{"report_id":"c5a12185-5186-469e-b3bc-aba38dddabaf","version":6,"status":"done","tags":[],"date":"2025-11-19T09:23:41Z","url":{"schema":"http","addr":"xhamster-com.proxyporn.org/","fqdn":"xhamster-com.proxyporn.org","domain":"proxyporn.org","tld":"org"},"ip":{"addr":"104.21.48.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xhamster-com.proxyporn.org/","fqdn":"xhamster-com.proxyporn.org","domain":"proxyporn.org","tld":"org"},"title":"Free Trans Porn Videos \u0026 Shemale XXX Movies: Tranny Sex Videos Tube | xHamster","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xhamster-com.proxyporn.org/","fqdn":"xhamster-com.proxyporn.org","domain":"proxyporn.org","tld":"org"},"ip":{"addr":"104.21.48.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-24T09:23:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"vmuid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"lcdn.tsyndicate.com","ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2017-03-08","domain_rank":74367,"first_seen":"2020-03-31T14:26:34Z","last_seen":"2025-11-14T10:51:14.909875Z","alert_count":0,"request_count":1,"received_data":52911,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"image.imagexox.com","ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-13","domain_rank":1712261,"first_seen":"2025-07-13T23:40:26.691688Z","last_seen":"2025-11-15T18:17:14.088584Z","alert_count":0,"request_count":6,"received_data":841843,"sent_data":3592,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static-ah.xhcdn.com","ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2011-04-20","domain_rank":85744,"first_seen":"2018-08-19T07:09:12Z","last_seen":"2025-11-14T10:51:15.219616Z","alert_count":0,"request_count":16,"received_data":1212636,"sent_data":8026,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cordbraghare.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-10-15","domain_rank":0,"first_seen":"2025-10-17T05:20:11.255078Z","last_seen":"2025-11-14T20:41:29.644715Z","alert_count":8,"request_count":2,"received_data":211039,"sent_data":920,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xhamster-com.proxyporn.org","ip":{"addr":"104.21.48.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-03-22","domain_rank":0,"first_seen":"2025-06-16T16:38:32.899402Z","last_seen":"2025-09-09T08:36:29.152816Z","alert_count":0,"request_count":2,"received_data":255228,"sent_data":1128,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"vmuid.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2018-10-22","domain_rank":182910,"first_seen":"2019-07-09T14:53:12Z","last_seen":"2025-11-12T08:39:21.387182Z","alert_count":1,"request_count":1,"received_data":10466,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"image.imagexox.com/?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FZmMxODk3Y2NlMzAxOGE0MjczMTA4OTgwNmM3ZmM3NTU%2Fs%28w%3A526%2Ch%3A298%29%2Cjpeg%2F028%2F009%2F988%2F1280x720.17630963.jpg","fqdn":"image.imagexox.com","domain":"imagexox.com","tld":"com"},"ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagexox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 04:49:43 GMT","end":"Fri, 06 Feb 2026 05:48:19 GMT"},"fingerprint":{"sha1":"E5:35:C4:58:D6:DE:DE:E8:C7:3E:FD:8E:11:2B:6A:2B:5D:38:FD:4F","sha256":"8C:85:C1:D3:AE:CF:CA:4F:DA:BC:6A:4C:09:59:CE:29:A3:24:81:0B:90:7B:18:3D:CB:82:55:3B:9A:09:C5:C9"}}},"request":{"raw":"GET /?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FZmMxODk3Y2NlMzAxOGE0MjczMTA4OTgwNmM3ZmM3NTU%2Fs%28w%3A526%2Ch%3A298%29%2Cjpeg%2F028%2F009%2F988%2F1280x720.17630963.jpg HTTP/1.1\r\nHost: image.imagexox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npragma: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 19 Nov 2025 09:23:17 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DM2iS9Qy3y0qcZSOw0fySZon9kp3M5bGvLSmK57ZjgYKfN9ssB9TsvzEvDMLltHHVNAqBOCrbXFtCvXGg35eQHTBc7Nz9Az1g4j%2Fx57pw2Tqmw%3D%3D\"}]}\r\ncf-ray: 9a0ea5dedcf2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 531 x 299, 8-bit/color RGB, non-interlaced","md5":"913c4d59bae790d5c5d571776b223f73","sha1":"054d5a3e7b7e011e7683b3b627632194b00784c0","sha256":"434b54d651b14cffd94b9bcdfc44d2054ce7ce570efce707042c2d7a982f62d8","sha512":"2079129e5cf6f061eccb26bc6fffd07fb120d32f7bfcdc9c22b539f558d42b3393c8334fa54f1642bcff191a8d0c1d9ced623f61ac94806f406043054f2d0e28","ssdeep":"3072:o3nykhUYTLGK12pfl2hbEfHSS6RR7VK5g1k49fUfq:IlTSRFl2efHSS67Vx9si","tlshash":"5ef313e70fac18b6fc8fa63eca4320b4a1d3fc2162acf55961068cdd5655b00d996bf4","first_seen":"2025-11-19T09:23:44.217169Z","last_seen":"2025-11-19T09:23:44.217169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-shared/css/vbd9056f0be.theme.css","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-shared/css/vbd9056f0be.theme.css HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0021\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-cached: yes\r\nx-rsic-responder: rsic-kube0019\r\nx-envoy-upstream-service-time: 1\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:17 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22129,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22129), with no line