{"report_id":"c69ee2bd-de10-4681-aeae-2522a67e669c","version":6,"status":"done","tags":[],"date":"2025-08-06T19:51:09Z","url":{"schema":"http","addr":"heavy-r.com","fqdn":"heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"172.67.71.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"title":"Free Porn Videos - Heavy-R.com"},"submit":{"url":{"schema":"http","addr":"heavy-r.com","fqdn":"heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"172.67.71.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-10T19:51:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdn.fluidplayer.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2016-09-22","domain_rank":33284,"first_seen":"2017-08-28T23:05:16Z","last_seen":"2025-08-03T12:56:37.145978Z","alert_count":0,"request_count":1,"received_data":263381,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cluster.aawspeedy.com","ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2025-06-09","domain_rank":0,"first_seen":"2025-07-11T16:38:43.464268Z","last_seen":"2025-08-02T19:09:19.890447Z","alert_count":0,"request_count":2,"received_data":127653,"sent_data":1017,"comment":"","tags":null,"fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}]},{"fqdn":"heavy-r.com","ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-04-08","domain_rank":84366,"first_seen":"2012-05-30T02:39:53Z","last_seen":"2025-08-02T19:09:20.183233Z","alert_count":0,"request_count":1,"received_data":93602,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornedup.com","ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-31","domain_rank":599144,"first_seen":"2016-05-12T09:04:29Z","last_seen":"2025-07-14T22:50:27.475867Z","alert_count":0,"request_count":20,"received_data":1810931,"sent_data":9753,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-06T15:12:45.48732Z","alert_count":0,"request_count":1,"received_data":417956,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ded6443-edge12.bcvcdn.com","ip":{"addr":"195.85.23.248","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"domain_registered":"2020-03-17","domain_rank":0,"first_seen":"2020-03-20T17:30:37Z","last_seen":"2024-01-26T08:45:20Z","alert_count":0,"request_count":4,"received_data":1188830,"sent_data":2060,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"live.quixova.com","ip":{"addr":"46.166.186.6","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-01-28","domain_rank":0,"first_seen":"2025-01-29T13:51:21Z","last_seen":"2025-07-31T22:54:37.255841Z","alert_count":0,"request_count":3,"received_data":165012,"sent_data":1422,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dmz3nd5oywtsw.cloudfront.net","ip":{"addr":"3.167.7.31","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-02-16T19:05:16Z","last_seen":"2025-07-30T06:05:47.041366Z","alert_count":0,"request_count":2,"received_data":100901,"sent_data":1110,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.heavy-r.com","ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-04-08","domain_rank":196916,"first_seen":"2012-05-30T02:39:53Z","last_seen":"2025-08-02T19:09:19.67024Z","alert_count":0,"request_count":37,"received_data":698151,"sent_data":17022,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fluid Player","description":"Fluid Player is an open-source HTML5 video player.","website":"https://www.fluidplayer.com","common_platform_enumeration":"","icon":"FluidPlayer.svg","categories":["Video players"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}]},{"fqdn":"static.heavy-r.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2010-04-08","domain_rank":264439,"first_seen":"2017-01-30T07:24:58Z","last_seen":"2025-08-04T22:22:26.437813Z","alert_count":0,"request_count":25,"received_data":0,"sent_data":11525,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nriceukwater.org","ip":{"addr":"54.240.174.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2025-06-25T18:49:01.782288Z","last_seen":"2025-07-31T03:02:38.805111Z","alert_count":0,"request_count":3,"received_data":6336,"sent_data":2266,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"poweredby.jads.co","ip":{"addr":"92.222.100.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2012-05-17","domain_rank":30525,"first_seen":"2019-12-04T10:34:12Z","last_seen":"2025-08-06T06:40:32.647333Z","alert_count":0,"request_count":2,"received_data":8018,"sent_data":848,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-08-06T15:25:40.423241Z","alert_count":0,"request_count":1,"received_data":533364,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"everefor.buzz","ip":{"addr":"34.225.16.8","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2022-09-19","domain_rank":0,"first_seen":"2022-10-20T06:34:33Z","last_seen":"2025-08-02T19:09:19.662421Z","alert_count":0,"request_count":1,"received_data":64171,"sent_data":581,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":12905,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-08-06T15:43:25.81396Z","alert_count":0,"request_count":2,"received_data":193932,"sent_data":887,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.amplifo.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2025-01-28","domain_rank":0,"first_seen":"2025-02-02T02:10:38.981715Z","last_seen":"2025-08-02T19:09:20.503101Z","alert_count":0,"request_count":2,"received_data":1195028,"sent_data":975,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.heavy-r.com/js/iframeresizer.min.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b53b598c4ec4b93f95a024010a17b0","sha1":"312c6d466e0b9380423ef2f3d1cb361b94835ce6","sha256":"971c47f1144e3bcaaafbd8ca281cc33a757b858524598ffded485107104575be","sha512":"1a739716702568859705716e8f06bb43b85525a26b2373a0d7acf8ac6fafed5038fd348ba56bcc302af99b1d357fbbc0142f08895f6928146fad5f7a10847f65","ssdeep":"192:OHE7ZH3UHqOeQfw+SXsyWYtpJ1fxOeG6AqshIB7N9cxb6rf:OHE7ZHEHaQY+Scytt/636B1B7Hwb6rf","tlshash":"7d32949e7152b03e669b06b7e0af124f713884a5f50a886045a8f9e87e704b913b7f4d","size":11909,"data":"","first_seen":"2023-03-07T21:51:04Z","last_seen":"2026-06-19T17:40:38.381303Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4975e5275b0bee9d88040a0a518053fb","sha1":"3c7feee9a60f017361e1bc8b2a6803ea38dfbeb7","sha256":"aa4f8c3adee1dfea07b2d612940ebca58fc1848b04f944ab4ea45384f51533d4","sha512":"5e543946695d5f46e8ea342b78681ec6422730706a84df6fd16dec35fb3dab81b8a84610f4d5dda32962f3698c9c827edd793142e3f0f4e56e22395db3ae63bf","ssdeep":"","tlshash":"d1d0a557197545315795014f31b7d394256515507621750481cdcc1f6a11ed34462d54","size":236,"data":"","first_seen":"2025-08-06T19:51:24.013324Z","last_seen":"2025-08-06T19:51:24.013324Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/jquery.form.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d8dfb1ba020ecc50493ebfe4413fda2","sha1":"89f426be1294699e9ab05cf4dcb16857c99e72b9","sha256":"14c604a1099b520998a7f3e7b8105e1a679f3aa7f6f519af6609c72c46b63de1","sha512":"0d00a8a53f1937a1e5b41c980f44b9c36144f9fb4d27879a66ffc475bba3e3e40810773b7199fe300f22a0417b84f39deb09f0e1656a41a727a8f437423df16d","ssdeep":"768:ageuCP6yeJr/5t31aPw6MdOGuKeockAty3YQiMOIm8E77VMDz/iVG7tPtEtVaYAC:R+P6yeJr/5t31aodveoc/QIQhOJ7VMDm","tlshash":"9413954a798a12a2193377b9cfab910dfb7a91370201d1517d9c52d12fb0ca492f6fec","size":45171,"data":"","first_seen":"2024-12-24T05:27:25.17991Z","last_seen":"2025-08-06T19:51:23.924762Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.quixova.com/loadeactrl.go?pid=22329\u0026spaceid=11682868\u0026ctrlid=12433","fqdn":"live.quixova.com","domain":"quixova.com","tld":"com"},"ip":{"addr":"46.166.186.6","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdf32f4372add5bc80e751286bc717c2","sha1":"c95e848fd72cb0cd51da3d47fd956870f04329c9","sha256":"d1f4bf9b82bfd484d035cd707d7420d7e4dbcf0594dffc3136e2eb84ddd73482","sha512":"e57ade0c128cfcf434ca1be397ab2ec2283d86925765341e40fbf9dc2edb48fe91b15c892151179471d591e08b49bcc8921b6188c2165895b2f6243e6bf809a6","ssdeep":"1536:1aqt3CjG6tWlcwqbz91gcOR93qsPqsIkr1MnR8qlxkYun1NyJo/Mi2DfN/Pbf1Qu:wtWhqMSsIkJkKgunfGhJ/PT1v","tlshash":"bbe35b2f383d262a07d1b5a76b8bc08d7fe614d664b210b6f912ec0e87647dc61172ed","size":150437,"data":"","first_seen":"2025-07-13T10:35:17.691989Z","last_seen":"2025-08-06T19:51:23.922954Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"9eecb7db59d16c80417c72d1e1f4fbf1","sha1":"2d14ab97cc3dc294c51c0d6814f4ea45f4b4e312","sha256":"41b805ea7ac014e23556e98bb374702a08344268f92489a02f0880849394a1e4","sha512":"e28e547f8138106fbdd0c6fcdb4147d981437f822e5f86df530402eeb78ad5986071758904a30adb7df45c810b685249f0788f7df4bd98feb430f8ee5cc22b1c","ssdeep":"","tlshash":"c700000000000000c0000030000000000000000000000c000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:02:21Z","last_seen":"2026-06-20T02:03:18.368799Z","times_seen":10470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js//bootstrap.min.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c237312864d2e4c4f03544cd4f9b195","sha1":"253711c6d825de55a8360552573be950da180614","sha256":"d5fd173d00d9733900834e0e1083de86b532e048b15c0420ba5c2db0623644b8","sha512":"e18a5959736a9ceef67b40daf7964c519c678d680bbda8d2c7679281f5d349a286c99b96ca24e7a8e64ce987d372d74ae12da7255c606ccfe27ac13a35b5a3d2","ssdeep":"768:b8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcKGf3Z1RQ:oe78+S1Klvla3ZrQ","tlshash":"f5f29606b23031a107dfb1e5515b020b72396a6ee90690bc78b9dae53db9c48717bf3d","size":35951,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-06-20T00:26:24.823127Z","times_seen":10198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js?_=1754509709111","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-17T22:25:48.855368Z","times_seen":2527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de5d25925b220c26d48503a30d26184f","sha1":"7488c4efbb4508e9cfd80b5aa931119739569fbb","sha256":"477ac9cf41592dd238ba041b1f2ed87392686437d76ea76ba77229b6bbf9b6dc","sha512":"226ae28fc2bc4fdb7edd9f34c5f94ccae9fa0755b45a46867fc38332321db5f708e8361740aac5a959a1f15398444a7d42ea9a1a3322efdef4ff498b89865894","ssdeep":"","tlshash":"a6c04cef4010860427d1440bda563785762b12db9e64e58144051790765cb5f8a5bae9","size":143,"data":"","first_seen":"2023-03-07T14:24:24Z","last_seen":"2025-08-06T19:51:24.017569Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/script.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27f47e4806e4bb4760a127115633d279","sha1":"8eb3acd77b4c450033f37b845c850d456602a9f3","sha256":"4d9dfd4f47c9aa853ef1354a7fac5ac8f6d7cf0af38f5b26b2361e6933972fc1","sha512":"15c1e54ee0b21f603459eba17c1f73403c5679b128389a35fab0ed8a1933d016155aa27a29cbf2c174e0ac4357772a5b7cdc9ba6770cade38e9ccaa7bf9b8644","ssdeep":"48:r0YFC3o3QwS4JhnpJyKtGta2Xlpt62YMLoCcHMMPe8dC27RsXql1KPcWHNrxMYWc:r09YD6Kt8VHG9EaKtwTG8NUxNDFZiQ/","tlshash":"f6b1224af3ec7e36513635688d7f518b79bc12239406c80df9bca0907fa6f1524276ae","size":5441,"data":"","first_seen":"2024-12-04T21:53:23.977853Z","last_seen":"2026-04-13T22:34:36.364844Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cluster.aawspeedy.com/inc/b_min.js?key=zxIHgImX_-PbQCcxbgmcmZ-Th1SVKSCZcZQIMaYsk6FVAI_TPSY7b6zjYoF218GQy-YRBEA\u0026inter=z14w6F16oYNndG1hh9ZJj04Bp9KnU3nZiC6hVgmDh5wwvfUPhkANLF2LRg2VcI8TRwYQBoQ\u0026ch=\u0026d=2\u0026p=43200","fqdn":"cluster.aawspeedy.com","domain":"aawspeedy.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63a50c1c79ff15710f41c6062175c088","sha1":"39f030a5f2cad69924d2a4a7844970acce5e8b5b","sha256":"fc65ee05160138857bee5e140d9229620cdbfe2227cd5d333f6c5c894033da4b","sha512":"526409cf8565051e5636377af5068e3280e4cbf7ec4089e8f01deb53e9b48f2dcecce2302591bcb6530d67574d083c55fc6e2261cee7efd43adb61d7ad8bce72","ssdeep":"384:5RLPYLnu8eo6B5RYOShiFhQDLuoah3WSwBSdp98xJzBokN46KEw+v5A:5RLgLnu8XkRYOShiF6DLuoah3WSwBSdJ","tlshash":"b9a2a5054520691d13a6ae76571be849dbf28c64c658ac8361c8fdb871c2f23dfcedb4","size":21278,"data":"","first_seen":"2025-07-13T10:35:17.726634Z","last_seen":"2026-02-18T04:14:46.617325Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8268961ecb1dced7247b76901d4b2ff3","sha1":"e16a88e1579fa6f717fb3ba58febd71ed7385a29","sha256":"06cb77763338aa0b799298ee317ee2df697f0e17e6cf1dada3e3d743ee06df4c","sha512":"b112bf718fdde53ef257e12254794323da82e9e5477c613696c0efc80f7d5a7b6ba130361330ce3662f100bcbf639a96398762a47b6e655d2a3581f919a767a3","ssdeep":"","tlshash":"5fa002b7b582103c442271b6531975cdf96f0914c7d068d8570566b0a5713db5e0904a","size":64,"data":"","first_seen":"2024-06-10T00:08:52Z","last_seen":"2026-04-22T02:54:54.132092Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/AC_ActiveX.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81b5bf20e7d206c13acb2e9e9fd70252","sha1":"377e5041f872dee823a0869c4b38e1159e0c08fc","sha256":"5f6d023f0ee5598fa3126bc73c225f463b4e428c3a4fe8e4a645ad049005a0fc","sha512":"f777c665a005609663b67330b50e37736f26c4ddda0e93a972c7fad4a86a40ade2172b489a319a355b41ef81c521a500d56791fa269269dc6192e13ebb85420f","ssdeep":"","tlshash":"474152a0ac75ac262572830d823be6a2fd2407c7a2c90edf7cece4845fb7014604b9f5","size":2139,"data":"","first_seen":"2023-05-18T10:33:41Z","last_seen":"2026-06-14T11:22:43.101434Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z4XZQNBBYD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d25ec29f5bcc46eb6b271f2510f8339d","sha1":"4eada180dec0b22a96f873890298625922bc51e5","sha256":"490fd0bf77698441c00861be1845ccebc342ed43e25c0de6276ced1b2be40eae","sha512":"fd38eb9719828ac2ed50d5941a883f7d4eae8715a8c83c22737dbce7aabeee42d4f4980b7d54b170ff26878d04c7861848187c88d852f877d6f87d973418a088","ssdeep":"6144:rpb2xMtlcLYAvlNaB3ETxXP6eUY+BKFgzg:1bm+OvNl+Bosg","tlshash":"ce9408ce73c674269396f478503f018ba97b29a2b49cc89ab1c5cce02d7469a4177f7c","size":416955,"data":"","first_seen":"2025-08-06T19:51:23.904957Z","last_seen":"2025-08-06T19:51:23.904957Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"da007bce94f173fded7d2506e119388b","sha1":"9d89c57c3bc202d9ac3fc544a2dbcb00c8c12e0c","sha256":"19c267f5aec8dc8338aa66708967f675fc211a50ec414f5add55331d6b6d9226","sha512":"605467e04af88bc5c5116881294283d98cb910eb111b9e538e9ce43a437260e2f15f310f1301f87203cd60ae0b0041946b9fc97067435d834920a40c1a4aee07","ssdeep":"","tlshash":"c5d09e2518b975fcee4260316f6cb800e844819fa044e5d53763f64cbedf48f83618e4","size":276,"data":"","first_seen":"2023-03-08T08:05:23Z","last_seen":"2026-04-22T02:54:54.125079Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/templates/bootadult/js/masonry.pkgd.min.js","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c54e75edf5cbaf412bc16ba4145f6032","sha1":"67638430c92c23cedb89db038627876d361135c0","sha256":"733d7c26a5fb7240e83e8af2c822218b321b5143e28c2dd65ab2492297ac6bd7","sha512":"dcfa0adefbb8bf4b9cb2082d98b452daefae51137315003aabd021805f8575fcce8ccf0db78a7aa0a35c6c485d529c37b9de803bbc5a151a677a0e7e4012c55d","ssdeep":"768:S9+z0BFXYKby+HvOqvevgOkYtkdEvWBzigMPI0:SgKbbO0IkdEvPgI","tlshash":"3fd2b54ab70434209247f5b6a2af010f723ba5ade51484bcb299d8fa2db6c4d1137f7d","size":28953,"data":"","first_seen":"2023-03-07T01:02:58Z","last_seen":"2026-06-19T19:41:19.854215Z","times_seen":1725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/zxml.