d14","sha1":"204fd1431d3358669414f93b3a73677bc7fd7a6e","sha256":"f38e62bbee076252a8f134c4f9e0e6150911d1fcf12221c794c49b86949f8576","sha512":"f0aaeef918bc898fc3872e45fa7c8802ca0287898516cfa0582d6ea8877908009eebac2d7738ecd906032f70db78843f6d7c98dfb03d94a22ba311539fb56364","ssdeep":"3072:aa0zDyb4kh77h77pXmCMk1hS9NrDj2ahaA:ZoybLh77h77pX69Nv6ahaA","tlshash":"7184b41ebb50da2bd4640b788cbf97145338aed89e42470bb64cf7d928b33853f46259","first_seen":"2024-09-19T22:22:48.949683Z","last_seen":"2026-04-03T22:52:06.920945Z","times_seen":88,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":17,"connect":53,"send":0,"wait":40,"receive":142,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awjqxiaokeai.buzz/favicon.ico","fqdn":"awjqxiaokeai.buzz","domain":"awjqxiaokeai.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.395Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: awjqxiaokeai.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"awjqxiaokeai.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"awjqxiaokeai.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ak-br-pic.kwai.net/upic/2023/04/12/23/BMjAyMzA0MTIyMzE3MTNfMTAzNjcyOTk4Nl8xNTAxMDI2NTU4MTY1MjFfMl8z_oscn2_B54a0ac9b889aab2ad5b8b59851d5b8a4.webp","fqdn":"ak-br-pic.kwai.net","domain":"kwai.net","tld":"net"},"ip":{"addr":"2.21.8.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 16 Apr 2025 08:08:20 GMT","end":"Mon, 18 May 2026 08:08:19 GMT"},"fingerprint":{"sha1":"88:41:08:16:B1:09:65:11:BC:B7:74:9F:3C:2B:7F:E4:B7:29:47:FC","sha256":"A7:08:07:07:A1:B9:AB:05:EF:83:67:DA:40:EB:1F:28:60:07:40:83:60:0A:E5:69:22:53:7E:B8:ED:61:8B:E7"}}},"request":{"raw":"GET /upic/2023/04/12/23/BMjAyMzA0MTIyMzE3MTNfMTAzNjcyOTk4Nl8xNTAxMDI2NTU4MTY1MjFfMl8z_oscn2_B54a0ac9b889aab2ad5b8b59851d5b8a4.webp HTTP/1.1\r\nHost: ak-br-pic.kwai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 24078\r\netag: \"E14607ACBA0B73885F37F688E0A7CD8A\"\r\nx-bs-hash-crc64ecma: 7527641748883191181\r\nx-bs-object-status: 0\r\nlast-modified: Wed, 12 Apr 2023 15:17:37 GMT\r\nx-nws-log-uuid: 7218863084299421105\r\nx-amz-cf-pop: SIN2-P8\r\nx-amz-cf-id: ttVSVRDqS3YYpyMNtW5FzvrpCpeAIZyI1zyOOB9c6DNlNcqk1wuKRQ==\r\ncache-control: max-age=31536000\r\nexpires: Mon, 21 Sep 2026 04:26:03 GMT\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-mon-iucid-del: 1859565\r\nx-ks-request-id: 0.f7081502.1758428763.7ce338d\r\nx-ks-cache: Hit from 2.21.8.203\r\nx-mai-cache-status: Y0-L0-0\r\nx-ks-client-ip: 91.90.42.154\r\nkwaisign: null\r\ntiming-allow-origin: *\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC\r\naccess-control-allow-headers: origin,range,hdntl,hdnts\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24078,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x854, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e14607acba0b73885f37f688e0a7cd8a","sha1":"35a9181f48d29b982f42fb131bfed069bebe61c0","sha256":"32c9afe88fc3af6d5c6025c2ab51c97cb5f6a70c9b7ea36a6e3a5bc662556ac4","sha512":"0e3bea908e97fc1144f6c4c7f933e11ae9e7267b58eea6e8d618814c5689814d298169fcd1abed7077761235d114b5ac87f7002803fb3e095088af169759218f","ssdeep":"384:p80s4PY9sDrJPmlpN0zOoSzB4JBAYW4/tH6SLKLIdPtjL0H0lZBHjA:p809PY2DlP2pbt4JByotH6hwFjgHoZBU","tlshash":"28b2e021398ccabf5b8e164df1426c4c6b4531cfe94e0e26c7aac4998a800673eb5db1","first_seen":"2025-07-18T18:50:07.477725Z","last_seen":"2025-11-12T02:34:49.905929Z","times_seen":9,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":10,"connect":18,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250419-1/971a21fb08293b27a6b7b09629d33202.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250419-1/971a21fb08293b27a6b7b09629d33202.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52878\r\nlast-modified: Sat, 19 Apr 2025 03:56:28 GMT\r\nvary: Accept-Encoding\r\netag: \"68031eec-ce8e\"\r\nexpires: Fri, 26 Sep 2025 00:52:33 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52878,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x281, components 3","md5":"1d40af366b7f9db2e4ebcc5583e653d1","sha1":"bd41c4de5864f924678f864de90ac6c0bc6eb83f","sha256":"d989d017e13e57dff1b6e515dcbed890bf7f209550d8748da07c3083ee4693f0","sha512":"e886ed212c092e2cf3af8f52f673f6b60d920a21b04d0a4cba0a92858346eb6c72cc674f3a2c6dc995bb54e35e1ed4f42585b1abc50752f5dd51a97e1f3514e3","ssdeep":"1536:d5+4C4BcW2ujDoUSTDy8S/yHAgHC5Jgd52ya2oAa:634+kiDJ3HBH0g02oL","tlshash":"2b33f190c75072d3bfe1079e9d6aef9845cf05821189c779acf4e2b8a65d702d03ce55","first_seen":"2025-05-22T07:14:20.954289Z","last_seen":"2026-03-03T14:10:03.761965Z","times_seen":64,"resource_available":false,"data":null}},"time_used":2582,"timings":{"blocked":1649,"dns":0,"connect":0,"send":0,"wait":658,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.cdn2025.life/videos/202411/20/673bf98f9db76f8179620080/cover.webp","fqdn":"img.cdn2025.life","domain":"cdn2025.life","tld":"life"},"ip":{"addr":"107.167.21.106","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.cdn2025.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Aug 2025 18:19:04 GMT","end":"Wed, 26 Nov 2025 18:19:03 GMT"},"fingerprint":{"sha1":"7C:8D:98:C2:8A:C4:61:08:48:E4:80:A1:43:5C:CC:D0:F7:E7:6D:51","sha256":"63:18:98:01:73:2B:F4:53:6B:FA:DE:07:0B:69:2E:FB:7A:16:03:D0:0B:0C:8B:68:9E:AB:3B:91:4D:F6:98:B0"}}},"request":{"raw":"GET /videos/202411/20/673bf98f9db76f8179620080/cover.webp HTTP/1.1\r\nHost: img.cdn2025.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:23:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36499\r\ncross-origin-opener-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\ncache-control: max-age=43200\r\nlast-modified: Tue, 19 Nov 2024 02:35:57 GMT\r\netag: W/\"8e93-1934246d226\"\r\nexpires: Sun, 21 Sep 2025 16:23:54 GMT\r\nnginx-cache: HIT\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: POST, GET, OPTIONS, GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36499,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 426x239, components 3","md5":"394e9a71c7cdcf42663d53d21ef26bbb","sha1":"866667a12b53fe28da73cf3b63cdf0ef3a3ec0c7","sha256":"ea19e9a353cb2d5dfe29bdee5b1d00d332308a662fb983a7dee10339c3548072","sha512":"2b6eaae9e6e15237c938d367a3fd21a580d667e8c14c1a2b1e81e51e8698a275e94ed56cd1255132b7dc662fc65304b84479d40ffd6665db6ddc52c14d1d2e6b","ssdeep":"768:WzUFJi0tamu1TaE6DAv9C7VcavZBs/WGnH+tXc8skD:WQFg04mnKvkOnmdz","tlshash":"41f2f1ca77796a851f4a5c20eeca32c6e2d8bf0f38461a4677152dc446835d03f326b3","first_seen":"2025-06-02T14:12:00.834241Z","last_seen":"2025-11-01T22:58:20.29806Z","times_seen":40,"resource_available":false,"data":null}},"time_used":2285,"timings":{"blocked":-1,"dns":3,"connect":150,"send":0,"wait":427,"receive":45,"ssl":1654},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241028-15/9b8c17877ecfe6b1ded6c644e53569b9.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.105Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241028-15/9b8c17877ecfe6b1ded6c644e53569b9.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.voyeurweb.com/albums/3407961/cover/170550-sexy-teen-lisa-solo.jpg?key=fe0b8bcc53be73df9342ea9b4b9a35cf3651bd47","fqdn":"cdn2.voyeurweb.com","domain":"voyeurweb.com","tld":"com"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn2.voyeurweb.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 04:12:16 GMT","end":"Tue, 18 Nov 2025 04:12:15 GMT"},"fingerprint":{"sha1":"83:A0:EB:1D:53:7C:B6:D5:75:F8:4F:27:4A:36:6F:78:A7:2B:96:C9","sha256":"A7:02:D7:39:4B:BF:06:8E:95:C2:1C:D6:CE:2C:FC:20:94:8F:89:C5:C0:DE:87:89:45:9C:20:1D:5D:02:E4:8E"}}},"request":{"raw":"GET /albums/3407961/cover/170550-sexy-teen-lisa-solo.jpg?key=fe0b8bcc53be73df9342ea9b4b9a35cf3651bd47 HTTP/1.1\r\nHost: cdn2.voyeurweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 2158854\r\ncdn-uid: e8957bcf-7e87-4ba3-8879-4d6d1740a9c3\r\ncdn-requestcountrycode: NO\r\ncdn-requestid: 256a7135198d1b212d0c0959a2e02770\r\ncache-control: no-cache, no-store, max-age=0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240615-1/1850870fe4ad54e45f9424aa36a9a240.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240615-1/1850870fe4ad54e45f9424aa36a9a240.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65046\r\nlast-modified: Sat, 15 Jun 2024 05:18:14 GMT\r\nvary: Accept-Encoding\r\netag: \"666d2416-fe16\"\r\nexpires: Mon, 13 Oct 2025 03:45:25 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65046,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 718x333, components 3","md5":"d3e12853597c7a01889b75803d8fd75b","sha1":"edb1abbb68e571dc2baa8906d0c331fed5d90c0d","sha256":"3ea57238fce1c048a7eecdeec69f819f23dcfe58ab11adb128baf404c8aa6bf5","sha512":"1ee3404e41a6ef031be3eba09cee4376dfd9089a4f63bafc13ba7901522332956ff2b342166469cb022776420a146fa34680fc131bb59af4644d4c133ed190ff","ssdeep":"1536:e4tX0ELNiVCyxbRK/aaKFv0TsXHqsr1/dGfTL2IlZL5IQi:9tXdKHVKapDD1YLbl/IF","tlshash":"f65302bd6b07dcd88d1c84f575cd36b67890809a2389a6114b0f84ccee9fe768b50e9d","first_seen":"2025-05-25T07:14:28.187541Z","last_seen":"2026-01-20T12:10:26.350931Z","times_seen":26,"resource_available":false,"data":null}},"time_used":2136,"timings":{"blocked":1088,"dns":0,"connect":0,"send":0,"wait":650,"receive":398,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataphractarii.z00.monster/scj/thumbs/239/145_area-.jpg","fqdn":"cataphractarii.z00.monster","domain":"z00.monster","tld":"monster"},"ip":{"addr":"51.79.99.71","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cataphractarii.z00.monster","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 05:22:45 GMT","end":"Wed, 05 Nov 2025 05:22:44 GMT"},"fingerprint":{"sha1":"7E:6C:CE:2A:22:8D:7F:BF:7B:DB:65:9B:92:9B:AF:1A:0C:C9:8C:A2","sha256":"98:7B:E1:00:BC:5B:B4:D4:F8:89:3E:8A:81:18:45:88:0F:15:A1:E3:F5:09:C4:89:A4:9D:50:3B:75:11:D3:37"}}},"request":{"raw":"GET /scj/thumbs/239/145_area-.jpg HTTP/1.1\r\nHost: cataphractarii.z00.monster\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 16378\r\nLast-Modified: Mon, 28 Aug 2023 00:12:09 GMT\r\nConnection: keep-alive\r\nETag: \"64ebe659-3ffa\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16378,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x240, components 3","md5":"a3888d223e585c00d24535779e50e12b","sha1":"b51066db489fa925f632f2f845b5b3a381148fb6","sha256":"f1fd48fda5568d7ded937389441670a12d8bfa9d46b894a059b7ccfb411290ef","sha512":"a2b55273021f804ad41c3e08db9e24001a86a45425de955cce6a963d9c3c5443c098ff02972040d3d2ff2d3f1b2c6fa4bb9f4ae564c857128a1d6259496f1ba2","ssdeep":"384:OAn6QqyKnL21SqO1wHCoeiBQJ2t2YOVahekj9Tx+BUw+:BiJnge1TCBQ8wYOc9hF","tlshash":"a672d0279fc6413363fc601e375a6de75c9cda68016458a692487a2c4b8427cec23fce","first_seen":"2024-12-08T10:57:50.628146Z","last_seen":"2026-01-15T05:39:20.97712Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1716,"timings":{"blocked":120,"dns":1,"connect":95,"send":0,"wait":191,"receive":1,"ssl":1297},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/fszha7pq_header.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 09:48:24 GMT","end":"Sat, 08 Nov 2025 10:45:39 GMT"},"fingerprint":{"sha1":"4F:F9:25:37:EE:42:8B:1E:5C:AA:F5:BD:BF:CB:3A:CE:FD:84:E3:68","sha256":"E9:D6:87:C8:76:D3:FC:EE:D6:80:61:98:3C:B4:69:F2:52:5D:24:92:95:9E:91:B8:16:F5:EF:BB:CD:64:21:8A"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/fszha7pq_header.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1984428\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 29 Aug 2025 05:12:14 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GV9Gg3xSg811T0owOmHkhg3nKMRO%2Fj4Ph4w2LQFEmZ0AXSzjq8pYskl5OCrcB4EI6spSWbfAHPsEnpC4b%2BOdI%2Bme0XAw45wgfJg%3D\"}]}\r\ncf-ray: 9826cd5cc906120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185931,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 888x666, components 3","md5":"5dae39039d7b301f0545431bb74f4327","sha1":"9bbe59b37c34f0facd3b706153f07e0568856f07","sha256":"3a5fe400f43fa1007ac6d886e4617c0198755f72ff19797a8070ce320d66ea81","sha512":"cecd6b87a427d0ebc6bbed9c76818be1cc48d4a5ae06de91a0660e8d1473a901a885bae3ce5f9e3d8a60275becf5d16c2c580625fd71756d5f087ca185260f04","ssdeep":"3072:aMMcamBMt1wkLyN6GsOU5qGvvgFHOusrxbeYRs+Kb8bj8P5OTvk9IvOkK0zIxjcH:avcFezLQ65rUbsrh7jhHVTc9aOczIxoH","tlshash":"170422d29d7d64cbef00833be932e01453ac719e7424e4822ca38a41bbbd723e256d75","first_seen":"2025-07-22T04:45:31.701438Z","last_seen":"2026-01-14T12:53:34.152844Z","times_seen":13,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img2.javdove.com/media/videos/tmb/25866/default.jpg?v=1689734192","fqdn":"img2.javdove.com","domain":"javdove.com","tld":"com"},"ip":{"addr":"172.67.199.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javdove.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 12:16:31 GMT","end":"Thu, 11 Dec 2025 13:14:42 GMT"},"fingerprint":{"sha1":"02:8B:28:94:C1:98:0B:6E:D9:E1:97:6A:B0:2A:AE:21:48:DA:F0:6E","sha256":"74:5F:0E:35:C2:1A:B9:64:00:DC:CE:F9:58:71:AA:4D:E1:10:5A:AD:DF:1B:3B:F4:50:19:61:12:70:80:A2:3E"}}},"request":{"raw":"GET /media/videos/tmb/25866/default.jpg?v=1689734192 HTTP/1.1\r\nHost: img2.javdove.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 521 No Reason Phrase\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6989\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9826cd68c94356c0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"521","status_text":"No Reason Phrase","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":3119,"timings":{"blocked":1150,"dns":6,"connect":5,"send":0,"wait":134,"receive":0,"ssl":1813},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sexsex2.com/favicon.ico","fqdn":"sexsex2.com","domain":"sexsex2.com","tld":"com"},"ip":{"addr":"202.95.16.31","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex83.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 14:08:44 GMT","end":"Wed, 10 Dec 2025 14:08:43 GMT"},"fingerprint":{"sha1":"C9:DF:27:A9:2B:47:90:06:7B:5F:0D:64:78:F2:F2:AA:1A:35:1B:98","sha256":"4C:FE:81:8C:DC:92:CE:C9:8C:E0:31:42:DB:60:A1:F2:47:C9:52:17:EF:1D:EF:EB:5D:95:CB:4A:EB:AF:0B:5E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sexsex2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/x-icon\r\ndate: Sat, 20 Sep 2025 14:40:51 GMT\r\netag: \"645b773c-10be\"\r\nlast-modified: Sat, 20 Sep 2025 14:40:52 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 4286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"da00228045bbdc9fc485eee15ae466f7","sha1":"51acd57ef4439a7e622281388e2aa83d53b3fe33","sha256":"18a2fc0c936b1782fb1f1dec65e9ea9dfff00e1a081594c8c3049a5b435c1d2d","sha512":"b7ba13392ab3c6d8c1077989d482399892c1c094599e798b69dc3c6720b5d26dd6186d414f46cacf8ed48061e091d23978248b63cace28ebc601e41348ce608a","ssdeep":"48:uTOtJTTH7TTS/LY64wSKd2sci/6aq3EDP+3yk:uOH73wSKdEv/3v3yk","tlshash":"e2912fa8edf928bfd22403785f0697f8c8338e1f6ce4593308227c9b272ed51848611d","first_seen":"2023-05-17T22:14:46Z","last_seen":"2026-04-03T22:52:06.89925Z","times_seen":551,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":25,"connect":280,"send":0,"wait":273,"receive":28,"ssl":453},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baraag.net/@sfm_lottie/image/png","fqdn":"baraag.net","domain":"baraag.net","tld":"net"},"ip":{"addr":"185.178.208.171","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cisapp.baraag.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 18:50:20 GMT","end":"Tue, 21 Oct 2025 18:50:19 GMT"},"fingerprint":{"sha1":"4B:6A:F9:3F:E3:37:8A:FE:8D:C7:60:73:8F:6D:F0:B1:84:2C:0B:7D","sha256":"BB:01:09:DB:A3:38:79:7D:79:54:20:CA:C1:1E:7C:23:24:13:93:F5:D8:FA:A8:78:89:6D:FA:C4:CD:DD:E5:CA"}}},"request":{"raw":"GET /@sfm_lottie/image/png HTTP/1.1\r\nHost: baraag.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=z5BDLHPDYBzJPvrF; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:02 GMT\n__ddg10_=1758428762; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:02 GMT\n__ddg9_=91.90.42.154; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:02 GMT\n__ddg1_=ygW2rdEs3Ff0TQqWEJLk; Domain=.baraag.net; HttpOnly; Path=/; Expires=Mon, 21-Sep-2026 04:26:02 GMT\r\ndate: Sun, 21 Sep 2025 04:25:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: same-origin\r\nvary: Accept-Encoding, Accept, Accept-Language, Cookie\r\ncache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400\r\netag: W/\"f07e195e48295c87c1d9af5eddd4b458\"\r\ncontent-security-policy: upgrade-insecure-requests;, base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://baraag.net; img-src 'self' data: blob: https://baraag.net https://media.baraag.net; media-src 'self' data: https://baraag.net https://media.baraag.net; manifest-src 'self' https://baraag.net; form-action 'none'; child-src 'self' blob: https://baraag.net; worker-src 'self' blob: https://baraag.net; connect-src 'self' data: blob: https://baraag.net https://media.baraag.net wss://baraag.net; script-src 'self' https://baraag.net 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://baraag.net 'nonce-CXZQGjEBA+nz5VA7FI2F9A=='\r\nx-request-id: 72c82135-de18-4909-90e1-9198370b6bb7\r\nx-runtime: 0.024328\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cached: MISS\r\ncontent-encoding: gzip\r\nage: 9\r\ncontent-length: 16682\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":1,"connect":23,"send":0,"wait":33,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.qianju.cc/upload/vod/20230306-1/5acae97d27efa8a488ec086ab6f1e13b.jpg","fqdn":"img.qianju.cc","domain":"qianju.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.701Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20230306-1/5acae97d27efa8a488ec086ab6f1e13b.jpg HTTP/1.1\r\nHost: img.qianju.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"img.qianju.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"img.qianju.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdntube.b-cdn.net/thumbnails/a54870f7d3be755115bf17453304c7dac9dcee56.jpg","fqdn":"cdntube.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /thumbnails/a54870f7d3be755115bf17453304c7dac9dcee56.jpg HTTP/1.1\r\nHost: cdntube.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14664\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 114851\r\ncdn-uid: 610bc618-7bcd-4e37-a18e-2efa3a8e9c35\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 14 Feb 2024 12:40:17 GMT\r\ncdn-storageserver: DE-1018\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 774\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 08/14/2025 09:28:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 345e13fc1864fd288a15820a299e01d1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x686, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4e82b59732917ac41b53c57c7d6d08db","sha1":"abcc41c687bbb99986fb4ada6340841dbb61d515","sha256":"0a39dab5554a6e569d54bb99e8a9687e9753a31790a3a93362d68b979dac8500","sha512":"5345c64d366321f0d025d7ea249b703f4bbfa18225ea6db8707cbeb7257f029dd2f4aad2bf1bf335193a24a461182e04e5c4247f2e76d038f229e31bb1b0f0ec","ssdeep":"384:0gsxmhG65kEwgGUeaASHBFVs5l/df5iu60UbVMKB0jjCg:Z7Gik6xFO5hruMHjCg","tlshash":"3062c074533a403c24f199e3262709b92a048614083e36e7e8d5f673e7264263ee77df","first_seen":"2025-02-21T07:39:20.382522Z","last_seen":"2025-11-11T02:02:39.856725Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1773,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":8,"receive":0,"ssl":1758},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.embed-player.space/23/04/26/1108098-055.jpg","fqdn":"images.embed-player.space","domain":"embed-player.space","tld":"space"},"ip":{"addr":"51.77.85.40","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"images.embed-player.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Sep 2025 05:56:34 GMT","end":"Sat, 06 Dec 2025 05:56:33 GMT"},"fingerprint":{"sha1":"01:CA:95:9A:B4:51:CE:25:B4:5B:98:86:3B:43:96:80:D7:4D:52:4F","sha256":"C8:1F:0B:97:93:03:A5:E9:03:92:0B:5A:10:EB:2C:26:02:5D:0B:37:91:14:44:DD:98:F0:1C:BB:EC:0D:7F:DA"}}},"request":{"raw":"GET /23/04/26/1108098-055.jpg HTTP/1.1\r\nHost: images.embed-player.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 21104\r\nLast-Modified: Fri, 14 Mar 2025 05:03:34 GMT\r\nConnection: keep-alive\r\nETag: \"67d3b8a6-5270\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21104,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.35.100\", baseline, precision 8, 640x360, components 3","md5":"6fcece2f53e633ce2b71eca41cc613f7","sha1":"5fab10829aebb4e87c1d6e42ae09a2e6764509dc","sha256":"371edbbe518b7d78cacc1419592403cc60ef3ac06dc6288fa9ef396234aee0ce","sha512":"0c373d1909b1dd188749f8cb5d24d8ee048fb49e4bfd7bccfa0af6e5deeabf1d1026d6ca6ee0dc8359749c4f138aa25924cbd1ca7166afb420192773790cbd3a","ssdeep":"384:2H3i/iD/cPkntajj5WRnT5iMMDAd5NHi3zPAQTaGsylD58RTmJ1Ll0PxnMei:2H3i6D/cPCtaJyT5RMDa5tU5a+lHMPxC","tlshash":"c892d00d36cb8b6a882a81c6f21e0fad5728bf8c554a428de5570d15539e1d9c2732fa","first_seen":"2025-06-02T14:12:55.150371Z","last_seen":"2025-12-03T21:41:17.935545Z","times_seen":70,"resource_available":false,"data":null}},"time_used":1736,"timings":{"blocked":-1,"dns":2,"connect":35,"send":0,"wait":79,"receive":1,"ssl":1609},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uenxyaomk.buzz/favicon.ico","fqdn":"uenxyaomk.buzz","domain":"uenxyaomk.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.470Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: uenxyaomk.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"uenxyaomk.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"uenxyaomk.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"uenxyaomk.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250710-1/1759558fe088b184fa6f6b7df6d081ce.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250710-1/1759558fe088b184fa6f6b7df6d081ce.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55610\r\nlast-modified: Thu, 10 Jul 2025 02:47:00 GMT\r\nvary: Accept-Encoding\r\netag: \"686f29a4-d93a\"\r\nexpires: Wed, 08 Oct 2025 03:17:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55610,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x281, components 3","md5":"d481e430c52b897861363adabd763ae4","sha1":"06d671aee79794898f2596f7974c9e9772f58ad3","sha256":"9dae87d9c2c1c99ae57517c8fb41a6963ae52e889286863a4d74eefef3a60bf4","sha512":"47adab5d093c4cbad4ad5a0130ff223de624014c6737fa069f6949fed0db08226211e17b594f8230d85cf228c64f39bbe2ca19341873cfab4f08c437f045bc2e","ssdeep":"1536:z0m2jm16r2F5PtTvHi55AVM61xpI6eO14pbUkbcy9Rn/5:6Wb1TvHi5MRyO1E7Pn/5","tlshash":"dc430262d69029cef725163c594efdb38064e8948e0524b1d6f936734f586bce3a08fa","first_seen":"2025-08-18T05:28:50.669991Z","last_seen":"2026-03-03T08:08:10.26247Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1240,"timings":{"blocked":804,"dns":0,"connect":0,"send":0,"wait":291,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapix.porn/images/18210_screen.webp?0","fqdn":"fapix.porn","domain":"fapix.porn","tld":"porn"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fapix.porn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 17:43:57 GMT","end":"Sun, 07 Dec 2025 18:42:43 GMT"},"fingerprint":{"sha1":"09:6E:F5:DB:4C:72:95:ED:57:BE:29:0C:50:F3:DB:42:85:75:58:B1","sha256":"88:B0:2F:84:DD:DE:B3:E7:06:11:34:EF:28:14:33:1D:0C:34:48:30:CF:A7:6A:66:B1:66:C2:CC:DC:90:DF:82"}}},"request":{"raw":"GET /images/18210_screen.webp?0 HTTP/1.1\r\nHost: fapix.porn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47384\r\nserver: cloudflare\r\nlast-modified: Tue, 21 May 2024 12:34:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"664c94c1-b918\"\r\naccept-ranges: bytes\r\nage: 2474\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ja84ROEgV4z%2BHWrg1b6kjaz3eZaQgfu9zbDQezRnsDPexiqEn0ngzcIMndHz%2FIIWej1pgEckWHpP6VXWB1%2F29hXzwbBxznLj\"}]}\r\ncf-ray: 9826cd69ec6756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1220876908ff4881b959ff4a361fc7fb","sha1":"3a366e94346b5746ed30eeba5573bc2c42902058","sha256":"c903a04e52eb5e4288aa7a67810590e40cc33fd3d4917dbe632080ebc68d3a11","sha512":"d397a0e6c81bbc1696c8d1924f0ce854ff3a4ad2679380f1e0f197d65cf52b88e4493ed32697ac13422307f3e5706e125295df18e45ac895fe7d4688deaac542","ssdeep":"768:dKW7/ZRSWzkg8Dt66QEyk0RO6hMj4ZNnuNSut/a7GSkAaP5A5eT0dz0be:gW7n7j8Dt66QP5PuEyS7E5AYYdz0be","tlshash":"3323f193ed92f78930a810426bbb08a74cc57d6bb8ca75ec92ddb15ca463541ce34d39","first_seen":"2025-05-09T12:52:10.744559Z","last_seen":"2026-03-03T09:47:10.9653Z","times_seen":54,"resource_available":false,"data":null}},"time_used":1510,"timings":{"blocked":53,"dns":2,"connect":1,"send":0,"wait":17,"receive":2,"ssl":1434},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.crazyshit.com/content/2020/09/5bec4d0e.jpg","fqdn":"media.crazyshit.com","domain":"crazyshit.com","tld":"com"},"ip":{"addr":"45.133.44.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"media.crazyshit.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 02:33:04 GMT","end":"Mon, 27 Oct 2025 02:33:03 GMT"},"fingerprint":{"sha1":"4B:C8:F7:57:68:32:B3:B5:70:31:3E:8C:32:BC:34:57:81:3A:54:C9","sha256":"8D:21:A3:34:ED:E8:B1:2C:20:3B:4F:FA:BD:47:8E:F6:08:39:62:2A:98:BF:7C:15:9D:CE:8E:4A:6F:44:6E:7D"}}},"request":{"raw":"GET /content/2020/09/5bec4d0e.jpg HTTP/1.1\r\nHost: media.crazyshit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 224838\r\nserver: nginx/1.24.0\r\nx-object-meta-mtime: 1599052494.837047722\r\netag: 8ab8fb052eb5474826a1b055f140122c\r\nlast-modified: Mon, 05 Apr 2021 12:40:26 GMT\r\nx-timestamp: 1617626425.32203\r\nx-trans-id: txad700f01b4404cfbb3996-0065ccf58b\r\nx-openstack-request-id: txad700f01b4404cfbb3996-0065ccf58b\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Tue, 23 Sep 2025 04:26:03 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":224838,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 720x540, components 3","md5":"8ab8fb052eb5474826a1b055f140122c","sha1":"813cf2be446ad22816aadbb3fd4d533a73b6646a","sha256":"7abdf2ec4166b08ffc7baea3de038643a47b2740bc946d3475c3cc868c7557a0","sha512":"6d3d29b3f2b69891190fb98ad6fda0ec6c18efcc8518d255b311086f089aa5a2a99079b272bfbf2dc92c012979a32062a932daef59c00e31ca448bf05221c030","ssdeep":"6144:JFLJDfKvseMH361vmJUJEydHu84s7JN2O:XVj16AJUJvxu8372O","tlshash":"fd242378dac1671d0018c5d23f0d62f8a8b94743d65b3554dfa4a4a7c9738beeec038a","first_seen":"2024-04-24T19:16:35Z","last_seen":"2026-01-12T17:24:48.627061Z","times_seen":10,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":61,"connect":21,"send":0,"wait":25,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.myspree.club/favicon.ico","fqdn":"m.myspree.club","domain":"myspree.club","tld":"club"},"ip":{"addr":"104.21.64.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"myspree.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 18:19:53 GMT","end":"Sat, 08 Nov 2025 19:18:28 GMT"},"fingerprint":{"sha1":"27:E4:F9:57:D2:34:F6:00:73:49:EA:E5:D6:CC:C3:5B:42:FE:3B:1D","sha256":"14:34:EB:0B:A6:56:EA:34:E5:AB:6D:85:ED:3D:E0:F0:DD:F6:33:FE:45:6C:20:BA:06:B1:39:08:E5:98:94:4E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: m.myspree.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aVwePmC8FtvN0uj0s9k14DOWD1WZsh2zJmmrl3pQqznaq%2BF2sJHBR2gAixFjkO4Ol3x9qIAZrr1JDITSsZ%2Bc%2BTPh%2Bmfz4sa5510dpQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9826cd848a895693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":10,"connect":1,"send":0,"wait":98,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sesenovel.com/favicon.ico","fqdn":"www.sesenovel.com","domain":"sesenovel.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.471Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.sesenovel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":39,"dns":16,"connect":187,"send":0,"wait":0,"receive":0,"ssl":317},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/c/cf50c59d3fe9f84af5a7cd1dc2806be3f3dc56d8.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/2X/c/cf50c59d3fe9f84af5a7cd1dc2806be3f3dc56d8.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68594\r\nlast-modified: Sun, 15 Jun 2025 22:45:35 GMT\r\nexpires: Mon, 21 Sep 2026 04:26:02 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68594,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1729, components 3","md5":"4fdbdb8881877b789f45c86c0f88f6a5","sha1":"cf50c59d3fe9f84af5a7cd1dc2806be3f3dc56d8","sha256":"acc0af1fd1752b5607379c6d77de2536d1670a828da363d488f1928e3d9ce2d8","sha512":"85d1f5ebd8767a3559d4dd5d6021ac889f6206e200aa0a6fd954f5b85e88a5b176548de6f769e8db844a80166666a97d6ba8545991cf139221a43fbefceda38a","ssdeep":"1536:qEtBy/zFS2zPxTB3CLklgmOHtpGR1fxGIfxl9Wzzz3m7ImcS:qEtuJB3lz7fxGIpXWzzD/S","tlshash":"0e6302dacfa609866b068b5034259ad20ef13713c7d4d746dbacf9ca37a11d54ac0bc3","first_seen":"2025-09-21T04:28:54.323622Z","last_seen":"2026-01-14T12:53:34.136295Z","times_seen":12,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/1X/40aee64d8603f0b56b0e2161ad3552486d91ea9e.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/1X/40aee64d8603f0b56b0e2161ad3552486d91ea9e.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 192260\r\nlast-modified: Sun, 20 Apr 2025 01:40:25 GMT\r\nexpires: Mon, 21 Sep 2026 04:26:03 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":192260,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 59x59, segment length 16, baseline, precision 8, 1080x1414, components 3","md5":"76b8f1404f97789aba09d6b6ded385ff","sha1":"40aee64d8603f0b56b0e2161ad3552486d91ea9e","sha256":"dedbba0c5e80c85f37157588501fc9cf8a3dd5facd2b9f4ca85b0203bc4cbe55","sha512":"4056b6d57f05792ca69e036070e166b436f9a794411689e4f856212b6514b977cee2a4bfcd09953ae5cf23d95ecf2002778d39f70116294c62741c950df9b10c","ssdeep":"3072:Tya4vFLUS9oVWctAFbhmuGlz78bVLh9WY/xRIfIYq1ppwYSXLeLCosYifAE+uXkZ:TRuDuocKFmzFaINs1ppwjCmTY9E+ckZ","tlshash":"b41412d6a0a47da0331f48234f2765f92ade9ab65ca32b8eb6d715a6c4f30d014d8139","first_seen":"2025-09-21T04:28:54.325882Z","last_seen":"2025-12-05T01:01:07.979257Z","times_seen":5,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baraag.net/favicon.ico","fqdn":"baraag.net","domain":"baraag.net","tld":"net"},"ip":{"addr":"185.178.208.171","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cisapp.baraag.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 18:50:20 GMT","end":"Tue, 21 Oct 2025 18:50:19 GMT"},"fingerprint":{"sha1":"4B:6A:F9:3F:E3:37:8A:FE:8D:C7:60:73:8F:6D:F0:B1:84:2C:0B:7D","sha256":"BB:01:09:DB:A3:38:79:7D:79:54:20:CA:C1:1E:7C:23:24:13:93:F5:D8:FA:A8:78:89:6D:FA:C4:CD:DD:E5:CA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: baraag.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XJIrFqf9owqPhoSd; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:09 GMT\n__ddg10_=1758428769; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:09 GMT\n__ddg9_=91.90.42.154; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:09 GMT\n__ddg1_=S0DQx4wwaAntfztAGHqF; Domain=.baraag.net; HttpOnly; Path=/; Expires=Mon, 21-Sep-2026 04:26:09 GMT\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: same-origin\r\ncache-control: private, no-store\r\ncontent-security-policy: upgrade-insecure-requests;, base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://baraag.net; img-src 'self' data: blob: https://baraag.net https://media.baraag.net; media-src 'self' data: https://baraag.net https://media.baraag.net; manifest-src 'self' https://baraag.net; form-action 'self'; child-src 'self' blob: https://baraag.net; worker-src 'self' blob: https://baraag.net; connect-src 'self' data: blob: https://baraag.net https://media.baraag.net wss://baraag.net; script-src 'self' https://baraag.net 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://baraag.net 'nonce-Cp3tFgFy+wSLdMNIWgDMRg=='\r\nx-request-id: c5957d87-345a-46f1-90bf-d5a539a38588\r\nx-runtime: 0.005290\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncontent-encoding: gzip\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m2.24-video.com/favicon.ico","fqdn":"m2.24-video.com","domain":"24-video.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:11.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"24-video.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 19:43:15 GMT","end":"Sat, 15 Nov 2025 20:40:54 GMT"},"fingerprint":{"sha1":"57:95:B5:16:8E:43:8E:B7:80:21:36:4C:57:4F:4C:68:94:0B:CB:3C","sha256":"DE:68:AE:55:79:3A:57:58:AA:E2:80:62:70:B1:54:2F:C1:14:D2:C1:5A:9A:75:76:33:A0:2E:FE:CB:23:56:51"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: m2.24-video.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Sep 2025 04:26:11 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A36lQNfajQE1Lar9JvnkWUO%2FNcR2MZZTPnq%2FwBLP2upifpiidbNMoDxZPeMxRDOK4d15%2BvHCsfm3x%2F1gR0hyZwxpUYHVrBuoi%2FSVnBY%3D\"}]}\r\nage: 168\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9826cd8c4cd47127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":27,"connect":6,"send":0,"wait":18,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240702-1/187b8efd6462fc2c0fa2f846f9dc34ec.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240702-1/187b8efd6462fc2c0fa2f846f9dc34ec.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 98938\r\nlast-modified: Tue, 02 Jul 2024 04:14:16 GMT\r\nvary: Accept-Encoding\r\netag: \"66837e98-1827a\"\r\nexpires: Mon, 13 Oct 2025 05:14:32 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98938,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"170d38dc216af49c6bdfe7ad7b1c82a9","sha1":"f5c35ad4150fd095cf17ce151bf3bd4a96a764a0","sha256":"6de6ac8e3de5ec8f3a07c4dd87df3f77560940a38a107df6aaee743c9c61640e","sha512":"26d65eddbda74142fb055497a54ad5c25409f06bc52b36c3f865505c5efcc1cf9593daa88b1c2339e633fd4b11bdf171f6057f54bb4e5cfd3087bd0014fa4efe","ssdeep":"3072:GAY99uNvTlJexRxlKVvtCBtuZVhhT4b7h:nY98NvTlsRxQtCBtuZVh+b7h","tlshash":"83a31294371a94ff85da58837d881af39e4470e791b3d0031d5f9329b972283ee0e69e","first_seen":"2025-08-09T01:33:32.66499Z","last_seen":"2026-02-15T23:32:24.85462Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2101,"timings":{"blocked":938,"dns":0,"connect":0,"send":0,"wait":658,"receive":505,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ljcdn.kd-pic6669.com/20240714/gZjVXubF/1.jpg","fqdn":"ljcdn.kd-pic6669.com","domain":"kd-pic6669.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.605Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /20240714/gZjVXubF/1.jpg HTTP/1.1\r\nHost: ljcdn.kd-pic6669.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/watch/48140495?wmode=7\u0026page-url=https%3A%2F%2F1080p.tub4us.top%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3b8z1leqd9ammnvw0gzjaat34ifxb%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2204%3Acn%3A1%3Adp%3A0%3Als%3A1749404415117%3Ahid%3A636548444%3Az%3A0%3Ai%3A20250921042606%3Aet%3A1758428767%3Ac%3A1%3Arn%3A359634713%3Arqn%3A1%3Au%3A1758428767508771851%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C26%2C810%2C206%2C48%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1758428761333%3Afip%3A68bd72ff7c9b5abc9c3f912930d63a42-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1758428768%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB-HD-VIDEOS%40AV4.us\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42534404)fip(1)ti(1)","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /watch/48140495?wmode=7\u0026page-url=https%3A%2F%2F1080p.tub4us.top%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3b8z1leqd9ammnvw0gzjaat34ifxb%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2204%3Acn%3A1%3Adp%3A0%3Als%3A1749404415117%3Ahid%3A636548444%3Az%3A0%3Ai%3A20250921042606%3Aet%3A1758428767%3Ac%3A1%3Arn%3A359634713%3Arqn%3A1%3Au%3A1758428767508771851%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C26%2C810%2C206%2C48%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1758428761333%3Afip%3A68bd72ff7c9b5abc9c3f912930d63a42-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1758428768%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB-HD-VIDEOS%40AV4.us\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42534404)fip(1)ti(1) HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1080p.tub4us.top/\r\nOrigin: https://1080p.tub4us.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccess-control-allow-origin: https://1080p.tub4us.top\r\nlast-modified: Sun, 21-Sep-2025 04:26:08 GMT\r\nlocation: /watch/48140495/1?wmode=7\u0026page-url=https%3A%2F%2F1080p.tub4us.top%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3b8z1leqd9ammnvw0gzjaat34ifxb%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2204%3Acn%3A1%3Adp%3A0%3Als%3A1749404415117%3Ahid%3A636548444%3Az%3A0%3Ai%3A20250921042606%3Aet%3A1758428767%3Ac%3A1%3Arn%3A359634713%3Arqn%3A1%3Au%3A1758428767508771851%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C26%2C810%2C206%2C48%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1758428761333%3Afip%3A68bd72ff7c9b5abc9c3f912930d63a42-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1758428768%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB-HD-VIDEOS%40AV4.us\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842534404%29fip%281%29ti%281%29\u0026redirnss=1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-credentials: true\r\nset-cookie: yabs-sid=1942222291758428768; Path=/; SameSite=None; Secure\ni=mU7atXhXGS6zt1LwqEVea5CuqbFhWkFT+omaBtcZq/BOIYtswt7I4WxZ1klNCltXO8YRHS3uZEUq3lb13k36BjDmxlU=; Expires=Wed, 19-Sep-2035 04:26:02 GMT; Domain=.webvisor.org; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=7964145321758428768; Expires=Wed, 19-Sep-2035 04:26:02 GMT; Domain=.webvisor.org; Path=/; Secure; SameSite=None\nyuidss=7964145321758428768; Expires=Mon, 21-Sep-2026 04:26:08 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure\nymex=1789964768.yrts.1758428768#1789964768.yrtsi.1758428768; Expires=Mon, 21-Sep-2026 04:26:08 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure\nbh=YOD8vcYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Mon, 26 Oct 2026 04:26:08 GMT; SameSite=None; Secure\nbh=YOD8vcYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Mon, 26 Oct 2026 04:26:08 GMT; SameSite=None; Secure\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 21-Sep-2025 04:26:08 GMT\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":168,"dns":21,"connect":45,"send":0,"wait":50,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haha888.xyz/favicon.ico","fqdn":"haha888.xyz","domain":"haha888.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.400Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: haha888.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"haha888.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"haha888.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sex-studentki.live/images/17065_screen.webp?0","fqdn":"sex-studentki.live","domain":"sex-studentki.live","tld":"live"},"ip":{"addr":"172.66.147.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sex-studentki.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 16:43:00 GMT","end":"Tue, 28 Oct 2025 17:40:26 GMT"},"fingerprint":{"sha1":"BB:DE:4C:55:01:C9:85:B4:38:00:9E:3B:67:57:AA:9D:D3:D9:E0:A2","sha256":"F3:E2:33:20:BA:66:31:CC:9A:79:2F:2E:8F:E5:D1:8D:66:D0:40:39:7A:3F:6A:16:BD:70:0B:EC:3F:6F:2C:91"}}},"request":{"raw":"GET /images/17065_screen.webp?0 HTTP/1.1\r\nHost: sex-studentki.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 96420\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Dec 2023 23:03:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"658b5bc0-178a4\"\r\nexpires: Wed, 24 Sep 2025 09:19:40 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 327985\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UYwN3m69g1Ch9IGhI%2BMnovZ6z0zvjP4O8RgKtZ9okV6IvvfsJtjC31eLWVwYQn6YSVi%2BlWYmI6s9eX10uhpCCHgGhD75DnPGjTrcQLVCeLH4QA%3D%3D\"}]}\r\ncf-ray: 9826cd69baedc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96420,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"effcd18e0f26d0345dc6ac5a117751af","sha1":"6025902f6fe5ac6b2a0b1263c5036c4c22ff5e3e","sha256":"41cc6a83bc5e58df63f64399ccc9648d806fae86428c253bfca3f8363d0213e9","sha512":"ced73b855f8c15543c22b312a7708ba25aea9b9d3c07f4003548f72657cc5365497674f1d0312e4f80e6944bbca5f5e9dc25e78173fe1a1938143a196051bb07","ssdeep":"1536:6deObfaPBUPlJC1GxvnjoB8fPxHLqE+oclp2W+uHpASpZYedvqcyXvkqIJtj2:6pVPvdnjp3tP+ogp28TvwshJti","tlshash":"93931296cc9d3679e25e1cc1198682e2bcc0024571c6a67c9f8763f95af26c43b7872e","first_seen":"2025-09-21T04:28:54.330095Z","last_seen":"2026-01-02T15:38:17.853565Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1611,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":9,"receive":2,"ssl":1591},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mlkjcrm.oss-cn-guangzhou.aliyuncs.com/GAKVa1n6ID/wI9T6U/gUwOgBk?t=EaZI3nDkR6","fqdn":"mlkjcrm.oss-cn-guangzhou.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.134.41.213","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:11.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cn-heyuan.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:16:37 GMT","end":"Sun, 23 Aug 2026 08:16:36 GMT"},"fingerprint":{"sha1":"D8:A1:33:A7:26:69:EE:38:B1:BE:09:BC:A9:E8:7B:FA:B5:1C:A4:C4","sha256":"CC:95:3F:8F:9D:E4:18:F9:85:FF:89:E0:FE:C9:BD:47:64:0B:A9:FC:A3:5A:77:70:A2:6D:17:25:5B:8C:F4:0C"}}},"request":{"raw":"GET /GAKVa1n6ID/wI9T6U/gUwOgBk?t=EaZI3nDkR6 HTTP/1.1\r\nHost: mlkjcrm.oss-cn-guangzhou.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sun, 21 Sep 2025 04:26:12 GMT\r\nContent-Type: application/xhtml+xml\r\nContent-Length: 7153\r\nConnection: keep-alive\r\nx-oss-request-id: 68CF7E6421D34430366A762B\r\nAccept-Ranges: bytes\r\nETag: \"7E36074CC576FC79FF63CA78AFDA9093\"\r\nLast-Modified: Sat, 20 Sep 2025 18:10:12 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2007375890217848784\r\nx-oss-storage-class: Standard\r\nx-oss-version-id: CAEQgwEYgYCAu8GjocsZIiBiMThiZDQ0NGE0NzM0NGJlYjE1MTllODA5NjQ5YTRlNw--\r\nContent-MD5: fjYHTMV2/Hn/Y8p4r9qQkw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7153,"size_decoded":0,"mime_type":"application/xhtml+xml","magic":"XML 1.0 document, ASCII text, with very long lines (6373)","md5":"7e36074cc576fc79ff63ca78afda9093","sha1":"ae3922cbe38d89ad21ccd261f31d42f3fd00a3ab","sha256":"c5926f055ecadbe9385e1cc4c7a3dcb6472167e318d7007ecd284e5a53e8aeb6","sha512":"038e7cc078735c7a1afbe440918e0f63b9fb375f39a17359e3c569695a8faad1c1300e5ede46abba4f508b5c8b590f809531623179fcfdc0ca630d2c7284cdd7","ssdeep":"192:/wJniHhRcvRkkFFqRLL+P/aP6tyAMt41IxlkDL:qi38CkFI+6P60AMjcDL","tlshash":"09e1c50a36d12a00535767f3232ba9e5d2848abb3ce0458bb30c7dd8af9195dc385b75","first_seen":"2025-09-20T06:33:55.05459Z","last_seen":"2025-09-23T21:08:32.299016Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1916,"timings":{"blocked":827,"dns":51,"connect":257,"send":0,"wait":258,"receive":0,"ssl":520},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.aosikaimge.com/20221004/V92ESbRU/1.jpg","fqdn":"img.aosikaimge.com","domain":"aosikaimge.com","tld":"com"},"ip":{"addr":"64.112.78.82","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aosikaimge.