terminators","md5":"1675fb993397c465dbba1140fb264453","sha1":"bd9056f0be75db58f769e7344e45fbc1b7e1fa57","sha256":"844d9412f2b5103fbcb79b358b6a273bdd09f8bc042d328867c37f3d182228a4","sha512":"b4b70c934753255cb03bbb489dc95c1273b3271589553f566803411a14f2be1c2dbc5143e6afbcf5016148b04ce5b4f5a205b4f30e2ba4439369da65bb4809f6","ssdeep":"192:X1+JPWuxwlk1hnAQXKDYJnxbuw8XTD6J3/pKLl8XTD6J3/pKLSnAQXKDYJnxbu0:F+bxznoUp4qpzqpPnoUpD","tlshash":"a6a2e2b3fb55d147062708be60caeb31f28e8500fada1ba63f28a144795b64310f7d67","first_seen":"2025-07-02T16:45:12.205073Z","last_seen":"2025-11-19T09:23:44.219855Z","times_seen":130,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":73,"dns":25,"connect":21,"send":0,"wait":52,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/css/v5f0a0c3992.index.css","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-mobile/css/v5f0a0c3992.index.css HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0020\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0021\r\nx-envoy-upstream-service-time: 49\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:17 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":111222,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"eaa9087656da08a726cf446bf00437eb","sha1":"5f0a0c39925ad5576156fe3b201947b557af7c5c","sha256":"83fb1ed49c8c767d8ef453a6f218d7e1a74c3f639201aca6cd91245a60590305","sha512":"f2f9c8da8540f2762c73517e67bbc16753e45262cd2d31ad26da64be4b08c8286028e2346e78b73c6a21ca22a659a92bdb622ac89c3465e751c6ac8979f975aa","ssdeep":"3072:7tAC6hx+xR9e8ogNGDqFZOPuVi8CtNM0UKQUEkjoUC0vmYX:7tACAx+xDe8ogNGDqFZOPuVi8CtNM0Uu","tlshash":"9cb3a7e6e72d913db833702ebb64519c661cc802eb375ae6fc81e195c4cf5e213ba458","first_seen":"2025-11-19T09:23:44.222141Z","last_seen":"2025-11-19T09:23:44.222141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":64,"dns":30,"connect":21,"send":0,"wait":51,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/js/v69dc215755.assetsLoader.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-mobile/js/v69dc215755.assetsLoader.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:16 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0020\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0021\r\nx-envoy-upstream-service-time: 609\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:16 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12434,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12434), with no line terminators","md5":"c4cc2640410eb4230edc218a74a39cc9","sha1":"69dc2157555b1f647e9f99e96b64528dabed6e01","sha256":"3046d8b5e064960567b859ddff545b0c82162b96b50e7deba5151d2f5abc66bd","sha512":"cf8100613ad482feaac2b0406568c3e5185c230830e6770a8672d66a12b552aa135270a428561063df637041bc24ce7df5af98a6b42b0c51c20b1f1160484f9f","ssdeep":"384:iVw4MCT4nwlyfKHidePKt/nDCxt6thR3B57Y6JZwq9EW:iVZMCT4Jtde+/nDIt6thl/D3H9EW","tlshash":"5f42b779bde1fd2ac3b62771bcbf000b737d09d0448c4710b26a4dda749565c622be9a","first_seen":"2025-11-19T09:23:44.224847Z","last_seen":"2025-11-19T09:23:44.224847Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.imagexox.com/?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FNGRjYTEyMzQ4ZjUzZDc0N2M4MmZjYzMwMTc0ZTAxMTU%2Fs%28w%3A320%2Ch%3A240%29%2Cjpeg%2F027%2F908%2F695%2Fv2%2F320x240.214.jpg","fqdn":"image.imagexox.com","domain":"imagexox.com","tld":"com"},"ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagexox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 04:49:43 GMT","end":"Fri, 06 Feb 2026 05:48:19 GMT"},"fingerprint":{"sha1":"E5:35:C4:58:D6:DE:DE:E8:C7:3E:FD:8E:11:2B:6A:2B:5D:38:FD:4F","sha256":"8C:85:C1:D3:AE:CF:CA:4F:DA:BC:6A:4C:09:59:CE:29:A3:24:81:0B:90:7B:18:3D:CB:82:55:3B:9A:09:C5:C9"}}},"request":{"raw":"GET /?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FNGRjYTEyMzQ4ZjUzZDc0N2M4MmZjYzMwMTc0ZTAxMTU%2Fs%28w%3A320%2Ch%3A240%29%2Cjpeg%2F027%2F908%2F695%2Fv2%2F320x240.214.jpg HTTP/1.1\r\nHost: image.imagexox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npragma: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 19 Nov 2025 09:23:17 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y8JwZocVPNWlaNH9qguwXuCCQ8sM1Hfr%2FwDxETqVdcLQohjfQ%2BISMQC%2FQVNjkvTVfCjvseBW8RUtc1ji97nS%2Fi%2FHAtsk6VQjW0VOsPP%2FfWfvDQ%3D%3D\"}]}\r\ncf-ray: 9a0ea5dedcef723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 321 x 241, 8-bit/color RGB, non-interlaced","md5":"f845b747abb3f3c05259b6e1c504cca7","sha1":"bcc558f429d11169896132a2d025d9414d2877d0","sha256":"ddb8fc8391c335cb894db65cfaf88e9e3a3c4e48721760e143f4200f63457099","sha512":"bdce925a9b21f6b7707586553c12b48aaf316e1427c4c23c93370e795102e177b300a5f7c4aafb6b2ffd1afc1413ef0fd9be60bdcf38f9d87b8af465122ef4cf","ssdeep":"3072:orhvgkfEvRhY+hDdmooUPXlDmBb2L4PKfapqwc7lO5D6vgN:NksvR6PMPRmA4PKf917U9sgN","tlshash":"e7c312fbbd95104aeddf3c9722de30cb17162ea0133139c927c141261a6d5956cdabb3","first_seen":"2025-11-19T09:23:44.226565Z","last_seen":"2025-11-19T09:23:44.226565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cordbraghare.com/1b/8a/d1/1b8ad19e5b8faa97b5af717e65b0bdee.js","fqdn":"cordbraghare.com","domain":"cordbraghare.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cordbraghare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 09:03:59 GMT","end":"Tue, 13 Jan 2026 09:03:58 GMT"},"fingerprint":{"sha1":"F7:61:EB:D3:87:63:39:5E:37:E5:5B:76:89:AA:51:8D:38:D2:5E:78","sha256":"5D:83:AA:A0:01:37:BC:23:75:58:BD:25:9A:7A:5A:77:7C:07:1F:D4:85:06:9F:B9:F6:5A:A4:D9:64:7B:DE:7C"}}},"request":{"raw":"GET /1b/8a/d1/1b8ad19e5b8faa97b5af717e65b0bdee.js HTTP/1.1\r\nHost: cordbraghare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 19 Nov 2025 09:23:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32959\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: cordbraghare.