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69a638b5db7e538ada8a1a5f778e25bd","sha1":"0b29c45838347a16e4a237d0ff988beeab248901","sha256":"ec8a68ba02d61dda13273f2d848d82f2f5a9167c04a6bddbb5dd250dac5356d7","sha512":"f80fcced2b83dc69b7c3485ebdcb4d834813151564fd48e9f2546bdb0b725487172878efc1c34ef2f95000623862a9bf96c03813c51d700d82e8b2346b3cab0d","ssdeep":"96:CdgGeUKC5fAyUDqOUfESXUnkpESXRIlLhqhZ7zsZHLI6nM:CvF5Zmd1nkqma2ZMk","tlshash":"e4d1b9096249a15b2d84b3ea6c7f45cdb531a4ad680482f4bb2cf8e66df4c01c65ff26","size":6483,"data":"","first_seen":"2023-04-07T12:29:09Z","last_seen":"2026-05-29T03:04:36.492017Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"974d410f7c21910db60520d9221fc8e6","sha1":"d2bd41066fad46a4b7f8ae72c0cd1da0a5b07584","sha256":"ec8a746dd4503ea307e17a02a6930db57f8d94900f258b2ba7fe5c9bf488dcba","sha512":"b1c3b9fdf7714875d07f15167485861aa622a9d4edf261e59703d5a0512ef6117a75a72e0fb386042828c689dd8cd310a69e2e62d5a49794e2e570213f1cbb17","ssdeep":"","tlshash":"8f900263864141141f51809d6d1cb18ca2535908ad6dd0829d46622401114658782014","size":55,"data":"","first_seen":"2023-03-07T14:24:24Z","last_seen":"2026-04-22T02:54:54.12617Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d47d3e0cd69d3b2bf25bc6fb934e5073","sha1":"274214e488279d0c2889e137d1f8c3442ecf938a","sha256":"f7db6668eb8ff4affdaedd084814327cf813ed9f64ad339e36f0dd8378c7f0a9","sha512":"0b38bc65d6ee5d2fa8d1da09c4dd86a476412a2e4bf450f4212bf8bc71ef9980cf384efea14ceed42e6342f2c687a18fc6ac490edcf68af54c160dbfb0f0dd05","ssdeep":"","tlshash":"0bc02bcc210a8c70c2fb7700cb3fb604f402321494d179314c5e23045d30e03d754c20","size":153,"data":"","first_seen":"2023-06-29T08:30:54Z","last_seen":"2026-04-22T02:54:54.128795Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nriceukwater.org/TGRZOUstBjpUdC1ZOx8+PghkHHkKQWt/LyEealcveQsgTj8/E3daJyMRPV85IwotFyUpEHwLDXwpDgF+AyExagoKADxdexkjAWgdOycfSgQPVxhhCRkUAXMgCjcMbnp0PWhKBw8mKXsJCQg2WyAZMgFoHXgiLncSGg1hdBgaHA5yPDQBEQggPzFocAUEDiF7CgotH2kddCgBf38kPC5JLwQOaGgeIDYBdCcrIA9vJzglIFIGCgo+bBMdDwhpeismAW8oaVYfaCAjKBp6EQo3PkoCKTUfewgeVW5aeyMoGn1yFSUIAQYuNRBNAw0UbWodJyoRYT82Nz4UOAUrMl0ADwo1DAogFwF6DAkxAWgnKigPcA4aDGgPL31UE3oTKyYBXiAGBgh3LRRVHA8dDQgOaAx8IBJoLAACGwAtBFRoCG0mFzZXO3EMDA0ZeFZpazsnFAk","fqdn":"nriceukwater.org","domain":"nriceukwater.org","tld":"org"},"ip":{"addr":"54.240.174.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5303fab61f0881536c4903acdef128e","sha1":"276b361761efa28e72523751000be859b457585e","sha256":"a4d2c987cf093cb83b88b15f537a3f82d785d697cb5603876250f04adefdf47a","sha512":"e54a5a17dba4e09b841de72b183c01b6dfc82c5eaef1fd32415e17bb25507a6a84fd6b5594b55c1e093a736aa623bd6c3c3255b7f1a3ae4ff26a9d77618d82c5","ssdeep":"","tlshash":"f351f28e34f3608282f66015413bb99afa385aa0c34cda14863d96bcbd715d9731bf4c","size":2967,"data":"","first_seen":"2025-08-06T19:51:24.021887Z","last_seen":"2025-08-06T19:51:24.021887Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fluidplayer.com/v3/current/fluidplayer.min.js","fqdn":"cdn.fluidplayer.com","domain":"fluidplayer.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"66bab2a71ffc0b64398e20b38e20196f","sha1":"cb48cb37bfcf83e82b5ebbe70cb9a3e9aec0f17f","sha256":"8cf61b7112c22725b08f2e1c245d1538a14937c56c1704f2ebaa22ba063d16f0","sha512":"c2665478ec09c531235076ba914070c2c987e78d4c6033d192fa74a4476b187c04069f972aa0b82fdea80fe8e814d54cccff856870908fe50f010899b2b96777","ssdeep":"6144:QokyLucaeewSwuZFFUXyGpK2S6RmyIQMomFcX4ieg4xvtIkoMg5zx:lI2S6g3IJMg5F","tlshash":"684419cd35906a3049976baff3df9101b23c691da826612db017fc8e1bac484d553bee","size":262860,"data":"","first_seen":"2025-07-18T15:36:57.748762Z","last_seen":"2025-09-12T13:45:11.516127Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0f2475cf9a857185ab1d0950c8d7d90","sha1":"79b63ee8f5c1e0d8dbd70c9fed2680479f1f0bd7","sha256":"4da0c21ab5e19c31af991cf326e0a26b6dc385d37e6355d8d089172fe6590d38","sha512":"7ef9934558d6faafd98704f954d989799899d1f26cabd903b684ad72f395c500bc44f762d1193559bba69d86f8b7bd24356e4237e22fbebab7814cdd3614f675","ssdeep":"","tlshash":"70f0d47f5c5f58bcd357901f65bdd069b67814484160f201b14cc9121c60f602c4bb64","size":473,"data":"","first_seen":"2023-03-07T14:24:24Z","last_seen":"2025-08-06T19:51:24.024171Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.google-analytics.com/ga.js","fqdn":"ssl.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f6d7efd99960ab916ee096e061f2e7","sha1":"e21f1b5b99444ed4e4f62308cf616edd93ee852e","sha256":"bbb1ca9c206e0ed72478ea72f3ca038cf739fd540d5d1c2da19620c942e4c4f4","sha512":"1a6172d7bd59e113fb23d09bed6e42141e198709e59442972a15bc6445de0a5d5713611269ffc5fdda04f5cd2bbd81e52cb15bd19ee5fa0b6f163880ed2a34de","ssdeep":"","tlshash":"bb615045e8bf3cf11151200a097b8137632e8813ef5db454bafa52139f6e4de24b2fa9","size":3362,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:46:51.010278Z","times_seen":76379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-17T22:25:48.855368Z","times_seen":2527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5947df841950f8414c3bd6acac546fce","sha1":"b0258885c42ef20f9d453ca4db10608845b4a01a","sha256":"dfc345b6cad198260a705753a84befbc76b7165b873a406bf927c27e6f337052","sha512":"d60522d7640bcfca130056ee35cf3bb4a3dc2caaf51ae55f7fb3381e2fac2aef036c68be4507fd24e2c429d0e3be8cd766618c0f396b488d8a26541c54ec31e3","ssdeep":"384:CxKKwlLNjRHEzWKJq8N4jBrR8WDPidu3cGaYmfrV:/jiCAIAZ","tlshash":"90521d4d335253259af7a2ee401f1345733ad92b5808d12db97acfcaddd460442aeb3d","size":13457,"data":"","first_seen":"2023-03-07T14:24:24Z","last_seen":"2026-05-30T15:22:13.127537Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/mobile4.js?v=1","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a35a677f2508225e02bbfd3f6e526c","sha1":"0a10ca63ecabd4c5623442def95b2e2f15a1018f","sha256":"d80ed621644f28a798839b47a3d177f408050615363a7a48ce85a1d6ef7e351f","sha512":"489a1220d6b30ff0faf2fb4a96cad7da9d632bc0f9b46d134106e0d041bc326a7a2cdb988781120f886aae783884af4ed2c6d78e9316abae5b2cbe9ad5f95786","ssdeep":"96:T5++OICtJxtomlGDWtVAy++OIhtJxtomlGDWtVA/odWMWbnB:1pOICtlomlbpOIhtlomlrDGB","tlshash":"e4b1d8ed7e98c28c446b30ab83ade428d9f6d024ff63c852c1cd25851a75de1cd2b89c","size":5489,"data":"","first_seen":"2024-12-04T21:53:23.972899Z","last_seen":"2026-04-22T02:54:54.08201Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ed56eb623cd70e00bd6dba8c9e2e115","sha1":"c89b82d510436fea996058ff273950123de82e68","sha256":"4f475bdf45f051d5b6a40295fdc628c503fc220056c511ed1bb67b95440b263c","sha512":"796fd2e61daa817a8eefae11a44a0af6981daab5e12ab897e493fec1028192d2851ca4952a1cdfab99f9ccb9d3699602f556b90411127ea2396a64f80d635c74","ssdeep":"192:ASZuHRDc1cuQ7nvIKfKVhVTzHEZgXUvq6:AceEcu+zfKVX3HEY65","tlshash":"2a220ac77c09bb0f950030f1101f75da1965be8191c85692f1515dacbe26fd8abbef82","size":10098,"data":"","first_seen":"2025-08-06T19:33:30.668041Z","last_seen":"2025-08-06T20:23:58.412446Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/sw.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84b179c184cc8c42e2abc52deb5fd1a8","sha1":"66dc21c677a25ccea6fab8968a346d7005c0fe2e","sha256":"0dbc1a5c670c9b705a1dfa1dc4a54aa9dc92416db0fefed9eaadb573357b7e31","sha512":"85d0e8c84fd8bb87a098d138a3c445f5c08212f62becd54f98128b7ad46d3eee36d368b8d4fa3f856b3ea7de6c3104905470e2a5f68fb8b9d91383b296659992","ssdeep":"1536:vSpw5PMhOhJ6ZbaL7l65oQ668X4BtmG9vpjthaoytu//M:vSpwVJ6EXX4rvttkbtu8","tlshash":"7aa309497252389617c7e03e177fa5cb6d7a4a09bc698d974051c3c02d2a0dec6e3fba","size":103032,"data":"","first_seen":"2024-12-04T21:53:23.922265Z","last_seen":"2025-08-06T19:51:23.958978Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/CH_ThumbsPreview.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b72321293b2af4bd691f9a0dbdbca073","sha1":"bd92f21ac9c256d3a259c0657ec85fb6b284a939","sha256":"3228aa1bfcea385f6d409cffc71fd19e3bbbb33bb046625638fcc58684bf1e1b","sha512":"1a7774c99c0cfc31c6903c665f33080d714827d781c48d7088d617cdc3c86f7326a2e2d46da0289694b3a02f45e49dca627d6096abd8e53228ec1e83b1a914d9","ssdeep":"","tlshash":"5151fe9c6469c26798507042fc0f801c2d56cd503a1aad21bb2cf0e50328fbeaabab1c","size":2919,"data":"","first_seen":"2024-12-04T21:53:23.956358Z","last_seen":"2026-04-22T02:54:54.044917Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1015c283171ce639f7672404e2db65a5","sha1":"57112dbaa2d45ece2ec8b6285b70c11cbdc94de0","sha256":"312d095052c011b7af8dd8f69503bd6c90a4fa6c7073875e483bc8068d5f65af","sha512":"e2396efffd0a0591d8ff7dd267add3f99475068d1665195cd4cd576d031983b8a32dff15fe1c83c19636dc3ef858f1a95d0bdedca50dcfc04c7900857093bc3f","ssdeep":"","tlshash":"e79002e6014a04196ac2625bec12302c40a348fa454c6403c4109a71121874c16233c5","size":53,"data":"","first_seen":"2023-03-07T14:24:24Z","last_seen":"2026-04-22T02:54:54.130261Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc9c176a799045fbb71b61403845c880","sha1":"f6ede6a0eaa9bd33cf6ad3cd064085fecc3fb454","sha256":"b12ed68324fe26fc04aadac465e88c24d48a11da2db56978fbe75663677220df","sha512":"604bc540d894c190a0d5508fcdcff6fbccfb77c6c8d68cee601afef425a6141cba72f07626a77830a7bf707fb0f2c24616b60344b7a8a58612acd879363a63c0","ssdeep":"","tlshash":"9dd02330414d152d754db669d5504a441cf5f20065178649093e10a40c544cde73d5d5","size":201,"data":"","first_seen":"2023-03-07T14:24:24Z","last_seen":"2025-08-06T19:51:24.027709Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-20T01:30:22.797282Z","times_seen":94827,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/CH_Ajax.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1f9fe89f4d728cf9f134f443b0dc5d5","sha1":"9a1e67a398743becb354f1b97d2379e9274dd551","sha256":"1257facc8259c1d15a2b1f2fd5d3c4373a4d5ea5a0077336305b74def91a02ec","sha512":"e067876f8f895a53540166c83e652469a83a70f2f8c9c9c34a839c3038d95ea4363072b3807217ae1f61b5ac396e024cb2d5d6d27b8088f5d91be883a92d012d","ssdeep":"96:4niJpEScr73B+w9wreOSploU/Qp3D00Uojli58iI2xioyvcyb7I4:xhAR+8ayvS3jliKiI2xi9E4","tlshash":"8391941a70ce094a538633a0053e5c49fe7ce222c826c9e6f654ca9e77f0f14736b798","size":4539,"data":"","first_seen":"2024-12-04T21:53:23.952974Z","last_seen":"2026-04-22T02:54:54.015609Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b733c9d815dd3420b755d331798a752a","sha1":"57f49a6bffaf701756bbd7ea77c92e4f522a4c23","sha256":"13dc95a4df681b1d8b74a57040f304572e272e78b99a5be7af3a7ad6620e0d1f","sha512":"e1c226d331c48eb567f636765dbbea5ead4584147653aa7a49a5c27f6b044ef641e1baae0274bac1117424dd18af18e13aa227418e32233d7ed9c2a5292041f2","ssdeep":"","tlshash":"72d08cf5d3bd6907543a1600487e22cd250ea632e8026ccb7e9860284c15121208fa00","size":208,"data":"","first_seen":"2023-03-08T08:05:23Z","last_seen":"2026-04-22T02:54:54.131189Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"619bad565d8967a8c6b14b5eb54b6330","sha1":"eb79b2c02b081e0ff849bbf17ac9e0b10c0d4939","sha256":"6ad2b4d83900a4fc25a89b7df1f211f95a89bbedf1b126562acec4fac93eba66","sha512":"d64b62ac56c015dbf3e87c930cdf99807893f9bf3d8501dd7d292e01b3dc3a4983007d7ea0f5f592357d1cde2e193d1351779728a6f90a8faac8e9a1d6bfe7a2","ssdeep":"","tlshash":"bd51a622d72c473d85f4d02e12ada2c4763993fcd40f9d15bd48bc2c7990a8915bbea2","size":2599,"data":"","first_seen":"2024-06-18T10:11:58Z","last_seen":"2025-08-06T19:51:24.030248Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/AC_RunActiveContent.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae56d02f42b582e11647155fef36ceda","sha1":"0042f7798243c5258a68fdec9c311690275c4711","sha256":"2eb0464eb6c8bdd06125cc5f1de7b6f7ed17d3c06a7634b49e99f3d58811ad10","sha512":"de48885c5aecba892e7ffb1ac8c90a3ea15075154e1bd4a4e9efb4b42936ca3639b4f9fb7cac8c12f810e77faab4ee5bdccaa3b8a411402f7dc8a5194716ac5b","ssdeep":"","tlshash":"35614f60bc25ac2626b3831d8237eaa1fc240687a5da4edf78ece9805fb6114105b9f5","size":3359,"data":"","first_seen":"2023-03-07T12:12:36Z","last_seen":"2026-06-19T04:25:05.037832Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cluster.aawspeedy.com/inc/combined.js","fqdn":"cluster.aawspeedy.com","domain":"aawspeedy.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"47922873ff4e9b7097df0aa7b115df0b","sha1":"27fe61e2e3283aa00010d5e3462fc22c3df58853","sha256":"9fe0b98f0146aeca4da63a7399707b5aa57a318ff3ab982acdf802c1e8396568","sha512":"30901dd75adddb2f138bb7cd27866a7bccdb77e2ff6d2b5523d94069f7c8d5f2849aef1c9eb0e8af92e3120e4f68c3f07d1a6a5e75b2dbeb9c78a6d6629c8ea3","ssdeep":"1536:HRY8OvlYcEKvheTo+JxL86OXyvHikoHpu1u+EZ7F50mn5pg4i86F8xnZUCioMKUF:W8Ovaclc1Hl8Z0mn5pg4oGRZX2X","tlshash":"3fa35461710750d630e1d26e166ab3c12d795402f4298ca6fc21fb9fcaaed93419faf3","size":105563,"data":"","first_seen":"2025-07-13T10:35:17.732208Z","last_seen":"2025-09-15T06:32:37.008223Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2149db438d27a3bc825d556a90e9d165","sha1":"e0576fc7c61082451b8e7dc6551f5a61d16282f1","sha256":"d454d38848f1c5b71b4cf2cf0f67d15bd0b34ac37bde5013bfec741d39a58736","sha512":"f69b246c16e15898ac80a15e48f74c6b20b2a78f8498129ba8f9957cad279def9d90f1c13473361455b40f6011a1728619e371ff0b61913da62109a3bcbe4545","ssdeep":"","tlshash":"8fe022b3f0c2003c802230f8230830ccf82f0800c3c028c8030032b0a0323eb2f0800b","size":366,"data":"","first_seen":"2025-07-13T10:35:17.74965Z","last_seen":"2025-08-06T19:51:24.032892Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/general.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd705698af7cb82f435e2b75a8b74502","sha1":"45abff4bfba358d2bfe601b13ecd722aad19543d","sha256":"fa9d7de280e612e016800891b43db1c5f63edcab6c790040f9cc45cf20d0c44b","sha512":"d494ba1cf4061048c36dfe5e160b141419218d62d993c0e9a1bba1e1ed976eeabba7123ddb5bf73696ca6142a479a8cac5726db50bf376382c0c448e74ef81d3","ssdeep":"","tlshash":"5f412319efbc5d77956a243d4abfc054271dc4636744c4c5380ca8e59fa0e585c7b588","size":1980,"data":"","first_seen":"2024-12-04T21:53:23.958634Z","last_seen":"2026-04-22T02:54:54.02247Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/jquery.jcarousel.pack2.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"61baa5a36e1b7b86ca7d83f0ec86f724","sha1":"bf5e0de64b18cb38abe65d546c1f561ae0ab955e","sha256":"56dd207fbbd3fd93160aaded42575b7c5494b3a8fa61730f3f8e7a5ccf71aef1","sha512":"5059f5a0b70b914ec8c6da11c32bc51838fbcd187b9f9e861e7dba83eddc30d28cf91c42d19aece7aa795a612f39a502a6803b74325f6dee9746d8351a11656a","ssdeep":"192:bJCxoPQ45x8GqO5Sq/LQEGsFd4ewF+a6WwMDQ0VaeQ:bYoPQ9O5Sq8VEaP9Q43Q","tlshash":"f902a879340b0d5b3bd3d29b1868075cbb584767aabfa0a19d78d567307c86102f93cb","size":8882,"data":"","first_seen":"2023-03-09T11:30:02Z","last_seen":"2026-05-30T15:22:13.079978Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95992,"data":"","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-06-19T21:27:06.840726Z","times_seen":25733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmz3nd5oywtsw.cloudfront.net/0MW85OEhSAFded0UGXQVwCFsOC3AXBUpXJkFSUW18Y1sLCBpBBElobkUVXQV4FwNYVi8MSVxWKwxeH1ksU1INHjxBAFIFPV8LXF4hXwpdHj1QUlRXMlgDVVltAykMFngUXQkQP1gBXVc/QkoLCCZFSgsIeQFBCR17c0oLCD9YAQ8MbQItHAp4SVkNHXtzSg-sIOkdKCnl5AlsXCGEUXQlfLVIEVh16d10JCXgBXgkJbQNfX1E6VAlWQG0DKQgLfB9fH011","fqdn":"dmz3nd5oywtsw.cloudfront.net","domain":"dmz3nd5oywtsw.