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 24 Dec 2024 10:28:23 GMT","end":"Fri, 23 Jan 2026 10:28:22 GMT"},"fingerprint":{"sha1":"BC:19:8D:FF:22:32:94:8C:04:80:02:CE:1A:59:1C:91:24:15:5C:66","sha256":"F8:17:7C:E0:46:83:E7:7F:FB:CB:88:66:23:61:56:22:39:3A:23:8B:BF:3B:08:F3:37:F4:92:5C:72:1F:D8:B8"}}},"request":{"raw":"GET /20221004/V92ESbRU/1.jpg HTTP/1.1\r\nHost: img.aosikaimge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6157\r\nConnection: keep-alive\r\nLast-Modified: Tue, 04 Oct 2022 23:51:18 GMT\r\nETag: \"633cc6f6-180d\"\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6157,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 137x171, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 240x320, components 3","md5":"00436cbe651eda0ca4a2ab82bab2e73a","sha1":"0d4a343a49b16a64fd61848e0fa73d44585bb660","sha256":"15a0a106b2a9a2569f82e1e7e1448da653a9c83fa1acb9ff4b256f3d8bce0b2f","sha512":"9944d9e66cbb4d4ade62f45902cf4e00a18776ce73e1e77f215df8049af6a4752100b95089fa1af6c4d8533d1cecd72f8615da340128b7abdd1489b443e10601","ssdeep":"96:emZzEcfW9rJ+xme5hPsoxuZsgd+Dtzp9YKJ0R6XnuB5YHWoy/slDmcZQdm:ecZfW9rJ+jxuZsGCzp9YKJ0R6gNoyAam","tlshash":"14c1ae672e1ac2a3defb81449101d123e2cb96c2d852edc3b7aa89f9d778e4504c14e6","first_seen":"2024-08-19T15:28:25.788685Z","last_seen":"2026-01-15T02:11:08.700191Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1704,"timings":{"blocked":131,"dns":1,"connect":145,"send":0,"wait":163,"receive":1,"ssl":1257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250710-1/96ff927429f7f91e9ff5c5a960dbbfd3.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250710-1/96ff927429f7f91e9ff5c5a960dbbfd3.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5244\r\nlast-modified: Thu, 10 Jul 2025 02:47:18 GMT\r\nvary: Accept-Encoding\r\netag: \"686f29b6-147c\"\r\nexpires: Wed, 08 Oct 2025 03:16:48 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5244,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 320x240, components 3","md5":"5cf355c5b84f22e1effb574fc76b9e7f","sha1":"4bb30a60b4b2beec3a445991a0fa3bda24f9024f","sha256":"b74d672237b97b2179216184414bd8944d8a3dd69f9084913cc58e9f035aa00d","sha512":"484c2b253f395bcb816a75ccf8d13a9fb3e08f18a0c4cc880a29ea04943eec45bea51a7b59fa7992ad1c9048c3755ffdab310f7c1c0969e1a36ef4233a934f7a","ssdeep":"96:RZ8zEIoXVScaI8GOzpubI1P6ks6riFAsVY+08yoxikpfpVb:Rm8VScOG+u81DsmS2cfxiqBl","tlshash":"79b19f977922010e8c0bbcbf0f1a781a61c84e4bcf355597f2af4052d659a7c496bf1d","first_seen":"2025-08-14T14:04:53.301642Z","last_seen":"2025-12-25T10:42:57.815201Z","times_seen":70,"resource_available":false,"data":null}},"time_used":1641,"timings":{"blocked":608,"dns":0,"connect":0,"send":0,"wait":651,"receive":382,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/upload/vod/20241010-10/0ba1431c303bd1a330cf964713999011.png","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET /upload/vod/20241010-10/0ba1431c303bd1a330cf964713999011.png HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mhwe6hhaNIl6fY7wgz1zSiOl0UnCNBqjPZsQm6hZSn9c%2FB%2FpSALwYxVPxrxNjsdh0W%2FkD8i01wslbtFA73Uh8VCe%2FhvP13wifBiVY8eSC8Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9826cd7499075a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmtu.sltusl.com/upload/vod/20220903-4/47376860ab56a310df28c86e5d69faba.jpg","fqdn":"fmtu.sltusl.com","domain":"sltusl.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.684Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20220903-4/47376860ab56a310df28c86e5d69faba.jpg HTTP/1.1\r\nHost: fmtu.sltusl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.58g.top/favicon.ico","fqdn":"www.58g.top","domain":"58g.top","tld":"top"},"ip":{"addr":"104.21.23.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"58g.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 19:00:35 GMT","end":"Tue, 02 Dec 2025 19:58:02 GMT"},"fingerprint":{"sha1":"58:47:1B:64:C8:D3:B9:CA:C2:5A:30:91:D7:FB:EA:C9:FB:08:39:55","sha256":"65:99:6A:36:32:A4:40:D5:75:9F:11:FA:8D:A7:B5:6A:74:2E:A6:72:12:17:8F:F7:F5:42:7E:57:0F:B9:40:07"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.58g.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aBn6yppcuOzgoYtAv2vNoEndhGDzTzEmMba%2FJaZ0Na50lTxRFFemmVFQ5pFX0d%2BjRzMCM%2B9TYQqwffx1NYMocRohrXv7bVz3fdYcDz7eYqhbmrw%2B4n0OB9dIxkRrfA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\ncf-ray: 9826cd89dbf8b500-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9826cd89dbf8b500\", cfL4;desc=\"?proto=TCP\u0026rtt=1583\u0026min_rtt=399\u0026rtt_var=2291\u0026sent=6\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3186\u0026recv_bytes=1061\u0026delivery_rate=7607705\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=ac8481b01c061cff\u0026ts=234\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":50,"dns":15,"connect":15,"send":0,"wait":22,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.58g.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.effedupmovies.com/wp-content/uploads/2023/01/daddyslittle2012.jpg","fqdn":"www.effedupmovies.com","domain":"effedupmovies.com","tld":"com"},"ip":{"addr":"104.21.92.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effedupmovies.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 17:38:37 GMT","end":"Fri, 19 Dec 2025 18:02:54 GMT"},"fingerprint":{"sha1":"82:CE:B8:3B:23:8D:F5:3E:91:F6:66:8B:F0:81:55:64:3E:05:09:AA","sha256":"8F:98:21:23:63:91:0D:45:BF:F7:30:FA:08:BA:EF:CA:67:21:BD:97:3B:69:04:A0:56:DE:7B:7B:7D:FE:C8:37"}}},"request":{"raw":"GET /wp-content/uploads/2023/01/daddyslittle2012.jpg HTTP/1.1\r\nHost: www.effedupmovies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 12890\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Sep 2025 18:16:39 GMT\r\netag: \"68ceef87-325a\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-protocol: HTTP/2.0\r\nx-request-id: ba0c3cf10328e711cc5078cb82618eec\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ii02hIYzBbGLvwri3Z81AuHEssIwKyWYVhjgL0ROl9gsfb0%2BrKfhDF1jtds2xZMSdxe%2FKc%2Fnq02Gw1WyDIrEfnTWUJSWKp2RiLebWumEpEJhEM%3D\"}]}\r\ncf-ray: 9826cd687bb956be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":12890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"ab96da12d8312559415480d1f3036eb0","sha1":"1d014a2419e02827bd13334af29578b1c9b4d6bf","sha256":"1cca498904b87c8b14e4100203f31d6bd9b9cac47da3b99ec80f6042c91b47f9","sha512":"4fc3dc1aac1efb54e7877b0bfbd23ea2db2e4f65d9fd4e5039435635caaf167f05df17cee77dbd4d44aa1d2f0911aa6384b34eb8372920dc05fa84b98acf905f","ssdeep":"384:hqhkHlVJH8TaseXN+yXLnFnbrFF7E162qFuU4Khaz5:AOr8TyI4VX2qKV","tlshash":"5042bffbdbc7842102ba18ea5ded053750b294bc0e0b1ac1e6f8634228d36810d5ef4d","first_seen":"2023-05-04T19:26:02Z","last_seen":"2026-04-03T02:29:30.276497Z","times_seen":160,"resource_available":false,"data":null}},"time_used":3345,"timings":{"blocked":1304,"dns":4,"connect":6,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ljcdn.ddljsytt.com/20241105/fb5LhfAz/1.jpg","fqdn":"ljcdn.ddljsytt.com","domain":"ddljsytt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.648Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /20241105/fb5LhfAz/1.jpg HTTP/1.1\r\nHost: ljcdn.ddljsytt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.youtube.com/vi/xPK5hlqj0Eo/0.jpg","fqdn":"img.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:08.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /vi/xPK5hlqj0Eo/0.jpg HTTP/1.1\r\nHost: img.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21124\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Sep 2025 04:26:08 GMT\r\nexpires: Sun, 21 Sep 2025 06:26:08 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1617689322\"\r\ncontent-type: image/jpeg\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21124,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3","md5":"0b20c8e617340e7058cbb7284dd7b779","sha1":"31846d21f5253edb1378e7dfb20f1954bb18e88a","sha256":"14f7ac9f5b7fc873e1e86824d5627adce850cab9196989474d8c632950439d29","sha512":"2e8299892813c0e78553b2d14ef0ac02dd9884a463c66ffd8c41f237125e8ee568df75bf5f764f1d8d5ae5e14affc0ecc36db83474a81209025cd57374121df2","ssdeep":"384:FiO3tYD0A20nV9XlGjD49IH9GCn419jZBxB/sFSHqos3OVILIzpdmyAt:cOdYoA20nV9Xwf49ULA7xNsR+9z3md","tlshash":"0a92af62977163c22f24a8c4d77e016ab6e73c2f729773f0b1d054342adf56d2ca6504","first_seen":"2025-06-05T17:56:20.506749Z","last_seen":"2025-11-10T03:17:22.905765Z","times_seen":4,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":132,"dns":464,"connect":30,"send":0,"wait":40,"receive":9,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kwai.com/favicon.ico","fqdn":"www.kwai.com","domain":"kwai.com","tld":"com"},"ip":{"addr":"95.101.11.138","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Jul 2025 08:23:35 GMT","end":"Sun, 30 Aug 2026 08:23:34 GMT"},"fingerprint":{"sha1":"4A:A1:45:2B:02:C8:86:65:84:02:D2:2B:EF:71:1F:70:E4:44:DF:B5","sha256":"CF:B9:73:AE:76:85:CD:63:FB:EE:A2:9A:2D:E7:B0:B4:2C:2B:CB:EB:4D:79:36:A4:4D:6C:98:85:76:5E:F4:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.kwai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 2006\r\nlast-modified: Thu, 18 Sep 2025 08:52:48 GMT\r\netag: \"68cbc860-7d6\"\r\ncontent-security-policy-report-only: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.mythad.com https://*.kwai-pro.com http://*.kwai-pro.com http://*.kwai.net https://*.kwai.net *.kwai.com *.snackvideo.in *.kwai.me *.kwai.app *.kwimgs.com *.yximgs.com *.cloudfront.net *.kuaishou.com https://*.gifshow.com http://*.gifshow.com https://log-sdk.ksapisrv.com https://www.googletagmanager.com https://gifshow-static.download.ks-cdn.com https://static3.avast.com https://translate.google.com https://www.gstatic.com https://fonts.gstatic.com https://connect.facebook.net www.google-analytics.com hm.baidu.com m.snackvideo.com http://*.ap4r.com https://*.ap4r.com https://*.typekit.net http://*.typekit.net ak-sgp-pic.snackvideo.in tx-sgp-pic.snackvideo.in ws-sgp-pic.snackvideo.in g-us-kampic.golden49.net g-us-kamcdn.golden49.net m.kwai.com sentry.kuaishou.com https://cdn.jsdelivr.net https://at.alicdn.com https://www.facebook.com https://snap.licdn.com https://px.ads.linkedin.com https://cdn.linkedin.oribi.io https://www.linkedin.com https://*.google.com https://*.google-analytics.com https://*.doubleclick.net asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;img-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;connect-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;report-uri https://csplog.kwai-pro.com/log/kwai/wwwkwai\r\naccept-ranges: bytes\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8598787bb964772e7c58335630cd2184","sha1":"43bba31482ccfacc5e94cb05f7174ccfb22e1917","sha256":"45526cf4f38253c14eec86886eabcff170c500d7bbe04cda7e24db1a003fe4f3","sha512":"9755e5fbb5248ee9d09f0c32ac0f620829f61bdaf7d74fc6a31a45c60292e07e1241d7c64996474aac54ac2b326963b8ee6adfa61ab942b78264741e5862168d","ssdeep":"","tlshash":"d641e8ae8e969c4fa5c060169238c384b9b51c87e1447de350026d8ee06be98771b1eb","first_seen":"2025-07-25T08:09:31.5089Z","last_seen":"2026-04-03T22:52:06.848343Z","times_seen":454,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":53,"connect":1,"send":0,"wait":216,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/yq2/media/videos/tmb/000/000/404/5.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"104.238.221.35","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.apian088.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 17:40:13 GMT","end":"Wed, 10 Dec 2025 17:40:12 GMT"},"fingerprint":{"sha1":"53:DC:8F:28:38:C9:D5:91:E4:CF:AC:96:11:AA:F9:35:7B:97:26:A8","sha256":"C2:42:F4:43:A9:A1:46:44:B1:D7:91:31:1E:D4:6B:51:CA:22:77:44:EF:9C:28:BF:EF:76:01:F2:F9:03:A5:FC"}}},"request":{"raw":"GET /yq2/media/videos/tmb/000/000/404/5.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9090\r\nLast-Modified: Sat, 23 Mar 2024 12:21:16 GMT\r\nConnection: keep-alive\r\nETag: \"65fec93c-2382\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9090,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"b4e30eabf04502ebd9c1187dc20da82b","sha1":"5c8585c69c4a8a142d13c9faa0b86100a8e1304c","sha256":"6b7499b69f0e8dbf1fae5dd8f5fa11552fe4d6ad417fdefd19b051af52b92f9e","sha512":"76d0b8519ab45e57c60d901291294d76041ffaa4f2e93f63c971c6bdff1a0976bcce57a8137f07fda1188f75d488ae85fdec979c972a9c28920e3b0101eb7ce7","ssdeep":"192:kRrPlxrGTdb4KBvxxquAvPv4TGJ2QF16ozp/okyLPWB9:kRrPyJb4KpSuYPv2GJT1ZzMDWz","tlshash":"f6129e92479b8117e03e6b79415daa88fb185a41e5686f0f26ac26231fb85dc12e83c3","first_seen":"2024-04-18T22:19:43Z","last_seen":"2026-03-01T16:28:28.428705Z","times_seen":273,"resource_available":false,"data":null}},"time_used":1669,"timings":{"blocked":182,"dns":0,"connect":182,"send":0,"wait":173,"receive":0,"ssl":1110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rrx1.com/vs/74629029.jpg","fqdn":"rrx1.com","domain":"rrx1.com","tld":"com"},"ip":{"addr":"172.67.132.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rrx1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 16:06:49 GMT","end":"Thu, 18 Dec 2025 17:05:20 GMT"},"fingerprint":{"sha1":"E0:41:54:39:5D:2F:C3:A8:E9:CE:8E:E5:D7:E6:16:A6:52:13:B3:82","sha256":"F2:BA:D9:E3:D0:D2:72:7C:9D:1F:F1:B1:32:62:AE:4F:7C:11:E1:42:40:4B:40:B3:2C:8F:D2:27:EF:6F:D9:F9"}}},"request":{"raw":"GET /vs/74629029.jpg HTTP/1.1\r\nHost: rrx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 94835\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 24 Mar 2020 21:32:43 GMT\r\netag: \"5e7a7c7b-17273\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-cache-status: HIT, HIT\r\naccept-ranges: bytes\r\nage: 353726\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2Bz8258MkO3wsA%2Bl0ai6fqEf5wGJv392ReoSQOdn9f0URrB%2FBevEeFMeyBPVvXm2m37rAjc1T0qnvJVhyyHUOhPE77Orbm7p\"}]}\r\ncf-ray: 9826cd6a9ca35fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94835,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1280x720, components 3","md5":"7c8247c933c311782a7e074d4fa72d0a","sha1":"18340b5486dd1d90ade5787abfa51a7376269514","sha256":"0a3c2eca4bcbf399810a36e9a44419deeac96468fb7987f7add0de59ff5019ea","sha512":"5afe49ce769144cd5bd9f09cce670c1492bd3791b1e6547ae84e0cf67bb0a1b6e08c2fd05aff0a1f3765eed290c7974543fa37843410809b83a46ae2ab37620e","ssdeep":"1536:6HznThh5GG8/wPQK9V45n3FaMdk5Oa86tJJhgUOXxGP5b8oJ88xk1+4yzPPnx8Op:0V3W/uFn45nMMdYfrbyyb8oRm7XaF","tlshash":"25931242e312a4dcd92bdef5b235deb6d8fedfa11482345600634887b950e8d195cb3a","first_seen":"2025-09-19T20:52:30.232743Z","last_seen":"2025-09-21T04:28:54.337184Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1434,"timings":{"blocked":204,"dns":2,"connect":1,"send":0,"wait":12,"receive":3,"ssl":1207},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img2.javdove.com/media/videos/tmb/25866/default.jpg?v=1689734192","fqdn":"img2.javdove.com","domain":"javdove.com","tld":"com"},"ip":{"addr":"172.67.199.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javdove.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 12:16:31 GMT","end":"Thu, 11 Dec 2025 13:14:42 GMT"},"fingerprint":{"sha1":"02:8B:28:94:C1:98:0B:6E:D9:E1:97:6A:B0:2A:AE:21:48:DA:F0:6E","sha256":"74:5F:0E:35:C2:1A:B9:64:00:DC:CE:F9:58:71:AA:4D:E1:10:5A:AD:DF:1B:3B:F4:50:19:61:12:70:80:A2:3E"}}},"request":{"raw":"GET /media/videos/tmb/25866/default.jpg?v=1689734192 HTTP/1.1\r\nHost: img2.javdove.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 521 No Reason Phrase\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncontent-length: 6989\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\ncf-ray: 9826cd75cfad1ae6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"521","status_text":"No Reason Phrase","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5.porno.supply/uploads13/posters/1/937/amateur-dominating-daddyyy-picsjpg-9VQ3TM.jpg","fqdn":"cdn5.porno.supply","domain":"porno.supply","tld":"supply"},"ip":{"addr":"172.67.217.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porno.supply","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 14:52:27 GMT","end":"Sat, 22 Nov 2025 15:51:08 GMT"},"fingerprint":{"sha1":"5E:C4:82:60:CE:0D:74:2E:63:5C:E6:6A:35:AB:55:38:EB:A5:05:50","sha256":"C3:B6:5F:57:F3:3B:F0:B6:A9:50:82:87:8A:43:3F:5F:E3:93:93:F8:8C:62:1F:4F:C8:E2:19:FB:0F:5D:32:3B"}}},"request":{"raw":"GET /uploads13/posters/1/937/amateur-dominating-daddyyy-picsjpg-9VQ3TM.jpg HTTP/1.1\r\nHost: cdn5.porno.supply\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42006\r\nlast-modified: Mon, 26 Sep 2022 16:30:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6331d3ab-a416\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 1986253\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r9XTQ84DZ59D76TqBfbSsT15ExF5SVjsrnRGAYqfvvmwKAvRN%2FEMQPkJAw1GvxW8mtQFsQZ2LiPhzhbkA4eU2VBFawSKAcXnqLgOWaMzeKKF\"}]}\r\nserver: cloudflare\r\ncf-ray: 9826cd6a2f553181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42006,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 608x1080, components 3","md5":"779007a817ece469d5371062bab46ee8","sha1":"d7490734882cf80946fd4b4e54ae5bd74ed2a46c","sha256":"46933b33fb1d3b4d87fade3337072e98a9d0fede13791cbe2ef57fbb71bcf470","sha512":"df3c40efe67f8ad7765733e73de3d9aa0cca8fad55e9175536f7121f628f4fe57334f701f4c5d46646289cd6e16c2673fd8682760a33afc112ac3520066b9b27","ssdeep":"768:i1c3RaMpU0N9E27AZ//iAwlN1kjzSM66LXdALMcHo/fLr9tGG:i1qRaM60NKa7NVMrLt0McHEfLxX","tlshash":"661302253a45e94bc466f5f3e17205baa46c66c14f714b0fc9b878cfad6479e382f240","first_seen":"2025-08-18T22:15:36.231381Z","last_seen":"2026-03-02T16:55:39.807172Z","times_seen":54,"resource_available":false,"data":null}},"time_used":1504,"timings":{"blocked":115,"dns":1,"connect":1,"send":0,"wait":9,"receive":2,"ssl":1370},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.dochka.org/ph/img/21/211498521_th.jpg","fqdn":"img.dochka.org","domain":"dochka.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.980Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ph/img/21/211498521_th.jpg HTTP/1.1\r\nHost: img.dochka.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"img.dochka.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"img.dochka.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/1/1348320c68e1750d4532e128e0a10d41ce7480c9_2_611x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/2X/1/1348320c68e1750d4532e128e0a10d41ce7480c9_2_611x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/num6gusa_header.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 09:48:24 GMT","end":"Sat, 08 Nov 2025 10:45:39 GMT"},"fingerprint":{"sha1":"4F:F9:25:37:EE:42:8B:1E:5C:AA:F5:BD:BF:CB:3A:CE:FD:84:E3:68","sha256":"E9:D6:87:C8:76:D3:FC:EE:D6:80:61:98:3C:B4:69:F2:52:5D:24:92:95:9E:91:B8:16:F5:EF:BB:CD:64:21:8A"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/num6gusa_header.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2617799\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 21 Aug 2025 21:16:04 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=obelNSvKqAGFgc5lxQ5%2F8B5xRzgwUrYKLpQXKtEeWxpXJafpJ6ui57mGdLs8VRiATOMiNKSY5VJVcMrVI82QNuKldvLcIfIsPqk%3D\"}]}\r\ncf-ray: 9826cd5d1944120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106161,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 720x540, components 3","md5":"2920c7b11b2b3f06d0449733c3b20358","sha1":"e6af9bd4e237be38c7a0f6fecf857e8d4365cc22","sha256":"b64557e3171bc3af332204322efca25df461f52565ef50041a6287ad6f7af66b","sha512":"99a7e9ba417c88ceb4fbf0ac592f71f902981510674c5d28a80a7114615aaefcae9818a45a44c320fd8be101c653692bc820e95b7c0b57a503dfc4e1e3ea6a78","ssdeep":"1536:b1sVt5dZN2AP/OH0HTjPtECnsqJf7RgmY2v6FsUYV5oOnoSYZ7fM0sylSOSgS:GVt5d5HTTuiJf7RgmY1LSuOjYZ70HzOk","tlshash":"b5a302dd93781f7bb06d8d4bd2df0dba66cc817603e7641a72452e6897ec0b0322ac59","first_seen":"2025-08-14T16:14:38.758718Z","last_seen":"2025-09-21T04:28:54.339531Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagina.nl/favicon.ico","fqdn":"vagina.nl","domain":"vagina.nl","tld":"nl"},"ip":{"addr":"217.22.19.82","port":443,"asn":42567,"as":"Mojohost B.v.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:09.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagina.nl","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 23:02:59 GMT","end":"Sun, 09 Nov 2025 23:02:58 GMT"},"fingerprint":{"sha1":"82:2E:85:CF:76:6C:A2:57:CA:EF:5A:1D:8A:59:D8:7B:78:29:AA:CA","sha256":"F6:B4:A6:47:58:4A:8E:E5:9D:C2:D5:9A:74:84:14:2B:52:C5:6D:AF:AF:44:03:24:B0:8A:7B:BC:55:11:69:C9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: vagina.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:09 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 1406\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Wed, 02 Oct 2019 10:48:03 GMT\r\netag: \"57e-593eb34069ec0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public\r\nexpires: Mon, 21 Sep 2026 04:26:09 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"1199de54d3074cea57bcd4b1184e738d","sha1":"1357919d5bc05de2950cf419f8dd6cb5ae2e2795","sha256":"6aa15bc30bc9df805c0096c7f49b32882edfd0b5d6138513e0483833d3002c71","sha512":"9f67102c113d1f05e28a855fcad5071739063a6a59cd99373122b3ab33e06ba2347a5567ca5d9bfd5d0c0a44cafc8e1484611e8a810c74673cc50c83e558da04","ssdeep":"","tlshash":"9d21eb2af813b018c226cf7582b891100203c0321e27236e6d1d8db88c05289de6fcc2","first_seen":"2025-07-26T10:06:05.176883Z","last_seen":"2026-03-03T08:08:10.2097Z","times_seen":25,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":26,"connect":17,"send":0,"wait":18,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/1X/076068488ad14a6a45030b50b06a8fe9dcc622a5.png","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/1X/076068488ad14a6a45030b50b06a8fe9dcc622a5.png HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 68520\r\nlast-modified: Wed, 30 Apr 2025 04:31:49 GMT\r\nexpires: Mon, 21 Sep 2026 04:26:03 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 180, 8-bit/color RGB, non-interlaced","md5":"f67be4086c97119cd01aeebb8d4f4cd2","sha1":"076068488ad14a6a45030b50b06a8fe9dcc622a5","sha256":"e3d8c866666f29bace9103fb2152dbbf3c05c99aacfd752a1737b868e809a228","sha512":"37dd88cf73c456a74aa3e046cae61e11c1436a726cd5de6df745d23b8fde03217e7f6f53ea09fa315701054d5334073214b3e4987eb9fdb68147d169eb419f5b","ssdeep":"1536:5QmcRNmzkttA6PlDyOkEA8LEQiNfgzqUZtKRY6s8xJ8dKoJXCvl0v:5QNflPxxZkfiwXxzolv","tlshash":"f0630282d9ad38a3ddb20b8be2370eaf747712f18f15676685c7e40948e3dc925d4381","first_seen":"2025-09-21T04:28:54.342061Z","last_seen":"2025-11-12T09:41:03.309648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka2.com/uploads/posts/2022-07/medium/1657183020_00-01-32.jpg","fqdn":"pornolomka2.com","domain":"pornolomka2.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.360Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/posts/2022-07/medium/1657183020_00-01-32.jpg HTTP/1.1\r\nHost: pornolomka2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntube.b-cdn.net/thumbnails/f3a448e3f96e651ccbb6166d3e5c83c20c88605b.jpg","fqdn":"cdntube.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /thumbnails/f3a448e3f96e651ccbb6166d3e5c83c20c88605b.jpg HTTP/1.1\r\nHost: cdntube.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2450\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 114851\r\ncdn-uid: 610bc618-7bcd-4e37-a18e-2efa3a8e9c35\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sun, 29 Jun 2025 00:19:35 GMT\r\ncdn-storageserver: DE-1134\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 1102\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 08/09/2025 14:30:28\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9d4da9d4d563a6a20bb0b8a3266ce58d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"851669ea716d319838f2db48a1c3aac0","sha1":"b806c6a8f71026b7f9012584e25c4ae8b9e8fc5e","sha256":"e105a28321d51580ec1299e501450c0f4a9231c5c3c393b5ef9b36e3c22a48d7","sha512":"607c3dcfb648cad0868058181dcc7750a090419a323055e5ff89cdee7ff85393ca170cae8bf1150d3152cf6ed06bdb12c3febc7981e3607cf9f722d8be3c90a0","ssdeep":"","tlshash":"64513a704234e518cd57ccc68158a8c672aa8fcd0bd69a7a2c9e21edab219f0cc14986","first_seen":"2025-05-23T07:10:10.232012Z","last_seen":"2025-11-15T05:45:33.556422Z","times_seen":76,"resource_available":false,"data":null}},"time_used":1646,"timings":{"blocked":-1,"dns":3,"connect":7,"send":0,"wait":13,"receive":0,"ssl":1610},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"missvid.com/favicon.ico","fqdn":"missvid.com","domain":"missvid.com","tld":"com"},"ip":{"addr":"172.83.152.7","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"missvid.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 07:33:20 GMT","end":"Sun, 14 Dec 2025 07:33:19 GMT"},"fingerprint":{"sha1":"DE:47:4A:9E:F7:67:A1:AB:88:F9:0E:8B:88:2F:E0:2D:03:9B:B9:48","sha256":"0B:12:7E:93:FE:08:06:DA:07:6B:A8:42:22:86:D2:A3:54:D8:E5:76:E5:98:09:B0:B5:80:A0:01:86:F4:C7:25"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: missvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 21 Sep 2025 04:26:16 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://mlkjcrm.oss-cn-guangzhou.aliyuncs.com/GAKVa1n6ID/wI9T6U/gUwOgBk?t=EaZI3nDkR6\r\nset-cookie: server_name_session=1e6cd64cb992427e9f747ef4d6b40ece; Max-Age=86400; httponly; path=/\r\nserver: cdn\r\nx-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":7153,"size_decoded":0,"mime_type":"application/xhtml+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":6065,"timings":{"blocked":-1,"dns":15,"connect":465,"send":0,"wait":5180,"receive":1,"ssl":363},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celebrities-small.porndig.com/content/y/o/yourlittlemaya/1000/yourlittlemaya_00013.jpg?ver=1","fqdn":"celebrities-small.porndig.com","domain":"porndig.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-celebrities-small.porndig.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 14:04:34 GMT","end":"Sat, 25 Oct 2025 14:04:33 GMT"},"fingerprint":{"sha1":"A1:01:D3:99:61:C5:86:7F:30:83:FD:ED:87:79:C1:35:95:B8:8B:99","sha256":"8E:28:FB:02:91:2E:16:3C:5A:A9:81:A0:4C:8B:09:F7:C1:67:7C:6B:99:70:3B:CE:30:D9:ED:D1:6B:D4:64:46"}}},"request":{"raw":"GET /content/y/o/yourlittlemaya/1000/yourlittlemaya_00013.jpg?ver=1 HTTP/1.1\r\nHost: celebrities-small.porndig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 74747\r\nx-id-fe: osix-hw-edge-gc4\r\ntraceparent: 00-4a33f2177faa119b927feab3e73b8035-5039cf5d2eec7288-01\r\nlast-modified: Sun, 18 Jun 2023 00:36:04 GMT\r\netag: \"123fb-5fe5c9a604500\"\r\nx-id: osix-hw-edge-gc4\r\nexpires: Thu, 25 Sep 2025 04:26:05 GMT\r\ncache-control: max-age=345600\r\nage: 3532540\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-08-11T07:10:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74747,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 720x1280, components 3","md5":"f940712457d6f7e8d45cbc87cfd2af20","sha1":"3a6baabdf9bbcef7dbca8307a5b4a3e16b11283f","sha256":"ca1cf16802a62e70913aa82530631a1e196affe11db84cebdb9348704993909b","sha512":"b1da7169ae06b73f711380d6c6282fee5024b70e752bc2b4d61c12fbb5859888f6dd9a687f1418f1e79346b86b4f28343a354dda7614ce61a1b0d3211cf2e6db","ssdeep":"1536:g4jIAiVoNsdT0TQNmuseH7S8TaVGoFPXAloBwYw5In:gUtioNsB0TQuemF/FIEwYBn","tlshash":"d5730209a52681b443b4e47995f130a217346b18733ab1cf34edc7e723aa1f1e774ea8","first_seen":"2025-07-15T22:33:53.149045Z","last_seen":"2026-01-24T10:59:54.355619Z","times_seen":55,"resource_available":false,"data":null}},"time_used":2176,"timings":{"blocked":320,"dns":11,"connect":9,"send":0,"wait":8,"receive":8,"ssl":1815},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/1X/ff71ff4ed3ff1541348d5eda554ede9e90cb8976.png","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/1X/ff71ff4ed3ff1541348d5eda554ede9e90cb8976.png HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 37739\r\nlast-modified: Thu, 15 May 2025 21:27:53 GMT\r\nexpires: Mon, 21 Sep 2026 04:26:03 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37739,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 180, 8-bit colormap, non-interlaced","md5":"41b11c88cc8715fbea81c379dc5f1445","sha1":"ff71ff4ed3ff1541348d5eda554ede9e90cb8976","sha256":"6288ed7b921e7ab173b370eb7e209115e9f0ecefc728038f493aa1dacaf6e8dd","sha512":"983cf1d41a3a1c3ae787b3b1545a7e949d3ecfbba7dce493fc4fdf0d934996e0ae8cb6e27a4c0a7d9d43c77ba319f40be7add68b0d6314a3760342ddd4cd78b0","ssdeep":"768:u/jV6/Vs/s7dK6ec/K5lJrkC6sLj9N9sGu5PQ3RfetxT5b2X0oG:UjVmpK8i3JrkC6igG+2GTgX0oG","tlshash":"7a03f11697aaed1f0b0bd9b3959f0e4b12bdc109e3a980c3069ddb940f865f5fa17482","first_seen":"2025-08-02T18:10:14.149018Z","last_seen":"2025-12-05T22:31:48.423175Z","times_seen":51,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosrei.com/favicon.ico","fqdn":"xvideosrei.com","domain":"xvideosrei.com","tld":"com"},"ip":{"addr":"192.124.249.3","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideosrei.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Mon, 18 Aug 2025 23:41:43 GMT","end":"Sun, 16 Nov 2025 23:41:43 GMT"},"fingerprint":{"sha1":"CF:F8:2C:3E:5A:88:3E:19:B0:5D:B4:17:2E:DA:51:A8:72:21:54:6A","sha256":"DC:70:E0:80:C5:90:B6:07:CD:E8:6E:B2:B5:0A:03:24:FF:11:06:27:B4:B7:38:72:96:D1:52:53:90:23:B6:13"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xvideosrei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 21 Sep 2025 04:21:45 GMT\r\ncontent-type: text/html\r\nx-sucuri-id: 19002\r\nx-sucuri-block: BLACK02\r\nserver: Sucuri/Cloudproxy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ssnovel.top/template/YS007/images/avhubCode.png","fqdn":"www.ssnovel.top","domain":"ssnovel.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.695Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/YS007/images/avhubCode.png HTTP/1.1\r\nHost: www.ssnovel.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.ssnovel.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.ssnovel.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cacrz.4jpg.top/AV4.us.jpg","fqdn":"cacrz.4jpg.top","domain":"4jpg.top","tld":"top"},"ip":{"addr":"172.67.211.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4jpg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 22:07:03 GMT","end":"Tue, 18 Nov 2025 23:05:39 GMT"},"fingerprint":{"sha1":"F7:56:D0:5F:96:7E:84:98:1E:F2:DC:20:74:94:F8:5E:E9:99:22:BE","sha256":"A4:A0:9B:AB:A6:84:D2:21:1D:FD:89:C2:59:89:93:11:10:44:BB:96:A7:D5:61:38:E5:1F:75:F7:F1:E5:EC:A1"}}},"request":{"raw":"GET /AV4.us.jpg HTTP/1.1\r\nHost: cacrz.4jpg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\nserver: cloudflare\r\netag: \"2225-5499bcea176c0\"\r\naccept-ranges: bytes\r\ncontent-length: 8741\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nahost: RZ\r\ncache-control: public, max-age=3600000\r\ncontent-type: image/jpeg\r\nage: 1903059\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJH%2FYj7nYmbtbGG6VenmbwOmb3mcNzybRpgCpu9%2FqJd1rHvSp%2Fdallrn7hTRneWfq4N479HvA4sOtG3fVgZ7i2nG37BmfdjKOf%2FzTjSI\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9826cd86fd381a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3","md5":"edfe007a6e5b3d268b2528f564b60b43","sha1":"1644c8ef97c871079e07e5079d613af5cb94052f","sha256":"bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390","sha512":"8eab965dcd5098e29ccc1cf94459fa6b8fda97331a35139ae6c57cacbe0ed733cd53af8f7e2ca8a82c2cb9f785cafe46f4a34f99aadbdde53ca81cae25403d93","ssdeep":"192:YkyyBW+1ajsm2w0aCqPGfAzC4TvykEobWwK5Fi:YkvU4DqufJ4TvyXO0i","tlshash":"b702bf4a2da48fb326c1c5508cdff34b2ec78a5c67efb16f97319e5af4017165904849","first_seen":"2024-04-16T15:37:12Z","last_seen":"2025-11-15T09:18:18.740899Z","times_seen":2006,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"cacrz.4jpg.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images-z.embed-player.space/20/01/19/927176-173.jpg","fqdn":"images-z.embed-player.space","domain":"embed-player.space","tld":"space"},"ip":{"addr":"37.221.208.213","port":443,"asn":41075,"as":"ATW Internet Kft.","country":"Hungary","country_code":"HU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images-z.embed-player.space","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 05:24:39 GMT","end":"Fri, 12 Dec 2025 05:24:38 GMT"},"fingerprint":{"sha1":"9F:E3:03:76:D4:9E:4B:FE:73:C4:A5:F5:07:1E:DE:9A:F3:5E:01:60","sha256":"23:02:E8:D1:AC:EC:3A:28:38:B3:F1:0E:28:34:C7:AC:49:18:C8:D0:6D:91:5F:E3:5C:CF:39:F7:48:89:D0:78"}}},"request":{"raw":"GET /20/01/19/927176-173.jpg HTTP/1.1\r\nHost: images-z.embed-player.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 21 Sep 2025 04:26:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 16738\r\nConnection: keep-alive\r\nLast-Modified: Fri, 07 Mar 2025 11:22:20 GMT\r\nETag: \"67cad6ec-4162\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16738,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.35.100\", baseline, precision 8, 640x360, components 3","md5":"2905c40d483d7398368781ab10e03be3","sha1":"c540dc5226a25b99b976c8a300b2feeb0b278a60","sha256":"7cc8f061f84c58a7cdf8bf85001d37251eadcef7707206c1f6a20ec584b35de7","sha512":"247fd4a6e978001a78384ce8db2d0e30d737fe9732848d317c66921da8bddfe00a08c95bf02733619dfa6643bdab882bef06b20e292bdc7914f66662ea2cb10e","ssdeep":"384:Tdw0FHWm67/dUeBnQTeJyvi/CBFy5iOaE8pzZe/M89VE5r:TdJgN7x6TeJai/CBFH8yZQHVE5r","tlshash":"dd72d033b1a8e597c496d3b6091338e50968f34ab1345b82d89b353f445cca59e7f40f","first_seen":"2025-06-16T07:09:56.105766Z","last_seen":"2025-12-18T19:32:45.971474Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1885,"timings":{"blocked":-1,"dns":3,"connect":53,"send":0,"wait":157,"receive":0,"ssl":1661},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sorkab.com/wp-content/uploads/2023/04/0003570.jpg","fqdn":"sorkab.com","domain":"sorkab.com","tld":"com"},"ip":{"addr":"104.21.87.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sorkab.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 11:50:46 GMT","end":"Fri, 28 Nov 2025 12:49:07 GMT"},"fingerprint":{"sha1":"5C:65:E2:EB:6B:39:67:56:80:DE:CA:C3:11:AE:5C:6C:DB:F9:20:0B","sha256":"7B:68:60:06:EF:B1:DE:9A:18:D6:46:89:D9:08:F1:C5:34:DF:CE:DE:92:CB:1B:B0:E0:16:E4:1A:8C:0C:7E:C3"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/0003570.jpg HTTP/1.1\r\nHost: sorkab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45827\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 21 Aug 2026 04:35:48 GMT\r\nlast-modified: Mon, 10 Apr 2023 23:36:33 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self)\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1985978\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhY%2Bz9ZMIofxF057jNUbTEL3df%2BpKfPHVn7BSAXprMd4W7qBgwCwVQZMO%2BxUI2uX6ObBIt45pSMw7EMmJFRu6C%2Bn3AYsKEMQB5s%3D\"}]}\r\ncf-ray: 9826cd588ff05fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45827,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3","md5":"4805667988b4feea8fd1a1f76c359f83","sha1":"d641b1b19792fb0116c8fd17db61196068b0010f","sha256":"94bd0d59b8ecab70a9264ca7e77afb9a99169d199adee69676350734a46574fa","sha512":"a07e92307fd80e57fafcbdb36c94764a1907258f4a6d7cd53b9e2a45baef565188c3fae07994f07655877a7d8ae2974da70ad4a8bc1b705a0253e6c0223fe6a6","ssdeep":"768:hAvSSmY5Exsku0mRezvj/s/ByWxnDB8BOC0lKwWGzhwk/pfdIuchzTt8dBAV407h:mvSSmLdmSj0oQFsR0l3bzhwqmhiAVdV7","tlshash":"6623021043206181f97c92a6f46e1d6fd808df63a032bcec9a42f43559fa2babb93515","first_seen":"2025-08-06T15:46:56.774386Z","last_seen":"2025-09-21T04:28:54.347277Z","times_seen":6,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250719-1/72efd9f4c86159e600e83a8e04555be8.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250719-1/72efd9f4c86159e600e83a8e04555be8.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 151008\r\nlast-modified: Sat, 19 Jul 2025 03:46:19 GMT\r\nvary: Accept-Encoding\r\netag: \"687b150b-24de0\"\r\nexpires: Fri, 17 Oct 2025 04:45:09 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151008,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3","md5":"7a3def8e138975fbc85c941b7e325396","sha1":"f0e18847e2022444329ba605e473d6cefd1c0b9d","sha256":"ed79dfc407d01fc459f24bf2ab6996e98830bbc0146e9ca3e23e251ae2217104","sha512":"7675ba1b475d92f877ef90861fa8ff8d990ef93c44a8862e0fc9dca46c9d923c52781708b9899954e1606b871e01d6c925f78601f372f0b312d6618986f07a69","ssdeep":"3072:ErhwRTqgrNimBV1va5Gedf/atPEuDlVgA36UO7AiSQziMl:+wBqSLBVCGelSt8klrlOvUMl","tlshash":"97e3122c4e028fb2fdc0a2b2566fac4775cccac97bee612458e5a564c74136d8c2ed53","first_seen":"2025-07-29T16:40:28.9511Z","last_seen":"2026-02-06T15:51:51.626757Z","times_seen":186,"resource_available":false,"data":null}},"time_used":2216,"timings":{"blocked":1028,"dns":0,"connect":0,"send":0,"wait":658,"receive":530,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.voyeurweb.com/albums/3407961/cover/170550-sexy-teen-lisa-solo.jpg?key=fe0b8bcc53be73df9342ea9b4b9a35cf3651bd47","fqdn":"cdn2.voyeurweb.com","domain":"voyeurweb.com","tld":"com"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn2.voyeurweb.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 04:12:16 GMT","end":"Tue, 18 Nov 2025 04:12:15 GMT"},"fingerprint":{"sha1":"83:A0:EB:1D:53:7C:B6:D5:75:F8:4F:27:4A:36:6F:78:A7:2B:96:C9","sha256":"A7:02:D7:39:4B:BF:06:8E:95:C2:1C:D6:CE:2C:FC:20:94:8F:89:C5:C0:DE:87:89:45:9C:20:1D:5D:02:E4:8E"}}},"request":{"raw":"GET /albums/3407961/cover/170550-sexy-teen-lisa-solo.jpg?key=fe0b8bcc53be73df9342ea9b4b9a35cf3651bd47 HTTP/1.1\r\nHost: cdn2.voyeurweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 2158854\r\ncdn-uid: e8957bcf-7e87-4ba3-8879-4d6d1740a9c3\r\ncdn-requestcountrycode: NO\r\ncdn-requestid: 1ab2fad4b4db5366613e3937c10f9797\r\ncache-control: no-cache, no-store, max-age=0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1520,"timings":{"blocked":29,"dns":1,"connect":22,"send":0,"wait":30,"receive":0,"ssl":1435},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oedy9.com/favicon.ico","fqdn":"oedy9.com","domain":"oedy9.com","tld":"com"},"ip":{"addr":"172.83.152.8","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:09.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oedy9.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 07:53:11 GMT","end":"Sun, 14 Dec 2025 07:53:10 GMT"},"fingerprint":{"sha1":"3D:FB:B5:4F:9F:A2:E6:70:14:BA:B5:5D:CF:78:85:33:50:B3:A1:6D","sha256":"E4:22:EF:7A:E1:45:C4:34:71:10:5C:F6:D2:34:3B:9F:08:E0:31:3D:FB:C3:67:DF:EA:C4:98:C1:B5:9B:F1:31"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: oedy9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 21 Sep 2025 04:26:15 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://mlkjcrm.oss-cn-guangzhou.aliyuncs.com/GAKVa1n6ID/wI9T6U/gUwOgBk?t=EaZI3nDkR6\r\nset-cookie: server_name_session=1e6cd64cb992427e9f747ef4d6b40ece; Max-Age=86400; httponly; path=/\r\nserver: cdn\r\nx-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":7153,"size_decoded":0,"mime_type":"application/xhtml+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":6532,"timings":{"blocked":538,"dns":269,"connect":132,"send":0,"wait":5182,"receive":0,"ssl":362},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sorkab.com/favicon.ico","fqdn":"sorkab.com","domain":"sorkab.com","tld":"com"},"ip":{"addr":"104.21.87.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sorkab.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 11:50:46 GMT","end":"Fri, 28 Nov 2025 12:49:07 GMT"},"fingerprint":{"sha1":"5C:65:E2:EB:6B:39:67:56:80:DE:CA:C3:11:AE:5C:6C:DB:F9:20:0B","sha256":"7B:68:60:06:EF:B1:DE:9A:18:D6:46:89:D9:08:F1:C5:34:DF:CE:DE:92:CB:1B:B0:E0:16:E4:1A:8C:0C:7E:C3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sorkab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self)\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMuE%2BSXtm9c2MIEUC3Kj8nhyYdMkNaC3CryCPftwTzb0SaVR6paVMx9Lqk%2FiGpoLeY7UcAZw670QObJQRkfWWaMr9OfnW61f\"}]}\r\ncf-ray: 9826cd845a325693-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sexsex2.com/favicon.ico","fqdn":"www.sexsex2.com","domain":"sexsex2.com","tld":"com"},"ip":{"addr":"27.124.42.175","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sexsex22.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 14:07:12 GMT","end":"Wed, 10 Dec 2025 14:07:11 GMT"},"fingerprint":{"sha1":"38:3E:BB:39:EA:B3:30:D7:E8:8E:0D:F8:83:20:4A:D8:22:F0:8B:6F","sha256":"F5:85:E7:C2:7A:BF:04:7E:BC:92:74:DA:8F:7F:51:3A:20:10:D0:AF:8E:A2:EF:19:CC:C1:C2:6D:CB:7F:EC:65"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.sexsex2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/x-icon\r\ndate: Sat, 20 Sep 2025 14:50:41 GMT\r\netag: \"645b773c-10be\"\r\nlast-modified: Sat, 20 Sep 2025 14:50:41 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 4286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"da00228045bbdc9fc485eee15ae466f7","sha1":"51acd57ef4439a7e622281388e2aa83d53b3fe33","sha256":"18a2fc0c936b1782fb1f1dec65e9ea9dfff00e1a081594c8c3049a5b435c1d2d","sha512":"b7ba13392ab3c6d8c1077989d482399892c1c094599e798b69dc3c6720b5d26dd6186d414f46cacf8ed48061e091d23978248b63cace28ebc601e41348ce608a","ssdeep":"48:uTOtJTTH7TTS/LY64wSKd2sci/6aq3EDP+3yk:uOH73wSKdEv/3v3yk","tlshash":"e2912fa8edf928bfd22403785f0697f8c8338e1f6ce4593308227c9b272ed51848611d","first_seen":"2023-05-17T22:14:46Z","last_seen":"2026-04-03T22:52:06.89925Z","times_seen":551,"resource_available":false,"data":null}},"time_used":1124,"timings":{"blocked":-1,"dns":8,"connect":317,"send":0,"wait":263,"receive":11,"ssl":475},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r34xyz.b-cdn.net/posts/639/639019/639019.preview.jpg","fqdn":"r34xyz.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"89.187.169.47","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /posts/639/639019/639019.preview.jpg HTTP/1.1\r\nHost: r34xyz.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 103531\r\nserver: BunnyCDN-DE1-756\r\ncdn-pullzone: 839427\r\ncdn-uid: 66d6ad83-3f00-4738-b738-db341e02bfab\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 09 Dec 2024 13:13:04 GMT\r\ncdn-storageserver: DE-976\r\ncdn-fileserver: 978\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 09/17/2025 15:21:59\r\ncdn-edgestorageid: 1054\r\ncdn-requestid: edb7dc1466db493c63f48e185af6aa72\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":103531,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1050x600, components 3","md5":"9209d9b51ed164c8284241e758ddde79","sha1":"a6725728e53fe7edd94b47093add2459dab21876","sha256":"7d255d9188b5fbf62dadca7d4e9be7e1d276c7210380a8f5c374c9ea12571f1a","sha512":"fa4beac3225a95b9e761bd1591446c2dec28875ed0ec11280e1630e3103c8a444b7356dd3bf297f17a51d039de89512256a5bfa3f16847ecc329020eea273978","ssdeep":"1536:OLpELVZiPn5qQ5mO9G6iXfIcnnRp8s8/m027YH8MXHM5IH1wJuXO8QmLaNrVYvHv:O9ExcqQ5b0hN7FL7o81i1wo+iSOfgrtc","tlshash":"a2a312ae030c8aeb5fa830b270e71d0145b7bb61eb4417d8f2e291dd8525e81ee6cd17","first_seen":"2025-09-21T04:28:54.349127Z","last_seen":"2025-09-21T04:28:54.349127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1947,"timings":{"blocked":-1,"dns":6,"connect":22,"send":0,"wait":26,"receive":59,"ssl":1832},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20240914-17/17b54f9f2e95abaa1ce873987c8306ba.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"204.188.235.18","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fqjpg.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Jul 2025 15:16:38 GMT","end":"Sat, 04 Oct 2025 15:16:37 GMT"},"fingerprint":{"sha1":"4E:D1:9D:DC:A8:01:26:9C:1D:C2:50:4C:81:84:03:3E:46:4E:BA:25","sha256":"CE:64:AB:B3:76:85:51:DA:79:92:1D:E2:1C:3C:5E:3E:F4:C8:33:DA:98:68:03:81:45:4A:5D:57:B5:75:4F:3E"}}},"request":{"raw":"GET /upload/vod/20240914-17/17b54f9f2e95abaa1ce873987c8306ba.