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f7d5f12c7617bf0053a72863f341973d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85074,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9c7733b35494c2b22e07627cbcb14cd4","sha1":"1ad70bc5e66b57c6f3f905bc523274c9c780e8cb","sha256":"14cb6e0c8ef143246ad99177616e1c2a63e2772c03a1a0d5d260680a540d63cc","sha512":"93ded9e14d955f6c53e4470356a2962c12cf507fa93c93df03b9bdde198248e879b63621dfb40615a43b6e4b2cbfd0fd266872de3872c91c5ce41108ce29b695","ssdeep":"1536:dmws73s72DQsjQlZKEMO2N6BLFYQPcT41FXgKkGCWUMZL:dXsxkN4O2N6BLFYQZ3XgKsWUM9","tlshash":"8c83f8883f81b65812a2f133723f999ae1d95e451888d054e303a8dcbf7d71ce93af65","first_seen":"2025-11-19T09:23:44.228049Z","last_seen":"2025-11-20T22:50:32.087965Z","times_seen":6,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":40,"connect":98,"send":0,"wait":105,"receive":100,"ssl":203},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.imagexox.com/?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FMzg5NGZiZTVjOTNmMjE5MjViYzI4OTJmNWIzMjRmNGE%2Fs%28w%3A526%2Ch%3A298%29%2Cjpeg%2F024%2F348%2F328%2F1280x720.17087583.jpg","fqdn":"image.imagexox.com","domain":"imagexox.com","tld":"com"},"ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagexox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 04:49:43 GMT","end":"Fri, 06 Feb 2026 05:48:19 GMT"},"fingerprint":{"sha1":"E5:35:C4:58:D6:DE:DE:E8:C7:3E:FD:8E:11:2B:6A:2B:5D:38:FD:4F","sha256":"8C:85:C1:D3:AE:CF:CA:4F:DA:BC:6A:4C:09:59:CE:29:A3:24:81:0B:90:7B:18:3D:CB:82:55:3B:9A:09:C5:C9"}}},"request":{"raw":"GET /?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FMzg5NGZiZTVjOTNmMjE5MjViYzI4OTJmNWIzMjRmNGE%2Fs%28w%3A526%2Ch%3A298%29%2Cjpeg%2F024%2F348%2F328%2F1280x720.17087583.jpg HTTP/1.1\r\nHost: image.imagexox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npragma: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\ncf-cache-status: EXPIRED\r\nlast-modified: Wed, 19 Nov 2025 09:23:17 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Vxg4WmLtK62pyjZhAJmfGBWssgv8QWl%2BhNu3ZPRzdGgHcwHNN%2F1QvFkJOJ5ad6Ek00WwOGLW4e5kFGpmHO%2FIUbDaeBj%2BF4UmsNvG2pAhMB%2BVw%3D%3D\"}]}\r\ncf-ray: 9a0ea5dedcf7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 531 x 299, 8-bit/color RGB, non-interlaced","md5":"9d492bb88597f819c2eb7358cbde1078","sha1":"38694e6e3be5e92777df791db64655ff3a552640","sha256":"42a1d894665fccfe04d7c17b920d8ad5cbe54607b50e070ce5203b3d168c9ef4","sha512":"f22aaaaadca32c0dbad43917fd57b190f1147cd467018c2548147e48476a114f481a339c0f9d40eb8023d7b499040d3857c2c3fadaf131d1fb53fdafa15b185f","ssdeep":"6144:UFZZxmac30Ft7PAoDG68/qU3xpsrZ4B4QLGgEl:UXM30FtVDGLCUcrZy4QLGgA","tlshash":"d524235653f7f1b7a31a64932b6c03e42cf234156a78aa6850f5c4ca907f8f8bf1466c","first_seen":"2025-11-19T09:23:44.229453Z","last_seen":"2025-11-19T09:23:44.229453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-shared/js/locales/v8bc94d8550.en.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-shared/js/locales/v8bc94d8550.en.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:16 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0020\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0019\r\nx-envoy-upstream-service-time: 323\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:16 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98456,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65519), with no line terminators","md5":"a20a1db892492b05b87161a4f6944acf","sha1":"8bc94d85500020d250d2a151513ae26667df5f29","sha256":"060eafb72be20e77218481c7557c429a9f196bf8bff61bc1455aff69a77587b6","sha512":"788f1f1c5709187e99bd72ecaa4f2acd838b4bd6bd664c354e945a31cb1e405d5641add9a7ab471016f6fc48f503e96f64eb8e363c116261a87ec8dc63cfb861","ssdeep":"1536:iVdJXC89afHCu+9hW097gngnQtECHNqBlbf4xj6rY2RcGYP:wHC89a/ClhegeSf4R6rY2RI","tlshash":"95a3fa6bc748161e0d933266fe8d726375b48218c690446c7edf941e01ebb89e33f6da","first_seen":"2025-11-18T16:58:29.189146Z","last_seen":"2025-11-19T09:23:44.230686Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-shared/js/v00db652106.polyfills.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-shared/js/v00db652106.polyfills.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:16 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0021\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0018\r\nx-envoy-upstream-service-time: 40\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:16 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":393609,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65502), with no line terminators","md5":"10361a3b1e9b417865acb08d9e267120","sha1":"00db6521066ce3a1276975c76219271c5ab2acb3","sha256":"30aef1a6929acec6ce939b16fbdcde47cf5454336fb7ff2bb888d2285c356630","sha512":"632db8199124d9ee2130a97690f579b9c96f3110ad86de819713c38236a5bda3e85246aca74e8cab113d92088adc9055de980b85cd4b3370589c53f5375e9891","ssdeep":"3072:X7gLnz5+55AZE3H0hF/GrO7uo5UPoxvbfZYDWDUfhfIuWg/rct2KLzRPhZ2+ZeoW:WnZCHYVGS7m0mig/A2wZ2+ZehD","tlshash":"8184a48dfad1b0b547e361a0802f550bf13b1a78b45e94d0d6a6d4e1acb8a8e4137f3d","first_seen":"2025-11-19T09:23:44.231882Z","last_seen":"2025-11-19T09:23:44.231882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/images/favicon/favicon-32x32.png?v=1","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:19.