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.31","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"95dfeea5f6f83c713c17f572e6adcf71","sha1":"f8a9170cf4e561a7133237025857995e39c170b6","sha256":"3363ec1f9539879f531d413e8415f48671dba90d9986ced80539943ad8ee54e3","sha512":"5f9630d0c3bd64be7be054d8d4fd0fef3e3808d5401c13a1fc57ad301b7c63ea1e19a1c3b5d9279fa976a9766c662507a354c5bbfa5d2a1156eed4ee2f25a2cd","ssdeep":"","tlshash":"b8e0ab7c3860ea59acd79016a3ace45acbc560cc14018e4656122a283f0d99e2f48240","size":420,"data":"","first_seen":"2025-08-06T19:51:23.929456Z","last_seen":"2025-08-06T19:51:23.929456Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/date.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b01627cc49c1771b90680834af8efc1","sha1":"d9758c8a7458ff8feaa1942ccde59d664a076a4a","sha256":"c77462bf1b90d04c480496df47eed998e2d0d64e1ae9d39dcbe239bf723ba1ab","sha512":"04029271dda6700bda395684a1b7f82dd31eca17d02cb21d49f0ff670e0db395a05231ceaef169de4529f4553753e833d9b66e87fe8e663793ae2be8b00286b7","ssdeep":"192:p1U9t1hPGymld++hr1HdjV42UZ2WU2aQC09Y0nrxOCtvX:p1U9tLGxThBH/4TU/C1","tlshash":"f6e174677746636447ba0da21c5a090bff2858511f0cf0a7fa61f88974a0f8251ffbb9","size":6956,"data":"","first_seen":"2024-12-04T21:53:23.950635Z","last_seen":"2026-04-22T02:54:53.965942Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"42490eb02879fbb8d833c64795e51ae0","sha1":"d2686c44203f4129a29884d8163c7c67d7fb54f7","sha256":"d90c1b9f1594486346fab033d2dd851d64eb74360a8b54715792e9171d3040f0","sha512":"4b6b49e0695fdf522f41ea11a228d3dec33f71998f5b6120274c91043809641380a492017bc966cdb858fae08f905b4eeb5fae3a4db5177afa9b5fc00ad7b109","ssdeep":"","tlshash":"3131ee2dbfad986881b53056b6bad38db03ff1305b4048dbbe5c2e3474297aa5c1c944","size":1769,"data":"","first_seen":"2024-06-10T00:08:51Z","last_seen":"2026-04-22T02:54:54.138892Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"98e5018732ca8dd6e71cc0d8d806f22c","sha1":"d3dfed2582c5b99b79ed805f51665650dd62cf2b","sha256":"1fb9f8484cef7c4fdcd9f5bc1cffa589ef886937e4752d0bec92dbc2714f16fe","sha512":"faa135219afe37db3a3193725711b650233ec84a2748c23e07ebbbf4e12ecb729bdb4c2fca6a4f9eefb73dab7235d25db6066cdd56a28b74f857a59376e51ac8","ssdeep":"","tlshash":"def059deb76c143148eaf9d9206573c82d4dc4f3da450ca2bc749a450591c48a928d59","size":595,"data":"","first_seen":"2024-06-10T00:08:51Z","last_seen":"2026-04-22T02:54:54.140825Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"everefor.buzz/aGkzQk4TS0A1ER0bX2B0SgFHNj4bUxxtOR8eHSorCR9KbzxGClwvYRseHSg9SkURMSMOSwlzYkoaXjRsUksHbH1KRRE2Lw82WiZsUksEdH1RWQdgYkoaRiARAQ0BYHRKWFBxegtYC3JjXAgGJmNcCAsjYwpRAXFjCwtVe3gLXgN0fwpdET8","fqdn":"everefor.buzz","domain":"everefor.buzz","tld":"buzz"},"ip":{"addr":"34.225.16.8","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"810b29f321838f6cee55215fe2de200e","sha1":"bf246d02cd2be5454455a78ddb5fc758b31cba54","sha256":"b2e84ec94d1d3e0b364fe4a24ac992ac78751bb55f81b91c40bc649fe2c06149","sha512":"c71a08273b53018d0c4d8116d078e1e533214bf26767f107736e39a517f957cf83d6e4f97b4f5ecaf09d8783b9619e8d57ce0c1193ada71c05c895caf806a50b","ssdeep":"768:FztzTFMttCFipWJfWoHY/2fETPcFY0+X9/0XheaEicPClOxxS0reI71xDSs:FpECEp/SY/2fad0O0RDUClOxxDesx","tlshash":"04534cd172912083c217f1f59e2fbe07793f4e12d4895ae26ca7e081ad7909e91e3e74","size":63771,"data":"","first_seen":"2025-08-06T19:51:23.97012Z","last_seen":"2025-08-06T19:51:23.97012Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmz3nd5oywtsw.cloudfront.net/?dnzmd=894738","fqdn":"dmz3nd5oywtsw.cloudfront.net","domain":"dmz3nd5oywtsw.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.31","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c9630f22ec83ca11c5021abe096cc46","sha1":"f52b687676c0a510e4f1deaa2e039a8d2e24ce1d","sha256":"ce480fe30b8c98aa4525c17e1c12be89649ddf14934ff1eb179c09f901c0c411","sha512":"c56960843093d32843bd0393404e84638c9bad0b69e19d834fbdf22a3edb7fe3f05dfec35aa85f9c4a3dbd8ac570e73d7c85fae2bbd1fb619279b9fb2d4bc350","ssdeep":"1536:iTopdqRBuGUQ0B1oxHDZp3oCpVHQVpROv9oI/fkmCVH9DGHotxgF5sw8i:lXqRBMoxjZBjNvD/8mCRkJ","tlshash":"89a36c2976523136836270f6847f570eb17aa466fd0048a4709ad8d09efcf9812fbf9c","size":99639,"data":"","first_seen":"2025-08-06T19:51:23.965775Z","last_seen":"2025-08-06T19:51:23.965775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/templates/bootadult/js/iframeResizer.contentWindow.min.js","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d840e34b94ed7ad2ac5d2d6e7e9a8678","sha1":"40248f5541e0de44c6f44f4cadc9970af358d983","sha256":"63b5085014a66af8d0d56afb98bb13f69a4c4f21c3c0e2cc63b30fe8c75a49d9","sha512":"ca84fe83a39c9db33fa536d8e6763ef3388ccf0005c19acf9097dd32e57745dd64e24a43e404ebf80a5b81158ce762532aec4ba522857adec694bbb0bcac6a5e","ssdeep":"192:z4GbOpAkz77CQcwYCws4uol/BBoSoSbGbDl0HIV16wB9CN3uKQw40LndsChRrXzO:sAOp/HScDlqwB9CN3uKD4wzzrXdhBWH","tlshash":"345274dc7292b46e5a4f13bfe2bf160e313948d6a90a5454989cdcd5bd309b90323f8c","size":13908,"data":"","first_seen":"2023-03-08T08:05:23Z","last_seen":"2026-06-19T22:49:45.405054Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/embed/latest/16/","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b05ab8b87f81a803ced29b9e3c7875de","sha1":"5371393e15a2ee8ef32b6986166bd135e3146cd4","sha256":"b4cac629e78d35f9fc4c841d2749264e8421f459ccdfcc2d8dd7df410e91cc24","sha512":"5c47a36e083a12aee8bea7111443321e302155b8ec2e6bbe315395c86e6e918e1a31ccbd47649ab6154b0bde74a8d4f745f9c621b01f67343f53068ab96f6e33","ssdeep":"","tlshash":"481123543a9b7965585fb11f375e314c6cbbe0f34280a407ba8c8d4c4fe087a5212741","size":887,"data":"","first_seen":"2023-03-08T08:05:23Z","last_seen":"2026-04-22T02:54:54.1338Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/sandbox%20eval%20code","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"64fe6fe97a487c82c5be70158b71aa87","sha1":"b93ba17d1796e404b0ca1ef6f262bbbb0c427366","sha256":"3ec8a12103cf9c2e91b9be1329d1e9f1c53043e38a641070650d1b8d07dbbcd2","sha512":"1a52d609a0d5b1688f664612d6fc98846ffc6d0899444651d29b0c076fdc4c6d4ea87a1ea3b97d816c166f3d91bac5e421f7160c6a00872cccb5aa126bcf7ba5","ssdeep":"","tlshash":"85c08cb3a790156b9a1267b1b8106013bbd6571047a78012b047011b1180ea659b8098","size":148,"data":"","first_seen":"2023-04-11T21:38:13Z","last_seen":"2026-06-07T08:17:54.127875Z","times_seen":75321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df58afb431839ddaff814c30a90a5e3d","sha1":"8e910827d7a76a04dc9ca1a902bae57fe2ccf18d","sha256":"833604b29d09f4d09eeb3787feec42547e819f44ae9d8b29a4c69ad3b5c3cff0","sha512":"5ea293dd080fb580ab56459b881e72c7f02ddc00a7ae991ea7053ee7b005348545c147fffebe338c151a2a762a35f6340e2e9c4703339abc3da4b61865a6d56a","ssdeep":"","tlshash":"3be02b64071fa238acfd504b002be14878eea63e941c5cd9cdb9cc1c94f8ce4555d420","size":404,"data":"","first_seen":"2025-02-07T01:03:57.763992Z","last_seen":"2025-08-06T19:51:24.041539Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-20T01:30:22.797282Z","times_seen":94827,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"775ec83531bd18f6c6ecacd27f73e750","sha1":"c45dc2b22cc7f7bc3ed4c2e0fb3ab530f010cd77","sha256":"3f01e5bb682790b9d20e21339b25c5c8c388e0f6aae604a2e6eac0ab4571097f","sha512":"79097f09d2a5a2815aa921ce6c08aea5dac2940f886eb38177da7660cde4fd6af3ff2ad15594c2eb6c0c9f0feb3a8b578ddb6a91d7f854574558d89be2e3a8fc","ssdeep":"","tlshash":"6f012652616380232e1f481b2f2ef54530310017cb8ce3097c2f1fa68f51e46a4b99eb","size":843,"data":"","first_seen":"2023-03-07T14:24:24Z","last_seen":"2026-04-22T02:54:54.145651Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/CH_HomePage.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab86802c328fd99bd7d0d5902bbf8c6f","sha1":"d4ef2bc91b4168f55bf214b21541a1f827ebe16b","sha256":"2013a0f3a4d5fd3ebbc09f5134d51de35893c7a7ab9dd694dddd75809691f0e9","sha512":"df6db56e2a9e602a0ea1b560daef2e7ac5a83c5a7e982285809f3eb9f8eebcb216095b782910624f523a818f56e88ebf517cb411db26fbf5d2aac909add112c0","ssdeep":"","tlshash":"900126a7b18505b4ea9f366b28bf03983c7000292a4ca14579bad22a8470ed57fc7ad4","size":707,"data":"","first_seen":"2024-12-24T05:27:25.193735Z","last_seen":"2026-04-22T02:54:54.012912Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28d6e51bed7ae0ebca8e87c29c921ca7","sha1":"39aee1c16aaef178aec3adfe2df8445b60e0150a","sha256":"a9e184965a689545070f99fa3197d1d1fbcceb5fac8ba65fb1d60b1baa928132","sha512":"0479eac11045ee61f5064823f33198039c3888f4fa893fe3d126486f917793d755e6d6aa63a394bcdd01d2755f04bbfc996dca59e56ba357da9d79e8dcaebc71","ssdeep":"","tlshash":"ca1104763b1a1534cac6414b317ee7a93d3250717e02a044c2accc299d18ed314dfdbe","size":921,"data":"","first_seen":"2025-08-06T19:51:24.04306Z","last_seen":"2025-08-06T19:51:24.04306Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/jquery.bxslider.min.js?v1","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"756c25edfa78f7f3dc992c0a881f14ae","sha1":"756e301789c1ea48bba7324340ffd160f475543d","sha256":"188c40f62e702a0bcc361257b3249fc1823420e7da4d1b551871e1f2a3ef426f","sha512":"6177b0ecc73593b0ce6432f67aacf2909eac5ce8083398b95dfaac5a8c835d98488bb48ac2fdbfbd2ed44c4829466c1bc9b86040b8bef5f653eea6ba469af134","ssdeep":"192:7RbGBHN83BRKmfLblFV7DFjfHsT+3aARMWvPl14AzEJXbv/3xROzOrgWn05KzI8J:96t8W6VVV4xRUwueI8svwruwZ","tlshash":"8992541bb13436fe46b622b1f25dcb487276908ac537f8f861b5d94819e8cc4301badb","size":20013,"data":"","first_seen":"2023-05-09T22:17:11Z","last_seen":"2026-04-22T02:54:53.985392Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/templates/bootadult/js/imagesloaded.pkgd.min.js","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1ee4820e419b7db9e46bac9e6036dfb","sha1":"92359731b85a5169158fcd090f223d5bf32e02bf","sha256":"a45687d15a46bd0c0469f9c3d38b5edb3f3449478bf0a0c4cdca10b48d86c2b9","sha512":"aee500c67a7bda8c33e9e77612ca9f2340c6364b6d01766989eddc3364ad04f01d7a0a1820e8eefb2458e4ca16b3d93cd2ad4ef7a63bd370529fbd2e3639445f","ssdeep":"192:bwmB7GGWyoU6hRSzOrtrqe4nPCTOd9rEY/g6G9sxMt6yG8J9Gc:b7B7GGWykhRSzOrtrinPCTOdl//g1sxo","tlshash":"63e14f8c37a2b52523d6e1b3b12f020fb276805d941c411c7a59e8f22dbad8d5633fb4","size":7424,"data":"","first_seen":"2023-03-07T13:12:54Z","last_seen":"2026-06-13T08:39:03.822743Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7c526d7fb89a963f306bfc241039fb2c","sha1":"7188edcbeb2778fe7f2e6e87fc9bcf5f4904a59b","sha256":"632b6a908598c6854bdb171e19a97a0158c4a715127e02dfc6155a5028cbfb4b","sha512":"dd7bbc7b431a95106495c071d9414bc85b24524906c60d58b7bc25cd6161736425e2654fc01b724a8c90fe4274e499ac2d40dcc76c40ef448db884c821564889","ssdeep":"3072:Q18qvt4fMmOBhcMP3kHF2vs6HB+F0vjq2QZvTytbbw1S:9qvtUMm2cMP3kHF2U2+F0vjasl","tlshash":"8744f9226551253a40ee60b7546b118d223bb6af4d0c8158f672dcec4e7daca347fbbc","size":257476,"data":"","first_seen":"2025-07-03T07:45:17.730095Z","last_seen":"2025-08-08T04:09:19.926512Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95992,"data":"","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-06-19T21:27:06.840726Z","times_seen":25733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/hls.js@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c570d2d9b3811c5303c3350ae535c203","sha1":"9f9838efba83ae2177a9686451c8a3be3499c81a","sha256":"51099ae00ef2b240f95fe145783ede73b8c67de57bfccbed7a5b0fc0a80b74fc","sha512":"c0e04232db9e3c960b9052ff474c0b5806c5635b9bfebffb1a50d1747e68ece3e7ccd12272d3c80b18746a8d9268df6623c0699c16b96ab444c5cfd9e4ad1d69","ssdeep":"6144:pM529ar26+rPpWgr9RzY+i7xdHiUU6P65mbqKxIYj0eBbibE1CHGk9knUa0zrknl:p82fPo+Rz5i7bLbqKxpRqGEZq","tlshash":"4ab439ed36a5a01647c2b169903f5507633a7d0a280dc12cfa2be9cb6d7994db03bf74","size":532589,"data":"","first_seen":"2025-08-06T01:06:31.181546Z","last_seen":"2025-08-07T07:59:32.632295Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js//jquery.tools.min.js?v2","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"20bc9263000912d5a5eb6b9b657cbe25","sha1":"5921588be60dd7373dfab014dcb2b97b2737fa21","sha256":"07927beabc2643e2eac6bd4b5c1b7e817763a24191333956399e8d5bbe808deb","sha512":"5d953089db34a864c04756a457e554aad32adef03941abdecf1d74a857190651e0c7cc9d4511099b52fb2443284d13e16148da643508d333553f9568c033a385","ssdeep":"96:JMiMpiYASRUvjEenPqUUMYx4lRRM2XUXGmy96qneQEylcWj8A199/pNSQC7itRG2:JMiMpZUdnPlKgRDj5eklZj8A19d67pA","tlshash":"dce1fa5df356382a42ebf178a07f910a623606a596c7b025f53dd5c22ff980d0723ed9","size":7006,"data":"","first_seen":"2023-05-09T22:17:11Z","last_seen":"2026-04-22T02:54:54.066655Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"f99e750206fda93216af1a67e33a58ae","sha1":"81e72efc1b682c07bc47fb43bd7b134f2e4e4bec","sha256":"95acef3893c8c6a26783aaf25438815ebd53a9ec967009fcdc4ae0310a13e246","sha512":"de982041df38f7598ccfca6b1283541846d0cf10662471532fc8f3df302b554f71dda00aa8bea657619f9914efc14f00a7e9c7fb24f4500a94bef3f80570b95c","ssdeep":"","tlshash":"60800000c808800000ae0202088002ea00233b000a0c88000ba8feaa802f08830af020","size":27,"data":"","first_seen":"2024-10-04T11:09:22.104016Z","last_seen":"2026-06-19T07:19:45.198645Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"93aaca25ee40d11a403e1cdc86cfdd42","sha1":"5a997e74311e07ab8ee7fc4a8a0e42cf30c74837","sha256":"044b16e36bd56f04f57b95784ed75dba1b3b2fef8730f9b6bd486d06c0e69b84","sha512":"d66fc170efae9ba03a78bcbc6e39301a030eef218ba33072bc07de6ea3c800b1e6cdb34141b7c468631d63a8d1b011328158cbe122dbed924ac58db54e0e2701","ssdeep":"","tlshash":"2ce026537d9bc02c805620d0d1f4e51c800ef308cf82cad982982070b8a0bf93c1814c","size":339,"data":"","first_seen":"2024-06-10T00:08:52Z","last_seen":"2026-04-22T02:54:54.147304Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.heavy-r.com/js/iframeresizer.min.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/iframeresizer.min.