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Encoding: gzip\r\nContent-Type: text/html\r\nDate: Sun, 21 Sep 2025 04:26:07 GMT\r\nEtag: W/\"6716678c-e3b0\"\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: BYPASS, Status: 404\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sexsex61.com/favicon.ico","fqdn":"sexsex61.com","domain":"sexsex61.com","tld":"com"},"ip":{"addr":"27.124.42.183","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex83.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 14:08:44 GMT","end":"Wed, 10 Dec 2025 14:08:43 GMT"},"fingerprint":{"sha1":"C9:DF:27:A9:2B:47:90:06:7B:5F:0D:64:78:F2:F2:AA:1A:35:1B:98","sha256":"4C:FE:81:8C:DC:92:CE:C9:8C:E0:31:42:DB:60:A1:F2:47:C9:52:17:EF:1D:EF:EB:5D:95:CB:4A:EB:AF:0B:5E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sexsex61.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/x-icon\r\ndate: Sat, 20 Sep 2025 14:50:31 GMT\r\netag: \"645b773c-10be\"\r\nlast-modified: Sat, 20 Sep 2025 14:50:31 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 4286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"da00228045bbdc9fc485eee15ae466f7","sha1":"51acd57ef4439a7e622281388e2aa83d53b3fe33","sha256":"18a2fc0c936b1782fb1f1dec65e9ea9dfff00e1a081594c8c3049a5b435c1d2d","sha512":"b7ba13392ab3c6d8c1077989d482399892c1c094599e798b69dc3c6720b5d26dd6186d414f46cacf8ed48061e091d23978248b63cace28ebc601e41348ce608a","ssdeep":"48:uTOtJTTH7TTS/LY64wSKd2sci/6aq3EDP+3yk:uOH73wSKdEv/3v3yk","tlshash":"e2912fa8edf928bfd22403785f0697f8c8338e1f6ce4593308227c9b272ed51848611d","first_seen":"2023-05-17T22:14:46Z","last_seen":"2026-04-03T22:52:06.89925Z","times_seen":551,"resource_available":false,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":47,"connect":273,"send":0,"wait":269,"receive":0,"ssl":463},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.tnaflix.com/a16:8q80w500r/191/11/81/11813254/thumbs/10.jpg","fqdn":"img.tnaflix.com","domain":"tnaflix.com","tld":"com"},"ip":{"addr":"156.146.33.141","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tnaflix.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Dec 2024 00:00:00 GMT","end":"Tue, 16 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"B0:1D:B1:2D:91:C8:A2:E5:E1:CC:05:C1:20:F1:52:8E:61:AB:B3:FF","sha256":"DC:ED:80:AD:A9:A9:FF:97:B7:90:84:B7:0F:E6:26:C6:32:64:AA:98:4B:D6:85:55:40:7B:4E:A7:10:33:10:72"}}},"request":{"raw":"GET /a16:8q80w500r/191/11/81/11813254/thumbs/10.jpg HTTP/1.1\r\nHost: img.tnaflix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18768\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-77-nzt: EgwBnJIhiwH3lmkOAAwBT3/LCwH39EaHAA\r\nx-77-nzt-ray: cf8787275b8eec545a7ecf68fcd00a3a\r\nx-77-cache: HIT\r\nx-77-age: 944534\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: *\r\nx-77-pop: frankfurtDE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18768,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 500x250, components 3","md5":"c7c311802d69e9439d61cc47dda182bd","sha1":"72328318187fb91a866b6968d1080fe3faef1597","sha256":"5c6388acfa3b815e3088acb7a88412c166181671af1e213b16c1add4e93c2d7f","sha512":"af723373f018177187c80737632a4839a5d559dd8efa42b52589534d8f19d72b37108ca86d0c237466c4a8e1cb027f9bc6b0e1976b2b85841a8222a74b555b41","ssdeep":"384:NIUYzTej0PrhXLWloQlH/XUVH0QRt4Oh2kAhVH7IGhM4RdPVM:tYfejkXLWLEVHDFhHADH7jhR/M","tlshash":"fc82e15a3f132136dd76f2ba1bb517062b0609c31a2189cdf9d41bedc92c3d2ace4e59","first_seen":"2025-09-17T02:24:54.312807Z","last_seen":"2025-09-21T04:28:54.350953Z","times_seen":2,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":55,"connect":27,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/yq2/media/videos/tmb/000/000/287/1.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"104.238.221.35","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.apian088.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 17:40:13 GMT","end":"Wed, 10 Dec 2025 17:40:12 GMT"},"fingerprint":{"sha1":"53:DC:8F:28:38:C9:D5:91:E4:CF:AC:96:11:AA:F9:35:7B:97:26:A8","sha256":"C2:42:F4:43:A9:A1:46:44:B1:D7:91:31:1E:D4:6B:51:CA:22:77:44:EF:9C:28:BF:EF:76:01:F2:F9:03:A5:FC"}}},"request":{"raw":"GET /yq2/media/videos/tmb/000/000/287/1.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8660\r\nLast-Modified: Sat, 23 Mar 2024 12:21:15 GMT\r\nConnection: keep-alive\r\nETag: \"65fec93b-21d4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8660,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"94d7df9b6487a548014bbc1a77e5e945","sha1":"dba17eca9b72783600a81f58f3be493f9c58b48d","sha256":"12442211cc1fc7ff7d44a1ba9d4cc106ecc08071ff9ae9e7f4ba5eb0b6842c08","sha512":"8fa16cd780aae1b5e2e9aeb63ff4d7aa4e9f99fca0f700def1391d8a6d568016aed9856f4c5c27c6bb9bfac73a67a6e4f4e2166765457f87218afad0b10c7efb","ssdeep":"192:1doivrfc77dgkv+sZMByK22IrlQ6woFlwymR+Lfa8FK:1LDsJgw+S1KMhQ6r5maK","tlshash":"d4029e89233c9d17d1ad1ab10a2def983bc46d94aa594147a71cbf811316792ebd83f0","first_seen":"2025-07-09T09:54:35.527799Z","last_seen":"2026-01-21T19:38:09.550578Z","times_seen":45,"resource_available":false,"data":null}},"time_used":3138,"timings":{"blocked":1121,"dns":3,"connect":166,"send":0,"wait":172,"receive":0,"ssl":1670},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baraag.net/@sfm_lottie/image/png","fqdn":"baraag.net","domain":"baraag.net","tld":"net"},"ip":{"addr":"185.178.208.171","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cisapp.baraag.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 18:50:20 GMT","end":"Tue, 21 Oct 2025 18:50:19 GMT"},"fingerprint":{"sha1":"4B:6A:F9:3F:E3:37:8A:FE:8D:C7:60:73:8F:6D:F0:B1:84:2C:0B:7D","sha256":"BB:01:09:DB:A3:38:79:7D:79:54:20:CA:C1:1E:7C:23:24:13:93:F5:D8:FA:A8:78:89:6D:FA:C4:CD:DD:E5:CA"}}},"request":{"raw":"GET /@sfm_lottie/image/png HTTP/1.1\r\nHost: baraag.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jzy4d5VOIeYxpTZ4; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:07 GMT\n__ddg10_=1758428767; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:07 GMT\n__ddg9_=91.90.42.154; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:07 GMT\n__ddg1_=o4TuWpgB9658WF1jpQka; Domain=.baraag.net; HttpOnly; Path=/; Expires=Mon, 21-Sep-2026 04:26:07 GMT\r\ndate: Sun, 21 Sep 2025 04:25:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: same-origin\r\nvary: Accept-Encoding, Accept, Accept-Language, Cookie\r\ncache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400\r\netag: W/\"f07e195e48295c87c1d9af5eddd4b458\"\r\ncontent-security-policy: upgrade-insecure-requests;, base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://baraag.net; img-src 'self' data: blob: https://baraag.net https://media.baraag.net; media-src 'self' data: https://baraag.net https://media.baraag.net; manifest-src 'self' https://baraag.net; form-action 'none'; child-src 'self' blob: https://baraag.net; worker-src 'self' blob: https://baraag.net; connect-src 'self' data: blob: https://baraag.net https://media.baraag.net wss://baraag.net; script-src 'self' https://baraag.net 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://baraag.net 'nonce-CXZQGjEBA+nz5VA7FI2F9A=='\r\nx-request-id: 72c82135-de18-4909-90e1-9198370b6bb7\r\nx-runtime: 0.024328\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cached: MISS\r\ncontent-encoding: gzip\r\nage: 14\r\ncontent-length: 16682\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/upload/vod/20240619-4/b3716e969d2a9e097c8cdc9830d57940.jpg","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET /upload/vod/20240619-4/b3716e969d2a9e097c8cdc9830d57940.jpg HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QPiTqalnJcdtveg%2BNglXdyImowWwWAQJVezLNDd62zX6oS%2FacaWeK0EuF1g41dLOfWw%2BGb5g9fJWZ6eRVnHsNvGjoxj%2FiheKSNKVGJO295A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9826cd75090a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250710-1/97351813294df62cad6ceda0e7f83547.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250710-1/97351813294df62cad6ceda0e7f83547.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 75291\r\nlast-modified: Thu, 10 Jul 2025 02:47:07 GMT\r\nvary: Accept-Encoding\r\netag: \"686f29ab-1261b\"\r\nexpires: Wed, 08 Oct 2025 03:14:06 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75291,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x281, components 3","md5":"ddeb31c993f04508c1adbd5f2fd89824","sha1":"466f59b789d81b4db2446f6b571a81047160988e","sha256":"87fe1ee933eabcad7f6832eec068bfa8ddec614e3c3a42f606856419267dc115","sha512":"6167f98fb2e1c20829204b57505d5fcc2501b6ca3698eaf554d62f11a0cc0b618c356656709c72ff57454ffa07833ba411b459b05a63feb94872bacb3fdc0d7a","ssdeep":"1536:zAGVNB11v8BaZuvzTxTqRuN78NXrnUPu4k0ZH1iezYdrqwn:b1vkfxTQ5rnUPu4k0ZH1zgH","tlshash":"6e7301d934fac7cd7e5709b746fc2c0196c468006512851ef9b2bd9ee70cfda2a1668c","first_seen":"2025-07-31T16:43:41.492691Z","last_seen":"2026-01-12T08:29:20.71461Z","times_seen":162,"resource_available":false,"data":null}},"time_used":3130,"timings":{"blocked":1991,"dns":0,"connect":0,"send":0,"wait":658,"receive":481,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.dllzjd.cn/upload/upload/20231216/2023121601555437156.jpeg","fqdn":"pic.dllzjd.cn","domain":"dllzjd.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.791Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/upload/20231216/2023121601555437156.jpeg HTTP/1.1\r\nHost: pic.dllzjd.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":6699,"timings":{"blocked":6682,"dns":17,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/3C8A624.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 04 Nov 2024 00:00:00 GMT","end":"Fri, 05 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"57:B3:92:20:5F:2C:FA:27:4E:CD:E5:6F:BC:3E:04:43:42:3A:93:E8","sha256":"10:A9:10:0A:05:AC:3F:09:47:9C:0E:EF:B9:5A:60:87:2B:F1:D5:35:A8:E6:3B:67:04:9B:7C:A8:AA:53:B7:FE"}}},"request":{"raw":"GET /thumbs/3C8A624.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18972\r\nvary: x-s-token\r\nlast-modified: Wed, 03 Oct 2018 07:53:14 GMT\r\netag: \"4a1c-5774e549f90f8\"\r\nx-cache: HIT\r\nx-whom: cdn08\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18972,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x480, components 3","md5":"8bece7683e26d94c3d0eb563767928f4","sha1":"d92ec195f6a4edaa1b7943a377db6234de015f53","sha256":"c2da4b5a49ccef3508b6744233116e93c64af121e0e8d6320e3b69cbaa03bb5d","sha512":"e6680948a80123905250117959b7b0cfa3c939b03424fb92cdab612295c936507af61ffabaa29ac9000c2c4417ea4f557d4ad9393ec05bf829594cdcb3b119d8","ssdeep":"384:yCg87aF/a0TDu2X3EU856MV3wAuhb+UOXX88exvSifV8e:ys7aF/a0TH3EUpewl7QxPifV8e","tlshash":"2e82d0733f6485a3b1aacf3007a7465c97ef7799e0084c9d7b0179beea32898c457099","first_seen":"2025-09-21T04:28:54.354079Z","last_seen":"2025-09-21T04:28:54.354079Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2158,"timings":{"blocked":-1,"dns":9,"connect":19,"send":0,"wait":21,"receive":33,"ssl":2070},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.twi-dl.net/favicon.ico","fqdn":"www.twi-dl.net","domain":"twi-dl.net","tld":"net"},"ip":{"addr":"172.67.152.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twi-dl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 20:52:06 GMT","end":"Fri, 28 Nov 2025 21:50:21 GMT"},"fingerprint":{"sha1":"74:F4:24:BC:7F:05:50:9D:EF:DF:BE:AF:DA:AC:E3:B0:AA:AD:86:DD","sha256":"98:FE:B4:60:DC:C6:65:B9:4A:F2:CC:1B:E3:99:D1:49:52:19:DB:57:23:D8:AB:D0:93:62:2B:2A:2E:D7:64:22"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.twi-dl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJtJjboyS%2FZr%2BV%2BPufdsrpds0TvuZWlhUukUEREmJwZ%2Fk9%2FVdUmOsrXCjrbVS6bTrl%2BrhNbw9pF076so06Yxerg1U%2BHrFxgG0u6YrOsC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9826cd84cb483181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":3,"connect":7,"send":0,"wait":10,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250813-1/57af5f7bfa1f0f3c5a416152776028b3.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250813-1/57af5f7bfa1f0f3c5a416152776028b3.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 61460\r\nlast-modified: Wed, 13 Aug 2025 07:44:00 GMT\r\nvary: Accept-Encoding\r\netag: \"689c4240-f014\"\r\nexpires: Sun, 12 Oct 2025 10:32:30 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61460,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 500x281, components 3","md5":"944b2870f2d4a1ab078592870d123745","sha1":"9074396dfd3d3544faf4917b4f00da0aed6373a7","sha256":"593741a1d807fc1525cf7fad2f64979ede2881ff7f52f9895b75f142b44b4be9","sha512":"72643bf16fafee64a6f59a49fe0bcae605d9b898af762b8626304094e7487289bc4010398531201c7de44b2127ca1e64b97c9a6e3329294181690bea33f70451","ssdeep":"768:LU2U8ehGALJzzyAPdTpKQjXPUF7duvu0x0JvA8YapRIqInhw9MUHbPMhElftJpnU:LvU8i/tmi1jfUnuvuA0xbpyhwRTQEVtE","tlshash":"3b53f205823b7837f194383f7f57513860b9698feb5ee42427d0ab39ea4711476c22a5","first_seen":"2025-09-11T07:55:57.035072Z","last_seen":"2026-01-16T22:49:50.118253Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1769,"timings":{"blocked":753,"dns":0,"connect":0,"send":0,"wait":658,"receive":358,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bad.news/images/dm/278ff2abb1c95c8b3890886d34f6f0a3.jpg?secure=BmRx1bWV7yan5bc-xwdpqw==,1734229903","fqdn":"static.bad.news","domain":"bad.news","tld":"news"},"ip":{"addr":"172.67.73.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"323e0cdf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:16:14 GMT","end":"Mon, 27 Oct 2025 12:16:07 GMT"},"fingerprint":{"sha1":"11:F8:F3:D9:C3:57:49:A9:A0:72:0C:C7:B7:20:D2:58:9B:B7:FA:95","sha256":"00:65:12:12:EA:77:8F:F2:2C:CB:5D:72:DD:45:E5:2F:B5:6F:D2:EF:4B:61:5C:C9:7E:F9:CA:89:A2:64:CB:58"}}},"request":{"raw":"GET /images/dm/278ff2abb1c95c8b3890886d34f6f0a3.jpg?secure=BmRx1bWV7yan5bc-xwdpqw==,1734229903 HTTP/1.1\r\nHost: static.bad.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34709\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=36661\r\netag: \"e0b8504b42816cbc60a1511d93d159d3\"\r\nlast-modified: Fri, 13 Dec 2024 23:06:45 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ki1Pud8ISAK2bzcvymcgzyt8Hi618Ba2u2QH5vENWNPhrs9kcC7t1vy4wus16HalXSopOkBPwGiWvVcgH4GYIztXgmzKkhve9gYmPQ%3D%3D\"}]}\r\nage: 2977\r\ncache-control: max-age=31536000\r\ncf-ray: 9826cd5c580f56a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34709,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3","md5":"3045d20e1d4ef698e2aadcfeef09c9a5","sha1":"9fa63ac3dbabd62e7f96fd297900d260ba0b4feb","sha256":"063a04bff9546d539a778243123417019daed96654bfce1a1927c759751f5c0d","sha512":"f2803e3709a5e8a2209b560213aed17a7868e1261f0dc7d3dcb99c2afff7612dfa6905cc668a92b8a8d5118fe03f2f6011cbcb7bb4a63698faea8dba803dfb05","ssdeep":"768:Whpm1B8/X9A3UqTDxMu8IPq5Z8FYMppPaRlgcq8gv:eI1B8f9EUa2aq5ZgYMXPaR65","tlshash":"9ef2e15799257c85eeb775ac530959804b2b1b445221cb3eb4de3edc0ceeab1aa03f10","first_seen":"2025-05-21T07:12:06.567291Z","last_seen":"2026-03-02T16:55:39.900307Z","times_seen":139,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/image.tmdb.org/t/p/original/D42g7jWUDZ8Nbna2n358mv4l6f.jpg","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 Aug 2025 19:44:50 GMT","end":"Tue, 04 Nov 2025 19:44:49 GMT"},"fingerprint":{"sha1":"E3:33:F6:CB:1D:54:80:51:6E:94:B6:72:D6:8D:22:88:EC:CF:5C:C2","sha256":"A2:6F:1C:4D:B8:5F:EC:D5:D1:31:F6:0A:A1:D3:C4:05:9B:6A:16:37:15:5E:C6:BE:AE:95:93:6E:79:6F:7D:8E"}}},"request":{"raw":"GET /image.tmdb.org/t/p/original/D42g7jWUDZ8Nbna2n358mv4l6f.jpg HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 138232\r\nlast-modified: Sat, 03 May 2025 17:00:29 GMT\r\nexpires: Tue, 04 May 2027 05:00:29 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://image.tmdb.org/t/p/original/D42g7jWUDZ8Nbna2n358mv4l6f.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"54374a15f3134065\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 4\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138232,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6437661503d4bb90f4f2cbaa599b8b71","sha1":"31fa257c79595debd8375d68c7a80cb662b33287","sha256":"e4e2a3b8e9a18516fc78ce63b5ab2f56d80a75d7c87c68286d290a9fbef3f730","sha512":"153461c48c8a86faca5a6fb9c3c2e1cec9f61f2b1652f722671a2f822ac3f1da3e7226bf4965477397a432f07f3db31472d4f129bb7a31b96bdfc3d1bb6970b3","ssdeep":"3072:GC6r0i1ap+7mTVA5eyOfLYs8crvLGWkKSIGZ3CGuL:G71FX5gjP1rDJSV3i","tlshash":"49d3121081022c81f71d60b57b8386961ca7069fab4ac9f556b836fca0c5dedfd42cee","first_seen":"2025-06-15T23:04:57.745988Z","last_seen":"2025-11-15T05:45:33.660076Z","times_seen":29,"resource_available":false,"data":null}},"time_used":2219,"timings":{"blocked":1074,"dns":5,"connect":32,"send":0,"wait":11,"receive":16,"ssl":1055},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-br-pic.kwai.net/upic/2023/02/15/08/BMjAyMzAyMTUwODU4MzdfMTUwMDAxMzM3Mzk3MzU4XzE1MDEwMjE1NzAzNzUyNV8yXzM=_oscn2_B751a388d301f549478f1daba1bc96127.webp","fqdn":"ak-br-pic.kwai.net","domain":"kwai.net","tld":"net"},"ip":{"addr":"2.21.8.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 16 Apr 2025 08:08:20 GMT","end":"Mon, 18 May 2026 08:08:19 GMT"},"fingerprint":{"sha1":"88:41:08:16:B1:09:65:11:BC:B7:74:9F:3C:2B:7F:E4:B7:29:47:FC","sha256":"A7:08:07:07:A1:B9:AB:05:EF:83:67:DA:40:EB:1F:28:60:07:40:83:60:0A:E5:69:22:53:7E:B8:ED:61:8B:E7"}}},"request":{"raw":"GET /upic/2023/02/15/08/BMjAyMzAyMTUwODU4MzdfMTUwMDAxMzM3Mzk3MzU4XzE1MDEwMjE1NzAzNzUyNV8yXzM=_oscn2_B751a388d301f549478f1daba1bc96127.webp HTTP/1.1\r\nHost: ak-br-pic.kwai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 9394\r\netag: \"E79CABDCFF929A2E7766248D43261E33\"\r\nx-bs-hash-crc64ecma: 17977269564006167660\r\nx-bs-object-status: 0\r\nlast-modified: Wed, 15 Feb 2023 00:59:51 GMT\r\nx-nws-log-uuid: 7011113295638445338\r\nx-amz-cf-pop: SIN2-P8\r\nx-amz-cf-id: Okx4oBOUva6YkIdSFrshJ1ro4mVlHrGPG01dr6JufAVRgwyTIWpa4w==\r\ncache-control: max-age=31536000\r\nexpires: Mon, 21 Sep 2026 04:26:03 GMT\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\nakamai-mon-iucid-del: 1859565\r\nx-ks-request-id: 0.f7081502.1758428763.7ce3390\r\nx-ks-cache: Hit from 2.21.8.203\r\nx-mai-cache-status: Y0-L0-0\r\nx-ks-client-ip: 91.90.42.154\r\nkwaisign: null\r\ntiming-allow-origin: *\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC\r\naccess-control-allow-headers: origin,range,hdntl,hdnts\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9394,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x848, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e79cabdcff929a2e7766248d43261e33","sha1":"e52f04b1ee0e37bfb47ddac3f1e6bade24de377b","sha256":"0d1d5a2ae318c75305bab30f05319bd12bd0bfa9695ece334e7473f8b0028489","sha512":"eb8be05bc4601bc798d2d8dcce3806ab0a59f6d4066e768275cccfbbb5b2d8a580bcd7fc346aaf739f80b7f9285cb582a7111e3f65b40727a5fb87f6d96e7e2d","ssdeep":"192:oxJ1AEjgoUNsQHA3i2oNqn+3+iK1w2KNMXrARtRm3n1Fru3Po:oLWEczHA3i+IMR4qAR7mWo","tlshash":"9912bfe41acefc9ec6147e54765842b3c29bb8f68e467d18ecc4e50168728e2cd484ba","first_seen":"2025-03-12T03:12:27.36356Z","last_seen":"2026-02-06T15:51:51.862284Z","times_seen":79,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.aosikaimge.com/20221004/nDx4ygKj/1.jpg","fqdn":"img.aosikaimge.com","domain":"aosikaimge.com","tld":"com"},"ip":{"addr":"208.64.217.23","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aosikaimge.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 24 Dec 2024 10:28:23 GMT","end":"Fri, 23 Jan 2026 10:28:22 GMT"},"fingerprint":{"sha1":"BC:19:8D:FF:22:32:94:8C:04:80:02:CE:1A:59:1C:91:24:15:5C:66","sha256":"F8:17:7C:E0:46:83:E7:7F:FB:CB:88:66:23:61:56:22:39:3A:23:8B:BF:3B:08:F3:37:F4:92:5C:72:1F:D8:B8"}}},"request":{"raw":"GET /20221004/nDx4ygKj/1.jpg HTTP/1.1\r\nHost: img.aosikaimge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12522\r\nConnection: keep-alive\r\nLast-Modified: Wed, 05 Oct 2022 01:58:00 GMT\r\nETag: \"633ce4a8-30ea\"\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12522,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 411x308, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 320x240, components 3","md5":"c9dea5cef77383a3aa24a1c342bf6423","sha1":"ed511c8020e8addf18a3b967ec331a20e0ae3fe8","sha256":"561ebc9c6f7b6ebb95f327466cac25abffe799ae775372771ec05d2ffa59bb0b","sha512":"d375c164e85daca6921f3e9682139f5bcba5af6218b1670afd90438d85703b045a94985e96ec7f9bc2ef4e1be3979572eae70d5c67ed876e1be243efdba396f1","ssdeep":"384:B9pxKxzpSANrAedSS9WZWLm/6NVHnZgMIMF0j7sf:/pAzpSsFdv905/+/bF7f","tlshash":"e542d0078bdb2a9a0550dbf809b87a2726cec87f17285690eb8b6f305606e3a950185d","first_seen":"2025-02-15T18:15:16.8505Z","last_seen":"2025-11-23T18:32:40.992302Z","times_seen":22,"resource_available":false,"data":null}},"time_used":4488,"timings":{"blocked":2052,"dns":2,"connect":145,"send":0,"wait":188,"receive":0,"ssl":2034},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-10/ee672bcb67c96594fb98ac2013991a99.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.638Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-10/ee672bcb67c96594fb98ac2013991a99.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mlkjcrm.oss-cn-guangzhou.aliyuncs.com/GAKVa1n6ID/wI9T6U/gUwOgBk?t=EaZI3nDkR6","fqdn":"mlkjcrm.oss-cn-guangzhou.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.134.41.213","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:16.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cn-heyuan.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:16:37 GMT","end":"Sun, 23 Aug 2026 08:16:36 GMT"},"fingerprint":{"sha1":"D8:A1:33:A7:26:69:EE:38:B1:BE:09:BC:A9:E8:7B:FA:B5:1C:A4:C4","sha256":"CC:95:3F:8F:9D:E4:18:F9:85:FF:89:E0:FE:C9:BD:47:64:0B:A9:FC:A3:5A:77:70:A2:6D:17:25:5B:8C:F4:0C"}}},"request":{"raw":"GET /GAKVa1n6ID/wI9T6U/gUwOgBk?t=EaZI3nDkR6 HTTP/1.1\r\nHost: mlkjcrm.oss-cn-guangzhou.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sun, 21 Sep 2025 04:26:16 GMT\r\nContent-Type: application/xhtml+xml\r\nContent-Length: 7153\r\nConnection: keep-alive\r\nx-oss-request-id: 68CF7E6821D34430365F792B\r\nAccept-Ranges: bytes\r\nETag: \"7E36074CC576FC79FF63CA78AFDA9093\"\r\nLast-Modified: Sat, 20 Sep 2025 18:10:12 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2007375890217848784\r\nx-oss-storage-class: Standard\r\nx-oss-version-id: CAEQgwEYgYCAu8GjocsZIiBiMThiZDQ0NGE0NzM0NGJlYjE1MTllODA5NjQ5YTRlNw--\r\nContent-MD5: fjYHTMV2/Hn/Y8p4r9qQkw==\r\nx-oss-server-time: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7153,"size_decoded":0,"mime_type":"application/xhtml+xml","magic":"XML 1.0 document, ASCII text, with very long lines (6373)","md5":"7e36074cc576fc79ff63ca78afda9093","sha1":"ae3922cbe38d89ad21ccd261f31d42f3fd00a3ab","sha256":"c5926f055ecadbe9385e1cc4c7a3dcb6472167e318d7007ecd284e5a53e8aeb6","sha512":"038e7cc078735c7a1afbe440918e0f63b9fb375f39a17359e3c569695a8faad1c1300e5ede46abba4f508b5c8b590f809531623179fcfdc0ca630d2c7284cdd7","ssdeep":"192:/wJniHhRcvRkkFFqRLL+P/aP6tyAMt41IxlkDL:qi38CkFI+6P60AMjcDL","tlshash":"09e1c50a36d12a00535767f3232ba9e5d2848abb3ce0458bb30c7dd8af9195dc385b75","first_seen":"2025-09-20T06:33:55.05459Z","last_seen":"2025-09-23T21:08:32.299016Z","times_seen":9,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-10/ee672bcb67c96594fb98ac2013991a99.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.865Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-10/ee672bcb67c96594fb98ac2013991a99.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.pornhat.com/contents/videos_screenshots/143000/143388/640x360/1.jpg","fqdn":"static.pornhat.com","domain":"pornhat.com","tld":"com"},"ip":{"addr":"185.240.28.22","port":443,"asn":56898,"as":"Private Host BV","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pornhat.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 02:18:32 GMT","end":"Wed, 10 Dec 2025 02:18:31 GMT"},"fingerprint":{"sha1":"80:EF:D0:2C:52:B8:C1:F8:1F:C8:D8:EF:FC:43:88:0C:71:BC:8E:6C","sha256":"B7:2C:63:55:D4:82:11:AC:49:3E:80:A1:A3:24:91:E8:0A:86:06:B3:BD:16:35:8B:05:BA:F6:40:97:9B:4F:34"}}},"request":{"raw":"GET /contents/videos_screenshots/143000/143388/640x360/1.jpg HTTP/1.1\r\nHost: static.pornhat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"two-elfs.com/favicon.ico","fqdn":"two-elfs.com","domain":"two-elfs.com","tld":"com"},"ip":{"addr":"172.67.149.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:09.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"two-elfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 16:27:20 GMT","end":"Tue, 25 Nov 2025 17:24:30 GMT"},"fingerprint":{"sha1":"4E:E2:71:C1:5A:C2:F6:EF:07:37:BA:FC:79:3B:2F:9C:31:F4:03:7C","sha256":"73:24:02:67:17:9F:89:6D:8C:F0:AE:CA:85:2C:A1:E7:8E:E4:20:B1:2A:50:C8:76:ED:E0:F1:92:12:CD:E2:A1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: two-elfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 04:26:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5L6ERcSxxrjrOKSjLW22ZmZesDKrI8lHlUDxCtXKOv0Tn3kwNOwXpjI6%2BSNbn71tzDPZy%2FLyx3H2H%2FSYhTX%2FkwPbXF9kGMAfTxu5g%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: accept-language,accept-charset, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-language: en\r\nexpires: Sun, 21 Sep 2025 05:10:09 GMT\r\nage: 987\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9826cd80d9a15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uqetyzxa.com/20221002/KhNnhdOy/1.jpg","fqdn":"uqetyzxa.com","domain":"uqetyzxa.com","tld":"com"},"ip":{"addr":"208.64.217.23","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uqetyzxa.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Wed, 18 Sep 2024 00:27:40 GMT","end":"Sat, 18 Oct 2025 00:27:39 GMT"},"fingerprint":{"sha1":"E5:84:49:26:19:34:0F:60:FB:7B:C7:34:7C:74:DB:73:FF:1D:9B:FB","sha256":"2D:82:94:29:64:E1:20:72:59:93:BB:F0:E6:A9:F9:8E:10:0E:C4:40:30:05:34:25:60:63:64:28:26:39:8D:5B"}}},"request":{"raw":"GET /20221002/KhNnhdOy/1.jpg HTTP/1.1\r\nHost: uqetyzxa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:07 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/media/videos/tmb/000/000/622/10.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"104.238.221.35","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.apian088.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 17:40:13 GMT","end":"Wed, 10 Dec 2025 17:40:12 GMT"},"fingerprint":{"sha1":"53:DC:8F:28:38:C9:D5:91:E4:CF:AC:96:11:AA:F9:35:7B:97:26:A8","sha256":"C2:42:F4:43:A9:A1:46:44:B1:D7:91:31:1E:D4:6B:51:CA:22:77:44:EF:9C:28:BF:EF:76:01:F2:F9:03:A5:FC"}}},"request":{"raw":"GET /media/videos/tmb/000/000/622/10.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7202\r\nLast-Modified: Sat, 23 Mar 2024 12:21:43 GMT\r\nConnection: keep-alive\r\nETag: \"65fec957-1c22\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7202,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"56d5faefaddae7bd8c2fb35c6487835d","sha1":"3ec22ece710f55347749a9f8bf2f7a5e678b2a3e","sha256":"88d196bea34d454f68d58c79a00002a48e920513731b12e4e5ba4310940d9375","sha512":"b6cea61f310cd42dfce9594351d6ed1974fe0ada079630102fdfac168e58612b03a9c90355c5f2913b10af8f4ab2a8885b69050aaad8b956495d9cd75e065379","ssdeep":"192:lagLBDAjZSrs0XKsNcgvpaPbYpzpnFMo7QNKuhHa:UoD6Eo0XKXgxIkWphHa","tlshash":"6ce1afc949a89a86de3c4ff91eb5cf8be51ed8306124cb2bf28466a9073d0714c526f1","first_seen":"2024-12-10T06:27:48.903545Z","last_seen":"2026-04-03T22:52:06.906746Z","times_seen":28,"resource_available":false,"data":null}},"time_used":4996,"timings":{"blocked":2426,"dns":446,"connect":164,"send":0,"wait":178,"receive":0,"ssl":1774},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/upload/vod/20240619-4/b3716e969d2a9e097c8cdc9830d57940.jpg","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET /upload/vod/20240619-4/b3716e969d2a9e097c8cdc9830d57940.jpg HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yHImw4OVohRf%2Bl3tX557XwgOyW2UUVwo9DmiJAeJQLKhtIiAZQeYbycdr0QahlgmMpMxAmQYOMlKGFD60HgHWZU%2FsodltmqBqqq%2Ff50X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9826cd584bf2b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haha888.xyz/video/data-setup","fqdn":"haha888.xyz","domain":"haha888.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.679Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /video/data-setup HTTP/1.1\r\nHost: haha888.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"haha888.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"haha888.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play.anh.moe/favicon.ico","fqdn":"play.anh.moe","domain":"anh.moe","tld":"moe"},"ip":{"addr":"104.21.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:09.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anh.moe","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 06:21:50 GMT","end":"Sat, 06 Dec 2025 07:20:05 GMT"},"fingerprint":{"sha1":"2F:AB:73:2C:2F:28:1C:7E:B3:57:45:AA:A5:54:67:AE:C9:04:E3:08","sha256":"88:9D:37:00:30:E5:AD:F9:5B:DD:EC:F0:20:90:84:B3:4E:C9:39:71:2F:B9:29:08:3E:DD:12:33:9E:4D:AE:3F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: play.anh.moe\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Sep 2025 04:26:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://play.anh.moe\r\nvary: Origin, accept-encoding\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-CSRF-TOKEN, X-Requested-With\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vJ%2BLTNperMyFdSB1n%2FPl76ow9wy5PUje8M1mzqwZksHN7aFLAkGCs3P6ti7RV1gq6FqLgn58mCE%2Fbsm7u5V%2BkI%2FR1iP3FyChplHxRw%3D%3D\"}]}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: 9826cd828f132678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":197,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sexsex10.com/favicon.ico","fqdn":"sexsex10.com","domain":"sexsex10.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:09.980Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sexsex10.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.jtube.top/AV4.us.jpg","fqdn":"fixedjs.jtube.top","domain":"jtube.top","tld":"top"},"ip":{"addr":"172.67.159.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:02.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtube.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 14:27:45 GMT","end":"Tue, 25 Nov 2025 15:25:55 GMT"},"fingerprint":{"sha1":"66:2E:34:70:FA:86:6E:B1:ED:1D:E0:2C:B1:CF:99:83:1B:12:C9:9B","sha256":"A1:93:B4:EB:60:87:57:A5:04:81:E6:3C:8D:64:06:1C:C5:B1:E3:4B:82:86:57:4C:97:AF:E0:A3:4E:F8:12:B8"}}},"request":{"raw":"GET /AV4.us.jpg HTTP/1.1\r\nHost: fixedjs.jtube.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8741\r\nserver: cloudflare\r\netag: \"2225-614075c7eff6b\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qXheklATAoAaEYqSFsSO7fcpv%2BjImiZicfN2YkqrL79g4pPvUQCdH1vNlCOhUokRJc63PE8HPWm22p%2BeRw6APa58GM2Si23SC1VEUT1wz61w\"}]}\r\nage: 186244\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9826cd574eec8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3","md5":"edfe007a6e5b3d268b2528f564b60b43","sha1":"1644c8ef97c871079e07e5079d613af5cb94052f","sha256":"bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390","sha512":"8eab965dcd5098e29ccc1cf94459fa6b8fda97331a35139ae6c57cacbe0ed733cd53af8f7e2ca8a82c2cb9f785cafe46f4a34f99aadbdde53ca81cae25403d93","ssdeep":"192:YkyyBW+1ajsm2w0aCqPGfAzC4TvykEobWwK5Fi:YkvU4DqufJ4TvyXO0i","tlshash":"b702bf4a2da48fb326c1c5508cdff34b2ec78a5c67efb16f97319e5af4017165904849","first_seen":"2024-04-16T15:37:12Z","last_seen":"2025-11-15T09:18:18.740899Z","times_seen":2006,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"fixedjs.jtube.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"multicst.com/vs/44645738.jpg","fqdn":"multicst.com","domain":"multicst.com","tld":"com"},"ip":{"addr":"104.21.94.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multicst.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 21:42:46 GMT","end":"Mon, 01 Dec 2025 22:41:13 GMT"},"fingerprint":{"sha1":"35:6E:28:27:2E:29:B9:A1:88:BC:90:29:28:D8:2F:BC:1B:23:EA:67","sha256":"E6:DB:A7:8C:DB:C6:2C:70:B5:ED:4F:6E:97:F6:BE:29:C7:0B:9B:1F:18:C2:07:B2:BB:31:D4:F3:97:6D:BD:D3"}}},"request":{"raw":"GET /vs/44645738.jpg HTTP/1.1\r\nHost: multicst.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72670\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 30 Aug 2018 00:14:19 GMT\r\netag: \"5b8736db-11bde\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-cache-status: HIT, HIT\r\naccept-ranges: bytes\r\nage: 4407050\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FcOIVYjs7pt817YKGiP6T0RGUEZeTA32MTN85JQpTwEzFFZlQJ%2BMqKpZm2aq9mUfbdDZ0SocrI8x0Bo9YHCjXBZp5DTYMcgj50%3D\"}]}\r\ncf-ray: 9826cd587df75691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72670,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc54.92.100\", baseline, precision 8, 1280x720, components 3","md5":"783ef856e0db191f6b1b3e85e4d1f810","sha1":"f8197a656dd8e711e6432f21298db523ca8888fb","sha256":"9f99bf8d5678053abe0cf643a02426f67fbf538771fb42dc07a96d372331e4cb","sha512":"d314cb724dec2e91494ded6fb5a65aaf6ddec3fb31b3ba94e7bc7a3d49f153937e50737a23f0076553b21ac3e744ef5bf577e355535f3febf1ac96bb4ab647f1","ssdeep":"1536:QLQF8NnLtOhAp6apeAezc0ZOGbODF8HpPDuqeXOkHb3:n6nLkAp6apVQc0faCpPDuHzr","tlshash":"1b630217eda86200853122dc7eed970e1531233c6dbf4de0a366cdbbbf6521464ec96a","first_seen":"2024-08-19T22:29:20.38877Z","last_seen":"2026-02-25T10:38:26.905568Z","times_seen":49,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"two-elfs.com/video/video011.jpg","fqdn":"two-elfs.com","domain":"two-elfs.com","tld":"com"},"ip":{"addr":"172.67.149.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"two-elfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 16:27:20 GMT","end":"Tue, 25 Nov 2025 17:24:30 GMT"},"fingerprint":{"sha1":"4E:E2:71:C1:5A:C2:F6:EF:07:37:BA:FC:79:3B:2F:9C:31:F4:03:7C","sha256":"73:24:02:67:17:9F:89:6D:8C:F0:AE:CA:85:2C:A1:E7:8E:E4:20:B1:2A:50:C8:76:ED:E0:F1:92:12:CD:E2:A1"}}},"request":{"raw":"GET /video/video011.jpg HTTP/1.1\r\nHost: two-elfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 86390\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 03 Jan 2017 00:36:47 GMT\r\netag: \"15176-54525dcf985c0\"\r\naccept-ranges: bytes\r\nage: 705\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=crLtOXJKceWG4KsIPFx7GKnCkQ5zFfntYmdChiSsamurmN1W%2Bo%2FKnYQ5vOscwAToE4fevN62jajtKzumIBcT%2BewJOh97iMPRNzRtjg%3D%3D\"}]}\r\ncf-ray: 9826cd6ad9204c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86390,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 768x432, components 3","md5":"9ddaf44a65d709d5671161f109812005","sha1":"2dcf2bdbe425673f0aea58db0ba05c1ae50c3e40","sha256":"ba7a1aaeed86dbbb11ecb91956b874de338e8dbf969272cbd1b966a20741a916","sha512":"34f96576b50f0c865419afbff5e0d9865210cf9c865ac7860d84fd452a5556d482a134cc5aabe764acade23da0f7ce9be7caa170a22de67a7cd15db7c146072a","ssdeep":"1536:hlTcS1OtW42qEtgtpWVJyTStl20Swojf1vGIIHTwtWS5T2OoBAmu/hJoTtb:nTc6xtcWjyTSHSwojfNGvHTwt95TDoB1","tlshash":"e68312668d09f529cd9b006a3e07f23a5b2d868afca0d45c7a12513d1fce84c72fd59e","first_seen":"2025-08-30T15:24:24.280196Z","last_seen":"2026-01-24T10:59:54.357326Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":-1,"dns":9,"connect":9,"send":0,"wait":9,"receive":2,"ssl":1047},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/get-vthumb/471481/aba81f5c7dc6edea5afe3945f3b43e5e/564x318_1","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"87.250.247.182","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.avatars.mds.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 03 Apr 2025 14:25:03 GMT","end":"Wed, 01 Oct 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E6:CA:01:EF:27:C5:A7:B7:36:66:BC:E5:64:C2:63:12:FB:3C:8F:91","sha256":"F3:AE:1B:55:A4:70:1A:43:35:87:50:83:E5:F5:ED:99:44:E6:CE:26:D5:B1:CC:24:A7:21:CF:AC:A8:E3:2E:24"}}},"request":{"raw":"GET /get-vthumb/471481/aba81f5c7dc6edea5afe3945f3b43e5e/564x318_1 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14628\r\nlast-modified: Tue, 24 Jun 2025 17:23:34 GMT\r\ncache-control: max-age=604800,immutable\r\nx-request-id: 1d9cdf3b759693fb\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 600, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: {\"group\": \"network-errors\", \"max_age\": 600, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/s3_nel?datacenter=VLA\"}]}\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x318, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7bf01e6e67de80a6902f3029a548de8a","sha1":"8a42f86c68c004ec2abe1e1f50a3522aecabf210","sha256":"22eace3c9377d58785035b8351fe3276bb7e19971f2c4ea13f88292df56baf3b","sha512":"a378cf0f4df8afa3d9895297e3f0cee1ed8f1fb51a503b3eeec142016c33224dfcf244a8eb8d4ae0c23f69151c48f93c614611f5b62c2c130a2bd789a222a107","ssdeep":"384:sOzmVRnCmGWKj7sUZlpk7UjYddjhapzwomccUDLSZ2K+yxrX+uu8pikw:sObWK0UZ3g7ddYd3mlQLw2K+yv8","tlshash":"e062c0c7dc8ec7890bc88b0811089d26a6110dcc8d536965e53508265efdf9a7f5e0bf","first_seen":"2025-09-21T04:28:54.362568Z","last_seen":"2026-03-02T16:55:39.710565Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1556,"timings":{"blocked":-1,"dns":16,"connect":45,"send":0,"wait":83,"receive":0,"ssl":1411},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bad.news/images/dm/28cd5ff0833f8ec481245c9ad7df5a39.jpg?secure=1G_CJsB1OOXNA4n-ZF6-Uw==,1734997099","fqdn":"static.bad.news","domain":"bad.news","tld":"news"},"ip":{"addr":"172.67.73.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:02.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"323e0cdf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:16:14 GMT","end":"Mon, 27 Oct 2025 12:16:07 GMT"},"fingerprint":{"sha1":"11:F8:F3:D9:C3:57:49:A9:A0:72:0C:C7:B7:20:D2:58:9B:B7:FA:95","sha256":"00:65:12:12:EA:77:8F:F2:2C:CB:5D:72:DD:45:E5:2F:B5:6F:D2:EF:4B:61:5C:C9:7E:F9:CA:89:A2:64:CB:58"}}},"request":{"raw":"GET /images/dm/28cd5ff0833f8ec481245c9ad7df5a39.jpg?secure=1G_CJsB1OOXNA4n-ZF6-Uw==,1734997099 HTTP/1.1\r\nHost: static.bad.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35528\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B7qPGlXpUCQ3b8xJ7s3fkCt1%2FiHg1Ju758tQaDVS%2FcoZ2QGXYnU4CnnEHZ9KrOIU0Tx7eHeK5yPtLRYvzJ%2F%2BGBvg2YzoTgLTPYxsKw%3D%3D\"}]}\r\nage: 811\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=36993\r\netag: \"351dbbf56cf472f2732149c221f79dbd\"\r\nlast-modified: Fri, 13 Dec 2024 23:06:53 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-ray: 9826cd57ce5356a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35528,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 640x360, components 3","md5":"33efa09d2eb057b069e6f22326e9736d","sha1":"e187ed0e9a2ea2d15d9c8c75d4e59515254da6e6","sha256":"dcd4c4a84bb709746318417666d4a1ced8ee2ca47e7d2f3b335bfa57b9d413b6","sha512":"094ae5a540734d1a038dd4d94e6a70af11d60f95e321b872734d63e2e41ee95be02e1baa00fc04ed809521c92e5ed1054e526f58fde8ca06abe27714b77f2ab6","ssdeep":"768:qlQxPABrDA3miadyIMIVOUZSERw9MvxzWMm9ctso349yFh:YQxPA1AWifIMIV5ZSrEsMYcq8","tlshash":"78f2f10d3be66c5ba8d9d7f5ba4e5072fe0fbd15e8ca2e0f10e50c4185c93d1245aa1e","first_seen":"2025-07-14T12:12:15.022863Z","last_seen":"2025-09-21T04:28:54.364257Z","times_seen":18,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":35,"connect":1,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"treeyork.com/374109/374109.jpg","fqdn":"treeyork.com","domain":"treeyork.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"development.treeyork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 22:01:00 GMT","end":"Mon, 08 Dec 2025 22:00:59 GMT"},"fingerprint":{"sha1":"D0:E9:42:C8:2D:20:9E:DF:C1:B3:CD:8D:AE:80:86:CA:5F:AF:2E:73","sha256":"1B:F7:D6:A1:E7:71:0D:7B:01:A4:15:FC:4F:BE:A0:16:D9:19:C3:8F:FD:3D:B6:91:88:6C:49:C5:C9:48:93:DE"}}},"request":{"raw":"GET /374109/374109.jpg HTTP/1.1\r\nHost: treeyork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka.com/favicon.ico","fqdn":"pornolomka.com","domain":"pornolomka.com","tld":"com"},"ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornolomka.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Aug 2025 22:36:34 GMT","end":"Thu, 20 Nov 2025 22:36:33 GMT"},"fingerprint":{"sha1":"BD:BD:28:06:32:76:78:20:55:D2:16:2E:47:88:DA:1B:D9:BE:B9:C8","sha256":"95:A6:68:1A:FE:AC:D8:DC:28:15:BE:A4:1A:27:7A:55:7B:1A:8C:65:C8:F6:70:0A:2E:72:7D:49:80:94:D1:83"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornolomka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx/1.10.3\r\ndate: Sun, 21 Sep 2025 04:24:01 GMT\r\ncontent-type: text/html\r\ncontent-length: 185\r\nlocation: https://pornolomka5.com/favicon.ico\r\nstrict-transport-security: max-age=15768000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1136,"timings":{"blocked":-1,"dns":15,"connect":52,"send":0,"wait":23,"receive":0,"ssl":1032},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/4/40a97a4302f5d190412ea76b5acfec98892a19f8_2_581x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/2X/4/40a97a4302f5d190412ea76b5acfec98892a19f8_2_581x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 74416\r\nlast-modified: Tue, 12 Aug 2025 05:12:28 GMT\r\nexpires: Mon, 21 Sep 2026 04:26:02 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74416,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 581x1024, components 3","md5":"379c50ce92b7b9c64b4514f786540561","sha1":"3f18892e573e008b45d74d31c0aeb1e6c27f2f50","sha256":"dc9a3dffc74aa6689cb26790823054afd90336083eb41d655f075df32012e667","sha512":"71d771c3997de8bd0e98df149fa58187e8d985b329d4c8b98cbb06f0af387af338d7324924e728e38b4836c8fdedbb25bf9f8cbccab698f4570c9c148d5c8ad0","ssdeep":"1536:WhKr7Z9cLCwsifszDAZCOVdE46scUSnNzT+c7juwKthI6jOo3yP7:NhSLf1fszD9KEIcdF+kMthIpoCD","tlshash":"b2730294546018da36fd2e3f8e5d2d0934ebb4e94e0121165accdf173bdfcb3aa94246","first_seen":"2025-09-21T04:28:54.365012Z","last_seen":"2026-03-02T16:55:39.77085Z","times_seen":22,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":22,"connect":27,"send":0,"wait":45,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_8471132209.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 07:11:45 GMT","end":"Tue, 25 Nov 2025 07:11:44 GMT"},"fingerprint":{"sha1":"4C:08:FF:9B:21:5C:D4:AF:F8:61:EB:02:2A:B2:41:C6:A6:FD:65:52","sha256":"49:BB:6D:F7:8D:BD:FB:E0:A8:5E:C7:46:48:E8:4D:04:0F:BF:5C:41:EF:03:99:7B:C7:F8:7D:7D:53:0E:4A:24"}}},"request":{"raw":"GET /ext/pre_8471132209.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8338\r\nserver: BunnyCDN-DE1-1047\r\ncdn-pullzone: 4336709\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6667e748-2092\"\r\nlast-modified: Tue, 11 Jun 2024 05:57:28 GMT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:16:00\r\ncdn-edgestorageid: 1081\r\ncdn-requestid: 158e6598179371667a242fde4e4c63f9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8338,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"178be961243dd240e91ca349678d25dd","sha1":"d161dd3d8c90034e4b0a8ac95ef9cda399dd102d","sha256":"deee54a53332f786c568567449fe2fc70434e7490c7be08814efe56310d6d1b7","sha512":"310480a3936a301b0350d6122b90c45e051fb6ca3f1634640e5a5010fb28d247675dc3cca838e40c4299f79458e3f8ca58d571f5d7278a7af7ef9ca0cfcf1a20","ssdeep":"192:njzsG7F7oCExolo7G1uzBt371KBYHbRjRkTbLsHxR:Xf7bEM1sR1V7RQyz","tlshash":"6202af110f13ceccf31d85388ac299843a447fd691be8e8b2ed5787557228e0dc81e72","first_seen":"2025-01-13T17:25:03.402658Z","last_seen":"2026-01-13T02:46:32.219424Z","times_seen":27,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250806-1/b3561e8019f3a0c4f51cc792e9437cc9.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250806-1/b3561e8019f3a0c4f51cc792e9437cc9.