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-mobile/images/favicon/favicon-32x32.png?v=1 HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 1272\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0021\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-cached: mem\r\nx-rsic-responder: rsic-kube0020\r\nx-envoy-upstream-service-time: 0\r\ntiming-allow-origin: *\r\nexpires: Thu, 20 Nov 2025 09:23:19 GMT\r\nx-cdn-host-id: DS9201\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"cddc3bfc3511f3b1b05da979ebfa5c21","sha1":"14bcd2e5c58066ac367de02485a54ed0479b2628","sha256":"c11294ed2139852cde01f742725c71b9cbe1037f0fc2aa0097c4c430cdfe899f","sha512":"874a87704ec56563185b0205393de685e062274712f755e681593ca16fe9a7367cd3951ddb57f2c8f9fde47df942872c7c022e221303a434eb6fe768812239cf","ssdeep":"","tlshash":"73211afa521019c9564c0823df4a7a6850f2594eeddc7390e11bdc17ca274d86a3a76c","first_seen":"2023-06-09T16:02:19Z","last_seen":"2026-05-07T15:17:10.575415Z","times_seen":403,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhamster-com.proxyporn.org/","fqdn":"xhamster-com.proxyporn.org","domain":"proxyporn.org","tld":"org"},"ip":{"addr":"104.21.48.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-19T09:23:16.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proxyporn.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 22:55:51 GMT","end":"Fri, 23 Jan 2026 23:54:37 GMT"},"fingerprint":{"sha1":"10:57:53:64:97:40:2F:D4:92:00:8A:A5:73:C7:C9:14:A7:B5:19:29","sha256":"A2:A9:08:D3:0E:C0:F9:4F:5D:2A:26:34:7F:B2:D9:BC:EC:1E:E0:A7:1C:07:49:51:CA:E8:BC:E2:68:09:A2:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xhamster-com.proxyporn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:16 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V0vRPTm7emc42RY9G32Mt3K2ba0cPc0luWbC1epFS6w6grXf%2BhGkajZU11JONr0gted02C9T1l9fZP7CX6B1bAL4OZcXqhLBM37Kk6OgzcCRfqDsPduwWF%2Bk\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Thu, 20 Nov 2025 09:23:16 GMT\nPHPSESSID=ucb6kp5lf64l881ue3ffkp5r4d; Path=/\r\ncf-ray: 9a0ea5db6a575ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":253881,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (55827)","md5":"853234c4a9646f3ea3a52ecf04d266d0","sha1":"4f9bd4b13779f7c51fada99fa264798b1ca14eb5","sha256":"5712c84e777a5301b02b69610faaa8f4a5bee2eb7dae3032dd997fac1c49878d","sha512":"62026e568cb693cc00b96d66aaa19a3ee9924e0e9d43da26f9e04a0443bc2a3bcca278551746de8cdf0f826a327db5f518db70248056972f1b93bd9a77514c4c","ssdeep":"3072:C5OpGIIa89jsYgjdpTYe8McA0lvf8pYcJnrnnnpIyzZ:T8ivYi7a8pYc1rnnnpIuZ","tlshash":"c444a5b3a6743d194bea72d2c9497f09874bed17fd00b9d182cc5a901896dfeb022937","first_seen":"2025-11-19T09:23:44.23351Z","last_seen":"2025-11-19T09:23:44.23351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":48,"dns":30,"connect":1,"send":0,"wait":329,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhamster-com.proxyporn.org/user.php","fqdn":"xhamster-com.proxyporn.org","domain":"proxyporn.org","tld":"org"},"ip":{"addr":"104.21.48.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:17.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proxyporn.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 22:55:51 GMT","end":"Fri, 23 Jan 2026 23:54:37 GMT"},"fingerprint":{"sha1":"10:57:53:64:97:40:2F:D4:92:00:8A:A5:73:C7:C9:14:A7:B5:19:29","sha256":"A2:A9:08:D3:0E:C0:F9:4F:5D:2A:26:34:7F:B2:D9:BC:EC:1E:E0:A7:1C:07:49:51:CA:E8:BC:E2:68:09:A2:68"}}},"request":{"raw":"POST /user.php HTTP/1.1\r\nHost: xhamster-com.proxyporn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xhamster-com.proxyporn.org/\r\nContent-Type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 39\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: view=1; PHPSESSID=ucb6kp5lf64l881ue3ffkp5r4d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WryxFgW%2B1JQkK9bavIzOfXElChwMb8TNC03RAcW657SnSnB3gSamQnhOm7HQKdNqcLFZO1vJ6iZkN7IuDDYfmwVzOpmFEtBlJO6wT5Gj8F5UYcFKbhC43Q%3D%3D\"}]}\r\ncf-ray: 9a0ea5e2f8c556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T16:57:31.852553Z","times_seen":14796918,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/css/vb923313a0a.start.css","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-mobile/css/vb923313a0a.start.css HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:16 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0020\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-cached: yes\r\nx-rsic-responder: rsic-kube0019\r\nx-envoy-upstream-service-time: 3\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:16 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":19986,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19986), with no line terminators","md5":"e15f6e2bfcd43b8a062deb69e81440fa","sha1":"b923313a0a7fbe89647ffe0e3c487595fae385f8","sha256":"e02e1ec36414269b21d3df8e88b571f3b816ae19e9ed107d9cf9b7ec3836e678","sha512":"91bf4071e1982e0182987551ddc42c0b071057a616b0c40240c0f36900e0f2d076151d1884dcaf21c1295ad67364c06bb63a541b9f063069824979b35e21959d","ssdeep":"192:KPyifg9lrkVFUM2wIzvtdjgJi2O//fmZzVxVE/rpgPHusUYJEI7zWy1EmA8BUeAJ:WfylrkVFUMKtIiHCbJn7aYHueABk1ML","tlshash":"379200d9f360e03eac77e92a7746953c851c6c85ec4657b9ee1251c869c3ef32681b0c","first_seen":"2025-11-14T10:51:25.653224Z","last_seen":"2025-12-16T11:41:32.868996Z","times_seen":28,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":64,"dns":31,"connect":19,"send":0,"wait":20,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cordbraghare.com/22/49/27/2249275d1dd0a7f849bb75250a781e51.js","fqdn":"cordbraghare.com","domain":"cordbraghare.