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4798\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IibgabQ3MLMpGQgOMWmExySdPsv7jdXAOdGXnOaWs0czedxpQIlKzQ0YEMxyHnatth0q%2BIXQb98g6%2FhtPZXiZmeTQQO8gSfsXZsoDR2geRhOwZxe3ypVoZTxmlHyRSqKYw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 03 Jul 2020 18:11:53 GMT\r\netag: \"2622926071\"\r\nexpires: Wed, 23 Jul 2025 19:09:13 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncf-ray: 96b10d50088356ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2900\u0026min_rtt=354\u0026rtt_var=2499\u0026sent=180\u0026recv=73\u0026lost=0\u0026retrans=0\u0026sent_bytes=157733\u0026recv_bytes=10704\u0026delivery_rate=4087248\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=839\u0026inflight_dur=104\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11909,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11581)","md5":"70b53b598c4ec4b93f95a024010a17b0","sha1":"312c6d466e0b9380423ef2f3d1cb361b94835ce6","sha256":"971c47f1144e3bcaaafbd8ca281cc33a757b858524598ffded485107104575be","sha512":"1a739716702568859705716e8f06bb43b85525a26b2373a0d7acf8ac6fafed5038fd348ba56bcc302af99b1d357fbbc0142f08895f6928146fad5f7a10847f65","ssdeep":"192:OHE7ZH3UHqOeQfw+SXsyWYtpJ1fxOeG6AqshIB7N9cxb6rf:OHE7ZHEHaQY+Scytt/636B1B7Hwb6rf","tlshash":"7d32949e7152b03e669b06b7e0af124f713884a5f50a886045a8f9e87e704b913b7f4d","first_seen":"2023-03-07T21:51:04Z","last_seen":"2026-06-19T17:40:38.381303Z","times_seen":183,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/favicon.ico","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z4XZQNBBYD=GS2.1.s1754509709$o1$g0$t1754509709$j60$l0$h0; _ga=GA1.1.243110635.1754509709\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LAvtJgD0GzrTgVrTRRyj2DliuP%2Fchzl3vLU817o7l7yPqq%2FrQghsL53gZ1OiIxEVkVd3RVQOs33k6fnlN7T8faKjp1Lm4ov9Q8chTmqB2QrLUGb7Zh9J%2FCUlbvSx%2FOHghQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\netag: W/\"4080963554\"\r\nlast-modified: Mon, 11 Dec 2017 19:49:52 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 6825\r\ncontent-encoding: br\r\ncf-ray: 96b10d5aa8fa56ab-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1405\u0026min_rtt=0\u0026rtt_var=1025\u0026sent=248\u0026recv=94\u0026lost=0\u0026retrans=0\u0026sent_bytes=239240\u0026recv_bytes=13593\u0026delivery_rate=6386366\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=25894\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=2338\u0026inflight_dur=198\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5694,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 64x64, 8 bits/pixel","md5":"33f0c08243a6b26a83b8aeb4c9323ac9","sha1":"66906cd97a351a8913b54fb6456d283a04cc6d70","sha256":"c8851a13249532425a5411c908c7909137ab14b5a3bf845f365ff604bd1d17f0","sha512":"82cfa5e8ff0f9e667d565d8fc34e3339db101ae6a0becdc8414db128d807b6f54f263103a7dfe0cfbad6e56c126ddaead09f4d651159fbff3bdbf78f8565d0bf","ssdeep":"48:RZ3PNlEwdZ3Y0nm8WrnSoJeS9KIMPYQAUjRkyTYQP8bMNMK6wFqTC6yLzKCv:/PNiwrY9PhdMAxUjqyTYQPYMKKciHv","tlshash":"b1c180ec01391247e49ee434c8fa9394a3be365b123b290c3db7d7b6a73b984595cc52","first_seen":"2023-05-09T22:17:12Z","last_seen":"2026-04-24T11:58:17.860153Z","times_seen":38,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heavy-r.com/","fqdn":"heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-06T19:48:27.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-length: 0\r\nlocation: https://www.heavy-r.com/\r\ncf-ray: 96b10d4a8b4956be-OSL\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=W9Tmo7H4XpGOwd0Gpg0%2B4DwlPNKpCL65rJOimltYwTWIw1JADxouyWytskGutytAXZDCwoyiGm2NmgCCPuAtIBSBJSqkyU49ptWg875V74MBifduAdcBhTX520h7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5751\u0026min_rtt=488\u0026rtt_var=10491\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3275\u0026recv_bytes=1246\u0026delivery_rate=6378854\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=49d0ec1aa06388a7\u0026ts=268\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92825,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":25,"dns":1,"connect":1,"send":0,"wait":250,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/AC_RunActiveContent.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/AC_RunActiveContent.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1061\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d%2FvQbvJhufjGNDH4DGlybRqZ5I83hjeneg8gLJ%2Fy%2FhjWWez426%2F07wWQFPDmwQYOtw%2BevgV0wMiFneCFkIAmv80k0T8XwfRWFkMMo7RJccuDN1xCiJN6zQGKJsfNdynqWw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 15 Nov 2016 20:03:02 GMT\r\netag: \"2541931386\"\r\nexpires: Wed, 23 Jul 2025 19:09:13 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f987156ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2473\u0026min_rtt=354\u0026rtt_var=2103\u0026sent=185\u0026recv=75\u0026lost=0\u0026retrans=0\u0026sent_bytes=164357\u0026recv_bytes=10794\u0026delivery_rate=4087248\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=917\u0026inflight_dur=128\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3359,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"ae56d02f42b582e11647155fef36ceda","sha1":"0042f7798243c5258a68fdec9c311690275c4711","sha256":"2eb0464eb6c8bdd06125cc5f1de7b6f7ed17d3c06a7634b49e99f3d58811ad10","sha512":"de48885c5aecba892e7ffb1ac8c90a3ea15075154e1bd4a4e9efb4b42936ca3639b4f9fb7cac8c12f810e77faab4ee5bdccaa3b8a411402f7dc8a5194716ac5b","ssdeep":"","tlshash":"35614f60bc25ac2626b3831d8237eaa1fc240687a5da4edf78ece9805fb6114105b9f5","first_seen":"2023-03-07T12:12:36Z","last_seen":"2026-06-19T04:25:05.037832Z","times_seen":177,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/big-clit-or-micropenis-16840.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/big-clit-or-micropenis-16840.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 71913\r\naccept-ranges: bytes\r\netag: \"2578324038\"\r\nlast-modified: Thu, 10 Dec 2020 16:41:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 5466\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2IG3Qe7Cu5HLiwXSWmszkOJKErip5GL7%2FM4%2B3%2FgJETPE8S%2Ff%2F2Ml%2BW8PH2FjbzmrKxBY2DFhFZz%2BWGJjvmDJbGGWs0vVOLkfFx87A%3D%3D\"}]}\r\ncf-ray: 96b10d59ed4ba61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71913,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x225, components 3","md5":"8efa021230c63d67a398c8cbde3dd791","sha1":"660ee74574b3e8923cc31d8a055259e6c4a5565d","sha256":"0638664e4899931c163fddde2e3438a265c7d2991edffb5b554c7e4cd76da547","sha512":"251dc4e7dbb4d3f4069c3981c4bb5a396cb506115423c37b51071d9c11c129558efb2f028df167f370825799bfef483966b3bf711051999cc5dc2bf40a0a411b","ssdeep":"1536:4zHJgaUECaeWpb5JUy4aqEVCLtFzD7UnsAl/WGoavr4T5eb8:0JgaUmesDhqEatlUeGoOr41eb8","tlshash":"cd6302ef51a20a26abcb43743e9905d5f6c0389249afd1a27cdf98c5f021ca547cd62f","first_seen":"2023-06-19T20:11:22Z","last_seen":"2026-04-22T02:54:54.100025Z","times_seen":11,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/0c/9d/f1/0c9df1df7cd6d2f_1.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.828Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/0c/9d/f1/0c9df1df7cd6d2f_1.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1133,"timings":{"blocked":1058,"dns":0,"connect":32,"send":0,"wait":0,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/css/bootstrap.min.css","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 19240\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=szGjHn3sOQskYgP6vgvNFT0wg%2BK8bt3nq6IBnmvIZdojoqDNXke2xTPVk7wcAKEQSZbOzp00PlhXSWYd1i5ufAIMHZuOx08dtMio87ZBJuMDh9fePzjtgPefuPBLbL5QiQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 09 Apr 2017 14:40:35 GMT\r\netag: \"908251226\"\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 3197\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f785e56ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3698\u0026min_rtt=354\u0026rtt_var=4008\u0026sent=103\u0026recv=64\u0026lost=0\u0026retrans=0\u0026sent_bytes=71335\u0026recv_bytes=9428\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=583\u0026inflight_dur=38\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117305,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"eedf9ee80c2faa4e1b9ab9017cdfcb88","sha1":"ed29315e0ffb3f14382431f2724235bf67f44eb3","sha256":"f04b517ba5d6a0510485689a3e42dac000f51640fd71b986804cba178eae42a5","sha512":"ff9296270da6bcc3b664ce5f9dd5715109a954fa9ac59c9845332b5edae9aecc90db3334a3434c8d4d3623c6495de04fb6b9ab3cee0803208246cc9d1b4049a1","ssdeep":"768:byzGxw/jyBQWlJxtQDINHHlgmqITm8qAdwFKbv2ctBDI35UPyu8psYvS1Ft:/w/GLiINHHlgmC8p5b5ZPUpE","tlshash":"06b3d8a0f11031ea7333c55a72d0ed872219a153e66b4eb7f22f25d84f856ca1673f1a","first_seen":"2023-04-05T14:32:16Z","last_seen":"2026-06-20T00:26:24.844694Z","times_seen":9504,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/67/56/ad/6756ad273e28ab5_1.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.825Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/67/56/ad/6756ad273e28ab5_1.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1514,"timings":{"blocked":1449,"dns":65,"connect":88,"send":0,"wait":0,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/multi-tasking-street-whore-17015.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/multi-tasking-street-whore-17015.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 85549\r\naccept-ranges: bytes\r\netag: \"2791011285\"\r\nlast-modified: Wed, 13 Jan 2021 12:47:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 245\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzD2%2BfZA3EvafSxhdmv64SYNpazumOy5vsVJVnHB%2FWr1glwM%2B4eq2Eqn63z5LVOxSl4q82CfptJqz%2BcwnfG42w06tYPby%2BlEyR8I7w%3D%3D\"}]}\r\ncf-ray: 96b10d59dd27a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85549,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x197, components 3","md5":"1cff457048fa41d334014f33a955065a","sha1":"ba4870eebc276f4a5e15925aeddb202e924d6f54","sha256":"bebfe6c716be3636efae6c18de2f005d1600bfd02aa588e4b3f168cd94e0f493","sha512":"e007e220514c0c7a085c5c61034aeb195f71ab60f157df83086a5d06d5926cdb01c004d3f902e9a70a8099ecb000976f94b8a69b48df1aa0cafe617c31b40dcc","ssdeep":"1536:cLYi1vDpOpn0Ws6Do11UEW7aQ4WPlBfQPVJvsv60b13XGB2T4isQyLF1vE0iT:atsp0mKRvftJvBI3XGxiPl0iT","tlshash":"b083120359508c54ef9262d46d6264660d4be9b1f53c274b33d36620ce3683d7d6be3b","first_seen":"2023-06-19T20:11:22Z","last_seen":"2026-04-22T02:54:53.991651Z","times_seen":11,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nriceukwater.org/TGRZOUstBjpUdC1ZOx8+PghkHHkKQWt/LyEealcveQsgTj8/E3daJyMRPV85IwotFyUpEHwLDXwpDgF+AyExagoKADxdexkjAWgdOycfSgQPVxhhCRkUAXMgCjcMbnp0PWhKBw8mKXsJCQg2WyAZMgFoHXgiLncSGg1hdBgaHA5yPDQBEQggPzFocAUEDiF7CgotH2kddCgBf38kPC5JLwQOaGgeIDYBdCcrIA9vJzglIFIGCgo+bBMdDwhpeismAW8oaVYfaCAjKBp6EQo3PkoCKTUfewgeVW5aeyMoGn1yFSUIAQYuNRBNAw0UbWodJyoRYT82Nz4UOAUrMl0ADwo1DAogFwF6DAkxAWgnKigPcA4aDGgPL31UE3oTKyYBXiAGBgh3LRRVHA8dDQgOaAx8IBJoLAACGwAtBFRoCG0mFzZXO3EMDA0ZeFZpazsnFAk","fqdn":"nriceukwater.org","domain":"nriceukwater.org","tld":"org"},"ip":{"addr":"54.240.174.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nriceukwater.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 18 Jun 2025 00:00:00 GMT","end":"Fri, 17 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:B9:C2:B0:80:25:B4:9F:4A:5A:3F:59:7D:8C:EB:E5:24:9E:1B:D3","sha256":"31:53:26:7C:49:16:64:70:ED:2A:C7:35:1F:35:B9:87:88:BA:ED:D7:41:93:4F:5F:26:A6:8A:7D:2B:32:CA:F3"}}},"request":{"raw":"GET /TGRZOUstBjpUdC1ZOx8+PghkHHkKQWt/LyEealcveQsgTj8/E3daJyMRPV85IwotFyUpEHwLDXwpDgF+AyExagoKADxdexkjAWgdOycfSgQPVxhhCRkUAXMgCjcMbnp0PWhKBw8mKXsJCQg2WyAZMgFoHXgiLncSGg1hdBgaHA5yPDQBEQggPzFocAUEDiF7CgotH2kddCgBf38kPC5JLwQOaGgeIDYBdCcrIA9vJzglIFIGCgo+bBMdDwhpeismAW8oaVYfaCAjKBp6EQo3PkoCKTUfewgeVW5aeyMoGn1yFSUIAQYuNRBNAw0UbWodJyoRYT82Nz4UOAUrMl0ADwo1DAogFwF6DAkxAWgnKigPcA4aDGgPL31UE3oTKyYBXiAGBgh3LRRVHA8dDQgOaAx8IBJoLAACGwAtBFRoCG0mFzZXO3EMDA0ZeFZpazsnFAk HTTP/1.1\r\nHost: nriceukwater.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1189\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nset-cookie: AWSALB=QHO7+p2qrboutsXGuGDyIOGb/Q1Y4prGhJQsItpyqK4s7aGt8FLn8nqbEtA7Vfw01u5bUKStGvHVySyAx/xT1j49vOpGTdCsZ+BCZSGfcaUWUEUdxjcQssXZ6sYB; Expires=Wed, 13 Aug 2025 19:48:30 GMT; Path=/\nAWSALBCORS=QHO7+p2qrboutsXGuGDyIOGb/Q1Y4prGhJQsItpyqK4s7aGt8FLn8nqbEtA7Vfw01u5bUKStGvHVySyAx/xT1j49vOpGTdCsZ+BCZSGfcaUWUEUdxjcQssXZ6sYB; Expires=Wed, 13 Aug 2025 19:48:30 GMT; Path=/; SameSite=None\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 52UaeiHZugGQjmFe6pmFtGSxdVk-Y-TqofG0DkG1X1cv8fu8o3eyKg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3038,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3038), with no line terminators","md5":"da4ae47a153defb2232ffe16cd66d4bd","sha1":"a472052a489a80bd86c0caf2eb75762e61c5c43a","sha256":"126b9eb3e5f7b2887939e8ddd5ec5abb9cb97973616c738ae52a8e92bebaf244","sha512":"c33703a6ca985afbbe5573627ea771054bf0221741df81a4005c3040f58f5c6b6f441f465e663d90fcc773a2af0293c5b2f7389ec0a80b011e6e5aaa24bf63a3","ssdeep":"","tlshash":"b651228e34f36082c2f67015053bb99afa285aa0834cdb14863d96bcbd315e9731bf4c","first_seen":"2025-08-06T19:51:23.878781Z","last_seen":"2025-08-06T19:51:23.878781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":31,"dns":6,"connect":3,"send":0,"wait":106,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/templates/bootadult/js/iframeResizer.contentWindow.min.js","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /templates/bootadult/js/iframeResizer.contentWindow.min.js HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=npVRAINZegaR6PiS45y9sfbrFpOOyyxtHHTscV%2BeZghYz1sKfZM4CtxxOSKCgfOWooYCupr5tUTyl9n9BnumdWohzrmdy1xWBGK9hw%3D%3D\"}]}\r\nvary: accept-encoding\r\nlast-modified: Sat, 25 Aug 2018 17:15:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4749\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"416903566\"\r\ncontent-encoding: br\r\ncf-ray: 96b10d59cce9a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13908,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13517)","md5":"d840e34b94ed7ad2ac5d2d6e7e9a8678","sha1":"40248f5541e0de44c6f44f4cadc9970af358d983","sha256":"63b5085014a66af8d0d56afb98bb13f69a4c4f21c3c0e2cc63b30fe8c75a49d9","sha512":"ca84fe83a39c9db33fa536d8e6763ef3388ccf0005c19acf9097dd32e57745dd64e24a43e404ebf80a5b81158ce762532aec4ba522857adec694bbb0bcac6a5e","ssdeep":"192:z4GbOpAkz77CQcwYCws4uol/BBoSoSbGbDl0HIV16wB9CN3uKQw40LndsChRrXzO:sAOp/HScDlqwB9CN3uKD4wzzrXdhBWH","tlshash":"345274dc7292b46e5a4f13bfe2bf160e313948d6a90a5454989cdcd5bd309b90323f8c","first_seen":"2023-03-08T08:05:23Z","last_seen":"2026-06-19T22:49:45.405054Z","times_seen":135,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/d3/e6/c7/d3e6c7fd4c712ca_3.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.807Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/d3/e6/c7/d3e6c7fd4c712ca_3.