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52269\r\nlast-modified: Wed, 06 Aug 2025 05:37:15 GMT\r\nvary: Accept-Encoding\r\netag: \"6892ea0b-cc2d\"\r\nexpires: Sun, 05 Oct 2025 06:10:05 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52269,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 359x300, components 3","md5":"c58d768fb4cb084fd8d94fb1aee9b48b","sha1":"9dc0b9fe87d800c512a84191404141486773e870","sha256":"718184155be2567b2accb5e2881e45acca63e76fcded36570ae3d191467d5b6c","sha512":"b29c704f0067e4665392b1a0158901f45ddf398a877b078598ec183436409fb0a9c9c814cdefcd62bc7b3aeb3e6a65b6ea47cd6ed69d752edef025bc9ed736a3","ssdeep":"1536:7q6DQGQ3JGCyESDgPM1CTKkTW6PdSxs9Mkh1w4Y:xDQGQ3JGIPkCN/ZmkHw/","tlshash":"1f33015c96f19442cfdc8dfaeba6a86332c6cf54837009fae1057b60e0eb0951c46bc6","first_seen":"2025-09-05T05:21:28.6914Z","last_seen":"2026-03-01T22:32:14.212756Z","times_seen":126,"resource_available":false,"data":null}},"time_used":1757,"timings":{"blocked":999,"dns":0,"connect":0,"send":0,"wait":658,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka2.com/uploads/posts/2017-09/medium/1505056659_00-07-17.jpg","fqdn":"pornolomka2.com","domain":"pornolomka2.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.601Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/posts/2017-09/medium/1505056659_00-07-17.jpg HTTP/1.1\r\nHost: pornolomka2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dochka.org/favicon.ico","fqdn":"dochka.org","domain":"dochka.org","tld":"org"},"ip":{"addr":"104.21.72.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dochka.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 09:21:52 GMT","end":"Mon, 15 Dec 2025 10:18:32 GMT"},"fingerprint":{"sha1":"D8:38:2A:88:F0:42:68:87:44:A4:1A:86:C1:58:73:4F:2B:52:29:DE","sha256":"0D:AC:8A:83:A3:5D:E0:9C:BE:E0:8A:A1:ED:03:C8:33:0A:36:AD:E1:C0:06:FA:83:39:CA:7E:87:30:01:13:75"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dochka.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9mdd0%2BDgBlg2EB%2F1tEGf5qS9QjVobwPsDV7xlU1GfUE%2F5Y%2BKiIt1E1X%2BDqdR0Fcoey5jM95rJXV6x9uXUs2sUkytR1PSMqz\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: 9826cd887de0b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":25,"connect":19,"send":0,"wait":100,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240531-1/ffd429a53c021917cfc619a95ddaaa38.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240531-1/ffd429a53c021917cfc619a95ddaaa38.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 158366\r\nlast-modified: Fri, 31 May 2024 12:07:17 GMT\r\nvary: Accept-Encoding\r\netag: \"6659bd75-26a9e\"\r\nexpires: Mon, 13 Oct 2025 20:18:07 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158366,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit/color RGBA, non-interlaced","md5":"5ee93354925f374b728ada71ed0c32c8","sha1":"7ec8a8a33cee20cdde6ff869e5c3e09a998f0968","sha256":"2c348b967ef8cc0ee201d390dff9a1ff599f61ad7b1bbc3e69d815116e97551a","sha512":"5c962069244e8b7da99279302871a00276e45934bb4116f0252e8d6acf64c72593863e8f028b0a36cdea7020ca9820e7d1eca440c9feac70e187b8236dbc1c57","ssdeep":"3072:CyXwdJUy/qE4lyFxjOFX4Kgxz8JEbOQAFMmbd4d2GRZ/9ypc2q:CyXwdJUbEySxjOFXG98JEbOHFMZC9q","tlshash":"f8f312a501e5e9d62a01fa5bbe321bc876f74933e1f663fb0cad1d8439126078ae1507","first_seen":"2025-05-21T07:12:06.556729Z","last_seen":"2026-02-06T15:51:51.702894Z","times_seen":123,"resource_available":false,"data":null}},"time_used":2259,"timings":{"blocked":1143,"dns":0,"connect":0,"send":0,"wait":467,"receive":649,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sexsex61.com/favicon.ico","fqdn":"www.sexsex61.com","domain":"sexsex61.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.361Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.sexsex61.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":-1,"dns":27,"connect":292,"send":0,"wait":0,"receive":0,"ssl":415},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uqetyzxa.com/20221002/KhNnhdOy/1.jpg","fqdn":"uqetyzxa.com","domain":"uqetyzxa.com","tld":"com"},"ip":{"addr":"209.142.68.21","port":443,"asn":10753,"as":"LUMEN-LEGACY-L3-CUSTOMER-SHARED-USE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uqetyzxa.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Wed, 18 Sep 2024 00:27:40 GMT","end":"Sat, 18 Oct 2025 00:27:39 GMT"},"fingerprint":{"sha1":"E5:84:49:26:19:34:0F:60:FB:7B:C7:34:7C:74:DB:73:FF:1D:9B:FB","sha256":"2D:82:94:29:64:E1:20:72:59:93:BB:F0:E6:A9:F9:8E:10:0E:C4:40:30:05:34:25:60:63:64:28:26:39:8D:5B"}}},"request":{"raw":"GET /20221002/KhNnhdOy/1.jpg HTTP/1.1\r\nHost: uqetyzxa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":2350,"timings":{"blocked":-1,"dns":2,"connect":145,"send":0,"wait":183,"receive":0,"ssl":2011},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250804-1/5876c300852b02896b1aff9256d4267a.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250804-1/5876c300852b02896b1aff9256d4267a.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1964,"timings":{"blocked":1050,"dns":0,"connect":0,"send":0,"wait":658,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baraag.net/@scrwdgrl/image/png","fqdn":"baraag.net","domain":"baraag.net","tld":"net"},"ip":{"addr":"185.178.208.171","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cisapp.baraag.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 18:50:20 GMT","end":"Tue, 21 Oct 2025 18:50:19 GMT"},"fingerprint":{"sha1":"4B:6A:F9:3F:E3:37:8A:FE:8D:C7:60:73:8F:6D:F0:B1:84:2C:0B:7D","sha256":"BB:01:09:DB:A3:38:79:7D:79:54:20:CA:C1:1E:7C:23:24:13:93:F5:D8:FA:A8:78:89:6D:FA:C4:CD:DD:E5:CA"}}},"request":{"raw":"GET /@scrwdgrl/image/png HTTP/1.1\r\nHost: baraag.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sJgeYmQv05Q2dgw1; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:03 GMT\n__ddg10_=1758428763; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:03 GMT\n__ddg9_=91.90.42.154; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:03 GMT\n__ddg1_=I28mFoXLxoCvUjtrL1ki; Domain=.baraag.net; HttpOnly; Path=/; Expires=Mon, 21-Sep-2026 04:26:03 GMT\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: same-origin\r\nvary: Accept-Encoding, Accept, Accept-Language, Cookie\r\ncache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400\r\netag: W/\"442ef7ae33f1de92ec90dfbae313d9c6\"\r\ncontent-security-policy: upgrade-insecure-requests;, base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://baraag.net; img-src 'self' data: blob: https://baraag.net https://media.baraag.net; media-src 'self' data: https://baraag.net https://media.baraag.net; manifest-src 'self' https://baraag.net; form-action 'none'; child-src 'self' blob: https://baraag.net; worker-src 'self' blob: https://baraag.net; connect-src 'self' data: blob: https://baraag.net https://media.baraag.net wss://baraag.net; script-src 'self' https://baraag.net 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://baraag.net 'nonce-wseDS8qv8HJfyYUQlq2qOg=='\r\nx-request-id: e290496f-bae7-4c71-aaf6-0ed234067b9d\r\nx-runtime: 0.020447\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cached: EXPIRED\r\ncontent-encoding: gzip\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosrei.com/wp-content/uploads/2021/09/ls-model-nude.jpg","fqdn":"xvideosrei.com","domain":"xvideosrei.com","tld":"com"},"ip":{"addr":"192.124.249.3","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideosrei.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Mon, 18 Aug 2025 23:41:43 GMT","end":"Sun, 16 Nov 2025 23:41:43 GMT"},"fingerprint":{"sha1":"CF:F8:2C:3E:5A:88:3E:19:B0:5D:B4:17:2E:DA:51:A8:72:21:54:6A","sha256":"DC:70:E0:80:C5:90:B6:07:CD:E8:6E:B2:B5:0A:03:24:FF:11:06:27:B4:B7:38:72:96:D1:52:53:90:23:B6:13"}}},"request":{"raw":"GET /wp-content/uploads/2021/09/ls-model-nude.jpg HTTP/1.1\r\nHost: xvideosrei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 21 Sep 2025 04:21:42 GMT\r\ncontent-type: text/html\r\nx-sucuri-id: 19002\r\nx-sucuri-block: BLACK02\r\nserver: Sucuri/Cloudproxy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240609-1/cb14203b5d592acc155959f853153668.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240609-1/cb14203b5d592acc155959f853153668.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=63072000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"east-asia.uk/favicon.ico","fqdn":"east-asia.uk","domain":"east-asia.uk","tld":"uk"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.345Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: east-asia.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugzaawjque.buzz/favicon.ico","fqdn":"ugzaawjque.buzz","domain":"ugzaawjque.buzz","tld":"buzz"},"ip":{"addr":"54.215.31.113","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugzaawjque.buzz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:10:02 GMT","end":"Sun, 23 Nov 2025 15:10:01 GMT"},"fingerprint":{"sha1":"47:DB:A4:F9:F4:38:47:EF:67:12:CE:77:74:4C:0B:55:A5:0C:22:96","sha256":"27:30:4F:21:FF:BA:5F:5F:F3:54:2E:7B:A4:B4:06:1A:7B:6E:94:D1:2B:17:B8:1F:0E:8D:50:CC:8C:D0:98:FF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ugzaawjque.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/plain\r\ncontent-length: 0\r\ndate: Sun, 21 Sep 2025 4:26:11 GMT\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\ncache-control: private, no-cache, no-store, max-age=0\r\nexpires: Mon, 01 Jan 1990 0:00:00 GMT\r\nlocation: https://sidesteamroll.com/go/1780944\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":26,"connect":163,"send":0,"wait":204,"receive":3,"ssl":382},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/iie54zbr_header.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 09:48:24 GMT","end":"Sat, 08 Nov 2025 10:45:39 GMT"},"fingerprint":{"sha1":"4F:F9:25:37:EE:42:8B:1E:5C:AA:F5:BD:BF:CB:3A:CE:FD:84:E3:68","sha256":"E9:D6:87:C8:76:D3:FC:EE:D6:80:61:98:3C:B4:69:F2:52:5D:24:92:95:9E:91:B8:16:F5:EF:BB:CD:64:21:8A"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/iie54zbr_header.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 362820\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 16 Sep 2025 23:39:03 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CnsHOxFwQfZvgXI14bUfdrfOk8zhKRx2WwXnkGFuMe5utv6xj71NGo6m5NKJni5p35P7dgz8LgcxCdG9pXD3U8JHEUdnAmNjhjQ%3D\"}]}\r\ncf-ray: 9826cd5c58a9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102075,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 650x782, components 3","md5":"19ccb76e7e09f6dd177c46adeff35cce","sha1":"fc97258ec888b8e5ea5922542f15df7671635527","sha256":"82f35eb0fa2e4bca0c8a928e9dc29046b9beb7b466641ed4151cabcc6b0b1f67","sha512":"adff4c432397a806ed4f79570c56e73537ec9b24d907c746071d0c0ee32864c60083b988a014f64b3ca273ea06c80beffc87db27bf7588a75a31b1d2b3cf628e","ssdeep":"3072:fp3daxdC1/6SdimslIIhD0TP89rBh1w5j:B3daxC6QYl7hD0z8fhS5j","tlshash":"c5a312ac09583bdebad82042945bdd07c862813a64a41f5f4cec57a0b156ad3e8cfc7f","first_seen":"2025-07-17T06:33:28.467557Z","last_seen":"2026-04-03T22:52:06.896161Z","times_seen":87,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:05.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 02:24:08 GMT\r\nexpires: Sat, 19 Sep 2026 02:24:08 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 180118\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-04T03:31:35.287114Z","times_seen":118096,"resource_available":true,"data":null}},"time_used":2187,"timings":{"blocked":1032,"dns":1,"connect":7,"send":0,"wait":12,"receive":8,"ssl":1121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.4jpg.top/index.php?js=very","fqdn":"jsjs.4jpg.top","domain":"4jpg.top","tld":"top"},"ip":{"addr":"172.67.211.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:02.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4jpg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 22:07:03 GMT","end":"Tue, 18 Nov 2025 23:05:39 GMT"},"fingerprint":{"sha1":"F7:56:D0:5F:96:7E:84:98:1E:F2:DC:20:74:94:F8:5E:E9:99:22:BE","sha256":"A4:A0:9B:AB:A6:84:D2:21:1D:FD:89:C2:59:89:93:11:10:44:BB:96:A7:D5:61:38:E5:1F:75:F7:F1:E5:EC:A1"}}},"request":{"raw":"GET /index.php?js=very HTTP/1.1\r\nHost: jsjs.4jpg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nimghost: 1729614248-h-jsjs4jpgtopmh--NO-rm1726420961/index.php?js=very\r\n56nloadrate: 1.460625\r\ncache-control: max-age=360000, private\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QeiKlZDew5XB3mUVTlH%2BzGG3TMypovfIZhH6aURgszAUVAswjXNd0dooDLfJ6AMeFwQ6iWUhXZlRRf84SgKEjzazOWI4o%2Few3%2FZ9ba4%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-ray: 9826cd5728123181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":373,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jsjs.4jpg.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c749a9571b.mjedge.net/media/previews/131104/screenshot.jpg","fqdn":"c749a9571b.mjedge.net","domain":"mjedge.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1235834651.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 08:36:59 GMT","end":"Sat, 13 Dec 2025 08:36:58 GMT"},"fingerprint":{"sha1":"5E:D7:37:C7:78:D1:AC:76:41:6C:D2:AF:83:F4:CA:BD:B0:1B:DC:49","sha256":"C6:FC:71:7E:F1:1F:43:BE:35:16:4D:A1:51:DC:27:DE:67:2B:97:E3:F8:91:82:1F:4F:FF:7F:33:18:06:F4:1D"}}},"request":{"raw":"GET /media/previews/131104/screenshot.jpg HTTP/1.1\r\nHost: c749a9571b.mjedge.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 104182\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Thu, 22 Jun 2023 14:30:52 GMT\r\netag: \"196f6-5feb8bb448ac9\"\r\nexpires: Tue, 17 Mar 2026 21:22:12 GMT\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: max-age=31449600, public\r\nx-77-nzt: EwwBX63NDQH3+klmAAwBuUwKEwH3MspqAAwBJRPCMQG3K4YkAA\r\nx-77-nzt-ray: 2a494a15855945d4807ecf6843b7520b\r\nx-77-cache: HIT\r\nx-77-age: 6703610\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":104182,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc56.26.100\", baseline, precision 8, 1920x1080, components 3","md5":"e6de462362f7858a1aba3b3f3ffd96bc","sha1":"d417f4dfd4e70d9e364b15356defa0dd0eab9871","sha256":"400c30de68ccc8363e82a196d54481e229964e1de0e005a08a06c71cf49dc810","sha512":"65ce48cd3df9773d80688936fe1d94a383a47f79e846a8fb4e4b9e7ba9ba2da54a0b340b0b27c474406e9b1e469142aea095d238d6853462f8dd9bf73a63f632","ssdeep":"3072:XFPoABfrpZ9CHvywAPVa9No3rY3GL2cABc:1PoABfcvpAPVaE3H9Aa","tlshash":"bba30213ae88e774a8b9b74cb857ab25bde66d6d241033fd43230c9a7d54531cc0b27a","first_seen":"2025-07-26T10:06:05.29955Z","last_seen":"2026-03-03T08:08:10.353221Z","times_seen":23,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":154,"dns":315,"connect":8,"send":0,"wait":5,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/upload/vod/20241010-10/0ba1431c303bd1a330cf964713999011.png","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET /upload/vod/20241010-10/0ba1431c303bd1a330cf964713999011.png HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2FY0edsgemHNgcH5f2ZCvbCbuSeqMQkMNLYWSfGvok00q0FF4xDA95tt%2BHPMWNEzCmPPqT4p0bqPDJ%2BhgLlxEET%2FuePhYskwLpHBhN0W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9826cd581be5b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20240619-4/49cf6b829172e63b193953501675565c.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.687Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20240619-4/49cf6b829172e63b193953501675565c.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nsk.kp.ru/favicon.ico","fqdn":"www.nsk.kp.ru","domain":"kp.ru","tld":"ru"},"ip":{"addr":"95.181.181.82","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abakan.kp.ru","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 06:35:16 GMT","end":"Thu, 23 Oct 2025 06:35:15 GMT"},"fingerprint":{"sha1":"98:FC:34:E1:B5:78:29:11:65:4C:33:AA:0C:46:2B:3E:8A:C2:33:99","sha256":"FD:32:5C:52:92:91:4C:CE:54:4F:B5:A8:D6:AA:E2:1E:DB:76:CB:83:BD:1F:A1:FB:AF:DA:F7:B2:7A:A3:DD:76"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.nsk.kp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 894\r\netag: \"dd430c654ca9937a626ca32dfc3410db\"\r\nlast-modified: \r\nx-amz-version-id: 0005D1CC48EB153D\r\nx-manifest-version-id: 00063D43F644C2ED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"dd430c654ca9937a626ca32dfc3410db","sha1":"1f25918ed15fba7f0ecac43386f092ef185189a1","sha256":"a55e42b828d27230d4049714f17017b59cadb9c4c077a3608a7a4f4359958693","sha512":"cb76f5b6105dc835c9fcac57197ca23e7e4c150db3327e9b1bfa30d17a920096397aaf968c009a156d1c4d4ab068dbd627473188a0e33294a03b74814955085f","ssdeep":"","tlshash":"0a1152743180dec2c010d3758dd4489c03146c96d884d6eba0c9370d89398a8ce17cbc","first_seen":"2025-06-15T23:04:57.822428Z","last_seen":"2026-03-02T07:55:32.811466Z","times_seen":8,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":12,"connect":61,"send":0,"wait":107,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"159i.net/404","fqdn":"159i.net","domain":"159i.net","tld":"net"},"ip":{"addr":"172.67.200.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:06.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"159i.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 10:20:32 GMT","end":"Sun, 14 Dec 2025 11:18:54 GMT"},"fingerprint":{"sha1":"D5:F1:FA:DC:B1:F7:50:6B:64:B5:EF:04:1E:C3:70:54:5A:ED:98:4B","sha256":"0F:79:08:19:0D:19:F2:C1:C9:3A:9F:3E:2C:D9:00:9D:3A:94:CB:84:2D:6B:12:2D:3A:B2:B4:0A:DA:82:80:4B"}}},"request":{"raw":"GET /404 HTTP/1.1\r\nHost: 159i.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1080p.tub4us.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 04:26:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UFgUVTYJ%2B%2Bez6QovtzNAGOPtmRvezc9qlkrstVC43viYQXJxmwYMIZV%2FhoY7To3qcrz1u9dG0zRRoyOJGsGQ2bDh6jp4LQ%3D%3D\"}]}\r\nset-cookie: PHPSESSID=665820902913df10621b1eba027ed137; Path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9826cd6e4f22b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241028-15/93eb4578a18847387d0c86580ddf6cc8.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.289Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241028-15/93eb4578a18847387d0c86580ddf6cc8.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"baraag.net/@scrwdgrl/image/png","fqdn":"baraag.net","domain":"baraag.net","tld":"net"},"ip":{"addr":"185.178.208.171","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cisapp.baraag.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 18:50:20 GMT","end":"Tue, 21 Oct 2025 18:50:19 GMT"},"fingerprint":{"sha1":"4B:6A:F9:3F:E3:37:8A:FE:8D:C7:60:73:8F:6D:F0:B1:84:2C:0B:7D","sha256":"BB:01:09:DB:A3:38:79:7D:79:54:20:CA:C1:1E:7C:23:24:13:93:F5:D8:FA:A8:78:89:6D:FA:C4:CD:DD:E5:CA"}}},"request":{"raw":"GET /@scrwdgrl/image/png HTTP/1.1\r\nHost: baraag.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YrTXF3w61CJKnW4O; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:07 GMT\n__ddg10_=1758428767; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:07 GMT\n__ddg9_=91.90.42.154; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:07 GMT\n__ddg1_=Zo5uuCZSnIQB1jW6cIyQ; Domain=.baraag.net; HttpOnly; Path=/; Expires=Mon, 21-Sep-2026 04:26:07 GMT\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: same-origin\r\nvary: Accept-Encoding, Accept, Accept-Language, Cookie\r\ncache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400\r\netag: W/\"442ef7ae33f1de92ec90dfbae313d9c6\"\r\ncontent-security-policy: upgrade-insecure-requests;, base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://baraag.net; img-src 'self' data: blob: https://baraag.net https://media.baraag.net; media-src 'self' data: https://baraag.net https://media.baraag.net; manifest-src 'self' https://baraag.net; form-action 'none'; child-src 'self' blob: https://baraag.net; worker-src 'self' blob: https://baraag.net; connect-src 'self' data: blob: https://baraag.net https://media.baraag.net wss://baraag.net; script-src 'self' https://baraag.net 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://baraag.net 'nonce-wseDS8qv8HJfyYUQlq2qOg=='\r\nx-request-id: e290496f-bae7-4c71-aaf6-0ed234067b9d\r\nx-runtime: 0.020447\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cached: EXPIRED\r\ncontent-encoding: gzip\r\nage: 6\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 16574\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.po-kaki-to.com/wp-content/uploads/2023/11/1698904531.jpg","fqdn":"www.po-kaki-to.com","domain":"po-kaki-to.com","tld":"com"},"ip":{"addr":"172.67.144.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"po-kaki-to.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:07:46 GMT","end":"Sun, 09 Nov 2025 08:06:16 GMT"},"fingerprint":{"sha1":"9C:7E:00:7E:35:7D:00:ED:FD:03:DA:15:B0:C5:3B:39:60:60:C9:72","sha256":"F7:F9:96:D5:50:B1:93:42:A3:D6:45:7B:7C:CD:31:D4:05:30:14:15:A4:86:36:E8:0D:8D:5F:6C:52:2A:17:B2"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/1698904531.jpg HTTP/1.1\r\nHost: www.po-kaki-to.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 94546\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Nov 2023 05:55:31 GMT\r\netag: \"654339d3-17152\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Thu, 27 Nov 2025 04:51:12 GMT\r\ncache-control: max-age=7776000\r\naccept-ranges: bytes\r\nage: 1985692\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DvNgy5lbybsqVSKTPgRCj%2FFY%2Fxc8loMvi9YBIkmyoyjUeyYtXC5oJJ0XWxEBpAKYwrSKh5%2FKHroiU2715v7JqOyKpp6PNUMxJDRovIIo%2FH0Ycg%3D%3D\"}]}\r\ncf-ray: 9826cd677aff35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94546,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 47x47, segment length 16, progressive, precision 8, 650x550, components 3","md5":"13c7a9a617284bcedc1bf53d3a1f9fec","sha1":"1d13aa53c666c4d9ffc5b485580d5a2a9bb4f925","sha256":"3c9d285d4317dea34166ffb58d5a3754c8bb61502c229504e12695dfdc441c89","sha512":"7946e5f0733e8479600744001095e7493914de6366e611fc30b420b2b1969fc50d4e0dba7a349a35bcf2dd71d1f5166b760d2b3278de39ac99511d26784b85c0","ssdeep":"1536:O9RNpfBgtXrjDfsvlRd7Bned6LNPxzvk3m6XOYkXUK1ZNdzkJILFNxVb95gph0ji:q18rjAvrbVNFcDe+K1ZsUZPiV","tlshash":"f693126bd37dbaa5f7e537f1ed881350d08abd1297b0cdb0ac7a180a1b65b8164c63c4","first_seen":"2024-04-28T04:52:35Z","last_seen":"2026-03-03T14:10:03.495522Z","times_seen":71,"resource_available":false,"data":null}},"time_used":2282,"timings":{"blocked":500,"dns":3,"connect":5,"send":0,"wait":8,"receive":3,"ssl":1759},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmtu.sltusl.com/upload/vod/20220903-4/c44ff7f64594b90ddf44edb857243f4b.jpg","fqdn":"fmtu.sltusl.com","domain":"sltusl.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.958Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20220903-4/c44ff7f64594b90ddf44edb857243f4b.jpg HTTP/1.1\r\nHost: fmtu.sltusl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":45,"connect":62,"send":0,"wait":0,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uqetyzxa.com/20221002/6veKZM5L/1.jpg","fqdn":"uqetyzxa.com","domain":"uqetyzxa.com","tld":"com"},"ip":{"addr":"208.64.217.23","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uqetyzxa.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Wed, 18 Sep 2024 00:27:40 GMT","end":"Sat, 18 Oct 2025 00:27:39 GMT"},"fingerprint":{"sha1":"E5:84:49:26:19:34:0F:60:FB:7B:C7:34:7C:74:DB:73:FF:1D:9B:FB","sha256":"2D:82:94:29:64:E1:20:72:59:93:BB:F0:E6:A9:F9:8E:10:0E:C4:40:30:05:34:25:60:63:64:28:26:39:8D:5B"}}},"request":{"raw":"GET /20221002/6veKZM5L/1.jpg HTTP/1.1\r\nHost: uqetyzxa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7779\r\nConnection: keep-alive\r\nLast-Modified: Sun, 02 Oct 2022 17:37:48 GMT\r\nETag: \"6339cc6c-1e63\"\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7779,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1708x2277, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 240x320, components 3","md5":"0e356d1a096aa360008dd96282e2ad1b","sha1":"b3636d98e20b72d068bfc78070cf44872bd4e0d2","sha256":"cc71f8533eec8a30d2bd7bf401df0a738089adc1d1ccf4f867a8017b638b9abb","sha512":"b74d8caef05697946cafebc7e4d365b03be7a7e407038b72e75b45c384e9a0fb0de0c256b01b8c081366871d4e7767f94994ded044f4cca2e88e7e9052cb67b4","ssdeep":"192:BcOuas1Rdf82zhnAW4ldGoC71eCcagAKCpQuS:BcOuFBf8NldLLAdS","tlshash":"37f1be9644a8f7e2288bbd7c8a46c4cf905e974a7b9824384b7400b9f5b0d04f0e573d","first_seen":"2025-07-05T12:25:41.535534Z","last_seen":"2025-10-03T09:25:04.534852Z","times_seen":57,"resource_available":false,"data":null}},"time_used":2057,"timings":{"blocked":-1,"dns":2,"connect":146,"send":0,"wait":169,"receive":0,"ssl":1740},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mlkjcrm.oss-cn-guangzhou.aliyuncs.com/GAKVa1n6ID/wI9T6U/gUwOgBk?t=EaZI3nDkR6","fqdn":"mlkjcrm.oss-cn-guangzhou.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.134.41.213","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:15.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cn-heyuan.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:16:37 GMT","end":"Sun, 23 Aug 2026 08:16:36 GMT"},"fingerprint":{"sha1":"D8:A1:33:A7:26:69:EE:38:B1:BE:09:BC:A9:E8:7B:FA:B5:1C:A4:C4","sha256":"CC:95:3F:8F:9D:E4:18:F9:85:FF:89:E0:FE:C9:BD:47:64:0B:A9:FC:A3:5A:77:70:A2:6D:17:25:5B:8C:F4:0C"}}},"request":{"raw":"GET /GAKVa1n6ID/wI9T6U/gUwOgBk?t=EaZI3nDkR6 HTTP/1.1\r\nHost: mlkjcrm.oss-cn-guangzhou.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1080p.tub4us.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sun, 21 Sep 2025 04:26:15 GMT\r\nContent-Type: application/xhtml+xml\r\nContent-Length: 7153\r\nConnection: keep-alive\r\nx-oss-request-id: 68CF7E6721D3443036E2782B\r\nAccept-Ranges: bytes\r\nETag: \"7E36074CC576FC79FF63CA78AFDA9093\"\r\nLast-Modified: Sat, 20 Sep 2025 18:10:12 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2007375890217848784\r\nx-oss-storage-class: Standard\r\nx-oss-version-id: CAEQgwEYgYCAu8GjocsZIiBiMThiZDQ0NGE0NzM0NGJlYjE1MTllODA5NjQ5YTRlNw--\r\nContent-MD5: fjYHTMV2/Hn/Y8p4r9qQkw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7153,"size_decoded":0,"mime_type":"application/xhtml+xml","magic":"XML 1.0 document, ASCII text, with very long lines (6373)","md5":"7e36074cc576fc79ff63ca78afda9093","sha1":"ae3922cbe38d89ad21ccd261f31d42f3fd00a3ab","sha256":"c5926f055ecadbe9385e1cc4c7a3dcb6472167e318d7007ecd284e5a53e8aeb6","sha512":"038e7cc078735c7a1afbe440918e0f63b9fb375f39a17359e3c569695a8faad1c1300e5ede46abba4f508b5c8b590f809531623179fcfdc0ca630d2c7284cdd7","ssdeep":"192:/wJniHhRcvRkkFFqRLL+P/aP6tyAMt41IxlkDL:qi38CkFI+6P60AMjcDL","tlshash":"09e1c50a36d12a00535767f3232ba9e5d2848abb3ce0458bb30c7dd8af9195dc385b75","first_seen":"2025-09-20T06:33:55.05459Z","last_seen":"2025-09-23T21:08:32.299016Z","times_seen":9,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornodrochka.org/favicon.ico","fqdn":"pornodrochka.org","domain":"pornodrochka.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.401Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornodrochka.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":834,"timings":{"blocked":23,"dns":17,"connect":41,"send":0,"wait":0,"receive":0,"ssl":727},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.peppahub.com/favicon.ico","fqdn":"www.peppahub.com","domain":"peppahub.com","tld":"com"},"ip":{"addr":"185.197.163.38","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"peppahub.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 03:11:15 GMT","end":"Fri, 28 Nov 2025 03:11:14 GMT"},"fingerprint":{"sha1":"B2:25:59:6A:9F:B8:BC:5B:B6:EA:FB:4C:4D:6C:A7:6E:1A:91:B1:BF","sha256":"BD:3F:C8:D9:7E:CE:07:5D:42:C8:29:AC:47:D7:D8:74:C8:62:C7:E9:57:13:D0:F9:C3:3E:99:51:BA:39:13:DD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.peppahub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.10.3\r\nDate: Sun, 21 Sep 2025 04:26:10 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 169\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":14,"dns":32,"connect":44,"send":0,"wait":22,"receive":0,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_4282546063.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 07:11:45 GMT","end":"Tue, 25 Nov 2025 07:11:44 GMT"},"fingerprint":{"sha1":"4C:08:FF:9B:21:5C:D4:AF:F8:61:EB:02:2A:B2:41:C6:A6:FD:65:52","sha256":"49:BB:6D:F7:8D:BD:FB:E0:A8:5E:C7:46:48:E8:4D:04:0F:BF:5C:41:EF:03:99:7B:C7:F8:7D:7D:53:0E:4A:24"}}},"request":{"raw":"GET /ext/pre_4282546063.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11152\r\nserver: BunnyCDN-DE1-1047\r\ncdn-pullzone: 4336709\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6760032e-2b90\"\r\nlast-modified: Mon, 16 Dec 2024 10:38:38 GMT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:15:03\r\ncdn-edgestorageid: 1080\r\ncdn-requestid: 4b7e3bfbdb4d77ed63849a66e01c17c5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11152,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x226, components 3","md5":"c55cf5b23a357299232cce7180cafe1e","sha1":"8aced09325f2a74da1f46f15013175c142454f07","sha256":"21113a78a24119304a7785ee8615182c0e600f09ae5608a0fb79c2a637a82c1f","sha512":"58ba885120663bdb60f9d0ddecaf11b70b24bc0f764e857773c530b6887c47714c8fc8f282e2cf5d25fab49a36fd5b5226f5558e67dd72412cb697c35ad1679d","ssdeep":"192:L3FK4UZNyfz/2ynhviRjxhAlBzmt7XjRzX9EGLZNv1DD6QOozJa9:TFK/yb/3nhe3q27XjRzXKuFwQOozJa9","tlshash":"ad32be22ad43098bc3f00b2b82ad2c92b4569811e6966f704dde5366e984ffddcdc604","first_seen":"2025-08-05T05:36:16.875666Z","last_seen":"2025-11-17T02:57:12.407399Z","times_seen":19,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241028-15/eb217c2a868534c3c83e25bb75760107.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.457Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241028-15/eb217c2a868534c3c83e25bb75760107.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.qianju.cc/upload/vod/20230306-1/5acae97d27efa8a488ec086ab6f1e13b.jpg","fqdn":"img.qianju.cc","domain":"qianju.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.619Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20230306-1/5acae97d27efa8a488ec086ab6f1e13b.jpg HTTP/1.1\r\nHost: img.qianju.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"img.qianju.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"img.qianju.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twitter.yandex.com.tr/favicon.ico","fqdn":"twitter.yandex.com.tr","domain":"yandex.com.tr","tld":"com.tr"},"ip":{"addr":"87.250.255.11","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:12.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: twitter.yandex.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 12216\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nset-cookie: is_gdpr_b=CJTgGhDX2AIYASgB; Path=/; Domain=.yandex.com.tr; Expires=Tue, 21 Sep 2027 04:26:12 GMT; SameSite=None; Secure\n_yasc=p/1rkW3ngSf1Daf+HgD0z1G7HlN71GHjCIxO1Vsd32bJr23DEbWnf1XLVKOLPc4q; Path=/; Domain=.yandex.com.tr; Expires=Tue, 21 Sep 2027 04:26:12 GMT; Secure\nis_gdpr=1; Path=/; Domain=.yandex.com.tr; Expires=Tue, 21 Sep 2027 04:26:12 GMT; SameSite=None; Secure\nis_gdpr_b=CJTgGhDX2AIYAQ==; Path=/; Domain=.yandex.com.tr; Expires=Tue, 21 Sep 2027 04:26:12 GMT; SameSite=None; Secure\n_yasc=kf6bwvjr7aqUQP4RkXQuIcn3KMzOiugm7O1BY6DSpSokBtXZMWZc0doifHujZ/hv; domain=.yandex.com.tr; path=/; expires=Wed, 19 Sep 2035 04:26:12 GMT; secure\ni=+Kji7uBbbPKbPbfX0B/7CkKyuI344iqGsK6wNfQwWC3GMcH6/AGBqhj/n16Z0QnNvCioJ1yptA2yUBJEG8zVZA+EYro=; Expires=Tue, 21-Sep-2027 04:26:12 GMT; Domain=.yandex.com.tr; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=8657681641758428772; Expires=Tue, 21-Sep-2027 04:26:12 GMT; Domain=.yandex.com.tr; Path=/; Secure; SameSite=None\nyashr=9382919311758428772; Path=/; Domain=.yandex.com.tr; Expires=Mon, 21 Sep 2026 04:26:12 GMT; SameSite=None; Secure; HttpOnly\nbh=YOT8vcYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com.tr; Expires=Mon, 26 Oct 2026 04:26:12 GMT; SameSite=None; Secure\r\nx-frame-options: SAMEORIGIN\r\ndate: Sun, 21 Sep 2025 04:26:12 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nx-yandex-req-id: 1758428772395652-14792094671265768164-balancer-l7leveler-kubr-yp-vla-95-BAL\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: img-src 'self' yastatic.net data: yandex.com.tr favicon.yandex.net avatars.mds.yandex.net yabs.yandex.ru mc.admetrica.ru mc.yandex.com *.mc.yandex.ru adstat.yandex.ru mc.yandex.com.tr mc.yandex.ru;default-src 'none';script-src yastatic.net yandex.com.tr mc.yandex.ru *.mc.yandex.ru adstat.yandex.ru mc.yandex.com.tr 'nonce-2tFxOWi00MkFRdUZkXJ7MQ==';style-src yastatic.net 'unsafe-inline';connect-src yandex.com.tr yabs.yandex.ru mc.yandex.ru *.mc.yandex.ru adstat.yandex.ru mc.admetrica.ru mc.yandex.md mc.yandex.com.tr;child-src mc.yandex.ru mc.yandex.md mc.yandex.com.tr;report-uri https://csp.yandex.net/csp?project=morda\u0026from=morda.error404.com.tr\u0026showid=1758428772395652-14792094671265768164-balancer-l7leveler-kubr-yp-vla-95-BAL\u0026h=home-any-stable-backend-57.klg.yp-c.yandex.net\u0026yandexuid=8657681641758428772\u0026version=2025-09-15-167\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":144,"dns":220,"connect":48,"send":0,"wait":91,"receive":1,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.crazyshit.com/content/2018/10/018453a4.jpg","fqdn":"media.crazyshit.com","domain":"crazyshit.com","tld":"com"},"ip":{"addr":"45.133.44.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"media.crazyshit.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 02:33:04 GMT","end":"Mon, 27 Oct 2025 02:33:03 GMT"},"fingerprint":{"sha1":"4B:C8:F7:57:68:32:B3:B5:70:31:3E:8C:32:BC:34:57:81:3A:54:C9","sha256":"8D:21:A3:34:ED:E8:B1:2C:20:3B:4F:FA:BD:47:8E:F6:08:39:62:2A:98:BF:7C:15:9D:CE:8E:4A:6F:44:6E:7D"}}},"request":{"raw":"GET /content/2018/10/018453a4.jpg HTTP/1.1\r\nHost: media.crazyshit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 291616\r\nserver: nginx/1.24.0\r\nx-object-meta-mtime: 1540567420.290369388\r\netag: 155b3b05a6621027d4e659cfdc6d709a\r\nlast-modified: Mon, 05 Apr 2021 12:27:58 GMT\r\nx-timestamp: 1617625677.10508\r\nx-trans-id: tx491e042682be4572b5013-0065f48c78\r\nx-openstack-request-id: tx491e042682be4572b5013-0065f48c78\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Tue, 23 Sep 2025 04:26:03 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":291616,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 720x540, components 3","md5":"155b3b05a6621027d4e659cfdc6d709a","sha1":"35007ab85a1944b6091875164aa940839823080a","sha256":"d24c97fb12b146ef699dd2b610ab1ad2f9f37d28e298553ed4b2d112c840b492","sha512":"05c888825ba0f8be9a6e22ad108eca6ea749d64595c5275f49ec8363abd841ba82a55f4dfb2573fd0de4a8e4279cf529d153860bee5e30ee7fd9a0710d7c7168","ssdeep":"6144:IlNiDhgElI4+5aeTWtbM12F80rrH2u5Wwbz2A7KBDrN1YZ:Ai9AGtbQ2e0riu5ZbSA7SDR1YZ","tlshash":"e3542393f5aabb22c8475fe369956de26044025b3e8cbc2643f740edbdd066742b091f","first_seen":"2024-08-19T20:55:54.11773Z","last_seen":"2025-09-21T04:28:54.373749Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/watch/48140495/1?wmode=7\u0026page-url=https%3A%2F%2F1080p.tub4us.top%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3b8z1leqd9ammnvw0gzjaat34ifxb%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2204%3Acn%3A1%3Adp%3A0%3Als%3A1749404415117%3Ahid%3A636548444%3Az%3A0%3Ai%3A20250921042606%3Aet%3A1758428767%3Ac%3A1%3Arn%3A359634713%3Arqn%3A1%3Au%3A1758428767508771851%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C26%2C810%2C206%2C48%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1758428761333%3Afip%3A68bd72ff7c9b5abc9c3f912930d63a42-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1758428768%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB-HD-VIDEOS%40AV4.us\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842534404%29fip%281%29ti%281%29\u0026redirnss=1","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:08.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /watch/48140495/1?wmode=7\u0026page-url=https%3A%2F%2F1080p.tub4us.top%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3b8z1leqd9ammnvw0gzjaat34ifxb%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2204%3Acn%3A1%3Adp%3A0%3Als%3A1749404415117%3Ahid%3A636548444%3Az%3A0%3Ai%3A20250921042606%3Aet%3A1758428767%3Ac%3A1%3Arn%3A359634713%3Arqn%3A1%3Au%3A1758428767508771851%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C26%2C810%2C206%2C48%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1758428761333%3Afip%3A68bd72ff7c9b5abc9c3f912930d63a42-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1758428768%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB-HD-VIDEOS%40AV4.us\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842534404%29fip%281%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1080p.tub4us.top\r\nReferer: https://1080p.tub4us.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yabs-sid=1942222291758428768; i=mU7atXhXGS6zt1LwqEVea5CuqbFhWkFT+omaBtcZq/BOIYtswt7I4WxZ1klNCltXO8YRHS3uZEUq3lb13k36BjDmxlU=; yandexuid=7964145321758428768; yuidss=7964145321758428768; ymex=1789964768.yrts.1758428768#1789964768.yrtsi.1758428768; bh=YOD8vcYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 635\r\ncontent-type: application/json; charset=utf-8\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1080p.tub4us.top\r\nexpires: Sun, 21-Sep-2025 04:26:08 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Sun, 21-Sep-2025 04:26:08 GMT\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7937611e806db539c57818bd38f80d33","sha1":"c696bd931407ea8c3382a354f320870cd1cfe142","sha256":"af67576010f74e34c928eccfee4ee4245e7d56378aa6fdce7230d4ed070036ec","sha512":"868e3cdeda7ae551fc3b7cdc14cc754b4c084937b9fb3a88e8bb7dfbd96977fe19200b2188d94703b68f2d71808af459de2c2557e6bef6206464a44a3d21ddd2","ssdeep":"","tlshash":"bff06215168c117a424e4ec40cfda51b29883618cc823ae0588752e40fcda34ba0faf1","first_seen":"2025-09-21T04:28:54.374563Z","last_seen":"2025-09-21T04:28:54.374563Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/07/a5nejeaf_header.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 09:48:24 GMT","end":"Sat, 08 Nov 2025 10:45:39 GMT"},"fingerprint":{"sha1":"4F:F9:25:37:EE:42:8B:1E:5C:AA:F5:BD:BF:CB:3A:CE:FD:84:E3:68","sha256":"E9:D6:87:C8:76:D3:FC:EE:D6:80:61:98:3C:B4:69:F2:52:5D:24:92:95:9E:91:B8:16:F5:EF:BB:CD:64:21:8A"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/a5nejeaf_header.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 291936\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 17 Sep 2025 19:20:26 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2fzY3jE9xjM6O0tYbvq6HpdSAcp8kGp%2F1c8Ik22KjSmdrsZVIUdkjt8DW6X7khE925phd217M%2FSCUGW7bn0H1iG4WT3vPvyqwf8%3D\"}]}\r\ncf-ray: 9826cd593e0b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45759,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 400x300, components 3","md5":"e69299c6a80df7f5e78e6342ec5f092c","sha1":"0205517d88d3c10b3d5f03ceea7bac5694a8fad1","sha256":"df04021c0f9271e9c4299797a2c205c26ad03091d7e3b56497a4cfb4f83f7018","sha512":"4105707e3a951e82ddd6bb69dc4890aefd4121589796666ccd023503ee0b7431bf930a2633aab029b1a2bc4d65a44da8a3dff077145f904b4ecd68ce87988380","ssdeep":"768:zH+0AbofGHBv4htIeau/WbpCj+d8/jRIkNn17jsef:zHy0fMBvDZuubpCyd8VIkd17jB","tlshash":"3f23f2065bc39fa0372e064c40769d2f06d6eaa049b4072dff94b1eb9346fb1a512f5e","first_seen":"2025-09-21T04:28:54.376257Z","last_seen":"2025-11-27T08:23:02.497104Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ljcdn.ddljsytt.com/20241105/fb5LhfAz/1.jpg","fqdn":"ljcdn.ddljsytt.com","domain":"ddljsytt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.953Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /20241105/fb5LhfAz/1.jpg HTTP/1.1\r\nHost: ljcdn.ddljsytt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.syougakuseijridol.com/favicon.ico","fqdn":"www.syougakuseijridol.com","domain":"syougakuseijridol.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.171Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.syougakuseijridol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":4,"connect":273,"send":0,"wait":0,"receive":0,"ssl":485},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.aosikaimge.com/20221004/qt67yjWy/1.jpg","fqdn":"img.aosikaimge.com","domain":"aosikaimge.com","tld":"com"},"ip":{"addr":"64.112.78.82","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aosikaimge.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 24 Dec 2024 10:28:23 GMT","end":"Fri, 23 Jan 2026 10:28:22 GMT"},"fingerprint":{"sha1":"BC:19:8D:FF:22:32:94:8C:04:80:02:CE:1A:59:1C:91:24:15:5C:66","sha256":"F8:17:7C:E0:46:83:E7:7F:FB:CB:88:66:23:61:56:22:39:3A:23:8B:BF:3B:08:F3:37:F4:92:5C:72:1F:D8:B8"}}},"request":{"raw":"GET /20221004/qt67yjWy/1.jpg HTTP/1.1\r\nHost: img.aosikaimge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6397\r\nConnection: keep-alive\r\nLast-Modified: Wed, 05 Oct 2022 00:25:53 GMT\r\nETag: \"633ccf11-18fd\"\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6397,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x240, components 3","md5":"cc1a3c360b9eef9e20b14c027fcf5ac0","sha1":"006c3114bcd01ba090cb6def256c9a82e891ea96","sha256":"90d367ad91ef08a3fc9060f2dbab009baa6e238e58d58c11099208ac48ada0f4","sha512":"8971ed326a42fc6572d7d95d331934c008871bb9b6587845b9f9adfc432d6ad824c7016ab7be04fb61fcd3d72fe062d2eb1bc3dd41bba27abcebac84a21971d6","ssdeep":"192:F9GMlF2otvlbXXoNoBZQsbDXWbE5YnweJowLf+:F9GMlF2oJJXYNoBismw2nHS","tlshash":"96d190334e683559cb03947addefd8039185b2ef7a3c07deac739f958b2224a584411d","first_seen":"2025-05-27T17:53:32.100699Z","last_seen":"2025-12-25T10:42:57.797328Z","times_seen":50,"resource_available":false,"data":null}},"time_used":3547,"timings":{"blocked":1421,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":1970},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rule34xyz.b-cdn.net/posts/3005/3005651/3005651.picpreview.jpg","fqdn":"rule34xyz.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"185.59.220.199","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /posts/3005/3005651/3005651.picpreview.jpg HTTP/1.1\r\nHost: rule34xyz.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78508\r\nserver: BunnyCDN-DE1-722\r\ncdn-pullzone: 294263\r\ncdn-uid: 66d6ad83-3f00-4738-b738-db341e02bfab\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=7776000\r\nlast-modified: Tue, 14 Jan 2025 11:28:21 GMT\r\ncdn-storageserver: DE-679\r\ncdn-fileserver: 576\r\ncdn-proxyver: 1.27\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 05/13/2025 17:58:12\r\ncdn-edgestorageid: 752\r\ncdn-requestid: 4eae489c28cd345c44e373d4db3a56b7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":78508,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x853, components 3","md5":"55ce889e5ffd08c2a18dacca1a71c5a0","sha1":"4b775ee7dbee2cb5ca6a039b2ef93c5fa166597c","sha256":"9efb1d3f13c71120120daa58715fcae153bc2a141bf50def843d82694c551a14","sha512":"792d73609baa5566a7330747e473a4f3d7b271887b32434b3469de62b80d6a9267f9a5d17c5cc974abc841aacd2446f4a1b51bb94e4dcfb937a45b5a2b4a3491","ssdeep":"1536:IqV7uIhb+yZh4+W4x9Ww82Ba0P/RdC5BRloQ20jnDoXqp:X9uIhbFZhLbl8s+BRZ20jncW","tlshash":"917302069de2b0b86c2dd929fc8bc76779cbbd515465842cdc508e5b1ddd0e048aca3e","first_seen":"2025-06-07T18:11:44.655038Z","last_seen":"2025-09-21T04:28:54.378885Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3338,"timings":{"blocked":1430,"dns":11,"connect":42,"send":0,"wait":29,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"page.phic4.top/myda.php","fqdn":"page.phic4.top","domain":"phic4.top","tld":"top"},"ip":{"addr":"172.67.190.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phic4.