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cordbraghare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 09:03:59 GMT","end":"Tue, 13 Jan 2026 09:03:58 GMT"},"fingerprint":{"sha1":"F7:61:EB:D3:87:63:39:5E:37:E5:5B:76:89:AA:51:8D:38:D2:5E:78","sha256":"5D:83:AA:A0:01:37:BC:23:75:58:BD:25:9A:7A:5A:77:7C:07:1F:D4:85:06:9F:B9:F6:5A:A4:D9:64:7B:DE:7C"}}},"request":{"raw":"GET /22/49/27/2249275d1dd0a7f849bb75250a781e51.js HTTP/1.1\r\nHost: cordbraghare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 19 Nov 2025 09:23:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 46324\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: cordbraghare.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2ba9d7ead360a4d657e81022c8ba1115\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":124281,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3a1a8552a6c8759ac3fa87e418cbbff8","sha1":"c7886868f7ba5add923394539c0ecd86d1436730","sha256":"75d006c5ef93d3f173f31e8bad8584461831e7177eab6a40684830c4cc945b87","sha512":"dff7e07195386c1e4b29d6808351206fe2a82e1c09e4c3149217dedb3586f3034b5f28b2c55074223976e6501da41deed1154a9bbab13a42b2e1341cd91f14dc","ssdeep":"1536:hG6JVeUiUmS/NlmOS6UWCj2TYUfKrebMcdfaYUEi9dkiQ+9AMSjW5+Cjx+v1xuwL:h1eBsLqqiDf5ULq9RG","tlshash":"2bc3b78cbb80f05d52ba7032232f641ff0280d6554add6d4e242f4ac7f79f49a9b96e4","first_seen":"2025-11-19T04:57:40.403421Z","last_seen":"2025-11-20T16:13:03.625481Z","times_seen":5,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":42,"connect":99,"send":0,"wait":114,"receive":198,"ssl":203},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"cordbraghare.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/images/favicon/favicon-512x512.png?v=1","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:19.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-mobile/images/favicon/favicon-512x512.png?v=1 HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 24513\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0021\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-cached: yes\r\nx-rsic-responder: rsic-kube0020\r\nx-envoy-upstream-service-time: 1\r\ntiming-allow-origin: *\r\nexpires: Thu, 20 Nov 2025 09:23:19 GMT\r\nx-cdn-host-id: DS9201\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":24513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2c39bdc22c23a63952ccb8563d02efd0","sha1":"1d61498011ad2ee22a50c2b64801e676d681b82b","sha256":"3b575399a341bf463fc84bb789c0420f8d1277d36bc6f2bfbc0fbf295b8e0208","sha512":"3f2e9fff479239662102e833cb389664df2cac03d5b342d156fa9d9b16e07cb25aa66a4458db21c09bee9d5c37709a7862b750d9ea663d9da6998520dd1e6e5b","ssdeep":"384:Si//ETGH6M1BgtRYK6MKK25TrNZ4NYAKGZKqjkhq+tjZNc8Jj4WDQaIgr61PreZ+:zHzaM1UxK55THbGZKq+qQjY8Jj4WDQa2","tlshash":"35b2e1c9cee0da170fa641b10a938f4773275b1046da46f94f0db7ce289ecc28766529","first_seen":"2023-05-06T00:35:21Z","last_seen":"2026-05-07T15:17:10.827671Z","times_seen":411,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/css/vc94bf8f8a8.page-visible.css","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-mobile/css/vc94bf8f8a8.page-visible.css HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0021\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0020\r\nx-envoy-upstream-service-time: 32\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:17 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":212601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1cfdd449e96cbe2299fb1217a2abc9f4","sha1":"c94bf8f8a8a67287fb836c88487313dbddd148c2","sha256":"19138e9b29ccc7dfebafcdf7b54b7c3ea80c017f283fd76c5ce520b9ad08725a","sha512":"0216a2ab5d85cf1d3ed68a5b735698c8068d522895e5a72343344d1d68ee5f0d1a1e4bc6f3f357c218f4ff3222c23dc348e6c819e97ae912a7cb7f9149709fba","ssdeep":"1536:gQXw2sPsAZhDXhDJy5Pn9XBK4YtVKy17tdBHjz8:gQXw2sPsAZhLhA9xVy17tDHj4","tlshash":"3924d7eceb1840bd9b37f55dab82a75c1728e841da220fa1fe55b41cc0d7ada01a747c","first_seen":"2025-11-19T09:23:44.237277Z","last_seen":"2025-11-19T09:23:44.237277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":66,"dns":28,"connect":21,"send":0,"wait":52,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/js/vb1b80febd6.start.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-mobile/js/vb1b80febd6.start.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:16 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0020\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0018\r\nx-envoy-upstream-service-time: 17\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:16 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":233573,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"65d7f89963484e4c3cc903547d387e0a","sha1":"b1b80febd6937ea544b1cefe95b2115838cbf7f6","sha256":"31b45943f4acc7aff5e5831997186c152e3240f10d2c84b00970708f1e8d5ff8","sha512":"d8117e97f8aacb737eba6104c294e7ed075690fb0d78a24134a28307bac1ebb4193c8339aee60f0b8ccf30f04198dc6cda1818fe9a4c7748bb929b989e130e06","ssdeep":"3072:8bmw3rLnuodevgks0yxAc3ulAsqqrTiJLZOt9ISujxKESCobMZ38wHRPEHa0OR85:8bXLRdevgkk+c3uXqqOOt9tMZ38wSOR0","tlshash":"cb342b9bb2d9f0a627e302b9802f600ef3791954580d4c24f2b6d8d578b5e5d9363fac","first_seen":"2025-11-19T09:23:44.239435Z","last_seen":"2025-11-19T09:23:44.239435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.imagexox.com/?url=https%3A%2F%2Fic-vrm-nss.xhcdn.com%2Fa%2FMTRmYTM1OGVjOTE2YTUyNTJjMTY1NWM1OGY1MTQxZTI%2Fjpeg%2Fpromo%2Fmessage%2F3338%2F6916201568bc2.jpg","fqdn":"image.imagexox.com","domain":"imagexox.com","tld":"com"},"ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagexox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 04:49:43 GMT","end":"Fri, 06 Feb 2026 05:48:19 GMT"},"fingerprint":{"sha1":"E5:35:C4:58:D6:DE:DE:E8:C7:3E:FD:8E:11:2B:6A:2B:5D:38:FD:4F","sha256":"8C:85:C1:D3:AE:CF:CA:4F:DA:BC:6A:4C:09:59:CE:29:A3:24:81:0B:90:7B:18:3D:CB:82:55:3B:9A:09:C5:C9"}}},"request":{"raw":"GET /?url=https%3A%2F%2Fic-vrm-nss.xhcdn.com%2Fa%2FMTRmYTM1OGVjOTE2YTUyNTJjMTY1NWM1OGY1MTQxZTI%2Fjpeg%2Fpromo%2Fmessage%2F3338%2F6916201568bc2.jpg HTTP/1.1\r\nHost: image.imagexox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npragma: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\ncf-cache-status: EXPIRED\r\nlast-modified: Wed, 19 Nov 2025 09:23:17 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FG9H1p4trWvUIZVA1oc6prIQG9ath4QJNK3tZZ5cjeE7192KOf4CdhK4RIdcDFiP3TPLH9NwmvRIbLbT5FMciIEJNnmukmMYKnk0mlTBBxCNYw%3D%3D\"}]}\r\ncf-ray: 9a0ea5dedcf6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1537 x 153, 8-bit/color RGB, non-interlaced","md5":"f25af0736bafd2b0178d8de4c22aa0c2","sha1":"1f12af1b9e9fe4c0a35a0a06e7ac84e49d3b1bcd","sha256":"48dc96193c241ed928c207e998c7f7888644b03ece6e388fb9974797ff212333","sha512":"91fee30153fc1db76221fc28330daa683441e093e196e54d034694934aae4a80664cdb817ca542a4478fde92232b6f4e2846862c89eb80957f7e522507bbad87","ssdeep":"1536:yHk0yAPBofU/pgCXjto2N1u9TEEwWiz5fq3vlW0IBTv84gwJxURs/xewznVPiMGa:DeofU/Njd4v/C5y3vlkB44guxUTwRnGa","tlshash":"4fa31231ce98d23ad8639f1e6afcda292cb95d0b105ca6705a44f20a71007dca6c777f","first_seen":"2025-11-19T09:23:44.240398Z","last_seen":"2025-11-19T09:23:44.240398Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/js/v2652a9c306.runtime.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-mobile/js/v2652a9c306.runtime.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:16 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0019\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0021\r\nx-envoy-upstream-service-time: 12\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:16 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22936,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (22936), with no line terminators","md5":"cbf5d0bc13323a1ce3c7b0893c1186ec","sha1":"2652a9c306e1b5098033171895e671046c2e440a","sha256":"2021164b1455b7fa56cf4f1e6322226dcd787051ef3a2fca649f622ce4873557","sha512":"e0a2b256dae5326b8a67b2e29e42855254ddca9012b2049f4412b553c014aca8e0f896e0845a290bbb39dde33a8ae7a5568ec1c1115d836759591336607ec291","ssdeep":"384:q3AaKwzyVIIddn/SK8Cuf0pLC7xbVO+yJVOZt7qGjhAr/ZHOIQjdZcQ:PSzyVIIjqKXuf0pLwxbVGJIZqGj0/ZHg","tlshash":"95a2816ad62433d62a903f6e8c11248d17dc5bd37e36c089635ef2ac19d03eb47d299b","first_seen":"2025-11-19T09:23:44.241336Z","last_seen":"2025-11-19T09:23:44.241336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-images/components/header/components/header-nav/faphouse-crown.component.svg","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-images/components/header/components/header-nav/faphouse-crown.component.svg HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0018\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-cached: yes\r\nx-rsic-responder: rsic-kube0020\r\nx-envoy-upstream-service-time: 2\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:17 GMT\r\nx-cdn-host-id: DS9201\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1168,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf47619b1e8436055c96c9f4199d7b97","sha1":"9f7f334fd784327a541c46fceeb2377ade6fffd7","sha256":"6d5d7273d96ccba7f5d7a69c83bb1e49ff80392e3190fa61a8c5b4792d1ce5e6","sha512":"c28a49c954f62141590524a3e307a8a8c377af1debc27e0f3982d14a53fa4044f896d04c419791160b567f50ef2619bd5253ac6baa44c711d7cd6792b845d816","ssdeep":"","tlshash":"a6216076a99488ea9005da75f82fdc0480aea8b7facdcd42c1c07d8390358e364566c7","first_seen":"2023-05-07T18:51:28Z","last_seen":"2025-12-03T17:07:01.711454Z","times_seen":212,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":102,"dns":0,"connect":19,"send":0,"wait":19,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vmuid.com/script.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0","fqdn":"vmuid.com","domain":"vmuid.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vmuid.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Nov 2025 01:58:17 GMT","end":"Fri, 13 Feb 2026 01:58:16 GMT"},"fingerprint":{"sha1":"55:AF:2A:55:F7:0A:50:14:17:98:81:98:2F:E8:79:25:A1:F4:CB:F1","sha256":"14:5E:46:EB:2B:61:ED:58:DA:3F:13:A4:5D:6C:7E:DC:01:97:B8:6B:1A:B3:A0:4F:05:97:01:DB:FE:C8:70:B1"}}},"request":{"raw":"GET /script.js?sid=c7a563de-f73e-40f2-abfd-c98fa333d0c0 HTTP/1.1\r\nHost: vmuid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 19 Nov 2025 09:23:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 10178\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10178,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10178), with no line terminators","md5":"dedd352338543b137f608adc8d0d4aa8","sha1":"100edb4e8fef9b6da043d51135077e68d2a61b22","sha256":"b338a91ba1d2ab7c3a7a0dd659426f5ffa4cd699be38e2bed5075c4d3e773a48","sha512":"e2fab4d95d5baa013a7c248945156524478341282dcffc462fb2de318f55ba29dcafba0db3abcfb6399c6164f6f630f06d48a7323b73f8ea05d5978cd60a4c5c","ssdeep":"192:ATn+ip4qxJ/gzuvu3fo8idwqnOqgStYc1qRP44+PHlCXXZE7904AxF:YbRJYz3oe+3tYGGx+NGXZCAn","tlshash":"2b22b5c9b2d2f06443d77161942f2007f23b2869b54dc498eb66e8d3bcb045ea227f79","first_seen":"2024-01-26T05:18:07Z","last_seen":"2025-12-29T12:17:25.567723Z","times_seen":3656,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":17,"connect":34,"send":0,"wait":34,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"vmuid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-shared/css/vd01ccf8fa2.variables.css","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-shared/css/vd01ccf8fa2.variables.css HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0019\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-cached: yes\r\nx-rsic-responder: rsic-kube0021\r\nx-envoy-upstream-service-time: 1\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:17 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4129,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4129), with no line terminators","md5":"e379467257e4a43a85da9d933dd74a17","sha1":"d01ccf8fa278fc9d536df098a8793bdf2edaa6f9","sha256":"78c2b9f6e1e36b62ac697a771327ff0daaf8512b2125078e97e054a77f5c8887","sha512":"b968327b8a156fe1167b4e80c72efb0859594aef1ff1c4367d68240beb440380e657e68485b2186ffe3ac838d7de1274467f456b8675f80dbbb8eed85124e5f5","ssdeep":"96:kebsCGa7gqZlyy1msePsf64X6fY6n6i6a66:nbsCGa7gqZlyy1msePihXJKvDx","tlshash":"d4817aa1fb29d071f3b9093e72217a76f49d4c8b9416c2acde05109cf6d1522ab4f748","first_seen":"2025-09-19T04:39:11.96112Z","last_seen":"2026-05-05T05:15:36.405686Z","times_seen":266,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":76,"dns":24,"connect":21,"send":0,"wait":54,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-mobile/v2782c04935.manifest.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-mobile/v2782c04935.manifest.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0019\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0021\r\nx-envoy-upstream-service-time: 9\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:17 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23758,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (23758), with no line terminators","md5":"85f7b9015d80fab8b4946213cba9c65f","sha1":"2782c049352a277907f3c1e3e8f02c60d5828f9f","sha256":"34193f75948bbd8458c0966cc2045fcefab63f68374af10ac67a1bf7e46aeccb","sha512":"56d98e1d9130fb46aa662025b55af2c0af540068304a80137b7d1e4921977c9910e73014c3d44626bfadf745396a9c47989c378f7f2de9223c47506f643294af","ssdeep":"384:+OvRXohYnzrBl5+6Emcc+HSTK5Dt31rTL+LdlZsfZo1rB5/HRRI7kG8ywTEQVuPk:+OvRXohizrBl5+6Emcc+HSTK5Dt31rT0","tlshash":"67b2a7168a44f68f6ed5cd3ed0b93717ece4c87a2d78c1f2944f99bd0166c17272a0a8","first_seen":"2025-11-19T09:23:44.244273Z","last_seen":"2025-11-19T09:23:44.244273Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":22,"connect":21,"send":0,"wait":57,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-shared/js/v7c7930460e.ext-detect.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-shared/js/v7c7930460e.ext-detect.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:16 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0018\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0018\r\nx-envoy-upstream-service-time: 68\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:16 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6470,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6470), with no line terminators","md5":"8658ea9296fd1d543e9bd329ff8d9399","sha1":"7c7930460e9333f363608be81f9070dc8b61280b","sha256":"849680b78cb52dfdb4779b47cd02b52fa96a132ec64c297d6022d2d8b6873756","sha512":"d7b98f77f54ae03cafb417393e63e04d02c02f631947ca86e14a339a879787eabf49d6874f5ffb486c114399451bf7cb08d0418c8b7f81de82579cb2e8b6c0be","ssdeep":"96:oORZemZufLx1T3YrCSWwHo79vdM8lU6jCHemPZ6ysBNETWs7Eb7/n:jRbZ+DYrbfypAPZ6tETWDXf","tlshash":"c7d186c979e4a4530db343fcdce7510662b4163644fc49ac627c5ad615e20cf81a3eb7","first_seen":"2025-11-19T09:23:44.245492Z","last_seen":"2025-11-19T09:23:44.245492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.imagexox.com/?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FMTBiODZiNzY0ZTA3MDA5MzUwZTM4OWRhYzhjODFiNzc%2Fs%28w%3A320%2Ch%3A240%29%2Cjpeg%2F027%2F711%2F122%2Fv2%2F320x240.221.jpg","fqdn":"image.imagexox.com","domain":"imagexox.com","tld":"com"},"ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagexox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 04:49:43 GMT","end":"Fri, 06 Feb 2026 05:48:19 GMT"},"fingerprint":{"sha1":"E5:35:C4:58:D6:DE:DE:E8:C7:3E:FD:8E:11:2B:6A:2B:5D:38:FD:4F","sha256":"8C:85:C1:D3:AE:CF:CA:4F:DA:BC:6A:4C:09:59:CE:29:A3:24:81:0B:90:7B:18:3D:CB:82:55:3B:9A:09:C5:C9"}}},"request":{"raw":"GET /?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FMTBiODZiNzY0ZTA3MDA5MzUwZTM4OWRhYzhjODFiNzc%2Fs%28w%3A320%2Ch%3A240%29%2Cjpeg%2F027%2F711%2F122%2Fv2%2F320x240.221.jpg HTTP/1.1\r\nHost: image.imagexox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npragma: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 19 Nov 2025 09:23:17 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sx02BbsMr1thTUDajae5UNeuoRIw6aBLkHTl%2BNaHy24XLBi57B1LxZHOfbUoWYuU2rBoCj238Xu9TKzHxyP4r4zXJx%2FksbOrqO8AKWbtsaT0hg%3D%3D\"}]}\r\ncf-ray: 9a0ea5dedcf3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150011,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 321 x 241, 8-bit/color RGB, non-interlaced","md5":"9cf325e0e8410718edb7ec5809363381","sha1":"c1e42a4320dc58ab74148edc00788ca8c69b1915","sha256":"c965d7bd0da8794635f83c2bac75d3998cb28cc198a88f0a6ae8f76d01f47d7a","sha512":"c9743816fc8a503590a4479c2d13be81a59b4337811f51a18d366d5d36f4629b53095aa37f6fd102d3e363e6be015107b7c4226a60cc16af45f9ad584430fb36","ssdeep":"3072:7S3xen0u8gR54Xh29vbNXgOSGjWsf6EDlL6qlS0tdCKivCmAXY0yojQpKCc:7S3xLlgR5xJxQ7GCsfnhlSUcCfYReQpY","tlshash":"52e312ed99f65a6cac155734808ccd9148c4b41532bffe89ce3efec8167a466122cacc","first_seen":"2025-11-19T09:23:44.246423Z","last_seen":"2025-11-19T09:23:44.246423Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.imagexox.com/?