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1393,"timings":{"blocked":1287,"dns":2,"connect":26,"send":0,"wait":0,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/embed/latest/16/","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /embed/latest/16/ HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: PHP/5.6.40-57+0~20211119.60+debian9~1.gbp8a9bd1\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8n6QZapcaxLJaX4IvI%2BUXayRTCkQCbnGeWoPrp0v1PBV1%2Bf9bwkcA3jIJjBZv2LAylO23b4y0IuXbEHktl%2BLuNndfilvwmli4h3PEQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: ASPro_dd2873a9fe6e33ba2a28050cc0b92a7a=b730978ea0d377d082d91a402dc30332; Path=/\r\ncf-ray: 96b10d5818c2a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":14929,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"87ab747adbfc566cc5cbc62a8cac63bd","sha1":"3884cd712ca1deb83270ea05d8c8d4b3bc2ba33f","sha256":"45e3c71d54aba44eac089640846dd23672a8c48af413ce3e12534c6b8cbc32de","sha512":"a16baa0ba65161e315144a764539f668833d2d53b1b447874e6e7e074e97b83b6db64c838b0b0196cb8b60b9bd3d99a62fb560a53ad5df008e2bafc1fa476d2f","ssdeep":"384:HOedwp1aOroqmxCaOEkGaOWWaOlXaOB0BaOYP7ORaOGz7jaO06aO7SaOm/aO6laI:HOeGQS","tlshash":"f1624161dadd8dbb2b02529285b47688d68fcc33cbb2d463f5fb47994bc5ca5d432022","first_seen":"2025-08-06T19:51:23.885437Z","last_seen":"2025-08-06T19:51:23.885437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":8,"connect":8,"send":0,"wait":64,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/css/myfav.css","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /css/myfav.css HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 924\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DWjxl5w1OsW5al3YNeBs39GassmnwpTskJKkICw5dqT%2Bs6sjJc5CYmWFIt%2FnJcK3OLZ32C%2BgblgTs2of7hQOl5WD6ajvxD07NmbyhGzjTk1Asx3YwWUiwKw59hwhCn%2BQaA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 15 Nov 2016 20:03:01 GMT\r\netag: \"2717861221\"\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 5880\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f886256ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3698\u0026min_rtt=354\u0026rtt_var=4008\u0026sent=108\u0026recv=64\u0026lost=0\u0026retrans=0\u0026sent_bytes=77540\u0026recv_bytes=9428\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=587\u0026inflight_dur=40\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4664,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0053cde773f2ade1c017eb74d956f16b","sha1":"078e8aa985e961fceb461cd1e04495df0b4ec948","sha256":"9c76d495f5b024c96f20c42a56f8542cd9a6023bad2f7bb621dae184ca7ec85b","sha512":"addd1bd93a0d5616c2dcbdf84d3e1913a8c7510ac6e693339270095dd0097b2f0996c4d69348f40dfd39fa27ec85d65e121d4ae5dfd73a1dcaf9e3aa350b6db2","ssdeep":"48:/DezFcIkUYCAbOApBlFlryVt4dNG5ewFVH+pOLFaAv4FMVYqAgayDtCBKexD+ejH:iFjYhhflFlrmOSVLLFJAFMy5bkgGqUVY","tlshash":"9ea1be4f97630a04f4c9e06f7fae12682b49e44b556bc9467e84728ecfc42a9587278c","first_seen":"2024-12-04T21:53:23.935204Z","last_seen":"2026-04-22T02:54:54.090479Z","times_seen":19,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/AC_ActiveX.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/AC_ActiveX.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 635\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Gq4DdsfVJ54ZkWLud2GKTBwRhOPNxbHV7GKR0WGdW9YuFgBmxaaZPTsH4UkEAwOfFwnB%2BLoaSSOkVIzgRw%2B%2BsPD%2FLYXON6jEBDkX%2FxThHrAU0HcUBIveuDvt0vuwy4XLZA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 15 Nov 2016 20:03:02 GMT\r\netag: \"524423034\"\r\nexpires: Wed, 23 Jul 2025 19:09:13 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f987356ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3035\u0026min_rtt=354\u0026rtt_var=2972\u0026sent=179\u0026recv=72\u0026lost=0\u0026retrans=0\u0026sent_bytes=156379\u0026recv_bytes=10659\u0026delivery_rate=4087248\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=771\u0026inflight_dur=83\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2139,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"81b5bf20e7d206c13acb2e9e9fd70252","sha1":"377e5041f872dee823a0869c4b38e1159e0c08fc","sha256":"5f6d023f0ee5598fa3126bc73c225f463b4e428c3a4fe8e4a645ad049005a0fc","sha512":"f777c665a005609663b67330b50e37736f26c4ddda0e93a972c7fad4a86a40ade2172b489a319a355b41ef81c521a500d56791fa269269dc6192e13ebb85420f","ssdeep":"","tlshash":"474152a0ac75ac262572830d823be6a2fd2407c7a2c90edf7cece4845fb7014604b9f5","first_seen":"2023-05-18T10:33:41Z","last_seen":"2026-06-14T11:22:43.101434Z","times_seen":22,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/chick-with-dicks-16985.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/chick-with-dicks-16985.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 135198\r\naccept-ranges: bytes\r\netag: \"161719686\"\r\nlast-modified: Thu, 07 Jan 2021 11:15:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 3478\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AgK2NRUtt3BqNq2y56n0%2FAFiHvOw4gUaI%2B0rEmkZ3%2FbCBzqivZIXAIp%2BKASshubOf05rG6SGWVmkqpSJgRYxkG1bxsITOzQ9tR692A%3D%3D\"}]}\r\ncf-ray: 96b10d59ed36a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135198,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x426, components 3","md5":"56a32f60e4008d168bbd94351e738ef4","sha1":"c52a3aa0770831d01cf0caf6cd34469f7fcb93c8","sha256":"12ad4b49225a6626be718dbee622a3f2c3bc06d3e9b6bcff2225ff2d68b1e5e0","sha512":"98185bedef31942d58fbf9ab21a220d0da0e92786123c6a237aee95b9e75b02b7b9b8a7badc7c4a376f20f6758d6fcb9755e59af0e44c2928848cf176109e270","ssdeep":"3072:gMZs0G1fL1Q2cLrYtQjmdEKZM/Lb1K8C6PQIz:Ds0eiLrYtQaXZM31K7v4","tlshash":"d8d323ddaab9e4b3cb6f622370c163d6c15ff8419ca7294987d84a6cd31502bc4e25c3","first_seen":"2023-06-19T20:11:22Z","last_seen":"2025-08-06T19:51:23.892383Z","times_seen":9,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/8359bcf47b68/main.js?","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/8359bcf47b68/main.js? HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z4XZQNBBYD=GS2.1.s1754509709$o1$g0$t1754509709$j60$l0$h0; _ga=GA1.1.243110635.1754509709\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gfDkvIMe0Z6Us%2BoGStUjC6hf775ad0Zh5xWCL94GPsdo7g3McLGyAtn1bHThSy6FEswfAftLUs7Pmuxe9rDsSbacUXESPt7xEVapxMOyQPJsWYoX5BvVsvRxt%2FdWcU%2BXJA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 96b10d5948f256ab-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1298\u0026min_rtt=0\u0026rtt_var=759\u0026sent=241\u0026recv=91\u0026lost=0\u0026retrans=0\u0026sent_bytes=233693\u0026recv_bytes=13146\u0026delivery_rate=6386366\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=25894\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=2121\u0026inflight_dur=174\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10098,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10098), with no line terminators","md5":"6ed56eb623cd70e00bd6dba8c9e2e115","sha1":"c89b82d510436fea996058ff273950123de82e68","sha256":"4f475bdf45f051d5b6a40295fdc628c503fc220056c511ed1bb67b95440b263c","sha512":"796fd2e61daa817a8eefae11a44a0af6981daab5e12ab897e493fec1028192d2851ca4952a1cdfab99f9ccb9d3699602f556b90411127ea2396a64f80d635c74","ssdeep":"192:ASZuHRDc1cuQ7nvIKfKVhVTzHEZgXUvq6:AceEcu+zfKVX3HEY65","tlshash":"2a220ac77c09bb0f950030f1101f75da1965be8191c85692f1515dacbe26fd8abbef82","first_seen":"2025-08-06T19:33:30.668041Z","last_seen":"2025-08-06T20:23:58.412446Z","times_seen":5,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/fucking-her-pierced-vagina-16810.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/fucking-her-pierced-vagina-16810.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 67542\r\naccept-ranges: bytes\r\netag: \"997786513\"\r\nlast-modified: Wed, 02 Dec 2020 21:54:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 3478\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9eFJmqj600YmcOXlb8752IlvI8UzVYJgTSF4yLtcN3kVDcVDXdDkm49QKqkKjRKZun8EHYfkd377bS646feW%2FYNab2L%2Fu471oBtMwg%3D%3D\"}]}\r\ncf-ray: 96b10d5a0d9fa61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67542,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x196, components 3","md5":"a7a7e41e43db0471b21a327a106c1218","sha1":"2d353f91f1a1e4cc8e55f2b513b691cf44209aff","sha256":"9943259d0937c0b1860f9716971d0b995944629165966acb47fada9ede911fac","sha512":"ad7754f7b7ac5697a3f06a4b3f0c8ebde06764588ec212b6cc9af26d4b101e528e3f049ea842ffd14a088a88fa00afa6d1df4eadf056fd2b31a4236b6d011282","ssdeep":"1536:lUcKgHaTW17rq4apN98hY9eI0i2Mt1puMyReiVtAkU:17HL7W4a2+2MbBy8eAkU","tlshash":"3e6302cceeee8bab69997a916b346513df06439833bce10c5958c193c626036907b48d","first_seen":"2023-06-19T20:11:22Z","last_seen":"2026-04-13T22:34:36.458079Z","times_seen":9,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/cdn-cgi/challenge-platform/h/b/jsd/r/0.14561842821255197:1754507589:g_tmEmCCzYIdpZDl5j_eAIxGo9t894OuOHXFFxJLIH8/96b10d4c2df956be","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.14561842821255197:1754507589:g_tmEmCCzYIdpZDl5j_eAIxGo9t894OuOHXFFxJLIH8/96b10d4c2df956be HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12092\r\nOrigin: https://www.heavy-r.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.heavy-r.com/\r\nCookie: _ga_Z4XZQNBBYD=GS2.1.s1754509709$o1$g0$t1754509709$j60$l0$h0; _ga=GA1.1.243110635.1754509709\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dbPAtn3vlPU2AnmBNQhcJwNXbzX1q7yL1r7HEsaEXfyF7rRi6juFPLaLaJbTzGdw%2B3OAbj79JTMY8qTqf8mRFmQrrV2LM8ee2ESqq%2B9DDi2E1HdkBHOJDw1BRVKVgC3HBQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nset-cookie: cf_clearance=b8QT.K0h5OYOh0i_yK2LTiz3CdzQ6Hc.LxycQjP3Pbs-1754509710-1.2.1.1-4RmkED8IMrozRANBZaZoqE00uQ3nwUBL8oTgrj5LtejS8QTVLBI_iYBLrjmrINzh7HKWIdz1WDMenfsIUEnmv4HKkMiUYUshKUddYAafK2Udqmrd5I15SvKEP.YAaoSYfqOX_vYJWEmyUxagnGwZfX2pMjCAP2D_tZ5cqPR7mgTYmJxrK2Q18V7LP61ltsHAtu9Mb0iewDfLysyIXfYMkA_h9ziTo891QTFf_uD1a78; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=heavy-r.com; Expires=Thu, 06 Aug 2026 19:48:30 GMT\r\ncf-ray: 96b10d5ac8fb56ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1351\u0026min_rtt=0\u0026rtt_var=877\u0026sent=257\u0026recv=105\u0026lost=0\u0026retrans=0\u0026sent_bytes=242163\u0026recv_bytes=26579\u0026delivery_rate=6386366\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=25894\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=2376\u0026inflight_dur=200\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/hls.js@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/hls.js@latest HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.6.8\r\nx-jsd-version-type: version\r\netag: W/\"8206d-n5g477qDriF3qWhkUcijvjSZyBo\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\nage: 25632\r\nx-served-by: cache-fra-eddf8230136-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 159613\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":532589,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c570d2d9b3811c5303c3350ae535c203","sha1":"9f9838efba83ae2177a9686451c8a3be3499c81a","sha256":"51099ae00ef2b240f95fe145783ede73b8c67de57bfccbed7a5b0fc0a80b74fc","sha512":"c0e04232db9e3c960b9052ff474c0b5806c5635b9bfebffb1a50d1747e68ece3e7ccd12272d3c80b18746a8d9268df6623c0699c16b96ab444c5cfd9e4ad1d69","ssdeep":"6144:pM529ar26+rPpWgr9RzY+i7xdHiUU6P65mbqKxIYj0eBbibE1CHGk9knUa0zrknl:p82fPo+Rz5i7bLbqKxpRqGEZq","tlshash":"4ab439ed36a5a01647c2b169903f5507633a7d0a280dc12cfa2be9cb6d7994db03bf74","first_seen":"2025-08-06T01:06:31.181546Z","last_seen":"2025-08-07T07:59:32.632295Z","times_seen":3,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":74,"dns":39,"connect":14,"send":0,"wait":14,"receive":32,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33507\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 06 Aug 2025 19:04:47 GMT\r\nexpires: Thu, 06 Aug 2026 19:04:47 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 2622\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95992,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-06-19T21:27:06.840726Z","times_seen":25733,"resource_available":true,"data":null}},"time_used":586,"timings":{"blocked":258,"dns":11,"connect":17,"send":0,"wait":16,"receive":16,"ssl":257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/a0/1f/0a/a01f0abb97564e8_4.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.824Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/a0/1f/0a/a01f0abb97564e8_4.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1464,"timings":{"blocked":1301,"dns":163,"connect":179,"send":0,"wait":0,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/a0/d8/a8/a0d8a8db8be74f0_4.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.829Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/a0/d8/a8/a0d8a8db8be74f0_4.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1122,"timings":{"blocked":1057,"dns":0,"connect":22,"send":0,"wait":0,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/ae/ce/7e/aece7e770c3e103_6.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.847Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/ae/ce/7e/aece7e770c3e103_6.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1549,"timings":{"blocked":1437,"dns":0,"connect":23,"send":0,"wait":0,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/big-dick-will-destroy-her-intestines-17568.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/big-dick-will-destroy-her-intestines-17568.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 147276\r\naccept-ranges: bytes\r\netag: \"143073156\"\r\nlast-modified: Sun, 21 Feb 2021 18:13:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 5466\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y5m9O0I7CunLwFFStkpskah2br63%2FvyLlavdZBjhJAGWh2Aud%2BoAb1CKzDYr4cU1sSkDeQIgEqerq9XJCIfB%2BWB38OPjRxJGZT7rRA%3D%3D\"}]}\r\ncf-ray: 96b10d59cd01a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147276,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x427, components 3","md5":"7927852dc8d7ad1ea1e15c15812ef45c","sha1":"ac7470b1b9f8418faaa687dfc4a2c2d407b9eec6","sha256":"838719f46168887eccc458d18046a03158eb2084ff4a76dbc72807ae49e4b22e","sha512":"688804381b85b27ad2c2225ab374a79ced7c2ccf0bf2a2a55bc78dbc6090e8d8358be59507fa2fe90fc880aaca1ea251181437a8222b815c1a419ea49ca7f6b8","ssdeep":"3072:IqKpzjdDu5wlLC1QcQREcj62jUVSBq/TguYM9IGqrhOeixDeu0Rvo1S:NKpf321Qc8K7SA/TguYM9Id9ODDbh1S","tlshash":"b1e313a9ea4723b4b86551f0ecf9b562865bc7be151f434a870e59b0c2f6807be024d3","first_seen":"2023-06-19T20:11:22Z","last_seen":"2026-02-18T04:14:46.555208Z","times_seen":11,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z4XZQNBBYD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-Z4XZQNBBYD HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 06 Aug 2025 19:48:29 GMT\r\nexpires: Wed, 06 Aug 2025 19:48:29 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 139579\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":416955,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7897)","md5":"d25ec29f5bcc46eb6b271f2510f8339d","sha1":"4eada180dec0b22a96f873890298625922bc51e5","sha256":"490fd0bf77698441c00861be1845ccebc342ed43e25c0de6276ced1b2be40eae","sha512":"fd38eb9719828ac2ed50d5941a883f7d4eae8715a8c83c22737dbce7aabeee42d4f4980b7d54b170ff26878d04c7861848187c88d852f877d6f87d973418a088","ssdeep":"6144:rpb2xMtlcLYAvlNaB3ETxXP6eUY+BKFgzg:1bm+OvNl+Bosg","tlshash":"ce9408ce73c674269396f478503f018ba97b29a2b49cc89ab1c5cce02d7469a4177f7c","first_seen":"2025-08-06T19:51:23.904957Z","last_seen":"2025-08-06T19:51:23.904957Z","times_seen":1,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":243,"dns":1,"connect":17,"send":0,"wait":40,"receive":41,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/images/webcam_icon.png","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /images/webcam_icon.png HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 510\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nxlvIBtpFDXVopaCuWdE5hlR%2B6ZpCsfg1pqmpt8RBRYUOfu7IoQwWN7tbE4iER5Oj1ls1qb6kEDeAEbplF%2BkVRT90xBcfsEYbpC2yfPejaJRJ504NqOFVI4fUV6JuVhd2A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=1560\r\netag: \"2564103060\"\r\nlast-modified: Tue, 15 Nov 2016 20:03:02 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 3197\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f987656ab-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3954\u0026min_rtt=354\u0026rtt_var=4663\u0026sent=82\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=43131\u0026recv_bytes=9381\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=579\u0026inflight_dur=32\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":510,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 34, 8-bit gray+alpha, non-interlaced","md5":"ef353d6092f0d3a77c03e7f910376305","sha1":"c65c3f75753979e04b8577ae9ebcd1f884b896da","sha256":"e88d2d14f56598cbaf6a44d5e8b922145ba24ce21634ab804e49b4bb2b45b8d4","sha512":"6a54b2b37c1676b77ecb0125648ec48cd4d4b2a756dbb0422e0a96a4bacbffa768b841608a1eb00a1b310d64f154cb8d3af2b533f48a1c8cd7a9f5f04087ee53","ssdeep":"","tlshash":"2ff0054917da3d7d599e63e7048848f4a8e56431073f754c5241e02535d6d8b101e763","first_seen":"2024-06-10T00:08:52Z","last_seen":"2026-04-22T02:54:54.085982Z","times_seen":31,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/eb/7a/99/eb7a99d5611d03f_3.