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 04:42:44 GMT","end":"Wed, 26 Nov 2025 05:38:57 GMT"},"fingerprint":{"sha1":"A9:24:2E:59:E9:1F:79:43:22:02:EE:61:FD:A7:A8:78:49:F5:63:FA","sha256":"1C:49:D3:6F:AB:99:B4:59:BF:D1:35:08:3A:B0:D8:71:A0:BB:CB:E3:35:97:1E:3A:33:3D:88:F5:88:A6:F0:D2"}}},"request":{"raw":"GET /myda.php HTTP/1.1\r\nHost: page.phic4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nmyda: myda2a0e:4005:1002:ffff:185:40:4:143\r\nvary: User-Agent, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u6Zd0Rxt5h9GDXs%2FOuC7%2BKYOp8ICi49NAQzyviplF7boQW%2FtJVxT2CpEmbsaIKfdkH61mFVC9qa7BNnI9gYUlxnfwRXS3Dvp5mEMdQ%3D%3D\"}]}\r\nage: 1976\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 21 Sep 2025 03:53:11 GMT\r\ncontent-encoding: br\r\ncf-ray: 9826cd761da656ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":7,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"page.phic4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amoviemedia.com/favicon.ico","fqdn":"amoviemedia.com","domain":"amoviemedia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.131Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amoviemedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"amoviemedia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pornoperso.com/wp-content/uploads/2021/07/young.jpg","fqdn":"pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"104.21.41.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornoperso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 12:18:54 GMT","end":"Sun, 16 Nov 2025 13:16:12 GMT"},"fingerprint":{"sha1":"EF:2D:EE:83:24:ED:27:AD:16:50:2E:84:58:A6:B5:24:BE:16:B5:BB","sha256":"F0:BD:08:D9:EE:FE:C0:42:F9:50:63:1C:CD:75:A8:10:0B:88:F4:5B:2E:F7:35:D1:8D:CC:E1:F2:61:12:B7:88"}}},"request":{"raw":"GET /wp-content/uploads/2021/07/young.jpg HTTP/1.1\r\nHost: pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27351\r\nserver: cloudflare\r\nlast-modified: Sat, 17 Jul 2021 17:53:26 GMT\r\netag: \"60f31916-6ad7\"\r\nversion: MS25061701\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=2592000, must-revalidate\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nx-served-by: pornoperso.com\r\nage: 2870905\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RUEA7PwPM7BdTJZfktscBU7QlgbBwUB1YHp8Q6WJYrcU%2FtNIxOszBtuDaud1Iy6EClNbSm0vchsQXX6MucT2i4N9xkFgWSoa7bY47Q%3D%3D\"}]}\r\ncf-ray: 9826cd64f92e56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 600x337, components 3","md5":"eb224b04ce9c7199f8d9b48e9f7792c9","sha1":"b9fe08aa9ea502e20b1c83eb6ab8fef1008f9b6c","sha256":"d612f51be9efa45430ec65527839b8034461ea823c4b67f4ae044eb217ffd09c","sha512":"ed414f9fff725bc6eb37b90598bbf2a1abe8db0e074d822327eacfb10891e87738653d043e9f7d300cea31cf64fa9d8fd3d31a6e35555ab87c2e9f2a4b631e11","ssdeep":"768:4ekArx1oDW6w07jjLJ35MSaQ395u/iieMgBWkAo2p:4eH1vXCjl35MA5LPBWtp","tlshash":"10c2f25ef6fa2228c0f61ec01739c3d1bb19e185b55596deb200861dccbc06d0a7bf2a","first_seen":"2025-02-19T22:30:07.441147Z","last_seen":"2025-12-05T22:31:48.408761Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1691,"timings":{"blocked":161,"dns":2,"connect":1,"send":0,"wait":9,"receive":1,"ssl":1517},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.javdove.com/favicon.ico","fqdn":"www.javdove.com","domain":"javdove.com","tld":"com"},"ip":{"addr":"172.67.199.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javdove.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 12:16:31 GMT","end":"Thu, 11 Dec 2025 13:14:42 GMT"},"fingerprint":{"sha1":"02:8B:28:94:C1:98:0B:6E:D9:E1:97:6A:B0:2A:AE:21:48:DA:F0:6E","sha256":"74:5F:0E:35:C2:1A:B9:64:00:DC:CE:F9:58:71:AA:4D:E1:10:5A:AD:DF:1B:3B:F4:50:19:61:12:70:80:A2:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.javdove.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nage: 95\r\ncache-control: max-age=691200\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XWnUQZVnmEkYFPYZKuoQuS%2FZA0akMl3Fvqez3rYU8yHYySczfKBHYnd0%2FGN1Qm9PbBfmNYXMADDs2qBh%2B5%2FnI%2Bsn3F65IxQXtpWR%2FZAW7g%3D%3D\"}]}\r\ncf-ray: 9826cd85b8201ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":19,"connect":14,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s10.stc.yc.kpcdn.net/share/i/12/10913894/cr-1200-630.wm-asnpmfru-100-tr-0-0.t-13-4040282-ttps-47-12-0083CD-1010-l-85-b-42.t-13-4040282-ttps-47-12-FFF-1010-l-85-b-42.t-207-5-asb-37-10-FFF-788-l-370-t-68.m2019-05-30T08-57-05.jpg","fqdn":"s10.stc.yc.kpcdn.net","domain":"kpcdn.net","tld":"net"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stc.yc.kpcdn.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 16:53:14 GMT","end":"Wed, 10 Dec 2025 16:53:13 GMT"},"fingerprint":{"sha1":"11:3E:CC:08:80:4A:00:EB:9E:B3:AA:25:63:01:EC:53:07:96:D5:B8","sha256":"3B:EF:D9:4C:06:E7:FF:36:70:EA:1C:62:7A:F6:B0:3D:99:72:15:48:42:D7:31:12:63:5F:3C:92:D6:B2:3B:46"}}},"request":{"raw":"GET /share/i/12/10913894/cr-1200-630.wm-asnpmfru-100-tr-0-0.t-13-4040282-ttps-47-12-0083CD-1010-l-85-b-42.t-13-4040282-ttps-47-12-FFF-1010-l-85-b-42.t-207-5-asb-37-10-FFF-788-l-370-t-68.m2019-05-30T08-57-05.jpg HTTP/1.1\r\nHost: s10.stc.yc.kpcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 138169\r\netag: \"117361e7bc2c9d2ee0660ef7a5289ead\"\r\nlast-modified: Fri, 01 Oct 2021 10:32:05 GMT\r\nx-amz-request-id: b05e2cfb03d30ffe\r\nexpires: Thu, 25 Sep 2025 04:26:04 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\ncache: HIT\r\nx-cached-since: 2025-09-17T12:24:04+00:00\r\nx-node: m9p-up-gc69\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138169,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x630, components 3","md5":"117361e7bc2c9d2ee0660ef7a5289ead","sha1":"2c7f08ceac2d229530457247a6064c7379a61e79","sha256":"0baa0a1626763370a25caee26addafc9d2bc084b830f7f95d6550d035591351c","sha512":"24227921453c34f57308153a59979c88ff72490672275345fbc2cce1af9c56b34447b4489240b96bd5c8422616f2bdda512a054909e511c9c1d0d87673427420","ssdeep":"3072:PgCCS+7H1tgxOILaYf463vtr6JHKpYPz+AmhmRWByaAekjwJfNMLN1Hjjvhz70:P6S8H1y1+YfNtr6EpY7+AmOMyaGolMn2","tlshash":"efd312183251d5effb0ed82f256878528cebef4a70f96d1058840e93a9dd3ee574d0a2","first_seen":"2025-06-15T23:04:57.82118Z","last_seen":"2025-09-21T04:28:54.380346Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3107,"timings":{"blocked":1109,"dns":92,"connect":68,"send":0,"wait":73,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/favicon.ico","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:09.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:09 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.24-video.com/21/06/25/3096-097.jpg","fqdn":"cdn.24-video.com","domain":"24-video.com","tld":"com"},"ip":{"addr":"51.222.104.21","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn.24-video.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 05:51:12 GMT","end":"Sat, 01 Nov 2025 05:51:11 GMT"},"fingerprint":{"sha1":"0A:87:3E:48:35:86:B6:43:6B:72:C3:95:39:56:E9:C6:A2:2C:2D:AD","sha256":"B3:83:1E:DC:8D:7E:42:67:7E:EB:E8:58:C2:C5:67:FB:A5:EC:BE:CA:58:EE:92:D3:3A:B8:A7:33:25:95:3B:64"}}},"request":{"raw":"GET /21/06/25/3096-097.jpg HTTP/1.1\r\nHost: cdn.24-video.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 26820\r\nLast-Modified: Sun, 23 Feb 2025 21:39:20 GMT\r\nConnection: keep-alive\r\nETag: \"67bb9588-68c4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26820,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1268x1269, segment length 16, comment: \"Lavc58.35.100\", baseline, precision 8, 360x203, components 3","md5":"d1316fe1fcd2ec72fe83eb9cbe34a515","sha1":"41fd96742e903392a2d47353dae40f54740b69f2","sha256":"318ad11689d8d76b8b1c226e1a1295d27deb66c4fe3b237ecce5a74ae109f977","sha512":"236614258c81628755933f7980219735c131d51652843389eaaa2860b6aefe82d5d54b059861947bfc0c0d29a1a4f9927194fea5c0735b3b03831e54adf02e8b","ssdeep":"384:/AL7Oi9bfHo8yyKBCqfaSqpM5dgRSBsAMavn9whqPe9S1PixYTgekEhun+2Yq:4LC0o8bK1aXmdLZpBW9KdkEE+q","tlshash":"5dc2e12585fa190e52c017f5c185d5a7bd2aad8314270aff4ca3527b3316e251f47fe2","first_seen":"2025-07-07T19:24:52.644265Z","last_seen":"2025-11-30T14:45:44.133246Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1714,"timings":{"blocked":14,"dns":2,"connect":94,"send":0,"wait":189,"receive":1,"ssl":1409},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20240619-4/49cf6b829172e63b193953501675565c.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.253Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20240619-4/49cf6b829172e63b193953501675565c.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/f.fcbyti.sbs/upload/vod/20240106-1/e186da0dd83262c14de12e6fbc1300b7.jpg","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 Aug 2025 19:44:50 GMT","end":"Tue, 04 Nov 2025 19:44:49 GMT"},"fingerprint":{"sha1":"E3:33:F6:CB:1D:54:80:51:6E:94:B6:72:D6:8D:22:88:EC:CF:5C:C2","sha256":"A2:6F:1C:4D:B8:5F:EC:D5:D1:31:F6:0A:A1:D3:C4:05:9B:6A:16:37:15:5E:C6:BE:AE:95:93:6E:79:6F:7D:8E"}}},"request":{"raw":"GET /f.fcbyti.sbs/upload/vod/20240106-1/e186da0dd83262c14de12e6fbc1300b7.jpg HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 86824\r\nlast-modified: Mon, 20 Jan 2025 15:33:25 GMT\r\nexpires: Thu, 21 Jan 2027 03:33:25 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://f.fcbyti.sbs/upload/vod/20240106-1/e186da0dd83262c14de12e6fbc1300b7.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"db10ef6b48065e08\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 4\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86824,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"892e896fb3659dddca22e4d87dc1d899","sha1":"d761559042b699f87560def98a0744ec98797cc0","sha256":"344e74c377d8f7e60ded092db0fab3f9871791a54651b609edc45f4150810a08","sha512":"b1f2539aee2f7c7ad52415d1e691a9ecb4668ec1a89392e1abbdf50e33bfd6bc9a3ed22599257c23cb9bd7a3eb3a23d34412dde9d43affa871684e6e87e6f2fc","ssdeep":"1536:+Zg3tcBzkXLxx3cJ2kdBeorGXe7rZscYZhOFWriq0v/Qe3nPkOBU:Kg3tp7/c7177rZrYLOFpVoe3nPS","tlshash":"6383023f5c1f3306492b7a4fd74271ea6c00de9b5dc3ac788e2a8670c52d2968b9e5d0","first_seen":"2025-01-24T08:58:41.262103Z","last_seen":"2025-09-25T14:10:40.103453Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1480,"timings":{"blocked":139,"dns":1,"connect":8,"send":0,"wait":11,"receive":6,"ssl":1294},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"159i.net/uploads/allimg/2501/D-010110224G091c225L8.jpg","fqdn":"159i.net","domain":"159i.net","tld":"net"},"ip":{"addr":"172.67.200.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"159i.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 10:20:32 GMT","end":"Sun, 14 Dec 2025 11:18:54 GMT"},"fingerprint":{"sha1":"D5:F1:FA:DC:B1:F7:50:6B:64:B5:EF:04:1E:C3:70:54:5A:ED:98:4B","sha256":"0F:79:08:19:0D:19:F2:C1:C9:3A:9F:3E:2C:D9:00:9D:3A:94:CB:84:2D:6B:12:2D:3A:B2:B4:0A:DA:82:80:4B"}}},"request":{"raw":"GET /uploads/allimg/2501/D-010110224G091c225L8.jpg HTTP/1.1\r\nHost: 159i.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46375\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 14 Mar 2025 16:33:15 GMT\r\naccept-ranges: bytes\r\nage: 4677\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8oCo4jzLomjkBqDI5m9o7IZXW6mNyM53QDT2jLWyZc%2BU2B7nzeUOEHR6C%2Bog56%2BRHvz99NYa9eB7iD2qzQLncMrsp1FCw%3D%3D\"}]}\r\ncf-ray: 9826cd652cd0b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46375,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 800x450, components 3","md5":"58bec7f4cc19a1e5a7f49e507d66bc2c","sha1":"942ca82f661994e2722d73a5475dd2e481abbdf5","sha256":"8022ebd52ca4072ae936a31ed2a0a5988dcd60c668b93a66b39a38f1901d578b","sha512":"1b8625b25d89eae6f798a041a7c2e0c6102ea52f79431d8ba5e6e22db76f9e4234c0e3c2862429cc4b84bdde0c40763b5a85e6f205738aa55755e865fc7ef6f6","ssdeep":"768:DysUXOcYB64S+bb/dNsPt6HfwWi+fwUknTYfin5zFF2VXfYXEc5B/Y:D/UJyLvP/dNsA/wp+fb/idFF2VXus","tlshash":"c723f140e870f9f51b2ecd575609e54cb1fe63992a3d1e29b2f40e9bc23f0c9741964a","first_seen":"2025-06-30T08:49:08.590758Z","last_seen":"2026-01-28T23:13:27.028574Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1531,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":12,"receive":2,"ssl":1514},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ljcdn.kd-pic6669.com/20240714/gZjVXubF/1.jpg","fqdn":"ljcdn.kd-pic6669.com","domain":"kd-pic6669.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.583Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /20240714/gZjVXubF/1.jpg HTTP/1.1\r\nHost: ljcdn.kd-pic6669.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"159i.net/uploads/allimg/2501/D-01020G154cW6f4255E.jpg","fqdn":"159i.net","domain":"159i.net","tld":"net"},"ip":{"addr":"172.67.200.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"159i.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 10:20:32 GMT","end":"Sun, 14 Dec 2025 11:18:54 GMT"},"fingerprint":{"sha1":"D5:F1:FA:DC:B1:F7:50:6B:64:B5:EF:04:1E:C3:70:54:5A:ED:98:4B","sha256":"0F:79:08:19:0D:19:F2:C1:C9:3A:9F:3E:2C:D9:00:9D:3A:94:CB:84:2D:6B:12:2D:3A:B2:B4:0A:DA:82:80:4B"}}},"request":{"raw":"GET /uploads/allimg/2501/D-01020G154cW6f4255E.jpg HTTP/1.1\r\nHost: 159i.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\nlocation: https://159i.net/404\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0JvcVoylKYAWey%2FCQ1iDyiiv%2Bu6nEVdxiyeYNyzjSMFL9fsN3%2FphZ5W0AC%2BhXH1ieGTWgnFUhUtmXHi42tYss9KZIUhbNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9826cd69dde8b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1518,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":6,"receive":0,"ssl":1506},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blacktowhite.net/favicon.ico","fqdn":"www.blacktowhite.net","domain":"blacktowhite.net","tld":"net"},"ip":{"addr":"192.243.63.82","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blacktowhite.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Jul 2025 00:00:00 GMT","end":"Fri, 28 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"29:7F:D6:17:0A:55:E3:DB:E8:59:A0:3D:66:88:A5:35:86:B8:EF:80","sha256":"16:D2:4C:56:09:A6:4E:FB:DC:AF:6D:06:8A:B4:A7:96:B1:B5:E6:6B:82:A7:EE:D8:13:2C:AA:59:3C:FC:F0:43"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.blacktowhite.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.17.6\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 2951\r\nlast-modified: Mon, 21 Dec 2015 10:18:34 GMT\r\netag: \"5677d1fa-b87\"\r\nexpires: Sun, 05 Oct 2025 04:26:10 GMT\r\ncache-control: max-age=1209600\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2951,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"7f61d30e4ff36ab9f7cbc9e8b4e3feda","sha1":"54f81165e7d7130826fd6d87d85a39735c391698","sha256":"60e32d8ca6041d4eedc2e9abf1ef3f012e86a01ba7cccc3004ee934bafb22742","sha512":"42fa4ee29441191acee2ce05a65e79aeb40c77e94a7bfed5b9d45b7c0eb10e9f9abd245b06f7826eb052b70f0c8357b69aad9c4f461b4cbb031414a03b0c4bae","ssdeep":"","tlshash":"d2512ada37446612d76bb871ec1428736d9118cb096f6fa882774d346f795372814770","first_seen":"2024-06-16T03:37:38Z","last_seen":"2026-04-03T22:52:06.912979Z","times_seen":433,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:02.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=alfBeMqFH0ArAHVIEaHxd3lOwH9Tysl1dgmWkWH%2FsRIyPUXnnVcxBK1Q4B0exfnF4cXaEPO3ZVbs9dh66yIh8Jl0N6Kk%2BF7rwJmiEfXg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9826cd575bafb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":6,"connect":6,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/c/cfbb0f37174741d99fc2cc929646ad0af8595819.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/2X/c/cfbb0f37174741d99fc2cc929646ad0af8595819.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30693\r\nlast-modified: Thu, 28 Aug 2025 18:46:15 GMT\r\nexpires: Mon, 21 Sep 2026 04:26:02 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30693,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 336x525, components 3","md5":"61f6bbb55552281557d4e287643ac2ca","sha1":"cfbb0f37174741d99fc2cc929646ad0af8595819","sha256":"8ada59e4320f7366c71214bc8a64ca401285418d3a88cbde7eee6b8430047c35","sha512":"5a974f50480a91093db94912cecbf9b2aacba4bcfdd7dd0669b96c9e6dcde7a2f2357bfacc4ad859d88a4a816067b2a0407ba6ec45e0b8d1f490a4f0f5a1b1cf","ssdeep":"768:+yLtilSFbRRQsx7uV6q8bn6dbz4NTwkMGdwwTVEWLpXp38:gkLQXVV26+Ny4wQVh6","tlshash":"22d2e15d52d19fe1f1c28c39d32e6a31e9c4be3677701e9cb9e1165d0fa682ac210792","first_seen":"2025-09-21T04:28:54.384488Z","last_seen":"2026-04-03T21:47:16.576281Z","times_seen":53,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240824-1/9a7e28c58cbb115b07819e404bea38d1.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240824-1/9a7e28c58cbb115b07819e404bea38d1.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 94606\r\nlast-modified: Sat, 24 Aug 2024 04:36:16 GMT\r\nvary: Accept-Encoding\r\netag: \"66c96340-1718e\"\r\nexpires: Mon, 13 Oct 2025 02:47:04 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94606,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"2c5ecc16370032a031c9b7b209bd7027","sha1":"e14df7b520afc86caf7b0918209c047798e558f2","sha256":"258b1a9736620fe090a7645378ed9f493a5714caba3929e9a8f9338db2ade00b","sha512":"44cfea65e1250088e63a39235e3abc190d2c6a99ab1b0f7425767e949e7b4ae90ef34153004cc6de2b32b5fe52e48854c4cc95290a40d0c87d2b31304a613a5e","ssdeep":"1536:O268ljLTEJ51ecBFtZFFMM9SjCRHJwup13kuDj92x5Qjk/W58RW8F:vfEJfecJZFFMhj0pwuH3/j92/SkOcW8F","tlshash":"2f93124e62837012eb67c9defcdae35a836a9e7a17d15cc08094a7464ddc3b4631467c","first_seen":"2024-12-24T23:19:47.353349Z","last_seen":"2026-01-02T09:22:28.316825Z","times_seen":113,"resource_available":false,"data":null}},"time_used":1919,"timings":{"blocked":759,"dns":0,"connect":0,"send":0,"wait":658,"receive":502,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka5.com/favicon.ico","fqdn":"pornolomka5.com","domain":"pornolomka5.com","tld":"com"},"ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:11.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornolomka5.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 Aug 2025 22:41:31 GMT","end":"Sat, 29 Nov 2025 22:41:30 GMT"},"fingerprint":{"sha1":"A9:7C:C8:51:1F:5A:1B:C2:90:14:EA:DB:1E:1A:3F:22:E3:0B:7B:0F","sha256":"71:D2:86:68:41:05:B7:E3:8E:9F:0D:80:FF:DF:15:93:3D:5C:51:FF:22:7E:D5:7B:57:4A:33:FE:D9:A9:38:AE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornolomka5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.10.3\r\ndate: Sun, 21 Sep 2025 04:24:01 GMT\r\ncontent-type: text/html\r\ncontent-length: 169\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":104,"dns":19,"connect":24,"send":0,"wait":24,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asianpornxbb.sbs/wohesangenverdemenghuanshenghuosangongzhudexiaoneineizuizhongpianfeichunvfeiyounv83suide/thumbnails_001.jpg","fqdn":"asianpornxbb.sbs","domain":"asianpornxbb.sbs","tld":"sbs"},"ip":{"addr":"104.21.23.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0b45ee2e.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:04:12 GMT","end":"Mon, 27 Oct 2025 12:04:05 GMT"},"fingerprint":{"sha1":"9E:33:52:5F:4A:DE:5B:B0:7C:5D:C1:66:E4:50:65:4A:1B:B3:9C:42","sha256":"80:68:D6:B7:54:92:5A:F8:74:63:26:7D:33:1D:CE:E7:1F:48:FB:DA:C3:33:14:A8:8A:C8:55:B4:88:C0:74:4B"}}},"request":{"raw":"GET /wohesangenverdemenghuanshenghuosangongzhudexiaoneineizuizhongpianfeichunvfeiyounv83suide/thumbnails_001.jpg HTTP/1.1\r\nHost: asianpornxbb.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 191861\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BcH5aqekrVrr9ox2ih4spN3xmQzapNVBp68tA5dTIvhO7ijrhxP9VdAqPFCRoSLsX%2FnHOeK%2FeVT%2B8KVcovU3V9JvED%2B8nGgyJ24e6gO%2Fzc%3D\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"451943f123f714b110ed1db53a3fa0fe\"\r\nlast-modified: Wed, 01 May 2024 19:19:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 1985741\r\ncache-control: max-age=31536000\r\ncf-ray: 9826cd63decf76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191861,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 5760x2160, components 3","md5":"451943f123f714b110ed1db53a3fa0fe","sha1":"6995ba33fcb9a437089b85d3e305b7312d22708a","sha256":"d3b146b0b8a335d04448b47f35d8759c60944f5314bfe7bd6258f97c77984910","sha512":"aa53de5ff4a5fef614ddd13687e78fa01bda622eef93ed0d011bed669f89722d130451d863532d3b504c271a7a3b4a36e1a9d30d4d8c94de32c22de2c5c882b0","ssdeep":"3072:r3iWl7bj+2P9DYPl0rlZmzvC0RzE3NOhcpVRFKcoTWrXVfxtHvXuLCrYU7H0:ryG7biqD0arl2/iWcoSZfjfuLU0","tlshash":"9614025ab7bce59ecdcc233e0305890f674010635a484b49b1db691bf0ee7197c8e13a","first_seen":"2025-07-25T08:10:29.558616Z","last_seen":"2025-09-21T04:28:54.387352Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1753,"timings":{"blocked":81,"dns":3,"connect":7,"send":0,"wait":10,"receive":10,"ssl":1621},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240531-1/b087bb315aaf7a25d751f42a4a6b3679.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240531-1/b087bb315aaf7a25d751f42a4a6b3679.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28543\r\nlast-modified: Fri, 31 May 2024 12:07:24 GMT\r\nvary: Accept-Encoding\r\netag: \"6659bd7c-6f7f\"\r\nexpires: Mon, 13 Oct 2025 05:22:40 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28543,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 718x404, components 3","md5":"d0b70829a4fdd24a76c1c289f767d9c4","sha1":"d30a66de1d1a1c344c96b1a1db8ca2f83645b4e7","sha256":"f22a5064da07903591329b9cdd32ec42f0827691a635e6d7c331b4733775680e","sha512":"adb9033f29593d9a245117f57f422f1095465648ef435185f8377edb399a58c41f143c8675f8d1f0ecc4e5040896701c73841ded6859cafc0cb8e5502b4432b7","ssdeep":"768:vYAYJIhI0UyrnIGXV6+F20m7IdfDpfvSXeAMl6E/0latODoQ:viJSI0UQ3/F20m7ofD9AMcE8lpn","tlshash":"a6d2e07ac334ae83a753974440a58c448e66751aa1fe3a506ddbcf39382dbb0d92c376","first_seen":"2024-08-30T14:38:23Z","last_seen":"2026-02-25T10:38:26.986072Z","times_seen":67,"resource_available":false,"data":null}},"time_used":1681,"timings":{"blocked":653,"dns":0,"connect":0,"send":0,"wait":658,"receive":370,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.syougakuseijridol.com/wp/wp-content/uploads/2018/08/ef27b7c1e9b1f5a022db5176fda95bed.png","fqdn":"www.syougakuseijridol.com","domain":"syougakuseijridol.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.859Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /wp/wp-content/uploads/2018/08/ef27b7c1e9b1f5a022db5176fda95bed.png HTTP/1.1\r\nHost: www.syougakuseijridol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":530,"timings":{"blocked":0,"dns":1,"connect":255,"send":0,"wait":0,"receive":0,"ssl":271},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241028-15/eb217c2a868534c3c83e25bb75760107.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.126Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241028-15/eb217c2a868534c3c83e25bb75760107.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"159i.net/uploads/allimg/2501/D-0101103310PaLc29595.jpg","fqdn":"159i.net","domain":"159i.net","tld":"net"},"ip":{"addr":"172.67.200.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"159i.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 10:20:32 GMT","end":"Sun, 14 Dec 2025 11:18:54 GMT"},"fingerprint":{"sha1":"D5:F1:FA:DC:B1:F7:50:6B:64:B5:EF:04:1E:C3:70:54:5A:ED:98:4B","sha256":"0F:79:08:19:0D:19:F2:C1:C9:3A:9F:3E:2C:D9:00:9D:3A:94:CB:84:2D:6B:12:2D:3A:B2:B4:0A:DA:82:80:4B"}}},"request":{"raw":"GET /uploads/allimg/2501/D-0101103310PaLc29595.jpg HTTP/1.1\r\nHost: 159i.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60714\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 14 Mar 2025 16:33:15 GMT\r\naccept-ranges: bytes\r\nage: 3583\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9zirafdIdBGVkYzx9S02igV%2BgCw6hO574Oe%2F8NOB9mriphda2zHap%2Fd4qvxhw9GmWcjH%2B10F4z8lNzhhDQV4I0Bhi2evzA%3D%3D\"}]}\r\ncf-ray: 9826cd658ce0b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60714,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x404, components 3","md5":"ae8dd44f78c311ecc3c3c6b1242a5af6","sha1":"f61be9d89a5b636010235fddb442a880e2a23318","sha256":"eba25bf577a6f8b8662be6274fe9567dd77f7d886b646b90a01569912ecd8dc8","sha512":"26cf4869e9d8dcd731ade5d7798a8fc115e7c103afe43b3bad23a4a3df91c1d6b94c73faaa48143cd0025ed15d17097c39a78f6ffacafe403c72ae9feba14a55","ssdeep":"1536:x1QFFxzR9z7dLFc2pYoSCpvgq48VnOFLtBl7:H0xzRt7fcdoXO5tv7","tlshash":"4353022f749701e781c8e683109852e53644264a7e739fde2862f919df900ebe374ef6","first_seen":"2025-06-06T21:49:11.291544Z","last_seen":"2026-04-03T21:47:16.517587Z","times_seen":86,"resource_available":false,"data":null}},"time_used":1556,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":9,"receive":2,"ssl":1538},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.geefap.com/uploads/posts/2018-04/thumbs/287593572_630440010.jpg","fqdn":"cdn2.geefap.com","domain":"geefap.com","tld":"com"},"ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn2.geefap.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 21 Oct 2024 00:00:00 GMT","end":"Tue, 21 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"AF:D5:79:17:2C:27:BD:47:ED:EC:E6:86:68:6C:15:FA:38:09:D7:18","sha256":"DB:FB:80:6C:8F:F3:EB:EF:08:23:74:15:33:0B:F5:0F:FB:ED:FF:4D:01:A3:EA:1F:EC:2D:FB:52:C8:0C:C3:50"}}},"request":{"raw":"GET /uploads/posts/2018-04/thumbs/287593572_630440010.jpg HTTP/1.1\r\nHost: cdn2.geefap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 20356\r\nLast-Modified: Mon, 30 Apr 2018 06:30:31 GMT\r\nConnection: keep-alive\r\nETag: \"5ae6b807-4f84\"\r\nExpires: Fri, 26 Sep 2025 04:26:05 GMT\r\nCache-Control: max-age=432000\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20356,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x420, components 3","md5":"6fbff1adef7c65a2838d83530798487a","sha1":"fd14f128ffc123bdee09395f82a750140d40ca80","sha256":"b7973dbdd988a8db88337936d5c634e0d86edb2da30982d745e25e689d3fc1fa","sha512":"0412c38c40298a925fee2158a1802fdb3e6be1779fe48973d7ff86c6bc4ac80dab3bbfad7ba7bce2d0949772cac48780a9f9d73ddfe7e0419ec16804171c1cb8","ssdeep":"384:DThhZC8s0JbY8kdfcxfGZIJpQ6+CnoDAEeRSqMQ6uBRcd4:Dz010ZkBcIZIY6vn+wL9cK","tlshash":"2592e0209b136ad83118d7f192915e5f5af5dd33c5d088c6f6e880ee9a44f2d8a025bd","first_seen":"2025-08-16T02:44:09.236928Z","last_seen":"2025-09-21T04:28:54.391555Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1550,"timings":{"blocked":126,"dns":0,"connect":18,"send":0,"wait":48,"receive":1,"ssl":1346},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.aosikaimge.com/20221002/vxI7a68e/1.jpg","fqdn":"img.aosikaimge.com","domain":"aosikaimge.com","tld":"com"},"ip":{"addr":"64.112.78.82","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aosikaimge.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 24 Dec 2024 10:28:23 GMT","end":"Fri, 23 Jan 2026 10:28:22 GMT"},"fingerprint":{"sha1":"BC:19:8D:FF:22:32:94:8C:04:80:02:CE:1A:59:1C:91:24:15:5C:66","sha256":"F8:17:7C:E0:46:83:E7:7F:FB:CB:88:66:23:61:56:22:39:3A:23:8B:BF:3B:08:F3:37:F4:92:5C:72:1F:D8:B8"}}},"request":{"raw":"GET /20221002/vxI7a68e/1.jpg HTTP/1.1\r\nHost: img.aosikaimge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4678\r\nConnection: keep-alive\r\nLast-Modified: Sun, 02 Oct 2022 16:44:23 GMT\r\nETag: \"6339bfe7-1246\"\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4678,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1708x2277, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 240x320, components 3","md5":"12de280f2820bbe0cf07d2f1a87ef368","sha1":"ac6b127c2fc2beb6148a9bcd84642ba18ea0cb68","sha256":"1a6a31d391c58c7003ef12250bc3103172b037f02a7e82b868bfe19a00f27721","sha512":"e53a6160ac6b0177c98cbafbf923b5fa0ffd4446a69586225233665f0131a9a90ad4b711f3e3f1832adc3d1ca89f8ce2dc439b902448a7c4f53f92fada71ea50","ssdeep":"96:BZ8zEAmp5RbfA9Ex5D14ejGgbVFoR5tlyx7HYoJOYUL9yW3H+X:Bm7mzRbfAa/eNgbV8yxzYoJOYULwW3eX","tlshash":"97a16deb9731289e8d02d177405e61658fef93a670d193c1773ea336d9981384968d05","first_seen":"2024-08-03T18:55:08Z","last_seen":"2026-01-14T07:56:55.09703Z","times_seen":77,"resource_available":false,"data":null}},"time_used":2227,"timings":{"blocked":-1,"dns":1,"connect":144,"send":0,"wait":152,"receive":0,"ssl":1965},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videopreview.chezcathy.com/ext/pre_6992528242.jpg","fqdn":"videopreview.chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"57.129.130.31","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videopreview.chezcathy.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 04:14:20 GMT","end":"Fri, 14 Nov 2025 04:14:19 GMT"},"fingerprint":{"sha1":"12:BD:5E:51:4A:58:91:69:E4:7F:0C:BF:61:4C:3B:5F:17:3D:FB:66","sha256":"21:58:A7:22:B6:D9:B6:6C:66:F8:69:8E:22:2F:E5:C8:E4:4C:49:27:F4:2C:4B:BE:77:10:74:F0:5D:1C:3F:8D"}}},"request":{"raw":"GET /ext/pre_6992528242.jpg HTTP/1.1\r\nHost: videopreview.chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12212\r\nLast-Modified: Tue, 11 Jun 2024 18:58:33 GMT\r\nConnection: keep-alive\r\nETag: \"66689e59-2fb4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12212,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"de6d45fa605fb2641102fa687db83192","sha1":"dd1b0e4ea41f08ef29357fa4f014ab26931fc90a","sha256":"a5389a1552faebdc42111f2949ab3a3265d1d9591d05fb018b0faad25d8218a5","sha512":"6df3e272f882c229800a905efd3c48a1f63cf9fb048728e8f372d78370dfc3a62b3b8d2dda7717a021d895058845510c824abee0ac961ecfd786eaa39e8c137a","ssdeep":"192:1la1JLhgaWKSoLkmvfakgZxegOyg1pIC+9TUGARcD+Vwk7x9qZEcYz5bO0m0V4T:1Q1dhg54EkgZ5OXFRRcKVhXgEcw5bK0Y","tlshash":"af42c0a0f5ceec02c89c73fe296c5230a578f63f515033592a95ae65d7c9233c6cc566","first_seen":"2025-02-14T15:16:15.811358Z","last_seen":"2026-01-06T02:11:17.560816Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1779,"timings":{"blocked":-1,"dns":3,"connect":19,"send":0,"wait":51,"receive":0,"ssl":1705},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/fmtu.sltututu.com/upload/vod/20240507-1/496d34ab19a8057cadfe7eb544d12457.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 Aug 2025 19:44:50 GMT","end":"Tue, 04 Nov 2025 19:44:49 GMT"},"fingerprint":{"sha1":"E3:33:F6:CB:1D:54:80:51:6E:94:B6:72:D6:8D:22:88:EC:CF:5C:C2","sha256":"A2:6F:1C:4D:B8:5F:EC:D5:D1:31:F6:0A:A1:D3:C4:05:9B:6A:16:37:15:5E:C6:BE:AE:95:93:6E:79:6F:7D:8E"}}},"request":{"raw":"GET /fmtu.sltututu.com/upload/vod/20240507-1/496d34ab19a8057cadfe7eb544d12457.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6132\r\nlast-modified: Thu, 22 May 2025 17:30:31 GMT\r\nexpires: Sun, 23 May 2027 05:30:31 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://fmtu.sltututu.com/upload/vod/20240507-1/496d34ab19a8057cadfe7eb544d12457.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"04792861103791f6\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 4\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"161f98daadac16c6e710cc19d4af5fb4","sha1":"f0aeb011ca77c1488f7f1c3a50a05ae55a7507ea","sha256":"0aea46cb3629457d752bd27743912b38366cf02a4a2c7cde3e6a6afaad0e2d90","sha512":"9f4194561a0a99941c140b447b98b17bd75820b78e0a38be002f3ed833d705ae8999162ca84e5344cf24151230240c3fb404b37039d4e1106af488665dc3363d","ssdeep":"96:Db2xtif2xv7LsKy8pqdmeWz7bOAO+b2tK/4G9WlcqLvX5OiNzBfaDZlQ:ws2ZLzkkeUOAL2IR9INLvnBiDTQ","tlshash":"d9c1ae80c99d18bb9004b76b4b1d8721905efbc79724a5b484a584fe6e23277fdbca30","first_seen":"2025-06-06T07:13:00.590488Z","last_seen":"2026-02-25T10:38:27.021004Z","times_seen":95,"resource_available":false,"data":null}},"time_used":1635,"timings":{"blocked":119,"dns":1,"connect":7,"send":0,"wait":11,"receive":1,"ssl":1495},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baraag.net/@nao/image/png","fqdn":"baraag.net","domain":"baraag.net","tld":"net"},"ip":{"addr":"185.178.208.171","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cisapp.baraag.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 18:50:20 GMT","end":"Tue, 21 Oct 2025 18:50:19 GMT"},"fingerprint":{"sha1":"4B:6A:F9:3F:E3:37:8A:FE:8D:C7:60:73:8F:6D:F0:B1:84:2C:0B:7D","sha256":"BB:01:09:DB:A3:38:79:7D:79:54:20:CA:C1:1E:7C:23:24:13:93:F5:D8:FA:A8:78:89:6D:FA:C4:CD:DD:E5:CA"}}},"request":{"raw":"GET /@nao/image/png HTTP/1.1\r\nHost: baraag.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Two4NiWq75o5txnS; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:03 GMT\n__ddg10_=1758428763; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:03 GMT\n__ddg9_=91.90.42.154; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:03 GMT\n__ddg1_=VnAGQQpsPN3Vf7FIjeAo; Domain=.baraag.net; HttpOnly; Path=/; Expires=Mon, 21-Sep-2026 04:26:03 GMT\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: same-origin\r\nvary: Accept-Encoding, Accept, Accept-Language, Cookie\r\ncache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400\r\netag: W/\"993d50a206d682db6d67364f532ce7f0\"\r\ncontent-security-policy: upgrade-insecure-requests;, base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://baraag.net; img-src 'self' data: blob: https://baraag.net https://media.baraag.net; media-src 'self' data: https://baraag.net https://media.baraag.net; manifest-src 'self' https://baraag.net; form-action 'none'; child-src 'self' blob: https://baraag.net; worker-src 'self' blob: https://baraag.net; connect-src 'self' data: blob: https://baraag.net https://media.baraag.net wss://baraag.net; script-src 'self' https://baraag.net 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://baraag.net 'nonce-Kzu7rSrnA7I0in0mzKyPbA=='\r\nx-request-id: 1db9bdc4-ef7a-481b-9d25-a6c27c0eb6cd\r\nx-runtime: 0.020656\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cached: MISS\r\ncontent-encoding: gzip\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asianpornxbb.sbs/quanwangzuizhenshigeijiejiexiachunyaoqiangshangneishelegangganglihundejiejieyuanchushou/thumbnails_001.jpg","fqdn":"asianpornxbb.sbs","domain":"asianpornxbb.sbs","tld":"sbs"},"ip":{"addr":"104.21.23.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0b45ee2e.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:04:12 GMT","end":"Mon, 27 Oct 2025 12:04:05 GMT"},"fingerprint":{"sha1":"9E:33:52:5F:4A:DE:5B:B0:7C:5D:C1:66:E4:50:65:4A:1B:B3:9C:42","sha256":"80:68:D6:B7:54:92:5A:F8:74:63:26:7D:33:1D:CE:E7:1F:48:FB:DA:C3:33:14:A8:8A:C8:55:B4:88:C0:74:4B"}}},"request":{"raw":"GET /quanwangzuizhenshigeijiejiexiachunyaoqiangshangneishelegangganglihundejiejieyuanchushou/thumbnails_001.jpg HTTP/1.1\r\nHost: asianpornxbb.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 137397\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PiISzc6lxrQuCPpmsxWholTJQFTdXZ%2FroGA6huNkQyBi0lmGDhJtaAX5LbOLyzy2uRtVHuxt%2BLfpQ20R5waBhfwbf7rYotfcBDoaxrt1nXQ%3D\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"e03beb1fb5ffb8fa75f85a5094963762\"\r\nlast-modified: Wed, 01 May 2024 02:37:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 4853935\r\ncache-control: max-age=31536000\r\ncf-ray: 9826cd698a4276ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137397,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 2160x2540, components 3","md5":"e03beb1fb5ffb8fa75f85a5094963762","sha1":"fbc5c5decb92be432c111fed168ab56779ce8145","sha256":"884aa379cca2690f0cee5a2691dad4d5f2e1a11c79818249a1f15beb2baeb39e","sha512":"446c46132532d7b476487d4f7dcd6ccf7fa5d4a33178bf365585ff7dfde3d6ba30e9a6d9160a9b8161ef56c8a1380ca2521c691c6404c76eae2863bb639abe6b","ssdeep":"3072:VMsoruwb73QCxWRURPJVCpNrDwSFAQuEO0QQloccYtqKYOppow:Yua7PpFvCpNrhEElQQlouAz2ow","tlshash":"fad31237f32a89bacdacdb7448576331bf2374e46bc557c6b91aa5244ce8b087e2c140","first_seen":"2025-09-21T04:28:54.395132Z","last_seen":"2026-01-02T09:22:28.186828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1639,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":12,"receive":4,"ssl":1619},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.4jpg.top/mycss/av4.css?33","fqdn":"css.4jpg.top","domain":"4jpg.top","tld":"top"},"ip":{"addr":"172.67.211.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:05.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4jpg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 22:07:03 GMT","end":"Tue, 18 Nov 2025 23:05:39 GMT"},"fingerprint":{"sha1":"F7:56:D0:5F:96:7E:84:98:1E:F2:DC:20:74:94:F8:5E:E9:99:22:BE","sha256":"A4:A0:9B:AB:A6:84:D2:21:1D:FD:89:C2:59:89:93:11:10:44:BB:96:A7:D5:61:38:E5:1F:75:F7:F1:E5:EC:A1"}}},"request":{"raw":"GET /mycss/av4.css?33 HTTP/1.1\r\nHost: css.4jpg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWQi0Ts8Eq4wBU7FMCoGF3KDflZMXL%2BV9XZaeKYZYlWcb4xJnsbdGsnM2jfQd0xxJfK9kyLTS8q6ZRPpuNr2tRHeOMWc6eiqqDbLdQ%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: jcss./mycss/av4.css?33-A-css.4jpg.top--myzone---no\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 186173\r\ncf-cache-status: HIT\r\netag: W/\"103e-62edbddabc000\"\r\ncf-ray: 9826cd671b841a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4158,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e05d356eb3c9cb0366e5491f098c5b66","sha1":"9c82f99795bf55512147a0bd629e9775446291bf","sha256":"7c7a5f32e5c6a2e6e1f3e71112f35691714019685cc4c7d567e158cb32d1579c","sha512":"94dd9b84614bae349bcaa9dafea12a08589b4b899cf59c1228cf9bf70d657a715b49cfc18748b2d174dac63a6df076828bfa8da9b25c686d74bc742ddbe9283c","ssdeep":"96:Uq6qw2a3Alqiqq7rShmo3NxlIAFrQH+42+F2fFB:+eYXih/SMoHlIAFkHL2+F2fFB","tlshash":"ca813f729b550141b51b92946f62b79123369013d907cf79bafa217ccf891ec21e2f4e","first_seen":"2025-04-08T05:19:22.565686Z","last_seen":"2026-02-10T20:33:51.228745Z","times_seen":840,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"css.4jpg.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.voyeurweb.com/favicon.ico","fqdn":"www.voyeurweb.com","domain":"voyeurweb.com","tld":"com"},"ip":{"addr":"65.108.75.120","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voyeurweb.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 11:10:26 GMT","end":"Mon, 10 Nov 2025 11:10:25 GMT"},"fingerprint":{"sha1":"87:1C:63:8E:BE:A7:39:33:DF:0C:BD:97:94:65:DC:70:89:9F:6D:8D","sha256":"EE:27:88:CC:22:DE:BE:F4:CE:88:C6:4B:82:D1:E6:D2:B9:E5:71:CB:2B:8E:4A:2E:89:30:2C:E9:D5:00:B8:06"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.voyeurweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 21 Sep 2025 04:26:10 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLast-Modified: Tue, 17 May 2022 13:34:07 GMT\r\nETag: \"0-5df3531ecf0ed\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":31,"dns":14,"connect":30,"send":0,"wait":15,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSORNGk4rUn1vK5D9ylPN9plg0WrFJYDmJpQc61vskx3sbVBGxrASHwxPfu8jN7%2F9XsyhJVZZUNt9m7e3nyhuab0Cj97f2fP92IDnfx2Dec%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9826cd7248f05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.crazyshit.com/content/2021/01/d6e6dcdf.jpg","fqdn":"media.crazyshit.com","domain":"crazyshit.com","tld":"com"},"ip":{"addr":"45.133.44.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"media.crazyshit.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 02:33:04 GMT","end":"Mon, 27 Oct 2025 02:33:03 GMT"},"fingerprint":{"sha1":"4B:C8:F7:57:68:32:B3:B5:70:31:3E:8C:32:BC:34:57:81:3A:54:C9","sha256":"8D:21:A3:34:ED:E8:B1:2C:20:3B:4F:FA:BD:47:8E:F6:08:39:62:2A:98:BF:7C:15:9D:CE:8E:4A:6F:44:6E:7D"}}},"request":{"raw":"GET /content/2021/01/d6e6dcdf.jpg HTTP/1.1\r\nHost: media.crazyshit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 248872\r\nserver: nginx/1.24.0\r\nx-object-meta-mtime: 1610429744.242391016\r\netag: fddd19d655a8a95294dc31b8e654bd64\r\nlast-modified: Mon, 05 Apr 2021 11:05:42 GMT\r\nx-timestamp: 1617620741.18928\r\nx-trans-id: tx2ff0d9f9c7d245718f05a-0065ccf559\r\nx-openstack-request-id: tx2ff0d9f9c7d245718f05a-0065ccf559\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Tue, 23 Sep 2025 04:26:03 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248872,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 720x540, components 3","md5":"fddd19d655a8a95294dc31b8e654bd64","sha1":"f4d27a1c031250d7a15ec492eb1bce723e8f0900","sha256":"4c2242dbe811b701f1c8d55527b3acdbac82e735957ab50e507ac685b7498f4e","sha512":"6a1cbf860cfc8921ef35131552ea8a83486f21101d6bb9915ebfb1567acee60123376bf34765f02cc07a904de418e9262338fb27754269083c7b9354acedca05","ssdeep":"6144:rdohOADdX5G/2ou0WFNCl63TW3CyN5swekE+SL:mtZXq2ount3C3CyETZL","tlshash":"0e34235fab09507d7b66830a50ed0b8164cc498ab197abc30d99edb0e713c4b49f86f8","first_seen":"2024-04-22T00:01:58Z","last_seen":"2026-01-22T17:07:14.944636Z","times_seen":16,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.syougakuseijridol.com/wp/wp-content/uploads/2018/08/ef27b7c1e9b1f5a022db5176fda95bed.png","fqdn":"www.syougakuseijridol.com","domain":"syougakuseijridol.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.797Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /wp/wp-content/uploads/2018/08/ef27b7c1e9b1f5a022db5176fda95bed.png HTTP/1.1\r\nHost: www.syougakuseijridol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1641,"timings":{"blocked":-1,"dns":1641,"connect":1890,"send":0,"wait":0,"receive":0,"ssl":305},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosrei.com/wp-content/uploads/2021/09/ls-model-nude.jpg","fqdn":"xvideosrei.com","domain":"xvideosrei.com","tld":"com"},"ip":{"addr":"192.124.249.3","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideosrei.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Mon, 18 Aug 2025 23:41:43 GMT","end":"Sun, 16 Nov 2025 23:41:43 GMT"},"fingerprint":{"sha1":"CF:F8:2C:3E:5A:88:3E:19:B0:5D:B4:17:2E:DA:51:A8:72:21:54:6A","sha256":"DC:70:E0:80:C5:90:B6:07:CD:E8:6E:B2:B5:0A:03:24:FF:11:06:27:B4:B7:38:72:96:D1:52:53:90:23:B6:13"}}},"request":{"raw":"GET /wp-content/uploads/2021/09/ls-model-nude.jpg HTTP/1.1\r\nHost: xvideosrei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 21 Sep 2025 04:21:40 GMT\r\ncontent-type: text/html\r\nx-sucuri-id: 19002\r\nx-sucuri-block: BLACK02\r\nserver: Sucuri/Cloudproxy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":2004,"timings":{"blocked":-1,"dns":1,"connect":27,"send":0,"wait":34,"receive":0,"ssl":1940},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cav102.com/favicon.ico","fqdn":"cav102.com","domain":"cav102.com","tld":"com"},"ip":{"addr":"45.145.72.132","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cav102.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 15:24:03 GMT","end":"Fri, 17 Oct 2025 15:24:02 GMT"},"fingerprint":{"sha1":"4C:E6:D2:27:03:49:C7:8C:A1:8B:DF:24:7C:A6:C4:E5:3D:A6:C5:F5","sha256":"02:AE:EA:91:A7:2B:29:79:58:2E:C8:D0:32:14:9C:37:11:B8:20:1A:63:46:73:26:EF:73:0C:F8:CB:B2:C5:1D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cav102.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Mon, 25 Jul 2022 15:38:39 GMT\r\netag: \"62deb8ff-10be\"\r\nstrict-transport-security: max-age=31536000\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"79ca959796fd758988aa0acfb9952640","sha1":"8a8e7fa57c016b5cbc943faefc7c651e8959b0ce","sha256":"01d4884a0070a4804680dc80361b4695aa48ca7b37eb6768127b17d9763464cb","sha512":"93862024062645f7a461f4d8b7fac1304642d17c8017d03643a9a20a069437950f2716ec736198b7e201fef0d0d0e3e420e564790e6f8337c8579b87ed530e0f","ssdeep":"24:sueJWJ6kDtRzPzXsComfXGUDe6WSCWn6/+GXG7oJ32n:YkDtRz7XsCn/he9SZU+s2n","tlshash":"899155bbaa7ff1cdec74fe32629006024f2f5d3c46e661838716bd948630c106d8e10a","first_seen":"2024-02-24T21:02:43Z","last_seen":"2026-03-03T14:10:03.68873Z","times_seen":298,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmtu.sltusl.com/upload/vod/20220903-4/a27b988cdbf905968975aa2a7fda21d2.jpg","fqdn":"fmtu.sltusl.com","domain":"sltusl.