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FYTg3NzgwZWU4N2YwNzBhYjI4NmRhNzhhMmUyYWU0NzA%2Fs%28w%3A320%2Ch%3A240%29%2Cjpeg%2F027%2F987%2F084%2Fv2%2F320x240.204.jpg","fqdn":"image.imagexox.com","domain":"imagexox.com","tld":"com"},"ip":{"addr":"104.26.2.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagexox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 04:49:43 GMT","end":"Fri, 06 Feb 2026 05:48:19 GMT"},"fingerprint":{"sha1":"E5:35:C4:58:D6:DE:DE:E8:C7:3E:FD:8E:11:2B:6A:2B:5D:38:FD:4F","sha256":"8C:85:C1:D3:AE:CF:CA:4F:DA:BC:6A:4C:09:59:CE:29:A3:24:81:0B:90:7B:18:3D:CB:82:55:3B:9A:09:C5:C9"}}},"request":{"raw":"GET /?url=https%3A%2F%2Fic-vt-nss.xhcdn.com%2Fa%2FYTg3NzgwZWU4N2YwNzBhYjI4NmRhNzhhMmUyYWU0NzA%2Fs%28w%3A320%2Ch%3A240%29%2Cjpeg%2F027%2F987%2F084%2Fv2%2F320x240.204.jpg HTTP/1.1\r\nHost: image.imagexox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npragma: no-cache\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 19 Nov 2025 09:23:17 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ft66akmFa8%2FeFpAsw5jb4DsLKk0%2BrgFJxHACk0KUThVKvMBpMlNelSP3FutArR7u84TnNHO6yOUqwiCcVAK0SzCKDEiY4GUu6lSZd%2FETn7%2Bx5Q%3D%3D\"}]}\r\ncf-ray: 9a0ea5dedcf4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76876,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 321 x 241, 8-bit/color RGB, non-interlaced","md5":"b53915e6c7c59619e9f87000863c7711","sha1":"d35a8d7707c29488eb4cba679513096ee398a43e","sha256":"c3778227f083fb09486fb3300a6254b130af4509f55ea4f6a152df9b96547b85","sha512":"83ee21843fe5cca719954206cd8629aee5da87902ec326ce4cc3f92e0a40fe8290935743cfd299a515666f0c8304964037fe35883107eb1e0ab525988de580ef","ssdeep":"1536:GCNdzNOXP2Vt/0EPtsQ9SGciJEYGymwlROVDy2y5dpFl:GqzIXP2V90EPqQ9LciqYnmw/SSdd","tlshash":"91731203d88c99e1d5e15cdd9e76e079b92656ea13cbfd0b277dceb6ecc13218600285","first_seen":"2025-11-19T09:23:44.247373Z","last_seen":"2025-11-19T09:23:44.247373Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lcdn.tsyndicate.com/sdk/v1/master.spot.js","fqdn":"lcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:17.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lcdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 17:31:57 GMT","end":"Tue, 30 Dec 2025 17:31:56 GMT"},"fingerprint":{"sha1":"16:F6:9C:BE:F3:53:48:75:98:D7:2F:23:94:D9:88:BF:65:B6:81:50","sha256":"EC:6B:23:7B:63:E6:3B:89:D3:FF:B3:06:DF:63:28:24:8E:C1:44:F5:16:B3:AC:92:8B:84:B3:2F:D3:12:4C:19"}}},"request":{"raw":"GET /sdk/v1/master.spot.js HTTP/1.1\r\nHost: lcdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 10 Nov 2025 10:07:44 GMT\r\netag: W/\"6911b970-cd11\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Fri, 21 Nov 2025 09:23:17 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS9893\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52497,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (52409)","md5":"a4ace3e5092f414861f65284079412cd","sha1":"b3505835a69d954a1c8240949d868957f41f96f7","sha256":"20c950ea3f2cf6a4b767cb8db89ac19ef5c58eb75ec92aeef2aa43ddf336f18c","sha512":"d6782c83e4f04fd90a21edcfbe506df91d7c641f5595044c62e9283d861786eeafc2adfbd2abbb6995c61bf93f497cf3f3b00fc71fb48f130435c9551d38f9d5","ssdeep":"768:pGN6VHVzZFPkilZQ0g4bhQmbxryT+2KygeyqwcxTi5vGGSSK3NrFiY2:p86V5QiDd72mNmK2Ky3yDck5vGUQiY2","tlshash":"a6331aee75917071216b01aa819f570b733e3502ac4e8c00a06bead57d78dced37be69","first_seen":"2025-11-10T16:30:22.997919Z","last_seen":"2025-11-19T09:23:44.248794Z","times_seen":37,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":5,"connect":19,"send":0,"wait":19,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-ah.xhcdn.com/xh-shared/js/locales/v4e052ca862.en-start.js","fqdn":"static-ah.xhcdn.com","domain":"xhcdn.com","tld":"com"},"ip":{"addr":"45.133.44.22","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhamster-com.proxyporn.org/","date":"2025-11-19T09:23:16.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-ah.xhcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 02:32:31 GMT","end":"Wed, 24 Dec 2025 02:32:30 GMT"},"fingerprint":{"sha1":"E4:A9:AB:43:B8:26:46:FD:BC:19:12:AA:E1:32:AD:DA:73:5B:F8:ED","sha256":"A5:8B:2D:1E:26:F6:51:4A:A9:47:C4:41:25:7A:B1:A1:22:42:A8:20:7E:9D:0E:D4:EA:60:81:D0:83:B3:BD:34"}}},"request":{"raw":"GET /xh-shared/js/locales/v4e052ca862.en-start.js HTTP/1.1\r\nHost: static-ah.xhcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhamster-com.proxyporn.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhamster-com.proxyporn.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 09:23:16 GMT\r\ncontent-type: text/javascript\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: rsic-kube0021\r\nx-rsic-pass: yes\r\ncache-control: max-age=86400\r\nx-rsic-responder: rsic-kube0018\r\nx-envoy-upstream-service-time: 20\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Nov 2025 09:23:16 GMT\r\nx-cdn-host-id: DS9201,DS9225\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15362,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15360), with no line terminators","md5":"b74248f42bfcddccb6e255d627582d89","sha1":"4e052ca8620be42bba170420c2d1cb1a28274d74","sha256":"bd494dcd13ffce38276b0fa68f927c15b135dfb06fc0b35ec208df7e8b469f95","sha512":"d05331213fb44130829be5fd4e5a746c074aa045e6df2b1e2bf92f21d223f60243d2b92e66db05b46fa12c05075dd861e4ea82263d3f14af272ad3ff68e9168e","ssdeep":"384:0eQSMe2poE8UiHe46WfWOHisU+ovo5tpw5WXR2:0e02E8URCA1Q5tp1U","tlshash":"6c62a71fbb3c122d09d3072a77921a6ff665611c13a4405a78b474b80fd9a8f8b77b87","first_seen":"2025-11-18T16:58:29.258346Z","last_seen":"2025-11-19T09:23:44.249645Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}