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.809Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/eb/7a/99/eb7a99d5611d03f_3.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1374,"timings":{"blocked":1301,"dns":1,"connect":22,"send":0,"wait":0,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-06T19:48:28.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\ncache-control: max-age=180\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BFVeagdHBwGO5LwiLBxi%2FbAgNN91A1QlsQPcOD6UxPgrerF2d78DQBf%2BXm3R70PzGQPpS2STR37%2Bak4%2Bx0ynq0OCjs9s7r%2FGceDptoqnA8FJpmgDsTvxqWpXPtot7DWQ%2Fw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 96b10d4c2df956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5102\u0026min_rtt=488\u0026rtt_var=9166\u0026sent=10\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=3858\u0026recv_bytes=1327\u0026delivery_rate=6378854\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=49d0ec1aa06388a7\u0026ts=632\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fluid Player","description":"Fluid Player is an open-source HTML5 video player.","website":"https://www.fluidplayer.com","common_platform_enumeration":"","icon":"FluidPlayer.svg","categories":["Video players"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}],"data":{"size":92825,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (426), with CRLF, CR, LF line terminators","md5":"507a7005cd5896e634049140ab1d7397","sha1":"a0d8d70f9269ffa3823126ac60864e96b27c008b","sha256":"73a7f56c02fdb47e5c4237d6a1944e8b041da72b5285aef715555082dcc1a368","sha512":"01055a55d1a7ad83509381e3637d08a449d3037dae061a185566700f75f2ba2a7fbfeed0153142a41a87f10007bedeb1c9f21e40e074d9dd71e8ce15beea8e7c","ssdeep":"1536:pfUFeB4lOktjb3EG2ebfW0QHUJCM5c58zaPLfWXVdUJshg51+o6TDQb4CyfTbG5h:paeB4lOkt149aa","tlshash":"bc93a4b186cc593b062796c61828b71cf2df8d77da32c081f6ff0f419346d92aa1657a","first_seen":"2025-08-06T19:51:23.909092Z","last_seen":"2025-08-06T19:51:23.909092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/css/jquery.bxslider-v4.1.2.css","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /css/jquery.bxslider-v4.1.2.css HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 1193\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=O%2BzWddszyYndZqjCQe6OciGa%2F3aY1SiZkBj7B%2BAupZdvn0RmioeEr4ZJX8XHOk7e2QaxqoyfU%2FMmUh5Nr6Focgwzd%2BLXF64Q%2F%2F2NKqKqPhDj3wkAlxuvqK1EyVL7yqm7%2Bg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 19 Oct 2022 22:44:35 GMT\r\netag: \"2731420745\"\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 5880\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f785f56ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3954\u0026min_rtt=354\u0026rtt_var=4663\u0026sent=92\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=57131\u0026recv_bytes=9381\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=580\u0026inflight_dur=35\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3835,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1f82bee38a098533e1aa121a721d7c2e","sha1":"594c4089b8f49018bcac9ba65bbe271f7ac215af","sha256":"424ad67ca9242f730cc33d1004e3eb5fc0551650996189d4d469de59cba8d9b6","sha512":"0c55c9b49d109042244ab0c7562ce378fafb70eb0bbf39b22694292b2955528efd7238d32843a802793161939cf26bfacaf0fdaafa5f01a0ff5473f6515829f3","ssdeep":"","tlshash":"8981ced11a763d9a611e907c7e99c36d4c2e8063af0f4deee4a5a87d878dbc00273985","first_seen":"2023-08-15T19:57:00Z","last_seen":"2026-06-07T19:48:05.747045Z","times_seen":40,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/images/gaming-18px.png","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /images/gaming-18px.png HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 1669\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7S%2F5mTSPITjn%2FzBcSpl73bEfIpzdW%2BDnbjBy0D4eRZWg%2B4T2%2FThYpOlCFbV64UUVHEnOVZjq2GMRmJ4Tce0PSZ1gIplOYHAvK1HEjJ5sJbtq3KJGSMuZsepSXbghW5eVnQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=4363\r\netag: \"1603733009\"\r\nlast-modified: Fri, 23 Aug 2019 17:51:03 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 750\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f987756ab-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3698\u0026min_rtt=354\u0026rtt_var=4008\u0026sent=108\u0026recv=64\u0026lost=0\u0026retrans=0\u0026sent_bytes=77540\u0026recv_bytes=9428\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=589\u0026inflight_dur=40\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 1-bit grayscale, non-interlaced","md5":"cfa8ea6c4860a01cc2e390a0a24c8a6a","sha1":"d6e4bc48c7771ab835763304160f75f465d70afa","sha256":"fcf79d2a55a96210fbb4ce89c5e9c53dbf05d99d14f9cba9ac7e98cf119373ab","sha512":"66d607ec3021b04321f06974fd0452060a3eac8613fce2c4f0bb77107859bd5e1582c6ff0c538fc94cac894c989ff7e1e9cde640d831f05f3fcd8804ca3a4993","ssdeep":"","tlshash":"7931d86452e737e3e002d4f0b4d068fb57388d12bf1346aaa017de25bb62b487595340","first_seen":"2024-06-10T00:08:52Z","last_seen":"2026-04-22T02:54:53.966832Z","times_seen":31,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/4f/17/f7/4f17f77d428be6c_1.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.832Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/4f/17/f7/4f17f77d428be6c_1.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1128,"timings":{"blocked":1054,"dns":0,"connect":22,"send":0,"wait":0,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/script.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1452\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MrG0KX6CZS7W%2FqpvNPpK0VdxWSu%2BT9W18Lb2oxGwQ42SH1MbMydpcTk1E%2F9avJopbWmnGHSrfd27YqBWnOBuvzGjc23WIJbAxkw4zMv40IOoxSOTFBQcA9kbn4TPrIeVFg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 18 May 2018 11:48:15 GMT\r\netag: \"2453276531\"\r\nexpires: Sat, 02 Aug 2025 09:48:09 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 1070\r\naccept-ranges: bytes\r\ncf-ray: 96b10d50388a56ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3404\u0026min_rtt=354\u0026rtt_var=2981\u0026sent=177\u0026recv=71\u0026lost=0\u0026retrans=0\u0026sent_bytes=154187\u0026recv_bytes=10614\u0026delivery_rate=4087248\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=674\u0026inflight_dur=80\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5441,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"27f47e4806e4bb4760a127115633d279","sha1":"8eb3acd77b4c450033f37b845c850d456602a9f3","sha256":"4d9dfd4f47c9aa853ef1354a7fac5ac8f6d7cf0af38f5b26b2361e6933972fc1","sha512":"15c1e54ee0b21f603459eba17c1f73403c5679b128389a35fab0ed8a1933d016155aa27a29cbf2c174e0ac4357772a5b7cdc9ba6770cade38e9ccaa7bf9b8644","ssdeep":"48:r0YFC3o3QwS4JhnpJyKtGta2Xlpt62YMLoCcHMMPe8dC27RsXql1KPcWHNrxMYWc:r09YD6Kt8VHG9EaKtwTG8NUxNDFZiQ/","tlshash":"f6b1224af3ec7e36513635688d7f518b79bc12239406c80df9bca0907fa6f1524276ae","first_seen":"2024-12-04T21:53:23.977853Z","last_seen":"2026-04-13T22:34:36.364844Z","times_seen":19,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/baby-was-born-alcoholic-17017.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/baby-was-born-alcoholic-17017.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78100\r\naccept-ranges: bytes\r\netag: \"3801812062\"\r\nlast-modified: Wed, 13 Jan 2021 12:49:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 3478\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hTX8DUujzeSnDQn4DvMzSVXWglO8BEoPuSwyoUai4JSevQJWm7J5bWN6qBDOVJ4oi8wrFMvlhovq5GVO0%2FXhAU40OB2hUuWz3jRy8A%3D%3D\"}]}\r\ncf-ray: 96b10d59dd23a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78100,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x287, components 3","md5":"4639fa01ffa73c32a07d4d0eb2fa7b15","sha1":"e30acfb243ff82d808bf7f7f33c42c0f0a17e96e","sha256":"0207efaea68a7f15d073f16f13c618c4712a127d5695fa57f35e10a65246a930","sha512":"b08d18e21d970b5ce2c916ebde37d18b6e074fdd8ba5d2f9003d2ac6f84870ab246a99575bcce8234aaa7ecc7a7aee2d8de613d719c3b2448fb13e348f387488","ssdeep":"1536:Bbh5cicCMAGsuCIBQtwvs7K9CDmGJoGjGaEipHxYZEogoFUBzS:7i4uDsa9gmGJoGSaXNxYoKUlS","tlshash":"dd7302ce238980799ba07eb254c3fb99c1603f6a05ece51f9ad98af4e5551b0308d279","first_seen":"2023-06-19T20:11:23Z","last_seen":"2026-04-22T02:54:54.037798Z","times_seen":10,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/mobile4.js?v=1","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/mobile4.js?v=1 HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1689\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iFG3QHDm5WpIkflSbEH4YIasB1qnCvYjutOgccUtLzKgmT8yOwG3apvMclBtRcxgaOHIWh%2B3uqkXOFCAK91RFilNNRSpv3pURsAyE2ohYOYoXL3pX4sl6KYjFHum2y%2BQvQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 08 Mar 2024 22:36:03 GMT\r\netag: \"1601626216\"\r\nexpires: Wed, 23 Jul 2025 19:09:13 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 1020\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4fa87a56ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3794\u0026min_rtt=354\u0026rtt_var=3968\u0026sent=158\u0026recv=66\u0026lost=0\u0026retrans=0\u0026sent_bytes=135067\u0026recv_bytes=9526\u0026delivery_rate=4087248\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=612\u0026inflight_dur=59\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5489,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2067)","md5":"95a35a677f2508225e02bbfd3f6e526c","sha1":"0a10ca63ecabd4c5623442def95b2e2f15a1018f","sha256":"d80ed621644f28a798839b47a3d177f408050615363a7a48ce85a1d6ef7e351f","sha512":"489a1220d6b30ff0faf2fb4a96cad7da9d632bc0f9b46d134106e0d041bc326a7a2cdb988781120f886aae783884af4ed2c6d78e9316abae5b2cbe9ad5f95786","ssdeep":"96:T5++OICtJxtomlGDWtVAy++OIhtJxtomlGDWtVA/odWMWbnB:1pOICtlomlbpOIhtlomlrDGB","tlshash":"e4b1d8ed7e98c28c446b30ab83ade428d9f6d024ff63c852c1cd25851a75de1cd2b89c","first_seen":"2024-12-04T21:53:23.972899Z","last_seen":"2026-04-22T02:54:54.08201Z","times_seen":21,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ded6443-edge12.bcvcdn.com/hls/stream_ParisSaintGermain/public/stream_ParisSaintGermain/l_19872901_3815487_1906.ts","fqdn":"ded6443-edge12.bcvcdn.com","domain":"bcvcdn.com","tld":"com"},"ip":{"addr":"195.85.23.248","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:31.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ded6443-edge12.bcvcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 06:13:42 GMT","end":"Tue, 28 Oct 2025 07:13:40 GMT"},"fingerprint":{"sha1":"FD:E6:64:D0:44:79:11:E4:F9:AD:BA:CA:17:06:37:E5:E4:0F:EF:0F","sha256":"74:E3:B2:CF:2A:A3:34:C3:AE:CA:5B:57:05:9A:F9:50:E5:A3:B5:30:22:B5:3E:7E:5C:8D:CF:FE:8F:7C:60:9A"}}},"request":{"raw":"GET /hls/stream_ParisSaintGermain/public/stream_ParisSaintGermain/l_19872901_3815487_1906.ts HTTP/1.1\r\nHost: ded6443-edge12.bcvcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nOrigin: https://www.heavy-r.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:31 GMT\r\ncontent-type: video/m2ts\r\ncontent-length: 584680\r\ncache-control: max-age=35\r\naccess-control-allow-origin: *\r\nexpires: Wed, 06 Aug 2025 19:49:04 GMT\r\nx-bng3: MISS\r\naccess-control-allow-credential: true\r\naccess-control-allow-headers: Content-Type, User-Agent, If-Modified-Since, Cache-Control, Range\r\naccess-control-allow-methods: OPTIONS, GET, POST, HEAD\r\naccess-control-expose-headers: Date, Server, Content-Type, Content-Length\r\nlast-modified: Wed, 06 Aug 2025 19:48:29 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96b10d607971ebcd-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":584680,"size_decoded":0,"mime_type":"video/m2ts","magic":"MPEG transport stream data","md5":"b7e9bb514059fb3a641fcb7594db3d49","sha1":"e0155c9d53872fc4d165943f0a3cd1a022c8e024","sha256":"8b0ac1338708e448d37b659adf6f56ead16b4b750afdb6f3bac77c1968c97d0e","sha512":"0cd1a5a8756a43fc56aa10f0b95321bdb11c9915c4b0724ad74b396855b8328ea2baf6a9763d717e42887b1613e004d77d94b3b52a4e4d55b96c3f62e69856ab","ssdeep":"12288:CRRNbmPZrRmeIfIGbtx+e8cQsMSpGYJWHXSCAte2UxNO0+:CRRN6BrRmFfZScfMMG3HirFUm0+","tlshash":"c9c4230b3a75ece78d7056e321c4906293572e95cf8c27771953b22ceaf82d4da1a17c","first_seen":"2025-08-06T19:51:23.919652Z","last_seen":"2025-08-06T19:51:23.919652Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.quixova.com/loadeactrl.go?pid=22329\u0026spaceid=11682868\u0026ctrlid=12433","fqdn":"live.quixova.com","domain":"quixova.com","tld":"com"},"ip":{"addr":"46.166.186.6","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live.quixova.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 21:02:08 GMT","end":"Mon, 27 Oct 2025 21:02:07 GMT"},"fingerprint":{"sha1":"6D:33:8F:01:57:1A:20:CB:F1:26:2D:B8:C8:92:C0:E3:EC:6A:7B:69","sha256":"9F:9C:F2:F3:F8:80:A2:F5:C4:B9:C7:C7:DB:2D:35:FA:F5:CE:D6:DD:03:9D:CD:38:B0:DC:9C:26:A1:0F:75:65"}}},"request":{"raw":"GET /loadeactrl.go?pid=22329\u0026spaceid=11682868\u0026ctrlid=12433 HTTP/1.1\r\nHost: live.quixova.