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.291Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20220903-4/a27b988cdbf905968975aa2a7fda21d2.jpg HTTP/1.1\r\nHost: fmtu.sltusl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":82,"dns":45,"connect":63,"send":0,"wait":0,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/1X/764437c9478fb395a27fc80e5e7a9a80ffbdf2a0_2_1024x559.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/1X/764437c9478fb395a27fc80e5e7a9a80ffbdf2a0_2_1024x559.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 73184\r\nlast-modified: Tue, 12 Aug 2025 05:27:05 GMT\r\nexpires: Mon, 21 Sep 2026 04:26:03 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73184,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x559, components 3","md5":"8a23abd3d2d1b48c83ddd7e8723abaa8","sha1":"4f8bcae36b31a0b3c2795219e18dbce3ef0728b0","sha256":"178e10c8840729ee9f5c070d8f8a8d8d5959973ae6dfb56a3f82daff9e82245a","sha512":"56004c653ac9dcaf764a6419e9846f9f7581bd46c45ab2fd9a27fbda9a1b808f527e948648248fa80e4c99fe01e1bfdde9bd7a1a02ac4070e5a06a7cc724c5a6","ssdeep":"1536:72F86wQIGM1w9xExatHbGLL+kHTVHaGvzcs/LPJ0ufXNooePT+ypkk:72FhnH7xLtHoyG9aJ6LPJjvNoFTJOk","tlshash":"386302d1a3e9c1e6b19688b63f563ce1fdcc0c861082d761579e1b43a6b4a7fc9168f0","first_seen":"2025-09-21T04:28:54.400292Z","last_seen":"2025-11-13T10:13:26.511223Z","times_seen":12,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmtu.sltusl.com/upload/vod/20221203-1/c47f004c22e5e12592c74ff3118dcdc7.jpg","fqdn":"fmtu.sltusl.com","domain":"sltusl.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.665Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20221203-1/c47f004c22e5e12592c74ff3118dcdc7.jpg HTTP/1.1\r\nHost: fmtu.sltusl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":1,"connect":19,"send":0,"wait":0,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.cdn2025.life/videos/202411/18/673abfb194b74ce10336d582/cover.webp","fqdn":"img.cdn2025.life","domain":"cdn2025.life","tld":"life"},"ip":{"addr":"107.167.21.106","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.cdn2025.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Aug 2025 18:19:04 GMT","end":"Wed, 26 Nov 2025 18:19:03 GMT"},"fingerprint":{"sha1":"7C:8D:98:C2:8A:C4:61:08:48:E4:80:A1:43:5C:CC:D0:F7:E7:6D:51","sha256":"63:18:98:01:73:2B:F4:53:6B:FA:DE:07:0B:69:2E:FB:7A:16:03:D0:0B:0C:8B:68:9E:AB:3B:91:4D:F6:98:B0"}}},"request":{"raw":"GET /videos/202411/18/673abfb194b74ce10336d582/cover.webp HTTP/1.1\r\nHost: img.cdn2025.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:23:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40627\r\ncross-origin-opener-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\ncache-control: max-age=43200\r\nlast-modified: Mon, 18 Nov 2024 04:16:44 GMT\r\netag: W/\"9eb3-1933d7cba68\"\r\nexpires: Sun, 21 Sep 2025 16:23:53 GMT\r\nnginx-cache: HIT\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: POST, GET, OPTIONS, GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40627,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 426x238, components 3","md5":"b5a5209bd87e9285a646274e6530bf4d","sha1":"ad25a4570e31b6c1ce1bc8e5d13953480136dda3","sha256":"5c80bd72f701909e3c29aaa127234c02ce475825bf3286368a2133b6a07b832e","sha512":"d0e8963c5756fae711ddaa2a90681bb2bc92b9cab8a5d69dc2cd34a0c35e208f584b365e26fc2ee5e9a39ffe5525b72d46b923aecf28ee4ea85e1eae4a098786","ssdeep":"768:Jja9wqZi07yjxTtaZddZtZLrkOwiN30QZk2XEZ+wq3+ZX3+b9nO2ytgHS38ZfgL4:Jja9w907UxTwTvt15L5ZEZ+TON+b9O2V","tlshash":"40030123afc17a42d0c6cf5c4ca6074dd2e40dd7921f7a61058e347ade8e3c6666232e","first_seen":"2024-08-19T14:46:53.322846Z","last_seen":"2025-11-08T08:21:41.823404Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2163,"timings":{"blocked":-1,"dns":3,"connect":150,"send":0,"wait":146,"receive":232,"ssl":1631},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240702-1/7038e8b48286462cea0fa4684643e871.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240702-1/7038e8b48286462cea0fa4684643e871.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 106192\r\nlast-modified: Tue, 02 Jul 2024 04:14:23 GMT\r\nvary: Accept-Encoding\r\netag: \"66837e9f-19ed0\"\r\nexpires: Mon, 13 Oct 2025 20:26:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106192,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"802dbce1bafff87562265554444e0a07","sha1":"70a4bf5cd4569045a907c5bdf1d7460ccf381f10","sha256":"e1610e6e3f5ad289b63adb8204ebb4f91d50813446586b8dd20e7f4c34196708","sha512":"acf5424d196caa20437c24eefea3024ed9d893373f207d3e41719b55c57868a02d727c89fa13883219b615f176423b36ed7cbebe3c7d31d3759edc1832cf3bf9","ssdeep":"3072:zazvEnHPg0L2I0E66DtWZPbG2rUDqynCYgGy94j+:zeW40LwE6L9rUNGGyu+","tlshash":"ffa3129d630c88bc8458e9c585b0d87ca0914e0fcf199cfb6c6d9b92674aff15b20d5e","first_seen":"2025-04-19T03:36:25.698423Z","last_seen":"2026-02-14T16:06:52.837907Z","times_seen":47,"resource_available":false,"data":null}},"time_used":2867,"timings":{"blocked":-1,"dns":5,"connect":149,"send":0,"wait":467,"receive":279,"ssl":1961},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.redwap-cdn.com/786/786116/786116_320x180.jpg","fqdn":"img.redwap-cdn.com","domain":"redwap-cdn.com","tld":"com"},"ip":{"addr":"172.67.128.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redwap-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 03:11:33 GMT","end":"Fri, 12 Dec 2025 19:36:33 GMT"},"fingerprint":{"sha1":"34:89:BF:1C:99:C0:5D:91:01:C7:87:62:C8:6B:4B:D5:80:1D:CE:75","sha256":"B0:F5:7E:78:05:9D:CE:2F:1A:BE:31:9F:71:F8:32:25:50:F0:01:55:0E:9D:48:B9:75:5A:25:79:9A:B8:64:1F"}}},"request":{"raw":"GET /786/786116/786116_320x180.jpg HTTP/1.1\r\nHost: img.redwap-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13119\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Jun 2019 12:07:53 GMT\r\netag: 68fd26b501526de77581f44db1c30100\r\nx-timestamp: 1560427672.28272\r\nx-trans-id: txd1eac8ec285e4484b241f-005e6483b5\r\nx-openstack-request-id: txd1eac8ec285e4484b241f-005e6483b5\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 22 Sep 2025 04:17:03 GMT\r\nx-cdn-host-id: ds9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 86941\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2BMQgXIeeae5l3PljElsqXx8DOY8u8uyrpJrWxQHig9XS1MO5pPjCDisaNIA2gD0dnSA4964G6V298RFlabZitqhWpwKSE6aTdWPCCc2vmE%3D\"}]}\r\ncf-ray: 9826cd692b59b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13119,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", progressive, precision 8, 320x180, components 3","md5":"68fd26b501526de77581f44db1c30100","sha1":"519e24cf4812397812d02b5cb82fbe0b163670ef","sha256":"41ac27ac8e3123245a710c3a06c84ec51a11d7447398feca73a7f681628d1acb","sha512":"d31e6c9ff7e81edb25c4d829a2b04e9a5a08dc08a6ccafd19baaa4a0fee66f359cf7f542bea734c557c5f9e19f39e765341c02d9a3684ab475636d2afe134600","ssdeep":"192:8+9BHGZbJwee3+DNdENPK+GbGPwuGOvWbqLrVuXN/rTlUVZxcRCXdl:84HGfwes+54Gb0wR4WbqIp6rx2Cdl","tlshash":"4642bf3ba490ea09ec5f137df6416facce187f122d0986b3a3809c6b2b569dc4c153a5","first_seen":"2024-04-19T21:01:34Z","last_seen":"2026-03-01T19:27:35.435508Z","times_seen":84,"resource_available":false,"data":null}},"time_used":3543,"timings":{"blocked":1389,"dns":14,"connect":1,"send":0,"wait":11,"receive":1,"ssl":2123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/8/8ea949726083f121df78fa9879a75bd36d2f0c78_2_573x1023.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/2X/8/8ea949726083f121df78fa9879a75bd36d2f0c78_2_573x1023.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63645\r\nlast-modified: Tue, 12 Aug 2025 05:34:28 GMT\r\nexpires: Mon, 21 Sep 2026 04:26:03 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63645,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 573x1023, components 3","md5":"6bd70a71397b9c9f3b77c1584a03faf4","sha1":"078c733b6b25bb0c1c46daf46ef16c83934c4f6a","sha256":"881a83469fb180bd952e1b59bd72b71bf27caa52ce6435528726006ee381e2dc","sha512":"1c9f485266e07c7abfc2d831e787893b3bbe201fa8f8d3c8d6f32ea471eb22bd233fb050d8dad90eb87b163b9b63e1057b977ba60e41cb79342a0f14cc0a3d9d","ssdeep":"1536:btFvDAKz6kbnEz0Lna1kiW05XuaEZAEw1IDoeqP:b77NtnLLnaNu9dwq4","tlshash":"4453012a828340e7e2ecb76909339c599cac2f7d0679636abff018d55c6de1484d12de","first_seen":"2025-09-21T04:28:54.405685Z","last_seen":"2026-01-22T17:07:14.987968Z","times_seen":14,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.livegore.com/favicon.ico","fqdn":"www.livegore.com","domain":"livegore.com","tld":"com"},"ip":{"addr":"45.14.225.17","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.livegore.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 08 Oct 2024 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"C3:0F:27:F0:79:EE:D4:ED:36:0D:86:2D:BD:C8:92:C4:8A:1E:36:93","sha256":"54:26:07:B7:51:35:1D:DF:E8:9C:E1:12:65:D9:84:CB:35:95:9D:14:10:E1:7C:83:63:A5:50:DB:EA:B0:20:8C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.livegore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 21 Sep 2025 04:26:10 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/7.0.33\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nSet-Cookie: PHPSESSID=ji46n9epfksa2705bs11bvr0u7; path=/\nqa_key=poj6jc7iqy9eunqn7r9fq2g6w69afspr; expires=Tue, 23-Sep-2025 04:26:10 GMT; Max-Age=172800; path=/\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:7.0.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"18j.tv/favicon.ico","fqdn":"18j.tv","domain":"18j.tv","tld":"tv"},"ip":{"addr":"172.67.73.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"18j.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 19:12:40 GMT","end":"Wed, 26 Nov 2025 20:12:33 GMT"},"fingerprint":{"sha1":"B1:9F:8B:63:17:FB:4F:E1:31:92:08:0A:1A:5D:E9:6B:57:A6:3B:C8","sha256":"D2:FD:C3:C6:D3:56:05:A1:15:2F:06:72:E9:74:0D:91:A1:AC:5D:40:31:E2:16:7B:75:22:55:05:74:32:11:1A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 18j.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: referer, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ridPagP%2FklpXB%2Bom7aOAexPSI1fRewr2oudBAcOddHPSKgNbZYe0kFiyVi36pdyRAbAXwIw9rugPDRjeQ7YADw8eoT0d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9826cd850ebf2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":4,"connect":4,"send":0,"wait":13,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"akhwbjyshezaxck.buzz/favicon.ico","fqdn":"akhwbjyshezaxck.buzz","domain":"akhwbjyshezaxck.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.178Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: akhwbjyshezaxck.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"akhwbjyshezaxck.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"akhwbjyshezaxck.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_3878844527.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 07:11:45 GMT","end":"Tue, 25 Nov 2025 07:11:44 GMT"},"fingerprint":{"sha1":"4C:08:FF:9B:21:5C:D4:AF:F8:61:EB:02:2A:B2:41:C6:A6:FD:65:52","sha256":"49:BB:6D:F7:8D:BD:FB:E0:A8:5E:C7:46:48:E8:4D:04:0F:BF:5C:41:EF:03:99:7B:C7:F8:7D:7D:53:0E:4A:24"}}},"request":{"raw":"GET /ext/pre_3878844527.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5951\r\nserver: BunnyCDN-DE1-1047\r\ncdn-pullzone: 4336709\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"666858a2-173f\"\r\nlast-modified: Tue, 11 Jun 2024 14:01:06 GMT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:15:32\r\ncdn-edgestorageid: 1053\r\ncdn-requestid: 3cc347a4905ce8b968de9f1cb81332d2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5951,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"b58fb62a0051be3b5bb6faeebcca4013","sha1":"afc79e2ea138aac350f806331849d00bb97f9c34","sha256":"a1c939b8dd3026debd5742568ed5b87b2efafd993543c1708da5f71a9140f2a7","sha512":"e81afddb84c948fee51905364a8a661fcb084e517bec00cd626007946fca1b634b24c647dac18a13ec7506b79cbf0535a63889dd5730458f1c2a2ec0ca419c35","ssdeep":"96:VF7KjAAsyPmYny3VGydeY7KNcgJCOM+CLol8Xu5DRRJK1NxVkNf5KveJxrBEUIu1:KkJyXy3VJKwOVCW/DQ1NYKGDrBEUYJ8R","tlshash":"fbc17e6b57998605d83e2ef94efd0b253354de403495da0f914f39c0973d8af38114e5","first_seen":"2025-06-21T07:12:42.030015Z","last_seen":"2026-01-13T02:18:25.416626Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/uoii7don_header.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 09:48:24 GMT","end":"Sat, 08 Nov 2025 10:45:39 GMT"},"fingerprint":{"sha1":"4F:F9:25:37:EE:42:8B:1E:5C:AA:F5:BD:BF:CB:3A:CE:FD:84:E3:68","sha256":"E9:D6:87:C8:76:D3:FC:EE:D6:80:61:98:3C:B4:69:F2:52:5D:24:92:95:9E:91:B8:16:F5:EF:BB:CD:64:21:8A"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/uoii7don_header.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1986115\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 29 Aug 2025 04:44:07 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LgoGULUcB1%2BNg8qzNA8QkIns%2FdgcUXwk2asTjBZJlFzV4jhQP6wm9gfKRtmjXluDaAW9zXIwuIMhY6si%2Fn6MFEZ9WTZtwQK0TMc%3D\"}]}\r\ncf-ray: 9826cd593e07120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121927,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 700x790, components 3","md5":"f0b47ea983d48f9bcd0217b7302e5f91","sha1":"f0b5f8b0a46ba0cd481f170ed513a6645233eac3","sha256":"bb9969eba59598ff8dbbba14717ee6cdd6ded9d7f53463261110cf5b9f16c5d3","sha512":"04995f7e0864e18dcf20269d2f262873334dde222d934d691f75ca950dac74f73bfe49adf70f50f680448f8f7fa8c1fcd2fd6bab04d0dae6335f8a94b84f5a22","ssdeep":"3072:OK95BLSD1yr3KV9pwVDp14ec7bRpamUMsJRc7gZc:OK3paorosVP61MmUMZp","tlshash":"7dc3027a78bd1388764d90ddf2e1af40dc2594842047b6f0b11b5d25f7b8a7be02af18","first_seen":"2025-07-25T06:11:27.423143Z","last_seen":"2026-03-02T10:40:01.525878Z","times_seen":53,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":14,"connect":4,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240630-1/cac5d11c025b8f562827d60ec560a0cf.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240630-1/cac5d11c025b8f562827d60ec560a0cf.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 107687\r\nlast-modified: Sun, 30 Jun 2024 04:49:49 GMT\r\nvary: Accept-Encoding\r\netag: \"6680e3ed-1a4a7\"\r\nexpires: Mon, 13 Oct 2025 02:26:19 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"381ee2568b17f65163400314822146c6","sha1":"2e60da2d75b8917c254732aacb8c9460c5e3fead","sha256":"b6630449053082fb2eb3396ff3038460e1bea7e02c9c5771c57f0aa36a1d21c1","sha512":"f50d333f11b9fcbacb51213046d9191f9842955a3554adfd310b6f9897daa7849ef0a340890e759ded4dd0d194953bfcc3d489736e0b9a4dd59a23aa2fbfb04f","ssdeep":"1536:gmP3Stz3JQznpRkEnVB7gIaX68lPhXOSptaJ4ODwSOP4DRARXKOHtrX+nM9rEW:gmKt7JQhVJKX68feEoJ3kBRpH4n2wW","tlshash":"1cb302bc209257a2fc6806d0525d3f4907fdffa7943392c01859aceea12175e4ee988e","first_seen":"2024-08-20T02:38:34.324457Z","last_seen":"2026-03-18T22:58:38.728318Z","times_seen":86,"resource_available":false,"data":null}},"time_used":2075,"timings":{"blocked":938,"dns":0,"connect":0,"send":0,"wait":658,"receive":479,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntube.b-cdn.net/thumbnails/5afe764e1ebcb709d1b5ff5368718366a07470c3.jpg","fqdn":"cdntube.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /thumbnails/5afe764e1ebcb709d1b5ff5368718366a07470c3.jpg HTTP/1.1\r\nHost: cdntube.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14952\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 114851\r\ncdn-uid: 610bc618-7bcd-4e37-a18e-2efa3a8e9c35\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Wed, 05 Oct 2022 19:23:24 GMT\r\ncdn-storageserver: DE-637\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 450\r\nperma-cache: HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 09/15/2025 12:52:48\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4127f252f95db90aa70202f18df10b14\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14952,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x710, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d8deb0f6979c7070bd7051b82166afd0","sha1":"80091a0ad584ceab1bf540b22be121b850d86d66","sha256":"304ecc082bbe2c96ebb6c83c92f9ba1fa566bb85fe7efb7c559a65be12e27f79","sha512":"f9452458427d41abc83592ebadd274dae704c611170d8bd942f010c12c6d4b8644173c1f4554623d9e43db1f90a1c0a43a7af5096be437061821ae51a801b827","ssdeep":"192:MtvwkkS29Xx+UxM8zfpaStLqD0WGfqbgoYXndd2k1hgBqounvLKiys0oPApy5SI/:P19XxnxM4fun5Lk1Gco7wOyERG+2oW","tlshash":"3062d1be313d238e4e1e6d99f88f83eae8033254d16bb63cbf5541075ee50614695e82","first_seen":"2025-09-21T04:28:54.410068Z","last_seen":"2025-09-21T04:28:54.410068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1472,"timings":{"blocked":58,"dns":2,"connect":1,"send":0,"wait":3,"receive":1,"ssl":1401},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250730-1/20bf7ef8fc12c87bb17895b2b45e4280.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250730-1/20bf7ef8fc12c87bb17895b2b45e4280.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 74940\r\nlast-modified: Wed, 30 Jul 2025 03:18:51 GMT\r\nvary: Accept-Encoding\r\netag: \"68898f1b-124bc\"\r\nexpires: Sun, 28 Sep 2025 03:56:55 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74940,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x281, components 3","md5":"fb0701d414eaac8b90a4c71a259d2d05","sha1":"d11f43367b6f9243110d61213756281a4a429ff4","sha256":"03b65399375cad1d4c61994944ac8e214aac695892077fee731dc418687dd179","sha512":"23532449b4708bbe3234ae1e513a7fd61336b566d93ba740c5f6015a333351a31d5001871d560ba482bfcdec0b2ef4dfd4ff11a8a89483d45733d70f147aacc5","ssdeep":"1536:dDDmIWJTkSLfTxzwaw9YsrSJqjoGPMGvwoW9uVpLlXHR/9tWWlCh:9D9HSL79wN9YupoGPMGBW96phJ9tWWlM","tlshash":"9c73020816448ae46ee2fe62e97d776c058d74d678d088a0b5fefd0a0bc06f57188f66","first_seen":"2025-08-27T06:58:27.711546Z","last_seen":"2025-12-21T16:29:59.69856Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1989,"timings":{"blocked":820,"dns":0,"connect":0,"send":0,"wait":648,"receive":521,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.w3schools.com/w3css/4/w3.css","fqdn":"www.w3schools.com","domain":"w3schools.com","tld":"com"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:09.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"certification.w3schools.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 06:07:48 GMT","end":"Sun, 09 Nov 2025 06:07:47 GMT"},"fingerprint":{"sha1":"2D:4B:B7:99:2C:DB:9C:A3:25:D3:AF:38:20:23:6B:D0:9E:33:CB:F2","sha256":"B6:F5:DB:F2:A0:3A:F9:73:5F:AD:92:0F:16:0E:28:2E:19:C0:1C:7B:B9:68:9E:B5:55:21:94:F8:03:AE:FF:0C"}}},"request":{"raw":"GET /w3css/4/w3.css HTTP/1.1\r\nHost: www.w3schools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Sep 2025 11:54:56 GMT\r\naccept-ranges: bytes\r\netag: \"0a8b9e2c927dc1:0\"\r\ncontent-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;\r\nx-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5256\r\ncache-control: public, max-age=31219036\r\nexpires: Thu, 17 Sep 2026 12:23:25 GMT\r\ndate: Sun, 21 Sep 2025 04:26:09 GMT\r\nx-loc: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"75b37d4abbdde1322116d2744181081d","sha1":"6d6b5ff442af4682c30e970c382002a7c694ac5b","sha256":"c4f2aba13970ecf8303fb9329f97c8824861569273b0aa27acce48abc61d04f5","sha512":"8ba303e078af3f71176b6e7fa5c32b0f3984014393133a960da7103bc78204a144a3d034a3d1ad7126f1547f45408e00e036175f54766ffccc8cf84cd4c129a5","ssdeep":"384:aHHLO7eS0F4bBY/fn6jZcy9/cGK1q8CarY64Cb+dOy:aHHCLYXfl1q8CarY64Cb+dl","tlshash":"fbb2f022ff8a1138261a873660d5fbfc573a8681df9f1b7a7030373943894c26796e49","first_seen":"2023-06-26T21:08:35Z","last_seen":"2026-04-03T22:52:06.955674Z","times_seen":16143,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":56,"dns":38,"connect":1,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sex18.photos/favicon.ico","fqdn":"sex18.photos","domain":"sex18.photos","tld":"photos"},"ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex18.photos","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Tue, 08 Oct 2024 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"8A:51:2C:C8:73:D4:66:F0:E3:B8:91:AB:69:F1:FF:E5:D7:2A:E5:AE","sha256":"23:8A:9F:42:87:0E:BA:9A:6D:13:97:9A:FB:D5:F0:12:2D:EA:C5:89:B8:FC:8B:E7:89:93:5A:74:AE:C2:F9:0D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sex18.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:10 GMT\r\nContent-Type: text/html; charset=WINDOWS-1251\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=WINDOWS-1251","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":23,"connect":61,"send":0,"wait":20,"receive":0,"ssl":428},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.geefap.com/uploads/posts/2018-03/thumbs/796093576_363897749.jpg","fqdn":"cdn2.geefap.com","domain":"geefap.com","tld":"com"},"ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn2.geefap.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 21 Oct 2024 00:00:00 GMT","end":"Tue, 21 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"AF:D5:79:17:2C:27:BD:47:ED:EC:E6:86:68:6C:15:FA:38:09:D7:18","sha256":"DB:FB:80:6C:8F:F3:EB:EF:08:23:74:15:33:0B:F5:0F:FB:ED:FF:4D:01:A3:EA:1F:EC:2D:FB:52:C8:0C:C3:50"}}},"request":{"raw":"GET /uploads/posts/2018-03/thumbs/796093576_363897749.jpg HTTP/1.1\r\nHost: cdn2.geefap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 14989\r\nLast-Modified: Wed, 07 Mar 2018 14:07:54 GMT\r\nConnection: keep-alive\r\nETag: \"5a9ff23a-3a8d\"\r\nExpires: Fri, 26 Sep 2025 04:26:05 GMT\r\nCache-Control: max-age=432000\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14989,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x420, components 3","md5":"ecbc2841927c20960413f2aa68ce9a37","sha1":"ced81aab4b8d114c4f0e4192e723aeb391dd9dbe","sha256":"95540c31f6a306b2e77c300aa96d5f38f707ea9ece75c3ed15fae2307d460e2c","sha512":"cdb1d4d6c406f3286c1923c183378fc7694aba513c457a129bcc4a156484a91266d427ef1bca5f6af09bf495b25df383f306ba43d527708300fd87848a3019ec","ssdeep":"192:Db3fT7PWteemwEMskeo3M98ZEgTmXIOZ+mkCO4OigQN4uXcsKbcYst0sqrm0:DLr7uCwEyS8ZZTdOw3CZTGsqT1","tlshash":"ea62c0232d51baf27887c52efe259cf32ff4c2a0a94598366be101a2d541e4dd912ba0","first_seen":"2024-04-24T00:32:00Z","last_seen":"2026-01-17T01:52:05.758194Z","times_seen":59,"resource_available":false,"data":null}},"time_used":2023,"timings":{"blocked":-1,"dns":2,"connect":19,"send":0,"wait":30,"receive":0,"ssl":1966},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baraag.net/@KDE/image/png","fqdn":"baraag.net","domain":"baraag.net","tld":"net"},"ip":{"addr":"185.178.208.171","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cisapp.baraag.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 18:50:20 GMT","end":"Tue, 21 Oct 2025 18:50:19 GMT"},"fingerprint":{"sha1":"4B:6A:F9:3F:E3:37:8A:FE:8D:C7:60:73:8F:6D:F0:B1:84:2C:0B:7D","sha256":"BB:01:09:DB:A3:38:79:7D:79:54:20:CA:C1:1E:7C:23:24:13:93:F5:D8:FA:A8:78:89:6D:FA:C4:CD:DD:E5:CA"}}},"request":{"raw":"GET /@KDE/image/png HTTP/1.1\r\nHost: baraag.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=49fwovDjXbz0Omqj; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:07 GMT\n__ddg10_=1758428767; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:07 GMT\n__ddg9_=91.90.42.154; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:07 GMT\n__ddg1_=fRQSo0EsxwjFBJZM4QS2; Domain=.baraag.net; HttpOnly; Path=/; Expires=Mon, 21-Sep-2026 04:26:07 GMT\r\ndate: Sun, 21 Sep 2025 04:25:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: same-origin\r\nvary: Accept-Encoding, Accept, Accept-Language, Cookie\r\ncache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400\r\netag: W/\"843b8da6377795771c15fbcc80c73b2c\"\r\ncontent-security-policy: upgrade-insecure-requests;, base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://baraag.net; img-src 'self' data: blob: https://baraag.net https://media.baraag.net; media-src 'self' data: https://baraag.net https://media.baraag.net; manifest-src 'self' https://baraag.net; form-action 'none'; child-src 'self' blob: https://baraag.net; worker-src 'self' blob: https://baraag.net; connect-src 'self' data: blob: https://baraag.net https://media.baraag.net wss://baraag.net; script-src 'self' https://baraag.net 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://baraag.net 'nonce-+9jqmy5tYs5FvGAcgxQe8g=='\r\nx-request-id: 540349b3-58fb-4741-8873-005122cfe062\r\nx-runtime: 0.019719\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cached: EXPIRED\r\ncontent-encoding: gzip\r\nage: 14\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 16575\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"58g.top/favicon.ico","fqdn":"58g.top","domain":"58g.top","tld":"top"},"ip":{"addr":"104.21.23.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"58g.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 19:00:35 GMT","end":"Tue, 02 Dec 2025 19:58:02 GMT"},"fingerprint":{"sha1":"58:47:1B:64:C8:D3:B9:CA:C2:5A:30:91:D7:FB:EA:C9:FB:08:39:55","sha256":"65:99:6A:36:32:A4:40:D5:75:9F:11:FA:8D:A7:B5:6A:74:2E:A6:72:12:17:8F:F7:F5:42:7E:57:0F:B9:40:07"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 58g.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=s4GGpG7kX5iXuIRLPfpxdsF6P7qgcl1TJpwkiS7z2cs5nSHGtHzCYLRqxP75laVTUOe%2B3%2BpaFvsC5j7P0ltfttyKafr%2BuFxhTAsu6Ay%2Fu%2FADS58EAVFYkHul\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\ncf-ray: 9826cd8a1c0bb500-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9826cd8a1c0bb500\", cfL4;desc=\"?proto=TCP\u0026rtt=2292\u0026min_rtt=399\u0026rtt_var=2951\u0026sent=13\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=9491\u0026recv_bytes=1142\u0026delivery_rate=7607705\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=ac8481b01c061cff\u0026ts=273\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":57,"dns":21,"connect":28,"send":0,"wait":28,"receive":0,"ssl":243},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"58g.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240609-1/7e765b2a225b732eea9667cbd64a1808.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240609-1/7e765b2a225b732eea9667cbd64a1808.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 96160\r\nlast-modified: Sun, 09 Jun 2024 05:12:17 GMT\r\nvary: Accept-Encoding\r\netag: \"666539b1-177a0\"\r\nexpires: Tue, 14 Oct 2025 01:09:30 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 334, 8-bit colormap, non-interlaced","md5":"ce7440f385f8f29bc39d48a05b6e9da5","sha1":"eee110708e8f1f59388301ac9e4484e530be79e4","sha256":"8ab45a39162c5a39d75cff31203811d3f8e82b93e49e7e7e4cf360d4d9f959d3","sha512":"107051871c8cc6dde8e8776eed610cfe1a5da77fe1d865147631898ffd59a7baffb3043a23362060c8e580576dbc1dfe7e86c8feb27afab345dac4a15f77cb67","ssdeep":"1536:AjIOnuR/gdBmuL6fMg0RbjABGN6PCbvNKnE0l2nHNY6meCLITFnwaPK:AjIOuBuL6fNYMEb6muJeCLSnw8K","tlshash":"c99302538203a2d971187b9df9d9d23810ed387b66cc5c69128a1df55aeff210a663c8","first_seen":"2025-08-04T15:48:44.237381Z","last_seen":"2026-02-25T10:38:27.14813Z","times_seen":52,"resource_available":false,"data":null}},"time_used":2871,"timings":{"blocked":-1,"dns":5,"connect":147,"send":0,"wait":501,"receive":276,"ssl":1938},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240609-1/cb14203b5d592acc155959f853153668.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240609-1/cb14203b5d592acc155959f853153668.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=63072000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1666,"timings":{"blocked":632,"dns":0,"connect":0,"send":0,"wait":652,"receive":382,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.newasiaporn.com/favicon.ico","fqdn":"www.newasiaporn.com","domain":"newasiaporn.com","tld":"com"},"ip":{"addr":"192.243.50.105","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"newasiaporn.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 02 Aug 2025 00:00:00 GMT","end":"Fri, 31 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"6C:90:82:3C:65:CF:42:1F:6A:AB:6F:D3:99:A6:B3:6E:A0:D2:C0:E7","sha256":"7C:7E:2D:28:E2:73:16:F8:CB:E3:DA:FC:A7:90:85:D7:B0:27:07:D2:D1:74:8C:82:18:9A:CF:8E:87:FE:21:DA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.newasiaporn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Sun, 21 Sep 2025 04:26:11 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":235,"connect":116,"send":0,"wait":108,"receive":0,"ssl":335},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baraag.net/@KDE/image/png","fqdn":"baraag.net","domain":"baraag.net","tld":"net"},"ip":{"addr":"185.178.208.171","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cisapp.baraag.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 18:50:20 GMT","end":"Tue, 21 Oct 2025 18:50:19 GMT"},"fingerprint":{"sha1":"4B:6A:F9:3F:E3:37:8A:FE:8D:C7:60:73:8F:6D:F0:B1:84:2C:0B:7D","sha256":"BB:01:09:DB:A3:38:79:7D:79:54:20:CA:C1:1E:7C:23:24:13:93:F5:D8:FA:A8:78:89:6D:FA:C4:CD:DD:E5:CA"}}},"request":{"raw":"GET /@KDE/image/png HTTP/1.1\r\nHost: baraag.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sS85xuG5fiD5Wnph; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:02 GMT\n__ddg10_=1758428762; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:02 GMT\n__ddg9_=91.90.42.154; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:02 GMT\n__ddg1_=GjNmFDYORE7g3XR92Fvn; Domain=.baraag.net; HttpOnly; Path=/; Expires=Mon, 21-Sep-2026 04:26:02 GMT\r\ndate: Sun, 21 Sep 2025 04:25:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: same-origin\r\nvary: Accept-Encoding, Accept, Accept-Language, Cookie\r\ncache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400\r\netag: W/\"843b8da6377795771c15fbcc80c73b2c\"\r\ncontent-security-policy: upgrade-insecure-requests;, base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://baraag.net; img-src 'self' data: blob: https://baraag.net https://media.baraag.net; media-src 'self' data: https://baraag.net https://media.baraag.net; manifest-src 'self' https://baraag.net; form-action 'none'; child-src 'self' blob: https://baraag.net; worker-src 'self' blob: https://baraag.net; connect-src 'self' data: blob: https://baraag.net https://media.baraag.net wss://baraag.net; script-src 'self' https://baraag.net 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://baraag.net 'nonce-+9jqmy5tYs5FvGAcgxQe8g=='\r\nx-request-id: 540349b3-58fb-4741-8873-005122cfe062\r\nx-runtime: 0.019719\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cached: EXPIRED\r\ncontent-encoding: gzip\r\nage: 9\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 16575\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240826-1/d057169f65aae824f7cf74353abe4cd3.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240826-1/d057169f65aae824f7cf74353abe4cd3.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 109513\r\nlast-modified: Mon, 26 Aug 2024 12:19:56 GMT\r\nvary: Accept-Encoding\r\netag: \"66cc72ec-1abc9\"\r\nexpires: Mon, 13 Oct 2025 05:08:59 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"5458537618c4b77efcf97dd332f1bd05","sha1":"f5a108f90960b5e52924a0c2bc96ff079460af3e","sha256":"77dac8c6aba5250d2c21b5914d7f4fb4ba5bcbf3665b410c957399c84900c9cd","sha512":"5eb60bd8bfc9c0a7cbb8b8f181a000d7315eec3d4a0a05aabff7f74c07e057bbd0c4ad3f02dbfe29b6b48b7a928025346037254ed4f422ef1d6630a736886956","ssdeep":"3072:6CmVbnAJ+bRcyEicuLfGTuT9Z06uupzFWlJJpHOt6Hu:6CSkwbRcyXcEOuT306uupz4HJxOUHu","tlshash":"37b312ce7c1f18e940253d9fd302a193addaaabd593fb651dd02c9b41dd0e1ad50c90e","first_seen":"2025-02-15T18:15:16.973387Z","last_seen":"2026-01-24T16:50:11.490194Z","times_seen":123,"resource_available":false,"data":null}},"time_used":1819,"timings":{"blocked":656,"dns":0,"connect":0,"send":0,"wait":652,"receive":511,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uqetyzxa.com/20221002/vxB4Zamp/1.jpg","fqdn":"uqetyzxa.com","domain":"uqetyzxa.com","tld":"com"},"ip":{"addr":"208.64.217.23","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uqetyzxa.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Wed, 18 Sep 2024 00:27:40 GMT","end":"Sat, 18 Oct 2025 00:27:39 GMT"},"fingerprint":{"sha1":"E5:84:49:26:19:34:0F:60:FB:7B:C7:34:7C:74:DB:73:FF:1D:9B:FB","sha256":"2D:82:94:29:64:E1:20:72:59:93:BB:F0:E6:A9:F9:8E:10:0E:C4:40:30:05:34:25:60:63:64:28:26:39:8D:5B"}}},"request":{"raw":"GET /20221002/vxB4Zamp/1.jpg HTTP/1.1\r\nHost: uqetyzxa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 13135\r\nConnection: keep-alive\r\nLast-Modified: Mon, 03 Oct 2022 01:50:39 GMT\r\nETag: \"633a3fef-334f\"\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13135,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 320x240, components 3","md5":"e17aa154a1713ceb4642c190cca32cac","sha1":"5452b0ee57f1ea3fca1fc1e9960d76cdbcf3a74e","sha256":"39c485684f76cfee67c0832ed136b210fd13253229713930d554d3a15194ac23","sha512":"a57cb4e70c1eea5efd42990b198ef7f006eaffe267b1bcf594d23a56c1635c254122f0f818cd12668905214449136eb082e89c26c28074a767e547b21536fb77","ssdeep":"384:ROQfJrDjtIbev1ge665g3Q5roin5qBEgVATdPNhh:8QfxDBIbe9GSeinQet","tlshash":"5842cf0f9e0629e3c95ac97ee3053762815b79d8c9c347472b3804d7a3604aeba1793a","first_seen":"2025-03-12T03:12:27.326854Z","last_seen":"2025-12-05T22:31:48.439796Z","times_seen":142,"resource_available":false,"data":null}},"time_used":1670,"timings":{"blocked":149,"dns":1,"connect":145,"send":0,"wait":176,"receive":0,"ssl":1183},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/1X/02c75272ce2e98042bd0e6c7ec7afcc7a359c479.png","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/1X/02c75272ce2e98042bd0e6c7ec7afcc7a359c479.png HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 57133\r\nlast-modified: Wed, 23 Apr 2025 23:45:35 GMT\r\nexpires: Mon, 21 Sep 2026 04:26:03 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 180, 8-bit/color RGB, non-interlaced","md5":"5ea2e4f0fc16f730aeaff37ef3f5409f","sha1":"02c75272ce2e98042bd0e6c7ec7afcc7a359c479","sha256":"216c845f8ebda2c4791c0b5aac6999baa353abcb992fd872130ef302b21afae7","sha512":"2901173b8ac541986a7bb2f78b243a1d2a85120eca1361f8d0d3e69fb05845f00f17b21a7c5ca644eb72f3e11a443323bced4f51d0de9822ef9bb91735c72273","ssdeep":"768:/dr1vZkvGFrnwTz6iQBgyVJHheFkC4/TfsffRUSlJSgEh3V/ab2nBsaPNIwVD6uq:/TZkvGFEZ69C4/TkffRVvbOVq","tlshash":"aa43023d97789e84966f32233cbb5a1c9e7820b7ece8793f5a744f2428b114a5846cc4","first_seen":"2025-08-11T22:22:22.993596Z","last_seen":"2025-11-19T08:51:47.559647Z","times_seen":15,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.redd.tube/favicon.ico","fqdn":"www.redd.tube","domain":"redd.tube","tld":"tube"},"ip":{"addr":"172.67.72.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redd.tube","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 19:05:31 GMT","end":"Tue, 28 Oct 2025 20:05:13 GMT"},"fingerprint":{"sha1":"E1:CC:A2:57:19:42:1A:52:AA:84:E5:30:F1:6B:8B:D3:D0:54:1E:F2","sha256":"9A:80:7E:16:92:21:EA:31:78:BD:02:CC:B2:B3:B6:EB:D8:1D:6A:3E:86:28:E0:87:26:CA:F4:C8:6F:5E:7C:B2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.redd.tube\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 229\r\nlocation: http://www.redd.tube/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uKWazj0%2BZWnBxtRWlPZycYj%2FPBEUpXdWAZoDGTCt7xblRVE%2B%2B2pGrCadJaEvezgtGIjw1PZaJNTEzSkno6WbpAcPt4aU3uba%2FwcMgA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9826cd843820120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":14,"connect":1,"send":0,"wait":59,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.imyyds.com/favicon.ico","fqdn":"www.imyyds.com","domain":"imyyds.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.327Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.imyyds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":43,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250804-1/5876c300852b02896b1aff9256d4267a.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250804-1/5876c300852b02896b1aff9256d4267a.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sidesteamroll.com/go/1780944","fqdn":"sidesteamroll.com","domain":"sidesteamroll.com","tld":"com"},"ip":{"addr":"157.90.33.78","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:11.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sidesteamroll.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 11:28:45 GMT","end":"Wed, 17 Dec 2025 11:28:44 GMT"},"fingerprint":{"sha1":"12:3F:41:43:BE:69:A3:08:27:89:FF:BA:15:50:99:D4:B3:F4:9F:3A","sha256":"80:09:17:6B:07:72:4D:C4:D6:9B:70:0F:35:64:ED:B7:22:82:98:E2:CD:4E:E4:15:41:46:7C:26:2C:2A:C3:BF"}}},"request":{"raw":"GET /go/1780944 HTTP/1.1\r\nHost: sidesteamroll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\nserver: Angie\r\ndate: Sun, 21 Sep 2025 04:26:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 26\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nset-cookie: rauid=vg61O_DiQeupoGIiIB4-bg; expires=Mon, 21 Sep 2026 04:26:11 GMT; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":116,"dns":35,"connect":25,"send":0,"wait":25,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"159i.net/uploads/allimg/2501/D-01020G154cW6f4255E.jpg","fqdn":"159i.net","domain":"159i.net","tld":"net"},"ip":{"addr":"172.67.200.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"159i.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 10:20:32 GMT","end":"Sun, 14 Dec 2025 11:18:54 GMT"},"fingerprint":{"sha1":"D5:F1:FA:DC:B1:F7:50:6B:64:B5:EF:04:1E:C3:70:54:5A:ED:98:4B","sha256":"0F:79:08:19:0D:19:F2:C1:C9:3A:9F:3E:2C:D9:00:9D:3A:94:CB:84:2D:6B:12:2D:3A:B2:B4:0A:DA:82:80:4B"}}},"request":{"raw":"GET /uploads/allimg/2501/D-01020G154cW6f4255E.jpg HTTP/1.1\r\nHost: 159i.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nlocation: https://159i.net/404\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxlEW83cxd4Mj0M5eKq3WHlobGUWA1kDtiKaizHgzijAG1rfeXMsRGBCA5mXKOhAbxCB8Wnl2YbofDhcf9nExp3PaqtRhfn7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\nserver: cloudflare\r\ncf-ray: 9826cd75cf542efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sexsex55.com/favicon.ico","fqdn":"sexsex55.com","domain":"sexsex55.com","tld":"com"},"ip":{"addr":"202.95.16.31","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex83.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 14:08:44 GMT","end":"Wed, 10 Dec 2025 14:08:43 GMT"},"fingerprint":{"sha1":"C9:DF:27:A9:2B:47:90:06:7B:5F:0D:64:78:F2:F2:AA:1A:35:1B:98","sha256":"4C:FE:81:8C:DC:92:CE:C9:8C:E0:31:42:DB:60:A1:F2:47:C9:52:17:EF:1D:EF:EB:5D:95:CB:4A:EB:AF:0B:5E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sexsex55.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/x-icon\r\ndate: Sat, 20 Sep 2025 14:40:46 GMT\r\netag: \"645b773c-10be\"\r\nlast-modified: Sat, 20 Sep 2025 14:40:46 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 4286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"da00228045bbdc9fc485eee15ae466f7","sha1":"51acd57ef4439a7e622281388e2aa83d53b3fe33","sha256":"18a2fc0c936b1782fb1f1dec65e9ea9dfff00e1a081594c8c3049a5b435c1d2d","sha512":"b7ba13392ab3c6d8c1077989d482399892c1c094599e798b69dc3c6720b5d26dd6186d414f46cacf8ed48061e091d23978248b63cace28ebc601e41348ce608a","ssdeep":"48:uTOtJTTH7TTS/LY64wSKd2sci/6aq3EDP+3yk:uOH73wSKdEv/3v3yk","tlshash":"e2912fa8edf928bfd22403785f0697f8c8338e1f6ce4593308227c9b272ed51848611d","first_seen":"2023-05-17T22:14:46Z","last_seen":"2026-04-03T22:52:06.89925Z","times_seen":551,"resource_available":false,"data":null}},"time_used":1138,"timings":{"blocked":-1,"dns":6,"connect":290,"send":0,"wait":277,"receive":30,"ssl":509},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.effedupmovies.com/favicon.ico","fqdn":"www.effedupmovies.com","domain":"effedupmovies.com","tld":"com"},"ip":{"addr":"104.21.92.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effedupmovies.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 17:38:37 GMT","end":"Fri, 19 Dec 2025 18:02:54 GMT"},"fingerprint":{"sha1":"82:CE:B8:3B:23:8D:F5:3E:91:F6:66:8B:F0:81:55:64:3E:05:09:AA","sha256":"8F:98:21:23:63:91:0D:45:BF:F7:30:FA:08:BA:EF:CA:67:21:BD:97:3B:69:04:A0:56:DE:7B:7B:7D:FE:C8:37"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.effedupmovies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GbYCjJ8Vz%2F0NO0Bo9WCQ7cr7n1DVwszr5pwhtc67u8evjFeW49vz7plnVm5RTGxBlGMMcrJTP%2FHnDtLrOyF5nzuJY7ylTn5o8GqA03n%2FFnB5Kkc%3D\"}]}\r\nlocation: https://www.effedupmovies.com/wp-content/uploads/2020/04/cropped-EUM-32x32.png\r\nx-powered-by: PHP/8.3.25, PleskLin\r\nvary: Accept-Encoding,Cookie\r\nlink: \u003chttps://www.effedupmovies.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-protocol: HTTP/2.0\r\nx-request-id: 63732a16c95888dc1b3964b1e0dbc43e\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9826cd85ed8bb4f9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":681,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:05.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/nosleep/0.11.0/NoSleep.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3953\r\ncf-ray: 9826cd6dbb3a5689-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ed16b69-29bf\"\r\nlast-modified: Fri, 29 May 2020 20:07:05 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 990735\r\nexpires: Fri, 11 Sep 2026 04:26:06 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kEFok0AsHmyB%2FRyQfs8iZk5FgIziYjuIztTGnunZJGpI69TbfR3j6LVxOhLrZCrmDE02AhqLc755fR%2BrVcgsfP87PPxcaYbzvy4Or7lPhzX5Gr%2BFWApdzLwI4bZiTdNy2AHQCkkD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10687,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10613)","md5":"ea77f824de2ef57acb12e7cb6596365e","sha1":"10bad0dbdf30a0471c2c786b349daeb1dd19180e","sha256":"2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c","sha512":"cf69dd76334b7318c829868da8a7e9c2097ef261555388132fc69f95d42e91420e2988056c3d93c830b20059422ae5a82e1109e3dce9127ccb0e23cc5ca27591","ssdeep":"192:N0rZbTPe+fl9SKRGyFgkw+wi+FrZJqbzr+5rA7wbUCzebIkm:N09voK7gzi+FrZJqbzrarAyUX5m","tlshash":"7a22f8b33133fd9f8fba085ac61d61045c7dbc6f4aa94091bb0884e86af4558ead5d34","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-04-03T22:52:06.902225Z","times_seen":2338,"resource_available":true,"data":null}},"time_used":1069,"timings":{"blocked":-1,"dns":4,"connect":46,"send":0,"wait":23,"receive":1,"ssl":969},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"str1.sextvx.com/6/6/7/0/0/6670001/screenshots_240x180/9-nude-beauty-her-juicy-pussy-a-fingering-fantasy.jpg","fqdn":"str1.sextvx.com","domain":"sextvx.com","tld":"com"},"ip":{"addr":"195.154.199.74","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"str1.sextvx.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 19:17:10 GMT","end":"Sat, 01 Nov 2025 19:17:09 GMT"},"fingerprint":{"sha1":"39:46:6B:E4:12:C9:79:65:80:06:D9:AE:AE:C0:58:7B:2C:DF:57:AE","sha256":"C4:28:B5:E0:29:39:19:85:93:78:FC:46:D9:36:CE:98:0E:8B:98:B2:EE:BD:51:47:98:C5:75:7A:AB:AE:95:2E"}}},"request":{"raw":"GET /6/6/7/0/0/6670001/screenshots_240x180/9-nude-beauty-her-juicy-pussy-a-fingering-fantasy.jpg HTTP/1.1\r\nHost: str1.sextvx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1841,"timings":{"blocked":-1,"dns":2,"connect":29,"send":0,"wait":39,"receive":0,"ssl":1765},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.crazyshit.com/content/2020/09/0c06655c.jpg","fqdn":"media.crazyshit.com","domain":"crazyshit.com","tld":"com"},"ip":{"addr":"45.133.44.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"media.crazyshit.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 02:33:04 GMT","end":"Mon, 27 Oct 2025 02:33:03 GMT"},"fingerprint":{"sha1":"4B:C8:F7:57:68:32:B3:B5:70:31:3E:8C:32:BC:34:57:81:3A:54:C9","sha256":"8D:21:A3:34:ED:E8:B1:2C:20:3B:4F:FA:BD:47:8E:F6:08:39:62:2A:98:BF:7C:15:9D:CE:8E:4A:6F:44:6E:7D"}}},"request":{"raw":"GET /content/2020/09/0c06655c.jpg HTTP/1.1\r\nHost: media.crazyshit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 255249\r\nserver: nginx/1.24.0\r\nx-object-meta-mtime: 1600802766.692755275\r\netag: e67901ada75abbbca439b644865f2084\r\nlast-modified: Mon, 05 Apr 2021 12:36:06 GMT\r\nx-timestamp: 1617626165.66107\r\nx-trans-id: tx68e38a8494004c3bab9ad-0065cce142\r\nx-openstack-request-id: tx68e38a8494004c3bab9ad-0065cce142\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Tue, 23 Sep 2025 04:26:03 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255249,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 720x540, components 3","md5":"e67901ada75abbbca439b644865f2084","sha1":"c1dc96dcfd9a88cd844a00c82d895477cdcf3dfc","sha256":"57f25b605ea1363cdb1379ede0d3a850f91de63ebda668dd5dcc8a6c604c3f42","sha512":"790f0fef232ac0f84fa88161f9bb31b2a069469d46ab6eb924a15a8be5ff2b43e9c5f7ed0e92608b575c1a61da439e9cd54c0683c3556a77bc29d01d5902f7e3","ssdeep":"6144:7MKdi4gYOugyGX9nIMcS/MdCCNmPUqJUAg8cIyBQeuD:xi4gqg3NnB0ddxqsIefU","tlshash":"7c4412b35901224ad768c73652be122eb7a197e9e059108e1b2113f7f24ee4537e29cf","first_seen":"2024-04-30T17:37:32Z","last_seen":"2025-11-09T20:01:59.8053Z","times_seen":8,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmtu.sltusl.com/upload/vod/20220903-4/47376860ab56a310df28c86e5d69faba.jpg","fqdn":"fmtu.sltusl.com","domain":"sltusl.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.249Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20220903-4/47376860ab56a310df28c86e5d69faba.jpg HTTP/1.1\r\nHost: fmtu.sltusl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":1,"connect":19,"send":0,"wait":0,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/sp/media/videos/tmb/5133/6.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"104.238.221.35","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.apian088.sbs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 17:40:13 GMT","end":"Wed, 10 Dec 2025 17:40:12 GMT"},"fingerprint":{"sha1":"53:DC:8F:28:38:C9:D5:91:E4:CF:AC:96:11:AA:F9:35:7B:97:26:A8","sha256":"C2:42:F4:43:A9:A1:46:44:B1:D7:91:31:1E:D4:6B:51:CA:22:77:44:EF:9C:28:BF:EF:76:01:F2:F9:03:A5:FC"}}},"request":{"raw":"GET /sp/media/videos/tmb/5133/6.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 21 Sep 2025 04:26:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10102\r\nLast-Modified: Sat, 23 Mar 2024 12:20:57 GMT\r\nConnection: keep-alive\r\nETag: \"65fec929-2776\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":10102,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 384x216, components 3","md5":"ddfd1adb9d74915d05a14d4576305b90","sha1":"9e32a06c1336d2193ffc154e09ea79aacb4af861","sha256":"3abad818fd9056b2af5b83be9b51c8baec8d542aff0307eac3ec2c16e2cbdc21","sha512":"b0bfb2bbe461109962be29bd421d0339434b2959a85a7d897e3500a5679d01b5836bd83d44679f0a45239f9a49ecdd90070085a9acfca2fab8556a3ae42887d3","ssdeep":"192:4KtFibtgVMEgIZzjIbdYoOY2/C8dIVaZt/dgiWxJB3SUGH3HoCkc05WytTXJwVc:4KriHKIROYzJM/5WxJJ0XHdkXTN","tlshash":"2b22ae8f43546ff8362231f3d6321c42ffcc46a194b7373a6de9d672891ae02ca55645","first_seen":"2024-05-18T01:24:42Z","last_seen":"2026-04-03T22:52:06.870834Z","times_seen":64,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":510,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"two-elfs.com/video/video069.jpg","fqdn":"two-elfs.com","domain":"two-elfs.com","tld":"com"},"ip":{"addr":"172.67.149.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"two-elfs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 16:27:20 GMT","end":"Tue, 25 Nov 2025 17:24:30 GMT"},"fingerprint":{"sha1":"4E:E2:71:C1:5A:C2:F6:EF:07:37:BA:FC:79:3B:2F:9C:31:F4:03:7C","sha256":"73:24:02:67:17:9F:89:6D:8C:F0:AE:CA:85:2C:A1:E7:8E:E4:20:B1:2A:50:C8:76:ED:E0:F1:92:12:CD:E2:A1"}}},"request":{"raw":"GET /video/video069.jpg HTTP/1.1\r\nHost: two-elfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 84798\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 16 Feb 2018 13:15:53 GMT\r\netag: \"14b3e-5655424d2b440\"\r\naccept-ranges: bytes\r\nage: 2787\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s4zRJBk%2FwoUMBCew2ZHZ8uv6i%2FFSSjy2klNnT2n7kx7lIqQR4tgXpRcXj98kmwzqF9u2H47PUAiT3MNSbXCLQyPLtIB1WIW%2Fjye42Q%3D%3D\"}]}\r\ncf-ray: 9826cd6ab9064c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84798,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 768x432, components 3","md5":"539a1d83fad0db206cf5edaad8cf4bd1","sha1":"0c3a90bcd43601eb844f891d25e2c52ac45dcad6","sha256":"14520a8575a81279ca02371ebebaff0e5a8104961410bdb96eac2caf46c68f9a","sha512":"18f9cf0b8ad0c1a52e80c2eba829fd6132e2629f09eb15e2c18066307c4e85f4916ab44293fcf0685b9406a045e07f8e9769c8b52a0e6838c2ce8828268f7cd6","ssdeep":"1536:haMdHbG8Cuy7l3opgoU2bcZYiSuXEjDCXqaDYhh81EwWN1c2c:kcHbG8agXUxYaaJP8ewi1A","tlshash":"7f830295bb10d81195ff0d8b54fcb45e1ad31c923a9b700adec67b7adf2cab811182c9","first_seen":"2025-06-18T07:11:21.427589Z","last_seen":"2026-01-08T15:13:22.957777Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2329,"timings":{"blocked":1149,"dns":28,"connect":4,"send":0,"wait":7,"receive":3,"ssl":1110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eb.spreee.pro/favicon.ico","fqdn":"eb.spreee.pro","domain":"spreee.pro","tld":"pro"},"ip":{"addr":"172.67.204.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spreee.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 12:21:01 GMT","end":"Wed, 26 Nov 2025 13:19:27 GMT"},"fingerprint":{"sha1":"58:CC:92:91:1D:25:3F:A8:2C:05:85:8D:7F:87:E4:FB:9F:1A:DE:A6","sha256":"05:1E:AA:85:50:D5:66:C9:D3:60:37:D5:63:DC:D2:F7:4D:9F:D5:57:60:76:E6:04:EC:20:C0:BB:D7:F6:61:0B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: eb.spreee.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKlpk92wWrCps5RaXBpsXlfhZM%2FTsA8u107FWH89uC%2BcbQf5mcwAV%2FRuWSZVnYHqFfZwyAxSYzAavce2AShFdkqWnn18ua9DOFxUb5g%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9826cd8928abc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":15,"dns":15,"connect":38,"send":0,"wait":78,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250804-1/a1c7425ad7f26a7d189d153550fa3ee4.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250804-1/a1c7425ad7f26a7d189d153550fa3ee4.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 112992\r\nlast-modified: Mon, 04 Aug 2025 06:13:42 GMT\r\nvary: Accept-Encoding\r\netag: \"68904f96-1b960\"\r\nexpires: Fri, 03 Oct 2025 07:27:53 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"ffc02b0dfa03eaa0a4c144ac1739ab95","sha1":"bd89981ab75599d3dbfeb88def7d98156e3d0ebe","sha256":"9b1d43a156d3f236cadf25251ee8e4b7686f0a9d876f0385d2b58b6c96570244","sha512":"2b796485866f1528f3c6d3c3cbccd8dc71dbf718a02bab6e924dbfe262d94111b4fec01ccaa5277e5aa965a998f1b58d12aed6a8de14c2e36ba7f6234413972b","ssdeep":"3072:O0uRjM5cVLBh0CyzCfKULwh6tv+mWjN9qGtZJe:ru5TsULq6VTkIG8","tlshash":"acb312650d17f1290660b33f3d8cd767988ae2fbf5152a6750e8ac815a0a3ef9c40cdb","first_seen":"2025-08-15T16:30:03.177598Z","last_seen":"2026-01-29T18:58:01.318195Z","times_seen":58,"resource_available":false,"data":null}},"time_used":2179,"timings":{"blocked":1011,"dns":0,"connect":0,"send":0,"wait":650,"receive":518,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240611-1/e094f1f6c4b751df4c7f7242162e6e0f.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240611-1/e094f1f6c4b751df4c7f7242162e6e0f.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 103690\r\nlast-modified: Tue, 11 Jun 2024 04:00:35 GMT\r\nvary: Accept-Encoding\r\netag: \"6667cbe3-1950a\"\r\nexpires: Mon, 13 Oct 2025 06:02:13 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"0d4b0cf41e57ce32e1b6dfd2c362577e","sha1":"122496c70a7313031fbd06965f28bf73bea53958","sha256":"82884e380ca718b0a53f9e5f2302818e109cab7d04e5d5ffcdb6fd34875a8084","sha512":"4f7f4372004af333f5b8ea56e2bca5f25c504c9749edfa7a604e906967d0fe56d0d399eea89a4f07314bc97875a20627f41f55af728acd0062ba35076dd964b0","ssdeep":"3072:DjLX9oP8UlJviO2E+wcPLkkk5QpR81qAgXd0wl:XWp2E+rTDkA8NAl","tlshash":"30a312fdd35a1b5b06599ce8cfeccc4161b95d85d3a862232352f80c8400966abfefe5","first_seen":"2023-10-31T04:17:56Z","last_seen":"2025-12-18T23:51:27.828066Z","times_seen":69,"resource_available":false,"data":null}},"time_used":1776,"timings":{"blocked":604,"dns":0,"connect":0,"send":0,"wait":648,"receive":524,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitemaps.brettspizzeria.com/favicon.ico","fqdn":"sitemaps.brettspizzeria.com","domain":"brettspizzeria.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.446Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sitemaps.brettspizzeria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":32,"dns":14,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.livegore.com//rb-include/uploads/2023/11/thumb_suck-5901831821.png","fqdn":"www.livegore.com","domain":"livegore.com","tld":"com"},"ip":{"addr":"45.14.225.17","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.livegore.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 08 Oct 2024 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"C3:0F:27:F0:79:EE:D4:ED:36:0D:86:2D:BD:C8:92:C4:8A:1E:36:93","sha256":"54:26:07:B7:51:35:1D:DF:E8:9C:E1:12:65:D9:84:CB:35:95:9D:14:10:E1:7C:83:63:A5:50:DB:EA:B0:20:8C"}}},"request":{"raw":"GET //rb-include/uploads/2023/11/thumb_suck-5901831821.png HTTP/1.1\r\nHost: www.livegore.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 04 Nov 2023 00:07:30 GMT\r\nETag: \"67ab-60948683531c4\"\r\nAccept-Ranges: bytes\r\nContent-Length: 26539\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":26539,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 400x225, components 3","md5":"d301f6f18649b672f08e60c5f8eb32e0","sha1":"a9a7385434729f601de1180c237c4b9f8f6aaabb","sha256":"fb67f89c48a3fba00c93a0c5e449c210388a89455393bb4a77a471d8b9417091","sha512":"b2065cbd04506b70d8ac027932e24f301a6d99de0fd86e3b3897a386d096978570e7cdea8c2918560de4048caf97f068b1f14265a8410358d7407a08904c2ee0","ssdeep":"768:Fpqg9YiXF8twsUWHREHB+cKT9sXFt4yjjOcD7:Fp397X4UWxEhuTqJOcH","tlshash":"92c2e03b16e05b9ca1915aa19c3c2f0506f9ca1daaf28b16f3fe0284f7754c19a62b51","first_seen":"2025-03-21T10:58:41.374565Z","last_seen":"2025-09-21T04:28:54.426273Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2525,"timings":{"blocked":351,"dns":2,"connect":41,"send":0,"wait":61,"receive":22,"ssl":2038},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntube.b-cdn.net/thumbnails/ebeccc43c17949851b4164b4d6c693c24112d9ea.jpg","fqdn":"cdntube.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /thumbnails/ebeccc43c17949851b4164b4d6c693c24112d9ea.jpg HTTP/1.1\r\nHost: cdntube.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12174\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 114851\r\ncdn-uid: 610bc618-7bcd-4e37-a18e-2efa3a8e9c35\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sun, 02 Feb 2025 20:58:33 GMT\r\ncdn-storageserver: DE-977\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 979\r\nperma-cache: HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 09/06/2025 06:47:28\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7cf939cda7cf848dac83febde7ee1423\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12174,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x710, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"343f4316e3dd1d12a704103ce6b7b538","sha1":"2eb93b54fcaa445817206c888ba4065af3118ff5","sha256":"f19889c4ed6041316b75e24d556f5d2bc594c89e5b10d182a49f60b561af66b8","sha512":"099c7c1a0fe1effa9a7cfb254e729cc65377bfa7ba5cec48842bf72019386dcee12ec47de0ce61ca712501a18b2a0af5c1f840f362f8c9bfff707caf4dbee2a5","ssdeep":"192:nVB7Y9mS03AHJyX2JAE6jlSj1qh568psZlRc3Rno6+3OW+Ik94RzrYSVJ+7OOCtF:imdAHwE6jlSjIhT4u2/p+t98YYJq929n","tlshash":"f442c0c80d179444dac3dba8bb21ebd11841fbf163368e2b61ec9dba8a3573cd340964","first_seen":"2025-09-15T19:17:31.279696Z","last_seen":"2025-11-11T02:02:39.940405Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1861,"timings":{"blocked":-1,"dns":10,"connect":6,"send":0,"wait":5,"receive":0,"ssl":1825},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/jpgjingpinx.com/upload/vod/20240112-1/6179eb1df1db7b8b863025eea0c8b2f8.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 Aug 2025 19:44:50 GMT","end":"Tue, 04 Nov 2025 19:44:49 GMT"},"fingerprint":{"sha1":"E3:33:F6:CB:1D:54:80:51:6E:94:B6:72:D6:8D:22:88:EC:CF:5C:C2","sha256":"A2:6F:1C:4D:B8:5F:EC:D5:D1:31:F6:0A:A1:D3:C4:05:9B:6A:16:37:15:5E:C6:BE:AE:95:93:6E:79:6F:7D:8E"}}},"request":{"raw":"GET /jpgjingpinx.com/upload/vod/20240112-1/6179eb1df1db7b8b863025eea0c8b2f8.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 102308\r\nlast-modified: Sun, 26 Jan 2025 15:03:45 GMT\r\nexpires: Wed, 27 Jan 2027 03:03:45 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://jpgjingpinx.com/upload/vod/20240112-1/6179eb1df1db7b8b863025eea0c8b2f8.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"4b1646bf1ae2222d\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 4\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102308,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fba74a3ae41d5af78e0203b27f76f91f","sha1":"54b475558448896295a7b6922a3ecabe65e14fe7","sha256":"2e165c1ce953ddfcaed883f07b69ec62ffbd1da6b5d87c8aa6d00b3ef9c677bb","sha512":"545d8301073d52af2dd1452f0d986e38b8e04e362d39eae6e85e5066e0c203a19845a6e710e2f5b934de2654c626f4b5e49f13490c680a445960d7efeb211628","ssdeep":"1536:2Ed6AKusnw22szhF/3Ys3kPDG+tWdzylsRKTiZKmv7Lgv+TvJH5O8gxYt+pXk6Nc:2J1nIs9Ks0PDJWRyIK2voWF2OaXkrl","tlshash":"f3a31229a3103e2d008c798c4d61b0a2de09229d7af5e357c40c6dd50ebdabed2690ef","first_seen":"2025-07-23T13:55:02.089054Z","last_seen":"2025-10-10T04:05:45.171246Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1886,"timings":{"blocked":-1,"dns":8,"connect":11,"send":0,"wait":9,"receive":21,"ssl":1829},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.geefap.com/uploads/posts/2018-02/thumbs/375292199_363590515.jpg","fqdn":"cdn2.geefap.com","domain":"geefap.com","tld":"com"},"ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn2.geefap.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 21 Oct 2024 00:00:00 GMT","end":"Tue, 21 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"AF:D5:79:17:2C:27:BD:47:ED:EC:E6:86:68:6C:15:FA:38:09:D7:18","sha256":"DB:FB:80:6C:8F:F3:EB:EF:08:23:74:15:33:0B:F5:0F:FB:ED:FF:4D:01:A3:EA:1F:EC:2D:FB:52:C8:0C:C3:50"}}},"request":{"raw":"GET /uploads/posts/2018-02/thumbs/375292199_363590515.jpg HTTP/1.1\r\nHost: cdn2.geefap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 30413\r\nLast-Modified: Mon, 12 Feb 2018 03:11:40 GMT\r\nConnection: keep-alive\r\nETag: \"5a8105ec-76cd\"\r\nExpires: Fri, 26 Sep 2025 04:26:05 GMT\r\nCache-Control: max-age=432000\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30413,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x420, components 3","md5":"6d295634700c308aeb88b6cf2851e1c8","sha1":"ce8a809fc8c102df62efc49555e1252767c68806","sha256":"25c6b2a497d337c1b5dcca5481344b6989950c897626f522845d38c072884b3a","sha512":"aeb4602df9cf037b1895b1dc0d5ec835ee47963224bd954c4e91798784ee7519a996ee66a4b706302ef711aa03b0c6ec48790a85016d9b8ef77a769e8dc31260","ssdeep":"768:DCFyxCgnok8bBCx6LpDBIohQNzOSRoQ94SERgV:DCcCgnQncfoQiSwgV","tlshash":"75d2e1f91a48f5c17e0fe05554603eb1aac9d7032e6c12991fcc8633a6f2b46f8921ec","first_seen":"2025-04-24T14:39:22.516465Z","last_seen":"2026-01-16T01:24:57.86296Z","times_seen":42,"resource_available":false,"data":null}},"time_used":1678,"timings":{"blocked":-1,"dns":2,"connect":18,"send":0,"wait":50,"receive":1,"ssl":1591},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/get-vthumb/916043/3d09e4b21e4306d5f50fb5410ca9cefd/564x318_1","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"87.250.247.182","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.avatars.mds.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 03 Apr 2025 14:25:03 GMT","end":"Wed, 01 Oct 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E6:CA:01:EF:27:C5:A7:B7:36:66:BC:E5:64:C2:63:12:FB:3C:8F:91","sha256":"F3:AE:1B:55:A4:70:1A:43:35:87:50:83:E5:F5:ED:99:44:E6:CE:26:D5:B1:CC:24:A7:21:CF:AC:A8:E3:2E:24"}}},"request":{"raw":"GET /get-vthumb/916043/3d09e4b21e4306d5f50fb5410ca9cefd/564x318_1 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17806\r\nlast-modified: Thu, 19 Jun 2025 22:21:37 GMT\r\ncache-control: max-age=604800,immutable\r\nx-request-id: dfc11826ab7a8a0e\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 600, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: {\"group\": \"network-errors\", \"max_age\": 600, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/s3_nel?datacenter=VLA\"}]}\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 564x318, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7bdf5deafef945b609c20b7f13b48bf1","sha1":"2bdf8d70398b550e2c3e6c4cbf8fedb7c8f878ce","sha256":"0b37fb40213d5b98000f22e18357d4c612953c32b73cb1955e77a484499aab1a","sha512":"982fb9e5c80877bddce27f6a73229fed5fb7508f6c555aa9c466923d1a4574e174e7c737237a9e2580078cdd6158be5690354ed1fceec27b28bc7396672122fc","ssdeep":"384:aTHarHlECqUo00PRKaUFcpodz9zHEzYhlVB8U8bgltX5a/CVt:abauUo00pUmpm9DEzMBVJa/it","tlshash":"6f82d024eaa15f794dd527960dc92c64574cd2f1fc2beb8bd2bba50e6100436840ebaf","first_seen":"2025-07-11T06:45:23.77144Z","last_seen":"2025-09-21T04:28:54.43163Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1633,"timings":{"blocked":-1,"dns":7,"connect":58,"send":0,"wait":95,"receive":1,"ssl":1452},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/nv3nhsms_header.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 09:48:24 GMT","end":"Sat, 08 Nov 2025 10:45:39 GMT"},"fingerprint":{"sha1":"4F:F9:25:37:EE:42:8B:1E:5C:AA:F5:BD:BF:CB:3A:CE:FD:84:E3:68","sha256":"E9:D6:87:C8:76:D3:FC:EE:D6:80:61:98:3C:B4:69:F2:52:5D:24:92:95:9E:91:B8:16:F5:EF:BB:CD:64:21:8A"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/nv3nhsms_header.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 362370\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 16 Sep 2025 23:46:33 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qpAa%2FcsSOlQF8PJ4SMC4BWSeLkMfhQ%2Byjq5%2BCoL723WAXQ6YpMsRCOidwItT7lymG5Le5H8E%2F2HmRucdwNorDlnRnrVIAnu6W78%3D\"}]}\r\ncf-ray: 9826cd593e09120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21765,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 267x200, components 3","md5":"647c0d40fc8ee609a3ee5d40b8954c18","sha1":"2b4b80b19cbeeea9f9795828a12ecb8f9d93a29b","sha256":"03d5d8ecf849abe2b036646cd190c09724f2097a69ca536bcb9df933aaa57030","sha512":"3421d304380df92b2a7c8cf9f4cc78d8053c9fb5c7e3449465d9ec90675a6dc57f2f0200058c157653d268ef97ca4e9ea66f4641f0a5bf52fb1b1ff855665092","ssdeep":"384:n0JTvD+vVSDBuu5lrAb4hUEfhzb8wIZugt4c90blOOrHggo1dP8KqfmSEUp/X8Zn:nIDWSzPAb4uE3EugtT9KAcARdETJHX8p","tlshash":"c3a2ce1b164a16d7b80ddf9ca6184e1923fef84439d11540b2ea1d9bfce4640bb9c9cd","first_seen":"2025-07-19T18:39:22.430951Z","last_seen":"2026-04-03T22:52:06.965155Z","times_seen":30,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haha888.xyz/video/data-setup","fqdn":"haha888.xyz","domain":"haha888.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.207Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /video/data-setup HTTP/1.1\r\nHost: haha888.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"haha888.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"haha888.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ssnovel.top/template/YS007/images/avhubCode.png","fqdn":"www.ssnovel.top","domain":"ssnovel.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.288Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /template/YS007/images/avhubCode.png HTTP/1.1\r\nHost: www.ssnovel.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.ssnovel.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.ssnovel.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.pornhat.com/contents/videos_screenshots/143000/143388/640x360/1.jpg","fqdn":"static.pornhat.com","domain":"pornhat.com","tld":"com"},"ip":{"addr":"185.240.28.22","port":443,"asn":56898,"as":"Private Host BV","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pornhat.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 02:18:32 GMT","end":"Wed, 10 Dec 2025 02:18:31 GMT"},"fingerprint":{"sha1":"80:EF:D0:2C:52:B8:C1:F8:1F:C8:D8:EF:FC:43:88:0C:71:BC:8E:6C","sha256":"B7:2C:63:55:D4:82:11:AC:49:3E:80:A1:A3:24:91:E8:0A:86:06:B3:BD:16:35:8B:05:BA:F6:40:97:9B:4F:34"}}},"request":{"raw":"GET /contents/videos_screenshots/143000/143388/640x360/1.jpg HTTP/1.1\r\nHost: static.pornhat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1578,"timings":{"blocked":-1,"dns":5,"connect":17,"send":0,"wait":19,"receive":0,"ssl":1537},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de.chezcathy.com/favicon.ico","fqdn":"de.chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"138.199.37.230","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:09.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de.chezcathy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 07:11:47 GMT","end":"Tue, 25 Nov 2025 07:11:46 GMT"},"fingerprint":{"sha1":"50:36:F3:87:A2:7B:61:3A:08:5A:BF:D1:A7:7C:AF:03:8E:21:D0:27","sha256":"86:DC:6B:D1:01:BA:4D:A2:20:B1:DE:F0:6E:2B:00:73:09:77:F7:0C:87:EA:8C:76:86:C7:4B:52:60:89:BE:7D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: de.chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:09 GMT\r\ncontent-length: 1406\r\nserver: BunnyCDN-DE1-864\r\ncdn-pullzone: 4336721\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncache-control: public, max-age=2592000\r\netag: W/\"1406-1757621961350\"\r\nlast-modified: Thu, 11 Sep 2025 20:19:21 GMT\r\nx-powered-by: Express\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/13/2025 09:11:51\r\ncdn-edgestorageid: 1055\r\ncdn-requestid: 926adf2a35a80d8add29f94a4a722f13\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"8851a1b28ebe567b927c9ae6600a8fc6","sha1":"113da6a02dff45d4b9c0d3c9ae531445a8c7b687","sha256":"b545a5091485f5dd485f0e9d2abcd55a06b22f9359c6da8955b8da7b1d3c9212","sha512":"f438008028a354d1600c8af6a136e3991dcbaa188759f20c22a6c76a3170390c14578561d886272741f029f6f161b3711afb959385bbf49166ccf170e3edf95d","ssdeep":"","tlshash":"2121e1213397e353db451ef532244b944243d32906f79b9411e80685aa4f3301fbc373","first_seen":"2025-05-02T17:12:40.010154Z","last_seen":"2026-04-03T22:52:06.845802Z","times_seen":628,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":11,"connect":22,"send":0,"wait":23,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/6/6a512a2f9b2e3ada001f1cbbd107e2c46e6612b2_2_599x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/2X/6/6a512a2f9b2e3ada001f1cbbd107e2c46e6612b2_2_599x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 87895\r\nlast-modified: Tue, 12 Aug 2025 05:22:20 GMT\r\nexpires: Mon, 21 Sep 2026 04:26:03 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87895,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 599x1024, components 3","md5":"f8b9975f1ab222b5884d51d07a47d5d7","sha1":"b835983dc7da932fff76bec6fe7494ac2e666d2e","sha256":"676015927e43d1a9de84956536e32de4174ac9928eb714d30c35483641193f1e","sha512":"b1beb9c0d68e918a1a03a274ee7f0b2e3a3cc8cb821e1e2f3783e03566c852042ee0fab2e562b51630de92f12279c3263fb6affc7ef1fe42102c6ff447343068","ssdeep":"1536:1Ot4hRHCpcvlg7RoDiIo3ByT1L3gCSOguPnwT2lQ/UFkC7lNqz28:0t4hRHWSg7G+Io3BM1L3gCtguPnKMyzB","tlshash":"e08302dc0b9d0ee62bd954ab5d2cdbbd8bd2898015a6f55572f701f3b3b09c6ac83402","first_seen":"2025-08-08T07:50:15.719219Z","last_seen":"2026-01-15T02:11:08.741907Z","times_seen":20,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.beckybelike.com/upload/vod/20231219-2/4b4452b60edcdd596867f4d4ee641773.jpg","fqdn":"image.beckybelike.com","domain":"beckybelike.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.924Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20231219-2/4b4452b60edcdd596867f4d4ee641773.jpg HTTP/1.1\r\nHost: image.beckybelike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":3831,"timings":{"blocked":-1,"dns":3831,"connect":4003,"send":0,"wait":0,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"159i.net/404","fqdn":"159i.net","domain":"159i.net","tld":"net"},"ip":{"addr":"172.67.200.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"159i.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 10:20:32 GMT","end":"Sun, 14 Dec 2025 11:18:54 GMT"},"fingerprint":{"sha1":"D5:F1:FA:DC:B1:F7:50:6B:64:B5:EF:04:1E:C3:70:54:5A:ED:98:4B","sha256":"0F:79:08:19:0D:19:F2:C1:C9:3A:9F:3E:2C:D9:00:9D:3A:94:CB:84:2D:6B:12:2D:3A:B2:B4:0A:DA:82:80:4B"}}},"request":{"raw":"GET /404 HTTP/1.1\r\nHost: 159i.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1080p.tub4us.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 04:26:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZYpDVgpGZJRgixJeHVnNV1WJY9w7moxDmDaT5i10IGTg%2BWcxvCjQJcKE2s3wAvEy4JF2PvdYA37FC0M0SvtNexHwVcJVRHd\"}]}\r\nset-cookie: PHPSESSID=a0688a0456aaa3c4257e8a301f68ca20; Path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9826cd772f652efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.redd.tube/","fqdn":"www.redd.tube","domain":"redd.tube","tld":"tube"},"ip":{"addr":"172.67.72.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:11.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redd.tube","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 19:05:31 GMT","end":"Tue, 28 Oct 2025 20:05:13 GMT"},"fingerprint":{"sha1":"E1:CC:A2:57:19:42:1A:52:AA:84:E5:30:F1:6B:8B:D3:D0:54:1E:F2","sha256":"9A:80:7E:16:92:21:EA:31:78:BD:02:CC:B2:B3:B6:EB:D8:1D:6A:3E:86:28:E0:87:26:CA:F4:C8:6F:5E:7C:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.redd.tube\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:11 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: Deny\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nischrome: false\r\ncountry-code: NO\r\ncountry-code-uk: false\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nset-cookie: PHPSESSID=13e965a067bdfef76dda7bf92bcaad98; Path=/; Max-Age=86400; Expires=Mon, 22 Sep 2025 04:26:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6S3hnBzyf2CAtr3G2jwYsgGh2oiF4DyvLQh7GkDkML6Ywh5ZSG%2BOeNjJJ7QCA%2Bv0Fjstba%2B2wlFxA3JPwtrGrUZWM%2FV%2F1st4eOoPw%3D%3D\"}]}\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 9826cd8bac24c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/upload/vod/20241028-15/cd8fe33b27527ca661c9b3bed5104ba4.jpg","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET /upload/vod/20241028-15/cd8fe33b27527ca661c9b3bed5104ba4.jpg HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVAFCHoFh1xcYVS%2FD4HiufxywyeTp2iBK9ABU89dJ8tV5jl954ogpJMVX4yOHSZ0Jux5V1GYuk3impW3Z8TJQMOyu4%2BkHzV4hCqa9AaMqu8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9826cd5c582f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":6,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bad.news/images/dm/f4ae5a5ad565c2b68a1d5b013a22eb95.jpg?secure=qFLh6BSbfMqq8g7ntTgoUQ==,1734229894","fqdn":"static.bad.news","domain":"bad.news","tld":"news"},"ip":{"addr":"172.67.73.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"323e0cdf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:16:14 GMT","end":"Mon, 27 Oct 2025 12:16:07 GMT"},"fingerprint":{"sha1":"11:F8:F3:D9:C3:57:49:A9:A0:72:0C:C7:B7:20:D2:58:9B:B7:FA:95","sha256":"00:65:12:12:EA:77:8F:F2:2C:CB:5D:72:DD:45:E5:2F:B5:6F:D2:EF:4B:61:5C:C9:7E:F9:CA:89:A2:64:CB:58"}}},"request":{"raw":"GET /images/dm/f4ae5a5ad565c2b68a1d5b013a22eb95.jpg?secure=qFLh6BSbfMqq8g7ntTgoUQ==,1734229894 HTTP/1.1\r\nHost: static.bad.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52524\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: max-age=31536000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=55307\r\netag: \"11d9254aa54f071a6fbeafadc16fd3f1\"\r\nlast-modified: Fri, 13 Dec 2024 23:32:51 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rvPVxViFTKCBByFBkGooiG7o5SkiIm8EeZpWM1%2Fsg8hAfKSjeJ1BV3liD362%2BllACOZZTd1GAhtpvgjcoslsdREneSNaakiyH%2BM1aw%3D%3D\"}]}\r\ncf-ray: 9826cd5b1fca56a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52524,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 640x360, components 3","md5":"e3d88036d43ac634f731162041a3ce9e","sha1":"150dffc4fa22e61d1dd04400325ff2a679e3a8b6","sha256":"5c04564c77dd3695fd06df42e5b0448fbf2903d9decaa426832a5037456669d3","sha512":"062a0aca20df23173bb5ea21bb1b6c5b2b5080fe680851568faa5310a330661fc605b6b2edd7f9aa88bd1f7b868ec7d02993926ed467300e3737e5f90f186101","ssdeep":"1536:BnVrDseDlbNid29VD/7TDzLSEJ5yv9izrw:BVX3JbNididnDzLAx","tlshash":"6b33f15a33834aadb9908cdfe21663bce12366c0e426c53c63b9941624ded57eb4a847","first_seen":"2025-09-21T04:28:54.433757Z","last_seen":"2026-03-03T14:10:03.570771Z","times_seen":7,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sex-studentki.live/images/4648_screen.webp?0","fqdn":"sex-studentki.live","domain":"sex-studentki.live","tld":"live"},"ip":{"addr":"172.66.147.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sex-studentki.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 16:43:00 GMT","end":"Tue, 28 Oct 2025 17:40:26 GMT"},"fingerprint":{"sha1":"BB:DE:4C:55:01:C9:85:B4:38:00:9E:3B:67:57:AA:9D:D3:D9:E0:A2","sha256":"F3:E2:33:20:BA:66:31:CC:9A:79:2F:2E:8F:E5:D1:8D:66:D0:40:39:7A:3F:6A:16:BD:70:0B:EC:3F:6F:2C:91"}}},"request":{"raw":"GET /images/4648_screen.webp?0 HTTP/1.1\r\nHost: sex-studentki.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66168\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Dec 2021 13:38:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"61b4a9ba-10278\"\r\nexpires: Mon, 22 Sep 2025 21:35:28 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 456637\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lY5Sa3aEdqSIdfk9%2FCRyeq5uhQ81bAxyHEwEMhXcEjYFfgk%2BsdtgMBwCRBbwSJY4ji%2F8lnIQe4y8eCYoM9YoTe%2BmOqp2Mud6V8DX0guWQsTzug%3D%3D\"}]}\r\ncf-ray: 9826cd698acbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66168,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"046b6325528bb41396533a53b8e52bba","sha1":"01c6bfa0e1b7928a9c8cd3ff6605b4370d513fbf","sha256":"c30f89a890bda2d54f1808fda2a532c98a1d95953c5ae496588cd39d27227451","sha512":"9b40274c96f3523a9ed0daac1cf80ab870ce7fcca311b8099d6486fb48cea4bd833889fcd0191a0a58ec4ba4cec40974350c26ed2b4d8545a79cdd75b5b43f8c","ssdeep":"1536:oWYL0Ol91ghCuerTnfrPexzWxYSa2nlRjToR:PY8kucTzeAYSa2nrToR","tlshash":"6a530247f06651708dfd5a91f132880e09734e1dbc27976a3a93edd0b7ea92d8842b62","first_seen":"2025-09-21T04:28:54.43541Z","last_seen":"2025-09-21T04:28:54.43541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1673,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":25,"receive":6,"ssl":1638},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.tphsck.com/upload/vod/20250716-1/a5cfc5986c204a9487e240a15b6e17a4.png","fqdn":"img.tphsck.com","domain":"tphsck.com","tld":"com"},"ip":{"addr":"185.34.144.163","port":443,"asn":7488,"as":"CNServer LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.tphsck.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Aug 2025 15:52:30 GMT","end":"Sun, 02 Nov 2025 15:52:29 GMT"},"fingerprint":{"sha1":"D4:97:8B:B0:C8:B1:87:1F:37:77:C6:CB:EF:04:05:41:AB:83:C9:35","sha256":"F6:B0:68:A2:A0:CA:FE:2E:17:D2:D2:B7:26:B9:C9:7B:10:D0:C6:BA:6F:42:A5:F4:A0:49:16:AA:E9:B8:00:8A"}}},"request":{"raw":"GET /upload/vod/20250716-1/a5cfc5986c204a9487e240a15b6e17a4.png HTTP/1.1\r\nHost: img.tphsck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 853\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cacrz.4jpg.top/AV4.us.jpg","fqdn":"cacrz.4jpg.top","domain":"4jpg.top","tld":"top"},"ip":{"addr":"172.67.211.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:08.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4jpg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 22:07:03 GMT","end":"Tue, 18 Nov 2025 23:05:39 GMT"},"fingerprint":{"sha1":"F7:56:D0:5F:96:7E:84:98:1E:F2:DC:20:74:94:F8:5E:E9:99:22:BE","sha256":"A4:A0:9B:AB:A6:84:D2:21:1D:FD:89:C2:59:89:93:11:10:44:BB:96:A7:D5:61:38:E5:1F:75:F7:F1:E5:EC:A1"}}},"request":{"raw":"GET /AV4.us.jpg HTTP/1.1\r\nHost: cacrz.4jpg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:08 GMT\r\nserver: cloudflare\r\netag: \"2225-5499bcea176c0\"\r\naccept-ranges: bytes\r\ncontent-length: 8741\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nahost: RZ\r\ncache-control: public, max-age=3600000\r\ncontent-type: image/jpeg\r\nage: 1903058\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ljX9HovoT9Y%2BP4kpGTeVqhKGwon8fTg%2F6eTRVMU2CeZPpFKegythngivQCQNiUCEiJ9I9EN%2B3HPcGWSxsQJPQiJvDeRlZcuU8pe6pVoM\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9826cd7bccde1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3","md5":"edfe007a6e5b3d268b2528f564b60b43","sha1":"1644c8ef97c871079e07e5079d613af5cb94052f","sha256":"bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390","sha512":"8eab965dcd5098e29ccc1cf94459fa6b8fda97331a35139ae6c57cacbe0ed733cd53af8f7e2ca8a82c2cb9f785cafe46f4a34f99aadbdde53ca81cae25403d93","ssdeep":"192:YkyyBW+1ajsm2w0aCqPGfAzC4TvykEobWwK5Fi:YkvU4DqufJ4TvyXO0i","tlshash":"b702bf4a2da48fb326c1c5508cdff34b2ec78a5c67efb16f97319e5af4017165904849","first_seen":"2024-04-16T15:37:12Z","last_seen":"2025-11-15T09:18:18.740899Z","times_seen":2006,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"cacrz.4jpg.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fmtu.sltusl.com/upload/vod/20221203-1/c47f004c22e5e12592c74ff3118dcdc7.jpg","fqdn":"fmtu.sltusl.com","domain":"sltusl.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.003Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20221203-1/c47f004c22e5e12592c74ff3118dcdc7.jpg HTTP/1.1\r\nHost: fmtu.sltusl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":50,"connect":73,"send":0,"wait":0,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fastmediaing.my/sdk/p/?zid=9801","fqdn":"cdn.fastmediaing.my","domain":"fastmediaing.my","tld":"my"},"ip":{"addr":"172.67.195.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:05.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastmediaing.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 15:02:44 GMT","end":"Sun, 07 Dec 2025 16:01:25 GMT"},"fingerprint":{"sha1":"55:05:4B:D6:B8:04:21:F8:EC:D9:B1:DC:E4:98:BF:B1:77:87:C8:C1","sha256":"43:46:F8:22:8B:5E:42:C9:05:D1:FB:EC:37:E1:00:D4:DE:A4:CB:85:9F:F6:57:D2:8F:06:B7:89:99:DD:D4:A0"}}},"request":{"raw":"GET /sdk/p/?zid=9801 HTTP/1.1\r\nHost: cdn.fastmediaing.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:06 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ek%2F0y6Ajtc6tafgkpbAjjU1x9GXbMnRaHMskixtvQ1snQw0l%2Fs1dhZQTDinha%2FAVRNN30bun8XVsMji1WsJcmggTC1IjKvHb%2FMJmfqWUpzZYmTg%3D\"}]}\r\nx-time: 1758428766\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9826cd6b8ec30883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52284,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51798)","md5":"73335bffb57f2284842bd961d9dd6e39","sha1":"b4cc90981c025d631eba179c2949ef6c0a5d4367","sha256":"5d5f0a627eefc44d1819fbc1bbead4afd05d0bd6e360be747eda438f7fcfeb8c","sha512":"ec5beb3f1150e428e4e3d911cb87239cea01a6f0f87dec33f55906dce9011ccb09d89839543b610d80550fa202a7a0dacc1642c0062f39930ddc3c207dbb5382","ssdeep":"768:AgEZCGdaxWGkFNU6SmrvpgIzTFwu/P5zOLQNO7ntsTmNKxy4TeGZ64WNI/z4qqHP:EZCGgmyu/P5qmHLW8EgcR","tlshash":"ea3395883ed06c9813d75f7ab32fa4d4e0664d5e2e84488fe215fd6063e521feab5630","first_seen":"2025-09-21T04:28:54.437685Z","last_seen":"2025-09-21T04:28:54.437685Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1466,"timings":{"blocked":648,"dns":7,"connect":1,"send":0,"wait":70,"receive":0,"ssl":738},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.missvid.com/favicon.ico","fqdn":"www.missvid.com","domain":"missvid.com","tld":"com"},"ip":{"addr":"172.83.152.9","port":443,"asn":50131,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.missvid.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 07:33:21 GMT","end":"Sun, 14 Dec 2025 07:33:20 GMT"},"fingerprint":{"sha1":"8E:18:A5:09:14:17:F4:F7:16:CA:2A:85:31:44:71:87:16:32:E1:C7","sha256":"C3:59:35:1B:FB:0D:C7:5D:5B:F7:46:AE:3A:69:F0:C2:B5:2C:AE:B2:04:DE:EA:5B:DF:75:73:2A:2A:6C:C3:B8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.missvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 21 Sep 2025 04:26:11 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://mlkjcrm.oss-cn-guangzhou.aliyuncs.com/GAKVa1n6ID/wI9T6U/gUwOgBk?t=EaZI3nDkR6\r\nset-cookie: server_name_session=1e6cd64cb992427e9f747ef4d6b40ece; Max-Age=86400; httponly; path=/\r\nserver: cdn\r\nx-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":7153,"size_decoded":0,"mime_type":"application/xhtml+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":10,"connect":135,"send":0,"wait":193,"receive":0,"ssl":372},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"page.phic4.top/myda.php","fqdn":"page.phic4.top","domain":"phic4.top","tld":"top"},"ip":{"addr":"172.67.190.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phic4.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 04:42:44 GMT","end":"Wed, 26 Nov 2025 05:38:57 GMT"},"fingerprint":{"sha1":"A9:24:2E:59:E9:1F:79:43:22:02:EE:61:FD:A7:A8:78:49:F5:63:FA","sha256":"1C:49:D3:6F:AB:99:B4:59:BF:D1:35:08:3A:B0:D8:71:A0:BB:CB:E3:35:97:1E:3A:33:3D:88:F5:88:A6:F0:D2"}}},"request":{"raw":"GET /myda.php HTTP/1.1\r\nHost: page.phic4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nmyda: myda2a0e:4005:1002:ffff:185:40:4:143\r\nvary: User-Agent, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrAFuUHZCGWZpxBH8%2FeeS4BUQwLDIJaUKkq5AUh%2FJRG3ffE9o6GFOnD9LgdJfYmHopVUk%2FnVwpBIZA0wEUPkd%2B8w1Zulb%2FBnPobfAw%3D%3D\"}]}\r\nage: 1976\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 21 Sep 2025 03:53:11 GMT\r\ncontent-encoding: br\r\ncf-ray: 9826cd761da756ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":8,"connect":0,"send":0,"wait":6,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"page.phic4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ikikiv.uk/favicon.ico","fqdn":"www.ikikiv.uk","domain":"ikikiv.uk","tld":"uk"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.509Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.ikikiv.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fav-hentai.com/favicon.ico","fqdn":"fav-hentai.com","domain":"fav-hentai.com","tld":"com"},"ip":{"addr":"104.18.29.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fav-hentai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Jul 2025 02:29:41 GMT","end":"Fri, 24 Oct 2025 03:28:48 GMT"},"fingerprint":{"sha1":"5F:AC:23:6A:3A:A1:DA:76:ED:4E:10:74:F9:6B:F5:F7:A2:88:90:69","sha256":"2A:A9:FA:F7:46:E1:06:D6:C8:44:1E:6B:E9:6D:E9:C3:A3:91:BC:0F:30:57:97:AA:B3:33:FD:7F:A1:F7:FE:99"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fav-hentai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nvary: User-Agent,User-Agent, Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9826cd857f831525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"24-video.com/favicon.ico","fqdn":"24-video.com","domain":"24-video.com","tld":"com"},"ip":{"addr":"172.67.173.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"24-video.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 19:43:15 GMT","end":"Sat, 15 Nov 2025 20:40:54 GMT"},"fingerprint":{"sha1":"57:95:B5:16:8E:43:8E:B7:80:21:36:4C:57:4F:4C:68:94:0B:CB:3C","sha256":"DE:68:AE:55:79:3A:57:58:AA:E2:80:62:70:B1:54:2F:C1:14:D2:C1:5A:9A:75:76:33:A0:2E:FE:CB:23:56:51"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 24-video.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html\r\nlocation: https://m2.24-video.com/favicon.ico\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 785\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WihHUKkS3vzaPmvoQO4TwbAzxa4sZVKWUwVEmWKSwQ9dOvOR2Jckg4rGTDZkmVCyEZddu%2FtySncYPkmEYEw3wDQR%2FHvEvIqDrWI%3D\"}]}\r\ncf-ray: 9826cd876cf356c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":19,"connect":14,"send":0,"wait":25,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/upload/vod/20241028-15/cd8fe33b27527ca661c9b3bed5104ba4.jpg","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET /upload/vod/20241028-15/cd8fe33b27527ca661c9b3bed5104ba4.jpg HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cebTPEsyYglSXV6LZ2fh%2F4eNxJH1svBtpSngPlsm9fE%2BGZjWW%2FBZq%2BkzqntaLbiMaUPQXLZWeMlroZM2TH3dB6kTe2CW%2FFe7zMbaRoE9gtM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9826cd75b91a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241028-15/9b8c17877ecfe6b1ded6c644e53569b9.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.674Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241028-15/9b8c17877ecfe6b1ded6c644e53569b9.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajyshedfwer.buzz/favicon.ico","fqdn":"ajyshedfwer.buzz","domain":"ajyshedfwer.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.323Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ajyshedfwer.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"ajyshedfwer.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"ajyshedfwer.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rule34vault.com/favicon.ico","fqdn":"rule34vault.com","domain":"rule34vault.com","tld":"com"},"ip":{"addr":"104.21.39.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rule34vault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 23:20:45 GMT","end":"Mon, 15 Dec 2025 00:17:26 GMT"},"fingerprint":{"sha1":"E4:8A:CF:9F:A9:BC:F3:72:E4:97:C0:07:4A:21:E9:38:87:14:2A:9C","sha256":"CD:9B:D1:26:5E:74:D2:FD:49:DF:C8:A2:A2:79:30:8E:B9:00:44:17:91:20:2F:B7:59:82:AB:DB:D6:D2:CC:E7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rule34vault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nlast-modified: Sun, 21 Sep 2025 02:21:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3535\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q18QBRuW4v0sJtdMYHD1inMUFLufEhwDXDnwjrWq0tTivLy1UtQUYbci6WlpdATbBVviaE38LomFedUCq7jplqTG3Ef%2FXb3UeiiMofj5PQ%3D%3D\"}]}\r\ncf-ray: 9826cd8709b1dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 72x72, 32 bits/pixel","md5":"f329a9792c4fc0760cdef5e53d29a878","sha1":"b70debf4d34271a4949f317e8ff083abb7bb2024","sha256":"1a86b7a3ab9931cfb76d1547e6758f9236d289cb9c39796867801a75d750fbc3","sha512":"88f611b8b149398b124dc1e8774a1dc5102b162dbaa93aa2d743228aa14b71ed290665cf026e876caa8e786b9fb03c3432996791a651728647fae83a0515a6e0","ssdeep":"384:QcBTQ3B5AGzVdJWIt61QCFOIstJoou1l8shQ2P097zyQ:I3B5/bqOI6op1ushQ2MVzb","tlshash":"53a29fe2f5a15184cd7984bb310bdca74bc37c3c8652109335ce6f0b365583795baaba","first_seen":"2025-05-21T16:17:32.833949Z","last_seen":"2026-03-20T15:54:50.039662Z","times_seen":70,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":7,"connect":27,"send":0,"wait":21,"receive":0,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_6854634570.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 07:11:45 GMT","end":"Tue, 25 Nov 2025 07:11:44 GMT"},"fingerprint":{"sha1":"4C:08:FF:9B:21:5C:D4:AF:F8:61:EB:02:2A:B2:41:C6:A6:FD:65:52","sha256":"49:BB:6D:F7:8D:BD:FB:E0:A8:5E:C7:46:48:E8:4D:04:0F:BF:5C:41:EF:03:99:7B:C7:F8:7D:7D:53:0E:4A:24"}}},"request":{"raw":"GET /ext/pre_6854634570.