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 60308\r\ncontent-encoding: gzip\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token,X-CSRFToken, Authorization,sentry-trace, baggage\r\ncache-control: public, max-age=3600\r\nx-backend-server: go-web-12\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150437,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bdf32f4372add5bc80e751286bc717c2","sha1":"c95e848fd72cb0cd51da3d47fd956870f04329c9","sha256":"d1f4bf9b82bfd484d035cd707d7420d7e4dbcf0594dffc3136e2eb84ddd73482","sha512":"e57ade0c128cfcf434ca1be397ab2ec2283d86925765341e40fbf9dc2edb48fe91b15c892151179471d591e08b49bcc8921b6188c2165895b2f6243e6bf809a6","ssdeep":"1536:1aqt3CjG6tWlcwqbz91gcOR93qsPqsIkr1MnR8qlxkYun1NyJo/Mi2DfN/Pbf1Qu:wtWhqMSsIkJkKgunfGhJ/PT1v","tlshash":"bbe35b2f383d262a07d1b5a76b8bc08d7fe614d664b210b6f912ec0e87647dc61172ed","first_seen":"2025-07-13T10:35:17.691989Z","last_seen":"2025-08-06T19:51:23.922954Z","times_seen":2,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":94,"dns":47,"connect":19,"send":0,"wait":36,"receive":30,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/big-black-guy-is-going-to-destroy-petite-teen-16874.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/big-black-guy-is-going-to-destroy-petite-teen-16874.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 135653\r\naccept-ranges: bytes\r\netag: \"1312074771\"\r\nlast-modified: Fri, 18 Dec 2020 15:46:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 5466\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2KNlg4rLaZk7gPiXBgv7wGfEOMqKp5AA%2BMVEUwRP1j069j%2F7RxkSdyWMKR2al8dVgv8hsz6NBA9a6Lmm%2FF63Q4MDIZdepXQbP%2B8yxQ%3D%3D\"}]}\r\ncf-ray: 96b10d59ed3ba61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135653,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x381, components 3","md5":"b75f84cbf254dafac6c251d48dd40506","sha1":"d904c29da7e170858793cc89d45e6dab0f40ce6c","sha256":"f3fe09782890c113cc0a4386a5fea3e8229d940e9720a71538d5bd63459c2053","sha512":"cd629efa34800106955266cdca0e2b6f8d18dd9bd5a86b4ed08428ab21905d8172586c6d98b3180bf3f869e0c2954f62fea24aa2e149e2d0dff8459f9cd57c41","ssdeep":"3072:VP1xFb6O+TRz4dtvB2hLHZdouQ4z72llDaPog:4x4ddBWLHbou5P2llYog","tlshash":"95d312c78622a20fdb571b6123a3e6d477c66086866c4c5f62afb68df04c7b1721361e","first_seen":"2023-06-19T20:11:22Z","last_seen":"2026-04-22T02:54:54.091431Z","times_seen":12,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/jquery.form.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/jquery.form.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 12297\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=V2zVT9j3zbqZMAR%2Fva0vFrmLcR%2FuM3uxl%2BDIY7xUevoMAvlYIZdmTgDfEf%2FaXOxCMquU%2FjwpJg5%2FQcaCesBg2nCglQvketIpTnp2LJSla5FKD0Gq4I8g3%2Fzn%2BOQv8u%2BW1Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 19 Jul 2020 07:12:41 GMT\r\netag: \"1000751821\"\r\nexpires: Wed, 23 Jul 2025 19:09:13 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 5880\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f886a56ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4806\u0026min_rtt=864\u0026rtt_var=5560\u0026sent=59\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=15926\u0026recv_bytes=9288\u0026delivery_rate=676753\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18054\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=574\u0026inflight_dur=29\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45171,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"6d8dfb1ba020ecc50493ebfe4413fda2","sha1":"89f426be1294699e9ab05cf4dcb16857c99e72b9","sha256":"14c604a1099b520998a7f3e7b8105e1a679f3aa7f6f519af6609c72c46b63de1","sha512":"0d00a8a53f1937a1e5b41c980f44b9c36144f9fb4d27879a66ffc475bba3e3e40810773b7199fe300f22a0417b84f39deb09f0e1656a41a727a8f437423df16d","ssdeep":"768:ageuCP6yeJr/5t31aPw6MdOGuKeockAty3YQiMOIm8E77VMDz/iVG7tPtEtVaYAC:R+P6yeJr/5t31aodveoc/QIQhOJ7VMDm","tlshash":"9413954a798a12a2193377b9cfab910dfb7a91370201d1517d9c52d12fb0ca492f6fec","first_seen":"2024-12-24T05:27:25.17991Z","last_seen":"2025-08-06T19:51:23.924762Z","times_seen":16,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/9a/d6/63/9ad6630e2a8b7f1_1.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.790Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/9a/d6/63/9ad6630e2a8b7f1_1.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1418,"timings":{"blocked":1220,"dns":198,"connect":222,"send":0,"wait":0,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/images/closeable_widget-jerkmate-logov2.png","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /images/closeable_widget-jerkmate-logov2.png HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z4XZQNBBYD=GS2.1.s1754509709$o1$g0$t1754509709$j60$l0$h0; _ga=GA1.1.243110635.1754509709\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 5657\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4Sgy3RMoJYG1ct5bnp051EED%2FmH%2FxtDg948JxXJJyCQDMMHUaMi5LPiHzvWtpK1D3E8tbziz2qte7NaGswsFTRge8rKpm2P%2F69SwGoIi%2BYtKiLV%2FSZwhwWmgwou8lE5%2BAg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=5718\r\netag: \"3096772754\"\r\nlast-modified: Fri, 14 Jun 2024 22:38:30 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 5881\r\naccept-ranges: bytes\r\ncf-ray: 96b10d57d8ec56ab-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1272\u0026min_rtt=0\u0026rtt_var=1047\u0026sent=233\u0026recv=87\u0026lost=0\u0026retrans=0\u0026sent_bytes=226442\u0026recv_bytes=12382\u0026delivery_rate=6386366\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=23826\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=1904\u0026inflight_dur=150\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5657,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 387 x 94, 8-bit colormap, non-interlaced","md5":"80f8c682dddce601b0da3d0aed7a20be","sha1":"fcbd029445e81ef06e2eb992c146272c10037bbf","sha256":"fb2d331b54b62da1401beceaccdab635225eaf979f7926e68676cd83af63573c","sha512":"ea877726044d1ecfc4eff2971127d6eed32b35745d93d1976344f1bf56207b1dca94933e69d24069a6b7bb30f31e71f9ada06dddb34d213722c279fe4a1147ed","ssdeep":"96:sQ0Ujw1CEa72r5pwj0vI4VtuLvWStVIBNntxenZ1mulU7hEJRSguFWHyb7vtOkhG:SEcCO5pwAvI4vplB2nlIOg8Hevrjc","tlshash":"31c17cd4bbb08c1c5a8eb52f668fb28502c6aa1432408ae609b72be84b56050ba28540","first_seen":"2024-06-18T10:12:01Z","last_seen":"2025-08-06T19:51:23.925775Z","times_seen":27,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/a2/0b/93/a20b93cdb5c3b0c_2.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.793Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/a2/0b/93/a20b93cdb5c3b0c_2.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1240,"timings":{"blocked":1093,"dns":147,"connect":169,"send":0,"wait":0,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/2c/12/e5/2c12e528433f23b_3.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.806Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/2c/12/e5/2c12e528433f23b_3.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1413,"timings":{"blocked":1229,"dns":184,"connect":215,"send":0,"wait":0,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmz3nd5oywtsw.cloudfront.net/0MW85OEhSAFded0UGXQVwCFsOC3AXBUpXJkFSUW18Y1sLCBpBBElobkUVXQV4FwNYVi8MSVxWKwxeH1ksU1INHjxBAFIFPV8LXF4hXwpdHj1QUlRXMlgDVVltAykMFngUXQkQP1gBXVc/QkoLCCZFSgsIeQFBCR17c0oLCD9YAQ8MbQItHAp4SVkNHXtzSg-sIOkdKCnl5AlsXCGEUXQlfLVIEVh16d10JCXgBXgkJbQNfX1E6VAlWQG0DKQgLfB9fH011","fqdn":"dmz3nd5oywtsw.cloudfront.net","domain":"dmz3nd5oywtsw.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.31","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nriceukwater.org/TGRZOUstBjpUdC1ZOx8+PghkHHkKQWt/LyEealcveQsgTj8/E3daJyMRPV85IwotFyUpEHwLDXwpDgF+AyExagoKADxdexkjAWgdOycfSgQPVxhhCRkUAXMgCjcMbnp0PWhKBw8mKXsJCQg2WyAZMgFoHXgiLncSGg1hdBgaHA5yPDQBEQggPzFocAUEDiF7CgotH2kddCgBf38kPC5JLwQOaGgeIDYBdCcrIA9vJzglIFIGCgo+bBMdDwhpeismAW8oaVYfaCAjKBp6EQo3PkoCKTUfewgeVW5aeyMoGn1yFSUIAQYuNRBNAw0UbWodJyoRYT82Nz4UOAUrMl0ADwo1DAogFwF6DAkxAWgnKigPcA4aDGgPL31UE3oTKyYBXiAGBgh3LRRVHA8dDQgOaAx8IBJoLAACGwAtBFRoCG0mFzZXO3EMDA0ZeFZpazsnFAk","date":"2025-08-06T19:48:30.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /0MW85OEhSAFded0UGXQVwCFsOC3AXBUpXJkFSUW18Y1sLCBpBBElobkUVXQV4FwNYVi8MSVxWKwxeH1ksU1INHjxBAFIFPV8LXF4hXwpdHj1QUlRXMlgDVVltAykMFngUXQkQP1gBXVc/QkoLCCZFSgsIeQFBCR17c0oLCD9YAQ8MbQItHAp4SVkNHXtzSg-sIOkdKCnl5AlsXCGEUXQlfLVIEVh16d10JCXgBXgkJbQNfX1E6VAlWQG0DKQgLfB9fH011 HTTP/1.1\r\nHost: dmz3nd5oywtsw.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nriceukwater.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 331\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\ndate: Wed, 06 Aug 2025 19:48:29 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: FELFdbnLdtRTbylEbBqQaAam0tvHWS-d28-9pvCgITQaT1pTVbnAIg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (420), with no line terminators","md5":"95dfeea5f6f83c713c17f572e6adcf71","sha1":"f8a9170cf4e561a7133237025857995e39c170b6","sha256":"3363ec1f9539879f531d413e8415f48671dba90d9986ced80539943ad8ee54e3","sha512":"5f9630d0c3bd64be7be054d8d4fd0fef3e3808d5401c13a1fc57ad301b7c63ea1e19a1c3b5d9279fa976a9766c662507a354c5bbfa5d2a1156eed4ee2f25a2cd","ssdeep":"","tlshash":"b8e0ab7c3860ea59acd79016a3ace45acbc560cc14018e4656122a283f0d99e2f48240","first_seen":"2025-08-06T19:51:23.929456Z","last_seen":"2025-08-06T19:51:23.929456Z","times_seen":1,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/CH_HomePage.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/CH_HomePage.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 315\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GPm7kmPO1VWsKhf%2Bnlyu0G9pVJlW%2BPKnFLvgCk5VRv2OkCasP7LVAH15uVePW98tywMOyIqtexiGrmeOs1Aec8ZOzIPaZIhcEUNAu6%2BCk%2BufSSCgUaFCsIr6UiYa29CnbA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 15 Nov 2016 20:03:02 GMT\r\netag: \"640092577\"\r\nexpires: Tue, 29 Jul 2025 22:17:29 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f987456ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2585\u0026min_rtt=354\u0026rtt_var=2504\u0026sent=184\u0026recv=74\u0026lost=0\u0026retrans=0\u0026sent_bytes=163328\u0026recv_bytes=10749\u0026delivery_rate=4087248\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=869\u0026inflight_dur=107\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"ab86802c328fd99bd7d0d5902bbf8c6f","sha1":"d4ef2bc91b4168f55bf214b21541a1f827ebe16b","sha256":"2013a0f3a4d5fd3ebbc09f5134d51de35893c7a7ab9dd694dddd75809691f0e9","sha512":"df6db56e2a9e602a0ea1b560daef2e7ac5a83c5a7e982285809f3eb9f8eebcb216095b782910624f523a818f56e88ebf517cb411db26fbf5d2aac909add112c0","ssdeep":"","tlshash":"900126a7b18505b4ea9f366b28bf03983c7000292a4ca14579bad22a8470ed57fc7ad4","first_seen":"2024-12-24T05:27:25.193735Z","last_seen":"2026-04-22T02:54:54.012912Z","times_seen":9,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/4a/b1/cb/4ab1cb9c2809e66_4.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.827Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/4a/b1/cb/4ab1cb9c2809e66_4.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1326,"timings":{"blocked":1059,"dns":267,"connect":293,"send":0,"wait":0,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/images/closeable_widget-close_button.png","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /images/closeable_widget-close_button.png HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z4XZQNBBYD=GS2.1.s1754509709$o1$g0$t1754509709$j60$l0$h0; _ga=GA1.1.243110635.1754509709\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 785\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zXwMBTfR9U0erJkBoako3tegI45TxZIwZTvbAlahNl3bdpdlHMeZ6PAYImXqw%2Bgr7Fu1JC56gnNXqVfnkEviflt1B1h37QtyS9D%2F8mNfH2IBgSzZhDRPu3RvztMu8LDlLw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=955\r\netag: \"129016558\"\r\nlast-modified: Mon, 13 May 2024 19:48:33 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 5881\r\naccept-ranges: bytes\r\ncf-ray: 96b10d57d8eb56ab-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1191\u0026min_rtt=0\u0026rtt_var=1179\u0026sent=231\u0026recv=86\u0026lost=0\u0026retrans=0\u0026sent_bytes=224911\u0026recv_bytes=12337\u0026delivery_rate=6386366\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=22295\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=1898\u0026inflight_dur=147\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced","md5":"2ca6658da4018b3163ed066de935e3c8","sha1":"e0b0fca7db4a4a29cd86e794f5c3211fdd343d63","sha256":"16820ea4ac5fb7e77b971c25aa71bd0ce4ba1d204de3827e6355d42e51686a09","sha512":"f2d34cec5619901f39fa267e0a439f9f3c8b40308435c1f48662e24b132782d6840d4fe5b70872d7fe65424aa26fc6e5da381e28f941352dc3b55bcb8a84a921","ssdeep":"","tlshash":"5a0175d60053b582ea970e7ad88ae0ecfd73427e0252ed9cc553400e65b9720a674306","first_seen":"2024-06-10T00:08:53Z","last_seen":"2025-08-06T19:51:23.934466Z","times_seen":29,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/teen-showing-her-tiny-pussy-16986.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/teen-showing-her-tiny-pussy-16986.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 140292\r\naccept-ranges: bytes\r\netag: \"10719328\"\r\nlast-modified: Thu, 07 Jan 2021 11:16:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 5466\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BLDcQVijF2dZYCr7WvO37gDKHnu2vME%2BnvOSUVqG%2FuolC%2BV%2BhJNTvPIOU6iXbiD1pZu%2FT0IhJBSxPdqfC3MbqJyhZdUFEZDC4e17SA%3D%3D\"}]}\r\ncf-ray: 96b10d59dd33a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140292,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x441, components 3","md5":"ed91e36edfba9efb93b8a29b3de8c685","sha1":"9f152451eb92eb694cb89bda1e1a523d74826bee","sha256":"1c662f321899664522a1ec07ea626d41a13819aee576ae168e3750b583d76fee","sha512":"bd16241b3e12ad788136248f51bd05c0c8afa66c8158ff73170ab5fc6cf25d16dbc6b4d37b91d2b9555d877fd987c8d1f283f1921987ac821183819eb04cc0bb","ssdeep":"3072:zbwk+5J5PGkqMZftPBxs8FIQLMaPDsWoXEhKpUG38OC+uA78jL2be5gQc8:z0k2XdFIQLZPQT0cpT38O8hdtc8","tlshash":"d4d312855fa395b492bfffa7787fa8b22576c5e8080ec3678c6d620ad20b01d4c49719","first_seen":"2023-06-19T20:11:22Z","last_seen":"2026-02-18T04:14:46.567781Z","times_seen":11,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js//jquery.tools.min.js?v2","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js//jquery.tools.min.js?v2 HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2754\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CKHVZudrgCd%2B%2FYGOG5vYVD2Eb%2F2bo0ThhPD17lwVXxbAsKKY6mD8dPGo%2FfaZo3M1iqGHTTzCnms3kMNxIDI%2FsCf8pv5n1%2FhSEM2WLS16GdRtnmRj%2BwAVfpxD93T7XxtBlA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 29 Mar 2023 20:19:03 GMT\r\netag: \"1839270015\"\r\nexpires: Wed, 23 Jul 2025 19:09:13 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 1070\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f886956ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4806\u0026min_rtt=864\u0026rtt_var=5560\u0026sent=53\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=9255\u0026recv_bytes=9288\u0026delivery_rate=676753\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18054\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=572\u0026inflight_dur=27\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7006,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3997)","md5":"20bc9263000912d5a5eb6b9b657cbe25","sha1":"5921588be60dd7373dfab014dcb2b97b2737fa21","sha256":"07927beabc2643e2eac6bd4b5c1b7e817763a24191333956399e8d5bbe808deb","sha512":"5d953089db34a864c04756a457e554aad32adef03941abdecf1d74a857190651e0c7cc9d4511099b52fb2443284d13e16148da643508d333553f9568c033a385","ssdeep":"96:JMiMpiYASRUvjEenPqUUMYx4lRRM2XUXGmy96qneQEylcWj8A199/pNSQC7itRG2:JMiMpZUdnPlKgRDj5eklZj8A19d67pA","tlshash":"dce1fa5df356382a42ebf178a07f910a623606a596c7b025f53dd5c22ff980d0723ed9","first_seen":"2023-05-09T22:17:11Z","last_seen":"2026-04-22T02:54:54.066655Z","times_seen":43,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/jquery.jcarousel.pack2.