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6865\r\nserver: BunnyCDN-DE1-1047\r\ncdn-pullzone: 4336709\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"66688e58-1ad1\"\r\nlast-modified: Tue, 11 Jun 2024 17:50:16 GMT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:16:14\r\ncdn-edgestorageid: 1081\r\ncdn-requestid: 5d8fd93754808946c333466950d938e5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6865,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"8aa8f62273429f70e6ab3a9e78a80808","sha1":"d615266374e927a80e7f1a8b255b8292aac63580","sha256":"35a27c31482280676bfcd0fc7b78a3667591586653768c3db793df0d6f48f426","sha512":"98411bd3cf293339edd1c6e3bafa10c25c9240d5f9d4590e3ec3c0e2d8847d9ec64bc5e3bb189053564fa06438343e135578a1df60d13e0ee75e2ed0d55d5f90","ssdeep":"96:tf8YxHHaXE+tZLWXdkmJpk5CKHjviKzolppKGq0P+H5CiCSkpstH+u/N2vZj3abS:V8YB6BtudNmC0s3NBw5r+stHqBbSo4a","tlshash":"59e17bae3341bd02de2c937a4bfa9f9c3b006d019964372796d5b940075e1d51eb08ab","first_seen":"2025-04-11T22:57:41.406324Z","last_seen":"2026-03-03T14:10:03.770891Z","times_seen":17,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cav102.com/contents/videos_screenshots/7000/7268/preview.jpg","fqdn":"cav102.com","domain":"cav102.com","tld":"com"},"ip":{"addr":"45.145.72.132","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cav102.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 15:24:03 GMT","end":"Fri, 17 Oct 2025 15:24:02 GMT"},"fingerprint":{"sha1":"4C:E6:D2:27:03:49:C7:8C:A1:8B:DF:24:7C:A6:C4:E5:3D:A6:C5:F5","sha256":"02:AE:EA:91:A7:2B:29:79:58:2E:C8:D0:32:14:9C:37:11:B8:20:1A:63:46:73:26:EF:73:0C:F8:CB:B2:C5:1D"}}},"request":{"raw":"GET /contents/videos_screenshots/7000/7268/preview.jpg HTTP/1.1\r\nHost: cav102.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmtu.sltusl.com/upload/vod/20220903-4/a27b988cdbf905968975aa2a7fda21d2.jpg","fqdn":"fmtu.sltusl.com","domain":"sltusl.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.700Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20220903-4/a27b988cdbf905968975aa2a7fda21d2.jpg HTTP/1.1\r\nHost: fmtu.sltusl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":0,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmtu.sltusl.com/upload/vod/20220903-4/a7c6645f79837c57ec91245891ef329c.jpg","fqdn":"fmtu.sltusl.com","domain":"sltusl.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.703Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20220903-4/a7c6645f79837c57ec91245891ef329c.jpg HTTP/1.1\r\nHost: fmtu.sltusl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":46,"connect":64,"send":0,"wait":0,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bad.news/images/dm/827baf41206d9bd9fb35541a73e1346d.jpg?secure=cULAwnnEDDEUSdph29o4hg==,1747276229","fqdn":"static.bad.news","domain":"bad.news","tld":"news"},"ip":{"addr":"172.67.73.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"323e0cdf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:16:14 GMT","end":"Mon, 27 Oct 2025 12:16:07 GMT"},"fingerprint":{"sha1":"11:F8:F3:D9:C3:57:49:A9:A0:72:0C:C7:B7:20:D2:58:9B:B7:FA:95","sha256":"00:65:12:12:EA:77:8F:F2:2C:CB:5D:72:DD:45:E5:2F:B5:6F:D2:EF:4B:61:5C:C9:7E:F9:CA:89:A2:64:CB:58"}}},"request":{"raw":"GET /images/dm/827baf41206d9bd9fb35541a73e1346d.jpg?secure=cULAwnnEDDEUSdph29o4hg==,1747276229 HTTP/1.1\r\nHost: static.bad.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25530\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=26539\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"93362d377f9dc9d062473eb442134aea\"\r\nlast-modified: Thu, 24 Apr 2025 14:03:35 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWOq3zk06MoCHOAs4D1hDOzUtrmeIPAfZlFJN1c6C31RK1UIxDojnQDSqNn6xNtI2L2iJoKhZKAsLOzUE2uh7UUKBxv09pCOB4LJoA%3D%3D\"}]}\r\nage: 6802\r\ncache-control: max-age=31536000\r\ncf-ray: 9826cd582e7c56a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25530,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 640x360, components 3","md5":"6b24b5b2fa849ab2f48c04eed83a2320","sha1":"45b19b449e41689f706e66ee5b2bdd9716b03939","sha256":"d6cc09283a2d3cedba6e3e5948fbf5294d4ea30f851c6c6b5c2773b63538944d","sha512":"6cd37e0ddc9e79a309eaef3365382d536186de1a1da633c01fb186538e014027a13f7425fe70592ca156a299aa67b2337e81349b840c8ec656d6a74a272e7a0c","ssdeep":"768:ZnMt5/9y/QfyRakGJa7YrgwrbzNgFhmiTNj3gHpC:q/4of6akYMYEqbzNEBTRwH8","tlshash":"56b2e002f99f55065e1be9788037cc2c720a58d8b2dbd5ff727590acf65a8cc882c86c","first_seen":"2025-08-24T18:54:16.081426Z","last_seen":"2026-01-12T00:58:51.525092Z","times_seen":9,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hdporns92.com/favicon.ico","fqdn":"www.hdporns92.com","domain":"hdporns92.com","tld":"com"},"ip":{"addr":"45.194.140.13","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hdporns92.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 10:58:15 GMT","end":"Mon, 17 Nov 2025 10:58:14 GMT"},"fingerprint":{"sha1":"10:89:97:C8:6F:4D:31:7E:39:A5:8C:48:32:0F:87:B7:11:69:16:FB","sha256":"27:CD:D9:13:76:FC:17:B7:6D:BD:73:C2:74:9A:06:B0:66:8E:85:5B:4E:6C:3A:4B:58:A1:37:B4:9E:78:C9:00"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.hdporns92.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Sat, 09 Dec 2023 08:44:24 GMT\r\netag: \"657428e8-3aee\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"bcc0ad18b3d6fb7b53b5e58b7a54fd36","sha1":"1304f7da6c988c3bfd4f4dd932e68cbe10157cb3","sha256":"a19a42856c1859c32e5faf088b7ca0158f10565301b63b23e47d208673ed99cc","sha512":"c4f8d7ab96ad1b954e9b7f8ba76218b128a8ce065042b22950fd9460e7920d784ff5862aa5831fd136acaad8b6a24fbf92b4b060f6f295c6324f762514e648ca","ssdeep":"384:jP444444444444444444444444444444444444B1GMPS+222f0i3GpJs3O9cdwwT:fGI","tlshash":"6e62238c9e09a9bcdf29163e49f7c5fe4c081fa902fe93aca2b467573570b681538447","first_seen":"2025-06-02T22:11:56.687519Z","last_seen":"2026-03-03T14:10:03.874139Z","times_seen":87,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":-1,"dns":8,"connect":202,"send":0,"wait":213,"receive":168,"ssl":345},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntube.b-cdn.net/thumbnails/23b15667df687493db682ff24c3adeee3da43938.jpg","fqdn":"cdntube.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /thumbnails/23b15667df687493db682ff24c3adeee3da43938.jpg HTTP/1.1\r\nHost: cdntube.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12346\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 114851\r\ncdn-uid: 610bc618-7bcd-4e37-a18e-2efa3a8e9c35\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sat, 25 Jan 2025 11:20:54 GMT\r\ncdn-storageserver: DE-635\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 1014\r\nperma-cache: HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 09/08/2025 22:37:49\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4cb9e028f208e3700892ec76c5f95f21\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12346,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x710, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8561324d24d8cf8d38bff019c7d97074","sha1":"11628e63626e1713fc4337568bf9850d1190b2ba","sha256":"a4d7245d2ab571b362f99caaca08c1de2e3e0170360a7b862de718f73bce7fca","sha512":"e55fc75e4a5d5be969716c42db67b940d3fd9947b60bd2d8a78cef422c0cf7f3908f155eb2adf98e2e990e0d2363ea99f28e980fbecf1a9b639be52dee20bb44","ssdeep":"192:CahFR3ylJttVtJImMjofP6DRgOIRi39x4asZiQ4ErKegXqDh876vIpynddsG85Bo:T4Jttkg7OIs39piyE79e6cAucp","tlshash":"5142c04d54d0da03c904c51c99eadabc43f8a226e9e1eef5d4a7d3395b28cc08c539ae","first_seen":"2025-09-21T04:28:54.442772Z","last_seen":"2025-09-21T04:28:54.442772Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1631,"timings":{"blocked":-1,"dns":3,"connect":6,"send":0,"wait":12,"receive":1,"ssl":1606},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cav102.com/contents/videos_screenshots/7000/7268/preview.jpg","fqdn":"cav102.com","domain":"cav102.com","tld":"com"},"ip":{"addr":"45.145.72.132","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cav102.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 15:24:03 GMT","end":"Fri, 17 Oct 2025 15:24:02 GMT"},"fingerprint":{"sha1":"4C:E6:D2:27:03:49:C7:8C:A1:8B:DF:24:7C:A6:C4:E5:3D:A6:C5:F5","sha256":"02:AE:EA:91:A7:2B:29:79:58:2E:C8:D0:32:14:9C:37:11:B8:20:1A:63:46:73:26:EF:73:0C:F8:CB:B2:C5:1D"}}},"request":{"raw":"GET /contents/videos_screenshots/7000/7268/preview.jpg HTTP/1.1\r\nHost: cav102.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1730,"timings":{"blocked":40,"dns":1,"connect":152,"send":0,"wait":162,"receive":0,"ssl":1372},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img2.javdove.com/media/videos/tmb/25871/default.jpg?v=1716270917","fqdn":"img2.javdove.com","domain":"javdove.com","tld":"com"},"ip":{"addr":"172.67.199.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javdove.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 12:16:31 GMT","end":"Thu, 11 Dec 2025 13:14:42 GMT"},"fingerprint":{"sha1":"02:8B:28:94:C1:98:0B:6E:D9:E1:97:6A:B0:2A:AE:21:48:DA:F0:6E","sha256":"74:5F:0E:35:C2:1A:B9:64:00:DC:CE:F9:58:71:AA:4D:E1:10:5A:AD:DF:1B:3B:F4:50:19:61:12:70:80:A2:3E"}}},"request":{"raw":"GET /media/videos/tmb/25871/default.jpg?v=1716270917 HTTP/1.1\r\nHost: img2.javdove.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17908\r\nserver: cloudflare\r\ncf-cache-status: STALE\r\nlast-modified: Wed, 05 Jul 2023 10:36:13 GMT\r\netag: \"45f4-5ffbaf7fb6140\"\r\naccept-ranges: bytes\r\nage: 3562386\r\ncache-control: max-age=691200\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c5ofVlSM%2F7iXQlU%2ByLYbjKKa%2FDFQiKYftetMYJzCmUwYI68%2FShCNTq2tiUNTVAWr0K1ooKQhCxLNJkIcS2V5d03NdFMr5tahHzm%2FXT5i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9826cd68992d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17908,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.20.103\", baseline, precision 8, 640x360, components 3","md5":"68549f5a8bcb070c816199059a0b5eae","sha1":"5381ca004c0a525824e23f63f64987b040400902","sha256":"862078d6433af7480280ebeb7c8cbef396c35eeb03fee9b204ae296086ae27d6","sha512":"68fde5a6a3de324295a60b4693a7e421cca87c38241a17e53c98bdb4fb6c5fcc18991212c90ed7b033d410d0512745080ee2f9c27380cb28138fe9fc327bdb85","ssdeep":"384:vCPBZc6gPFdJP2fWlP2MO7LgmqUIUazmsS0IX8ldxL5Oh1mSml8EpWh/l:vC5239TOfWlOMOv9Tsusldx1OhNmWyQl","tlshash":"4882d127cf72cafbfae82e61e895702465f2ff8e9cfc9c5cf65623609144461840a467","first_seen":"2025-05-25T07:14:28.130233Z","last_seen":"2025-09-21T04:28:54.444436Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1983,"timings":{"blocked":-1,"dns":6,"connect":5,"send":0,"wait":142,"receive":1,"ssl":1822},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250811-1/1ec949f2a1ddc0c1841236c4a2c1152e.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250811-1/1ec949f2a1ddc0c1841236c4a2c1152e.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62197\r\nlast-modified: Mon, 11 Aug 2025 09:54:45 GMT\r\nvary: Accept-Encoding\r\netag: \"6899bde5-f2f5\"\r\nexpires: Fri, 10 Oct 2025 11:49:38 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62197,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x281, components 3","md5":"ec3e52cf4e953ccb540047916a7d6748","sha1":"b84c354ee24e432ed26ce9706509ca27b5d68b44","sha256":"a21700a97a6e7b6272458c95cbbcd553696d040c24fc99cd22ac4e46a087197c","sha512":"145c0c669d4263291aa03a3f0d9dd96e886fd8de3f8533321f15a6801da3413e38986c65a382a594b082cb3e3f18d456e7e7290d3281ab37a78f92ea8a923785","ssdeep":"1536:dBrrmvkOQ6bX39ACt3n96vqSDH5olI2QfW/HyjfSVj8B6:7rCLdZt6vWfgW/EfrB6","tlshash":"ba53020536a31dd3fd83ca792b3077dac4d9ae6749d3e18150fce8288651e80e8bb5c5","first_seen":"2025-09-04T19:46:44.703739Z","last_seen":"2025-11-12T14:35:23.97924Z","times_seen":68,"resource_available":false,"data":null}},"time_used":2024,"timings":{"blocked":1045,"dns":0,"connect":0,"send":0,"wait":658,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornodrochka.club/uploads/posts/2018-05/medium/1525185612_00_14_24.jpg","fqdn":"pornodrochka.club","domain":"pornodrochka.club","tld":"club"},"ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornodrochka.club","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Aug 2025 22:36:20 GMT","end":"Thu, 20 Nov 2025 22:36:19 GMT"},"fingerprint":{"sha1":"45:BB:DE:1A:D7:A8:4D:D0:35:48:EE:6F:7D:A9:33:CE:AA:23:6A:61","sha256":"B3:1D:D4:61:1C:2D:CC:96:25:AA:54:8F:C3:D1:67:63:99:4F:AA:1C:BF:42:93:A2:DA:BE:31:02:DF:0A:BA:02"}}},"request":{"raw":"GET /uploads/posts/2018-05/medium/1525185612_00_14_24.jpg HTTP/1.1\r\nHost: pornodrochka.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.10.3\r\ndate: Sun, 21 Sep 2025 04:23:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 120116\r\nlast-modified: Sat, 29 Aug 2020 17:58:06 GMT\r\netag: \"5f4a972e-1d534\"\r\nexpires: Sun, 28 Sep 2025 04:23:55 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120116,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x253, components 3","md5":"8d2246e7bb5059b25a04615cace2ab65","sha1":"684865733c0b01170152bbfffec3650940877370","sha256":"3bd0e8447687b64485ddc3ce6665899408dd906b5e5a6f4e425860479cf56b86","sha512":"25f6a149cb934cf298f2927d1edaace100d6c1022fbf750c5f84ff7c44a45d9273779baa826da747c374602164820aef9bb6073a1d1d5826a72227dde1c82dc1","ssdeep":"3072:EX1hVorSnxvBYyqxsEgRGS2MdCgdPeRhWSk6Joced:EF5xvB3ksEgv2MAWGRh66Cx","tlshash":"ddc31200c589c761f8bdd4b97503c8fb9b5a26d700aed70ea5c79960f598102b5c7e0f","first_seen":"2024-05-14T04:59:33Z","last_seen":"2026-04-03T22:52:06.887045Z","times_seen":75,"resource_available":false,"data":null}},"time_used":1710,"timings":{"blocked":-1,"dns":2,"connect":24,"send":0,"wait":28,"receive":97,"ssl":1555},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rule34.xyz/favicon.ico","fqdn":"rule34.xyz","domain":"rule34.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rule34.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 22:59:31 GMT","end":"Sun, 14 Dec 2025 23:55:14 GMT"},"fingerprint":{"sha1":"83:75:93:94:5D:8E:EA:3B:35:3F:63:A6:10:E8:61:31:E1:73:90:4D","sha256":"F8:EF:4C:5B:88:38:47:CC:70:5D:E5:40:F0:B2:99:42:2D:7E:9D:0F:0F:E9:30:D2:D1:3E:74:43:11:4E:79:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rule34.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nage: 5478\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 21 Sep 2025 02:54:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2BHE6t0CH%2Bj28xaRVuVvBEEP1euzOkRjH6imCMsvJAhP%2Fyts%2FYKDchRf7B707%2FSfXmzaQWH7iQgFeX0eyYXR5RjnZgrD1nXw\"}]}\r\ncf-ray: 9826cd85584e569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 72x72, 32 bits/pixel","md5":"8af3931693c34a541ca0364bdd32940b","sha1":"fe181a319195d6f133a73f9a232896c5369a1638","sha256":"e5226fb838325cb0e7ddf30c89f4a0d0afd3f89d7936f5189f028fac8e1e5e77","sha512":"c6f0ea51355414dfbc8f22ee20d935aa74d88b54bd5b728c426b62fdff5015dd4e9459d72d67937efce5ee500fc2f284071acc0165e34a5aff32584f34e7e50e","ssdeep":"192:YeC3cJcPvuMrpEAGvATIXC0mLIUJt8r1QgKTmIRyTrfDJ:NcPEaIBzEtWNKTmkOfF","tlshash":"80a2e5b2a8cac4d5c48748f825f19b7080b6fe45473efa137add762aba7f2825d41112","first_seen":"2023-12-12T16:01:15Z","last_seen":"2026-01-14T20:02:26.457402Z","times_seen":70,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":5,"connect":6,"send":0,"wait":19,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.peppahub.com/thumbs/08/12/08122cdec03cd738468fd070361d50d7.0.jpg","fqdn":"st.peppahub.com","domain":"peppahub.com","tld":"com"},"ip":{"addr":"167.235.2.93","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st.peppahub.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Jul 2025 08:13:59 GMT","end":"Sat, 25 Oct 2025 08:13:58 GMT"},"fingerprint":{"sha1":"6E:DA:69:12:5A:DA:05:1A:AC:7E:59:10:B2:A0:F4:DB:7C:22:E9:73","sha256":"7C:B3:B2:5C:9E:BC:0B:06:CA:2F:03:E1:1C:04:9B:99:4B:C2:A6:97:61:E2:B8:01:97:EA:87:EF:6D:0A:1A:03"}}},"request":{"raw":"GET /thumbs/08/12/08122cdec03cd738468fd070361d50d7.0.jpg HTTP/1.1\r\nHost: st.peppahub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 16577\r\nLast-Modified: Sat, 28 Mar 2020 03:20:08 GMT\r\nConnection: keep-alive\r\nETag: \"5e7ec268-40c1\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16577,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3","md5":"cd4ef0873eb59f6f4e552021f2d3bef7","sha1":"4ac27ea4ab0d1c452c67e2fe6d3f315a7cc833ad","sha256":"ab640ec9ced55482775da4b28d5f9c98f74ee97af75f7dd93bc100fcf81b692c","sha512":"8208b255927950f260bff669f78598ff3f3b2e4573e5b7044dce1a2aa080568d55fc2f2e02e037588bcf4ad17f62bd75ebaf5366c67eae61002cfed6c79b12d4","ssdeep":"384:dqXnlV+PpQUqlAvEUB2cpj6tkv2tyZ5OlPal37U:EV+QlAv9jJ2O4lPalA","tlshash":"1e72b0997e051cc8f2254dbfe7147d8c33f6a2f260ae17920bc089dd6e2e1c89921f64","first_seen":"2024-06-04T02:45:51Z","last_seen":"2026-01-24T19:30:50.767453Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1585,"timings":{"blocked":-1,"dns":1,"connect":24,"send":0,"wait":45,"receive":0,"ssl":1511},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.dochka.org/ph/img/21/211498521_th.jpg","fqdn":"img.dochka.org","domain":"dochka.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.657Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ph/img/21/211498521_th.jpg HTTP/1.1\r\nHost: img.dochka.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"img.dochka.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"img.dochka.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en.chezcathy.com/favicon.ico","fqdn":"en.chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"185.111.111.160","port":443,"asn":212238,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en.chezcathy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 07:11:45 GMT","end":"Tue, 25 Nov 2025 07:11:44 GMT"},"fingerprint":{"sha1":"F5:4A:88:3C:50:10:3B:93:F5:1D:21:A9:B1:84:E7:50:3E:0D:1A:15","sha256":"22:D4:73:2A:21:BF:42:2B:C0:FB:D1:41:E3:AE:C2:E5:88:A6:8E:02:D7:9A:F6:BC:29:7A:3D:73:AB:2D:DF:B9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: en.chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-length: 1406\r\nserver: BunnyCDN-DE1-1334\r\ncdn-pullzone: 4407483\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncache-control: public, max-age=2592000\r\netag: W/\"1406-1744916365610\"\r\nlast-modified: Thu, 17 Apr 2025 18:59:25 GMT\r\nx-powered-by: Express\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/29/2025 14:41:43\r\ncdn-edgestorageid: 1076\r\ncdn-requestid: d81dfe873692d0ad1c8a0ce3a3084c9e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"8851a1b28ebe567b927c9ae6600a8fc6","sha1":"113da6a02dff45d4b9c0d3c9ae531445a8c7b687","sha256":"b545a5091485f5dd485f0e9d2abcd55a06b22f9359c6da8955b8da7b1d3c9212","sha512":"f438008028a354d1600c8af6a136e3991dcbaa188759f20c22a6c76a3170390c14578561d886272741f029f6f161b3711afb959385bbf49166ccf170e3edf95d","ssdeep":"","tlshash":"2121e1213397e353db451ef532244b944243d32906f79b9411e80685aa4f3301fbc373","first_seen":"2025-05-02T17:12:40.010154Z","last_seen":"2026-04-03T22:52:06.845802Z","times_seen":628,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":11,"connect":23,"send":0,"wait":28,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ak-br-pic.kwai.net/upic/2022/12/26/11/BMjAyMjEyMjYxMTEyNDRfMTUwMDAxNDIxOTkyMzQxXzE1MDEwMTY3NzgyNTAzNl8yXzM=_oscn2_Bc26fc397647d40222427db7740699352.webp","fqdn":"ak-br-pic.kwai.net","domain":"kwai.net","tld":"net"},"ip":{"addr":"2.21.8.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 16 Apr 2025 08:08:20 GMT","end":"Mon, 18 May 2026 08:08:19 GMT"},"fingerprint":{"sha1":"88:41:08:16:B1:09:65:11:BC:B7:74:9F:3C:2B:7F:E4:B7:29:47:FC","sha256":"A7:08:07:07:A1:B9:AB:05:EF:83:67:DA:40:EB:1F:28:60:07:40:83:60:0A:E5:69:22:53:7E:B8:ED:61:8B:E7"}}},"request":{"raw":"GET /upic/2022/12/26/11/BMjAyMjEyMjYxMTEyNDRfMTUwMDAxNDIxOTkyMzQxXzE1MDEwMTY3NzgyNTAzNl8yXzM=_oscn2_Bc26fc397647d40222427db7740699352.webp HTTP/1.1\r\nHost: ak-br-pic.kwai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 19022\r\netag: \"7B4A954A55BE91AD8C4205A99F7D1CEB\"\r\nx-amz-request-id: d775ffde0b254ae2a00b12df00bcc5c6\r\nx-amz-id-2: ZXtldtVjUJtkteJAWMFU0drozP7nkkDpZ8/DSGBsOuNFqhh0PFfP94Q=\r\nx-bs-hash-crc64ecma: 874531326806292585\r\nx-bs-object-status: 0\r\nlast-modified: Mon, 26 Dec 2022 03:13:10 GMT\r\nx-nws-log-uuid: 16547590018284729229\r\ncache-control: max-age=31536000\r\nexpires: Mon, 21 Sep 2026 04:26:03 GMT\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\nakamai-mon-iucid-del: 1859565\r\nx-ks-request-id: 0.f7081502.1758428763.7ce344a\r\nx-ks-cache: Hit from 2.21.8.203\r\nx-mai-cache-status: Y0-L0-0\r\nx-ks-client-ip: 91.90.42.154\r\nkwaisign: null\r\ntiming-allow-origin: *\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC\r\naccess-control-allow-headers: origin,range,hdntl,hdnts\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19022,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x854, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b4a954a55be91ad8c4205a99f7d1ceb","sha1":"a62d228aad9752485f534c21ca65225d389dfadd","sha256":"4478eb89cbacbefd0bc03a8604a75142e7bc7b502ed714882f49e60be5d6712a","sha512":"f623bc24a6645f848b8d4aeaecc550a5717191249a64032841c12c4f8d22c12e470c743fe4cd2deaac6f3a44806eb96e6969d7de482859aab9e5d6d71fc4c94e","ssdeep":"384:7GUSfirk9PF1WygoFbwSY3oXyqacFJw/OLIeYwshIdqWOc5l:7GUSfirk9NcC/QoX9acFqVezshEqWL","tlshash":"b582e10e726d58e1cd6e5dc2d6b586cde8991cd638708ac3ec711fb15205e1c909c1f0","first_seen":"2025-06-03T06:10:03.844127Z","last_seen":"2026-01-20T14:01:03.885925Z","times_seen":40,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.po-kaki-to.com/wp-content/uploads/2023/09/1695904070.jpg","fqdn":"www.po-kaki-to.com","domain":"po-kaki-to.com","tld":"com"},"ip":{"addr":"172.67.144.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"po-kaki-to.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 07:07:46 GMT","end":"Sun, 09 Nov 2025 08:06:16 GMT"},"fingerprint":{"sha1":"9C:7E:00:7E:35:7D:00:ED:FD:03:DA:15:B0:C5:3B:39:60:60:C9:72","sha256":"F7:F9:96:D5:50:B1:93:42:A3:D6:45:7B:7C:CD:31:D4:05:30:14:15:A4:86:36:E8:0D:8D:5F:6C:52:2A:17:B2"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/1695904070.jpg HTTP/1.1\r\nHost: www.po-kaki-to.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 76889\r\nserver: cloudflare\r\nlast-modified: Thu, 28 Sep 2023 12:27:50 GMT\r\netag: \"65157146-12c59\"\r\nexpires: Tue, 28 Oct 2025 07:55:27 GMT\r\ncache-control: max-age=7776000\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nage: 4566637\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVhDg49RjObbCa1ZYNsGzRiLixpxt43r0PwE6spMavY%2By2Lm9CSoUdOnxFA29jIbAcGtM66Hpiz1KcVkjJHNgFwBsQ8Sv377lPGd21IbJEPTkg%3D%3D\"}]}\r\ncf-ray: 9826cd67db3c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76889,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 47x47, segment length 16, progressive, precision 8, 650x366, components 3","md5":"af14ed86d3b050c2a6fb7df4ff970fbf","sha1":"335da9a33d37e896c73ea7b3baa7e2374ab74b41","sha256":"716842ec28717820a02bc527db05e11964737b0a8b71ac746f0db7e1ae809dfd","sha512":"b425de0186bcac8eb93776b44610f7b7c20f1ed50af0a29b200eb432a7460a94e3f514d7db220ef6410882582ea44e2b3e9107147502c79ce6d5964b16f7cce5","ssdeep":"1536:YHkQPIUnV9DqZOwc6wmKpNDUjheKME+U0WMuFHbbDV5B1I6WIwcS8Rcc2J96:YHkiVqZODUKpNIjYKME+puZl1I61S5u","tlshash":"da73122b730d42538bd539ae8f189e8ff49f8517d6aa0b5d358415b52b08590f4fbf00","first_seen":"2025-04-24T14:39:22.490742Z","last_seen":"2025-11-09T20:01:59.510399Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1974,"timings":{"blocked":160,"dns":3,"connect":1,"send":0,"wait":6,"receive":2,"ssl":1799},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.aisan-porn.org/favicon.ico","fqdn":"www.aisan-porn.org","domain":"aisan-porn.org","tld":"org"},"ip":{"addr":"192.243.50.111","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aisan-porn.org","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Thu, 30 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:9A:3B:58:2C:1F:0D:6A:F3:F2:B6:1A:24:AD:F8:C6:2E:94:CB:F3","sha256":"A0:F0:4B:F4:6C:3D:42:E4:AF:2A:D0:DC:B0:C4:4E:7F:6D:CA:13:95:49:C8:A0:FB:D8:EC:43:80:20:80:1C:27"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.aisan-porn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Sun, 21 Sep 2025 04:26:10 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":645,"timings":{"blocked":174,"dns":1,"connect":104,"send":0,"wait":114,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_6603839535.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:02.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 07:11:45 GMT","end":"Tue, 25 Nov 2025 07:11:44 GMT"},"fingerprint":{"sha1":"4C:08:FF:9B:21:5C:D4:AF:F8:61:EB:02:2A:B2:41:C6:A6:FD:65:52","sha256":"49:BB:6D:F7:8D:BD:FB:E0:A8:5E:C7:46:48:E8:4D:04:0F:BF:5C:41:EF:03:99:7B:C7:F8:7D:7D:53:0E:4A:24"}}},"request":{"raw":"GET /ext/pre_6603839535.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13216\r\nserver: BunnyCDN-DE1-1047\r\ncdn-pullzone: 4336709\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6668ea52-33a0\"\r\nlast-modified: Wed, 12 Jun 2024 00:22:42 GMT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:12:27\r\ncdn-edgestorageid: 1075\r\ncdn-requestid: fbaff784cc72cf5039fe21060d770543\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":13216,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"75fc694af7b679c93ae6a210896872a0","sha1":"1d13e808a925663273b31d9adf6d9353652dd3e8","sha256":"6bcb3d7cc697ad9c26d06fe476ca02f5370123f400858989e83dc2260aee7b3f","sha512":"3db34c7ace587ef2f1e22c3942a9a65b1392ff01c6e99e885b072b1e66ba4f7ac78dad1591b71c422d60ca2a5fc22a42e109f3b39636cc1d13d44d5a4c515ed3","ssdeep":"384:alcMSDCrzbhuiHQaYGWbQZwqzxNBlrg6brYJDt:agD2dtG/MZBTgz","tlshash":"8652b0e09f689d01dd9c857895a2a3bff472cfc0e153033a8840154a7b752eb8770c79","first_seen":"2024-12-08T19:40:55.553456Z","last_seen":"2026-04-03T22:52:06.86777Z","times_seen":98,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":9,"connect":25,"send":0,"wait":25,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bad.news/images/dm/56473594f7ba4d003548af52ee1dda01.jpg?secure=B-RK4UlWRrRT8Qxt6N1iYw==,1736634906","fqdn":"static.bad.news","domain":"bad.news","tld":"news"},"ip":{"addr":"172.67.73.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"323e0cdf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:16:14 GMT","end":"Mon, 27 Oct 2025 12:16:07 GMT"},"fingerprint":{"sha1":"11:F8:F3:D9:C3:57:49:A9:A0:72:0C:C7:B7:20:D2:58:9B:B7:FA:95","sha256":"00:65:12:12:EA:77:8F:F2:2C:CB:5D:72:DD:45:E5:2F:B5:6F:D2:EF:4B:61:5C:C9:7E:F9:CA:89:A2:64:CB:58"}}},"request":{"raw":"GET /images/dm/56473594f7ba4d003548af52ee1dda01.jpg?secure=B-RK4UlWRrRT8Qxt6N1iYw==,1736634906 HTTP/1.1\r\nHost: static.bad.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26165\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pSycmodORlKMcaPD2faxmNk3zBS9XlL0AYTHl3z3vto75OOqQ5%2BxqXid1h33vJpCPXKlI6%2BQz9MZNfgOcyiqyTH0V1%2F508SFJbEoKg%3D%3D\"}]}\r\nage: 2836\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=27298\r\netag: \"ee06d3010326723d10b21a266358e4f7\"\r\nlast-modified: Fri, 13 Dec 2024 23:12:39 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-ray: 9826cd5a7f8d56a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26165,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 640x360, components 3","md5":"0dbab0213ee26254de0eac26a743bc17","sha1":"c6f15e9baa0e00a3cafc6014090d88b163c88ce0","sha256":"12f2b81d6891b2cf786557279cbe201a72b8865a8e35e7359e4ba84b27e228d0","sha512":"662cf375599d4cd09f9030db8ddd77ca08ad798db508b1641fc246565e394e7556b4676b2770968280b14d989ce571162328f64dba8b44109cce1295f5120e02","ssdeep":"768:CTfx3t9tJ7NC16i4L0xAGfTIBLax8p2GNY4HN/+Mta:m9x7NC1v+mgNY6bw","tlshash":"ffc2d01b7813dd61ac3ec8b76f71a1620755946e7e07b09cc4ba512f0a27b6802ad73e","first_seen":"2025-08-29T01:09:19.565824Z","last_seen":"2026-01-13T04:04:45.849146Z","times_seen":35,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250809-1/25d33c3649d59777a0cb85d3f7d4f64b.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.41","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250809-1/25d33c3649d59777a0cb85d3f7d4f64b.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72841\r\nlast-modified: Sat, 09 Aug 2025 02:29:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6896b26c-11c89\"\r\nexpires: Wed, 08 Oct 2025 03:20:56 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72841,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x281, components 3","md5":"fe4745b386a1c7f4750e0549633ef7c0","sha1":"db79da6b155feaa13cb0d5a904771292856fa2a2","sha256":"d09a3ef62959ef5299cc040cb464fce329f6136cf69b7388b769303b7d3176e0","sha512":"f2d2781c170c37b0bdf6e4563fbbb78e95ee9c9d460ce680039ee74a41ce437db88a7622278c8f5544e7e3bbd53c82065dbdf8b00e6e16f42ed03aff3c25974c","ssdeep":"1536:KFht4VbTKPPjJZB6BqecCis8WZhTkvFSO2WmGqmmsGIGYO0mhQ:wSb0PjJX1bs8e5Q32WmGqvJj0CQ","tlshash":"c16302b3308e9bc4179bd69061db1d5edbfe5793f22a0fca8a45855313b634d82208b9","first_seen":"2025-08-13T22:41:44.8924Z","last_seen":"2025-12-30T20:10:12.341314Z","times_seen":143,"resource_available":false,"data":null}},"time_used":1989,"timings":{"blocked":819,"dns":0,"connect":0,"send":0,"wait":648,"receive":522,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-620120-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:05.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=UA-620120-3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 21 Sep 2025 04:26:06 GMT\r\nexpires: Sun, 21 Sep 2025 04:26:06 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 21 Sep 2025 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 100743\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282779,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2860)","md5":"c9a5191915dafc1fe1897c0437e0ec0f","sha1":"2963e4095b26e19cc94e2b7b90841130e7154f3e","sha256":"06b4d75ec269d45012310f8ccef65ae02111f7d7d1285624dd2abbc46de28ed1","sha512":"2a6542f4453bb0fcbbd302ba408b0255fed72719b6a6d8945ad6da60d8c8bc08b166ae9d3657f115d535c096c6234ac58df76f1fa0f469f6cb3aa3d4a9fd62ca","ssdeep":"3072:LzRSgW/zflqVKA05tIHQorCkE2vz/8LvKtlyFyRbjSytu2td8HlQ9Du:5jVtQd2sKiUbjSytugdHi","tlshash":"2c5408ccb7d6b42243a36478903f014bb17b6992f84cc894f186d9e42e74aa94277f7d","first_seen":"2025-09-21T04:28:54.450971Z","last_seen":"2025-09-21T08:27:47.344858Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1263,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":24,"receive":20,"ssl":1179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baraag.net/@nao/image/png","fqdn":"baraag.net","domain":"baraag.net","tld":"net"},"ip":{"addr":"185.178.208.171","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cisapp.baraag.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 18:50:20 GMT","end":"Tue, 21 Oct 2025 18:50:19 GMT"},"fingerprint":{"sha1":"4B:6A:F9:3F:E3:37:8A:FE:8D:C7:60:73:8F:6D:F0:B1:84:2C:0B:7D","sha256":"BB:01:09:DB:A3:38:79:7D:79:54:20:CA:C1:1E:7C:23:24:13:93:F5:D8:FA:A8:78:89:6D:FA:C4:CD:DD:E5:CA"}}},"request":{"raw":"GET /@nao/image/png HTTP/1.1\r\nHost: baraag.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5vg8bqYa97WTF9NB; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:07 GMT\n__ddg10_=1758428767; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:07 GMT\n__ddg9_=91.90.42.154; Domain=.baraag.net; Path=/; Expires=Sun, 21-Sep-2025 04:46:07 GMT\n__ddg1_=xXGcLdTK1bOc6ikRcw54; Domain=.baraag.net; HttpOnly; Path=/; Expires=Mon, 21-Sep-2026 04:26:07 GMT\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: same-origin\r\nvary: Accept-Encoding, Accept, Accept-Language, Cookie\r\ncache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400\r\netag: W/\"993d50a206d682db6d67364f532ce7f0\"\r\ncontent-security-policy: upgrade-insecure-requests;, base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://baraag.net; img-src 'self' data: blob: https://baraag.net https://media.baraag.net; media-src 'self' data: https://baraag.net https://media.baraag.net; manifest-src 'self' https://baraag.net; form-action 'none'; child-src 'self' blob: https://baraag.net; worker-src 'self' blob: https://baraag.net; connect-src 'self' data: blob: https://baraag.net https://media.baraag.net wss://baraag.net; script-src 'self' https://baraag.net 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://baraag.net 'nonce-Kzu7rSrnA7I0in0mzKyPbA=='\r\nx-request-id: 1db9bdc4-ef7a-481b-9d25-a6c27c0eb6cd\r\nx-runtime: 0.020656\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cached: MISS\r\ncontent-encoding: gzip\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 16570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.twi-videos.net/favicon.ico","fqdn":"www.twi-videos.net","domain":"twi-videos.net","tld":"net"},"ip":{"addr":"172.67.181.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:09.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twi-videos.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 03:36:43 GMT","end":"Mon, 17 Nov 2025 04:34:23 GMT"},"fingerprint":{"sha1":"38:50:BA:40:E9:20:1D:89:C0:32:56:65:69:DD:17:21:CF:8F:D2:12","sha256":"75:D8:B7:09:20:52:4E:24:E8:FD:1A:55:49:20:C8:3F:9B:74:9E:BD:8B:57:B1:CC:D5:89:54:A7:A7:E9:6C:3A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.twi-videos.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sun, 21 Sep 2025 04:26:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=glZmUT95KzJosEd9q0BkFoX2UjIqFrkv5mPKAjwGmOuX%2BqayMKoCpjZuU24TkLCcPCsY5suEzr5H5uycBTeIH1Zv%2BZEXbTv6g0yIzcfH%2BlM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9826cd830fba712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":5,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bad.news/images/dm/80f6a3b217722bd9c0abf9999c3ee2ac.jpg","fqdn":"static.bad.news","domain":"bad.news","tld":"news"},"ip":{"addr":"172.67.73.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:03.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"323e0cdf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:16:14 GMT","end":"Mon, 27 Oct 2025 12:16:07 GMT"},"fingerprint":{"sha1":"11:F8:F3:D9:C3:57:49:A9:A0:72:0C:C7:B7:20:D2:58:9B:B7:FA:95","sha256":"00:65:12:12:EA:77:8F:F2:2C:CB:5D:72:DD:45:E5:2F:B5:6F:D2:EF:4B:61:5C:C9:7E:F9:CA:89:A2:64:CB:58"}}},"request":{"raw":"GET /images/dm/80f6a3b217722bd9c0abf9999c3ee2ac.jpg HTTP/1.1\r\nHost: static.bad.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29890\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: status=not_needed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"df5c4a26d49cc77369a6fdff66319add\"\r\nlast-modified: Sat, 07 Oct 2023 10:23:47 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Z%2BvWwrLZKjYcnM0EItUzUvoH2vAfAh6ppe0YqIfCKYKyFx9rd20qC94mLdxJTo%2FPGxbSUdMifsML2rKpKCi3GIFyQqufuAyvDLJrg%3D%3D\"}]}\r\nage: 4914\r\ncache-control: max-age=31536000\r\ncf-ray: 9826cd5a6f8756a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29890,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3","md5":"df5c4a26d49cc77369a6fdff66319add","sha1":"b0cb0f6c2cacb9eb3ea680faf69953b73257b058","sha256":"68ba58814cfea2c4dc09d817530052956d78e58450bdaf83bf0c73e22465f912","sha512":"0db5f74fa17979bed2c532444ee257dd6978f5a65875a343ec7981fd6508a25f7690e3531da7cd663db31280d7a3e98cb3018ae9be81dde053bd96521de338c6","ssdeep":"768:PSfH32AsnoPvQwjeRQUII+R08h7zOeGtky1/i4EqEd5bCSTb7gAq:PSfH/vQKeejXlcDSy1/dEzhCSfXq","tlshash":"c3d2e1031f8aac32c558873cabe47ca81690d853f9e17bc057509955fbaca6d433e27c","first_seen":"2025-06-18T07:13:23.773529Z","last_seen":"2025-09-21T04:28:54.452209Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntube.b-cdn.net/thumbnails/024084ae95a864ce8867a9223b3d17ac44c17422.jpg","fqdn":"cdntube.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /thumbnails/024084ae95a864ce8867a9223b3d17ac44c17422.jpg HTTP/1.1\r\nHost: cdntube.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 04:26:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20668\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 114851\r\ncdn-uid: 610bc618-7bcd-4e37-a18e-2efa3a8e9c35\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sat, 02 Aug 2025 06:39:36 GMT\r\ncdn-storageserver: DE-977\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 998\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 08/14/2025 09:12:43\r\ncdn-edgestorageid: 830\r\ncdn-requestid: eff26271cfc1aad7dcca6343424bf463\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20668,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x687, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a8f47cfa5e17c7a1ffc9aa78a6dd61b8","sha1":"1502c9aba8bdd9a780721328c807e37e94a9055b","sha256":"fb1ebc4dd56996ce1d4f08157d808ea0a36f53b68324922a0dcf98e1e6ee743d","sha512":"d0678cb3cdfeb08f91602a1d94f4d583d99c9d55d7ef57eb078bd60a4fd1b757910852b9e79d55f56cf3698b4476d0552e3118f776fe41170f713f355df7decc","ssdeep":"384:00jFezgKuRDj5mvqIblhcFmm9bpFFzHq9RC+XF1PH05z+58rvjBg:bQgKud5mBRlmAC+XFBU5z+0vjW","tlshash":"ff92e1d2e603387c673d202df3f0364bbcf2d2295e055fe1568b537a1b1849a006e326","first_seen":"2025-06-18T13:30:31.271816Z","last_seen":"2025-11-17T02:57:12.363306Z","times_seen":41,"resource_available":false,"data":null}},"time_used":1608,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":7,"receive":1,"ssl":1593},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20240914-17/17b54f9f2e95abaa1ce873987c8306ba.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"204.188.235.18","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fqjpg.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Jul 2025 15:16:38 GMT","end":"Sat, 04 Oct 2025 15:16:37 GMT"},"fingerprint":{"sha1":"4E:D1:9D:DC:A8:01:26:9C:1D:C2:50:4C:81:84:03:3E:46:4E:BA:25","sha256":"CE:64:AB:B3:76:85:51:DA:79:92:1D:E2:1C:3C:5E:3E:F4:C8:33:DA:98:68:03:81:45:4A:5D:57:B5:75:4F:3E"}}},"request":{"raw":"GET /upload/vod/20240914-17/17b54f9f2e95abaa1ce873987c8306ba.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nContent-Encoding: gzip\r\nContent-Type: text/html\r\nDate: Sun, 21 Sep 2025 04:26:05 GMT\r\nEtag: W/\"6716678c-e3b0\"\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Cache: BYPASS, Status: 404\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1881,"timings":{"blocked":1584,"dns":0,"connect":0,"send":0,"wait":230,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.tphsck.com/upload/vod/20250716-1/a5cfc5986c204a9487e240a15b6e17a4.png","fqdn":"img.tphsck.com","domain":"tphsck.com","tld":"com"},"ip":{"addr":"185.34.144.163","port":443,"asn":7488,"as":"CNServer LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:04.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.tphsck.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Aug 2025 15:52:30 GMT","end":"Sun, 02 Nov 2025 15:52:29 GMT"},"fingerprint":{"sha1":"D4:97:8B:B0:C8:B1:87:1F:37:77:C6:CB:EF:04:05:41:AB:83:C9:35","sha256":"F6:B0:68:A2:A0:CA:FE:2E:17:D2:D2:B7:26:B9:C9:7B:10:D0:C6:BA:6F:42:A5:F4:A0:49:16:AA:E9:B8:00:8A"}}},"request":{"raw":"GET /upload/vod/20250716-1/a5cfc5986c204a9487e240a15b6e17a4.png HTTP/1.1\r\nHost: img.tphsck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 853\r\ndate: Sun, 21 Sep 2025 04:26:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":2186,"timings":{"blocked":-1,"dns":18,"connect":123,"send":0,"wait":114,"receive":0,"ssl":1922},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241028-15/93eb4578a18847387d0c86580ddf6cc8.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.697Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241028-15/93eb4578a18847387d0c86580ddf6cc8.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pornoperso.com/favicon.ico","fqdn":"pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"104.21.41.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornoperso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 12:18:54 GMT","end":"Sun, 16 Nov 2025 13:16:12 GMT"},"fingerprint":{"sha1":"EF:2D:EE:83:24:ED:27:AD:16:50:2E:84:58:A6:B5:24:BE:16:B5:BB","sha256":"F0:BD:08:D9:EE:FE:C0:42:F9:50:63:1C:CD:75:A8:10:0B:88:F4:5B:2E:F7:35:D1:8D:CC:E1:F2:61:12:B7:88"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 04:26:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nversion: MS25061701\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=300, must-revalidate\r\nstrict-transport-security: max-age=31536000;\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g9h50SaC7wmHKcqv1cjiueuulVBniHiPxt8LM23WpaIzCefUHWye%2FR0xzWNT%2BYIPDcDRTY3eyRPe5cTAI7PphRh06tuq6hMyZrySNOqq\"}]}\r\ncontent-encoding: br\r\nage: 1903091\r\ncf-cache-status: HIT\r\ncf-ray: 9826cd847a97a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6b75nd.javdove.com/favicon.ico","fqdn":"6b75nd.javdove.com","domain":"javdove.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:10.511Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 6b75nd.javdove.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"6b75nd.javdove.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"6b75nd.javdove.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.effedupmovies.com/wp-content/uploads/2020/04/cropped-EUM-32x32.png","fqdn":"www.effedupmovies.com","domain":"effedupmovies.com","tld":"com"},"ip":{"addr":"104.21.92.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:11.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effedupmovies.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Sep 2025 17:38:37 GMT","end":"Fri, 19 Dec 2025 18:02:54 GMT"},"fingerprint":{"sha1":"82:CE:B8:3B:23:8D:F5:3E:91:F6:66:8B:F0:81:55:64:3E:05:09:AA","sha256":"8F:98:21:23:63:91:0D:45:BF:F7:30:FA:08:BA:EF:CA:67:21:BD:97:3B:69:04:A0:56:DE:7B:7B:7D:FE:C8:37"}}},"request":{"raw":"GET /wp-content/uploads/2020/04/cropped-EUM-32x32.png HTTP/1.1\r\nHost: www.effedupmovies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 04:26:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 681\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 20 Sep 2025 15:51:31 GMT\r\netag: \"2a9-63f3d8f5c26c0\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-protocol: HTTP/2.0\r\nx-request-id: 6ab940c2bab72feb01093a2678547557\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=soDO4rC582FII5JnI86CzNFkBaHNMd16lB9Y30zgSl4kEaaQJxcy8xhoL0nzAqvPs0IPZwSXOYu5u3rNpUQVC51ms7%2B2GjwBTl1fdkzfnswnPsM%3D\"}]}\r\ncf-ray: 9826cd8a5d97b4f9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":681,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"447b76c309032733ac501a31b2f2d3d4","sha1":"840e72874ac70f7a3bd560c1ffb5fa2637d7d354","sha256":"837c6f9ccfe7b567669012298335703f085c92469cff5f876732c6d5bd9993f0","sha512":"242daa1bd576f1acfe9971b0060e6882a5acd6bc454a258ed4e5433c0467f80aa0a7e928799a26211f5988e498a5b6d147e0d4c561821eae0252d86fbcb97ed7","ssdeep":"","tlshash":"97014e4d4e305a18ead9312b4afbc21acba7b0aa478a1019d20a2c3284035a09ac8a02","first_seen":"2024-05-18T23:03:57Z","last_seen":"2025-09-21T04:28:54.45451Z","times_seen":134,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/1/1348320c68e1750d4532e128e0a10d41ce7480c9_2_611x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1080p.tub4us.top/","date":"2025-09-21T04:26:07.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/2X/1/1348320c68e1750d4532e128e0a10d41ce7480c9_2_611x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1080p.tub4us.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 21 Sep 2025 04:26:07 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}