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/jquery.jcarousel.pack2.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4169\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=y%2BsnL4bs3SmRq6OiLBFi%2Fh0imPgFZDJ4dyl37%2BVfFGKNBnB35BfUBn%2F6bNZ%2BjDJ1DxhLZztkZIX92q1lRaDaSZfe%2BYzlk9SU8SR%2BOsim08JpLBfKIG5Z2yhqbswtStEjnw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 15 Nov 2016 20:03:02 GMT\r\netag: \"975768959\"\r\nexpires: Wed, 23 Jul 2025 19:09:13 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 5880\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f886b56ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3954\u0026min_rtt=354\u0026rtt_var=4663\u0026sent=71\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=30856\u0026recv_bytes=9381\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=576\u0026inflight_dur=31\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8882,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8487)","md5":"61baa5a36e1b7b86ca7d83f0ec86f724","sha1":"bf5e0de64b18cb38abe65d546c1f561ae0ab955e","sha256":"56dd207fbbd3fd93160aaded42575b7c5494b3a8fa61730f3f8e7a5ccf71aef1","sha512":"5059f5a0b70b914ec8c6da11c32bc51838fbcd187b9f9e861e7dba83eddc30d28cf91c42d19aece7aa795a612f39a502a6803b74325f6dee9746d8351a11656a","ssdeep":"192:bJCxoPQ45x8GqO5Sq/LQEGsFd4ewF+a6WwMDQ0VaeQ:bYoPQ9O5Sq8VEaP9Q43Q","tlshash":"f902a879340b0d5b3bd3d29b1868075cbb584767aabfa0a19d78d567307c86102f93cb","first_seen":"2023-03-09T11:30:02Z","last_seen":"2026-05-30T15:22:13.079978Z","times_seen":67,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/CH_Ajax.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/CH_Ajax.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1463\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vcfYvYlvedHujlNvE5j%2B0dgLWOi6ZQdAq9nxqWHDmaeXRP9Qaw3KBdjCwhD0r9JYc0GVifbrGXpPkwt2x3YprcmzFGntalCM%2BY3RxGV4F%2Bt6q73sTWnDa7UFlZb4V%2BFERg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 18 Oct 2017 04:28:37 GMT\r\netag: \"902188345\"\r\nexpires: Sat, 02 Aug 2025 09:28:47 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 3197\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f986d56ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3698\u0026min_rtt=354\u0026rtt_var=4008\u0026sent=108\u0026recv=64\u0026lost=0\u0026retrans=0\u0026sent_bytes=77540\u0026recv_bytes=9428\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=589\u0026inflight_dur=40\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4539,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"d1f9fe89f4d728cf9f134f443b0dc5d5","sha1":"9a1e67a398743becb354f1b97d2379e9274dd551","sha256":"1257facc8259c1d15a2b1f2fd5d3c4373a4d5ea5a0077336305b74def91a02ec","sha512":"e067876f8f895a53540166c83e652469a83a70f2f8c9c9c34a839c3038d95ea4363072b3807217ae1f61b5ac396e024cb2d5d6d27b8088f5d91be883a92d012d","ssdeep":"96:4niJpEScr73B+w9wreOSploU/Qp3D00Uojli58iI2xioyvcyb7I4:xhAR+8ayvS3jliKiI2xi9E4","tlshash":"8391941a70ce094a538633a0053e5c49fe7ce222c826c9e6f654ca9e77f0f14736b798","first_seen":"2024-12-04T21:53:23.952974Z","last_seen":"2026-04-22T02:54:54.015609Z","times_seen":21,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:29.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Feb 2025 00:00:00 GMT","end":"Thu, 27 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"24:45:97:41:80:9C:3B:CE:BB:C3:B5:53:C5:0D:8C:BB:21:C9:56:20","sha256":"5F:96:09:03:1A:50:90:73:9C:60:3F:2D:35:D7:F2:4D:95:02:C6:38:BC:AB:88:FA:78:A4:8B:85:16:CB:F0:57"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 06 Aug 2025 19:48:30 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Fri, 07 Mar 2025 18:31:37 GMT\r\nConnection: close\r\nETag: \"67cb3b89-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-17T22:25:48.855368Z","times_seen":2527,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":146,"dns":6,"connect":33,"send":0,"wait":35,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/human-blob-17016.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/human-blob-17016.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53868\r\naccept-ranges: bytes\r\netag: \"2260409134\"\r\nlast-modified: Wed, 13 Jan 2021 12:48:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 3478\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YdLVrZAVVxVLOvlz63z1pSPsdNqOa7PCTDfqJ8DizdFrTdu%2Fp7O3%2BuagLLvgXIA2LJdutXfAKBFXPtO5bUpJjiKP%2BvOHZkCWOdxPmQ%3D%3D\"}]}\r\ncf-ray: 96b10d59dd24a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53868,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x161, components 3","md5":"4743b4ec7ac0aa5f2fd7d3501a663b30","sha1":"a50dfb985a633494bc6f42f5b320e5ce32e4b83e","sha256":"4206d8296f9bbaea216b82e54718b07004caa069d2d0c3849d4f0b411da44469","sha512":"fe6e12212e429729d31518f26849c9d2276cbb9638863340efd1bb201b377ee9495a7abd1c568dbe8a7718e34f96ea9fd205393c1098a9db7a77c41a09070c17","ssdeep":"768:4ZtDsCaB3zAuWL0oRUBkvL1MAswJmcbroXWEO0/RiHzQl4Y7rAsZ3ADMMiy2idNo:4X/aBjAtLJ8kJUWEO0wEl73P9cFiHt62","tlshash":"de3302eb8e516ebdd2b348f24a76c3984d0cb1d5b9af001f49540762fad6258b281f03","first_seen":"2023-06-19T20:11:22Z","last_seen":"2026-04-22T02:54:54.020607Z","times_seen":10,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.quixova.com/static.go?type=css\u0026file=slider","fqdn":"live.quixova.com","domain":"quixova.com","tld":"com"},"ip":{"addr":"46.166.186.6","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live.quixova.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 21:02:08 GMT","end":"Mon, 27 Oct 2025 21:02:07 GMT"},"fingerprint":{"sha1":"6D:33:8F:01:57:1A:20:CB:F1:26:2D:B8:C8:92:C0:E3:EC:6A:7B:69","sha256":"9F:9C:F2:F3:F8:80:A2:F5:C4:B9:C7:C7:DB:2D:35:FA:F5:CE:D6:DD:03:9D:CD:38:B0:DC:9C:26:A1:0F:75:65"}}},"request":{"raw":"GET /static.go?type=css\u0026file=slider HTTP/1.1\r\nHost: live.quixova.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 3419\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=3600\r\nx-backend-server: go-web-12\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8903,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2559)","md5":"cc1873f3432a05062e45176e685dbe3b","sha1":"8343daee26200382a02f0c1c1295a744b87931ca","sha256":"6e5f5448522bfc58655f0fe84c9169c9d4793932224b97d9471be6d67f182463","sha512":"61a91491207283179bfff4d33321d2b8615fae30ae06f06cdc6e0fae0b47cd75185e2cf7dbfdf3649cc5223469af6f08257f29bacc781f55daa436a96ebbced2","ssdeep":"192:QnKeuKJFK3PyuP0Fv+SK8GxPyCPK4uP3RPO55fS2lOBURFQRUsurUNxiTk68B:8RPOLfZlOBaFQRDNE4B","tlshash":"0802da116dbb2808423e669187dfa60c9b1cd0c361dbcd9efa6d1ec5ef44174368b758","first_seen":"2024-10-04T11:09:22.06243Z","last_seen":"2026-02-07T02:52:35.069785Z","times_seen":112,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ded6443-edge12.bcvcdn.com/hls/stream_ParisSaintGermain/public/stream_ParisSaintGermain/l_19872901_3813487_1905.ts","fqdn":"ded6443-edge12.bcvcdn.com","domain":"bcvcdn.com","tld":"com"},"ip":{"addr":"195.85.23.248","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:31.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ded6443-edge12.bcvcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 06:13:42 GMT","end":"Tue, 28 Oct 2025 07:13:40 GMT"},"fingerprint":{"sha1":"FD:E6:64:D0:44:79:11:E4:F9:AD:BA:CA:17:06:37:E5:E4:0F:EF:0F","sha256":"74:E3:B2:CF:2A:A3:34:C3:AE:CA:5B:57:05:9A:F9:50:E5:A3:B5:30:22:B5:3E:7E:5C:8D:CF:FE:8F:7C:60:9A"}}},"request":{"raw":"GET /hls/stream_ParisSaintGermain/public/stream_ParisSaintGermain/l_19872901_3813487_1905.ts HTTP/1.1\r\nHost: ded6443-edge12.bcvcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nOrigin: https://www.heavy-r.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:31 GMT\r\ncontent-type: video/m2ts\r\ncontent-length: 601788\r\ncf-ray: 96b10d5edd38ebcd-CPH\r\ncache-control: max-age=35\r\naccess-control-allow-origin: *\r\nexpires: Wed, 06 Aug 2025 19:49:02 GMT\r\nx-bng3: MISS\r\naccess-control-allow-credential: true\r\naccess-control-allow-headers: Content-Type, User-Agent, If-Modified-Since, Cache-Control, Range\r\naccess-control-allow-methods: OPTIONS, GET, POST, HEAD\r\naccess-control-expose-headers: Date, Server, Content-Type, Content-Length\r\nlast-modified: Wed, 06 Aug 2025 19:48:27 GMT\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":601788,"size_decoded":0,"mime_type":"video/m2ts","magic":"MPEG transport stream data","md5":"3c712f9b2e5eb0c7b6848fe09908670e","sha1":"fef2986b61db12e1767141f954f1a46d9b4f3b31","sha256":"522a2a7bcfb5aa450757d4665832ad4f377aae29e9c91116feb9c3bcb4baa5a3","sha512":"6825ec478ab5f3920722f1fb9ab0db6eedcde5ac0038789ed52f03b19bdca0d7761e927e1566f7b6aba19a3146303fe9d941f2b0a47e9e1644f13591973cf2f8","ssdeep":"12288:mP7hrLxWP9LAlinlH5FyMey5xREoGoP5XjBaqCFij2nbM:mpVWP9LA0nd5Frey5PEoGoP9BaLFiSnQ","tlshash":"54d423cc67819cdb48320256078ae8eab7bc0d210f256bc74754faedbbf91d89d99434","first_seen":"2025-08-06T19:51:23.946689Z","last_seen":"2025-08-06T19:51:23.946689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/css/comm.css?e","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /css/comm.css?e HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 1542\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vDQ0YbLMgpQF6juRDzqPNrCHp0EqNttDZkHntpDviRD%2FlOMqOfx3sBrQT0m%2BIljd6nRgYwwe7Y3L14ozwoI9MxPf486R4xYAKjL%2BFdLPfnQ7%2BzuETmTTi2lEy22s%2BcVmaw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 27 Nov 2017 17:41:08 GMT\r\netag: \"448465228\"\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 3197\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f886556ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3954\u0026min_rtt=354\u0026rtt_var=4663\u0026sent=75\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=35819\u0026recv_bytes=9381\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=576\u0026inflight_dur=31\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5463,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"115b8cbddbf106ae455d390e2543a72d","sha1":"d6fc13416a84a7fb6d51c250d8882167a66ade78","sha256":"d48009fd0ef766dba7ef4504f9c2f80904997b30bbbedf5c88b5db1f7ce63bd6","sha512":"136e22c63a45f76b4278e67d533eb531d35018fe6e8cdbaca1e69b344f6483d1550dd72871518c527287e9d2ffc899523805a567ef246a875e04c90519c6ab25","ssdeep":"96:504/uoRWxwckeTaoaUaDoTFj+Rz6ewV17fn7wxYIAED4BFu/:5XgybAHVot6ewzfn7w2IAED4BFu/","tlshash":"84b1ff6d52e2351cb02bb046bfaf57ea23189613518ad6fdff55a528cf0dee50022b0d","first_seen":"2024-12-04T21:53:23.939671Z","last_seen":"2026-04-13T22:34:36.53701Z","times_seen":16,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/CH_ThumbsPreview.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/CH_ThumbsPreview.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 934\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5FQ4XoAfJ3rTvKK%2BdkijVuD8z68j8HW1RsE%2B7TlT2oD3L7Fdcuj1zV%2BEGgOSLJqEZCEo%2BgQutxMtalECMzgnyspVsBGaof7T1%2BNOFrj6ta7VliZGJ0zvsPargz7f7lXC8A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 09 Jan 2023 22:15:18 GMT\r\netag: \"1846362972\"\r\nexpires: Wed, 23 Jul 2025 19:09:13 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 5209\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f986f56ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4468\u0026min_rtt=864\u0026rtt_var=4846\u0026sent=64\u0026recv=62\u0026lost=0\u0026retrans=0\u0026sent_bytes=22926\u0026recv_bytes=9334\u0026delivery_rate=1995495\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=24257\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=575\u0026inflight_dur=30\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2919,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"b72321293b2af4bd691f9a0dbdbca073","sha1":"bd92f21ac9c256d3a259c0657ec85fb6b284a939","sha256":"3228aa1bfcea385f6d409cffc71fd19e3bbbb33bb046625638fcc58684bf1e1b","sha512":"1a7774c99c0cfc31c6903c665f33080d714827d781c48d7088d617cdc3c86f7326a2e2d46da0289694b3a02f45e49dca627d6096abd8e53228ec1e83b1a914d9","ssdeep":"","tlshash":"5151fe9c6469c26798507042fc0f801c2d56cd503a1aad21bb2cf0e50328fbeaabab1c","first_seen":"2024-12-04T21:53:23.956358Z","last_seen":"2026-04-22T02:54:54.044917Z","times_seen":21,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z4XZQNBBYD=GS2.1.s1754509709$o1$g0$t1754509709$j60$l0$h0; _ga=GA1.1.243110635.1754509709\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dBc6qC7VbAyrHYxfjq8pPBAKuBwyMpzpxADQm0f1wyGwo1lXbNwmDapEdHyIhCM7qGOVg6oOOywVfDnKyyaZgHJ32P7SUndH9M%2BTIKHJvhx4LCj6Hhf68UKixc4GFR9SQQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/8359bcf47b68/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncf-ray: 96b10d5818ee56ab-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1238\u0026min_rtt=0\u0026rtt_var=854\u0026sent=239\u0026recv=89\u0026lost=0\u0026retrans=0\u0026sent_bytes=232960\u0026recv_bytes=12757\u0026delivery_rate=6386366\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=25894\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=1931\u0026inflight_dur=152\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10098,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33507\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 06 Aug 2025 19:04:47 GMT\r\nexpires: Thu, 06 Aug 2026 19:04:47 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 2623\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95992,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-06-19T21:27:06.840726Z","times_seen":25733,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/chick-with-dick-17566.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/chick-with-dick-17566.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 125326\r\naccept-ranges: bytes\r\netag: \"1619470253\"\r\nlast-modified: Sun, 21 Feb 2021 18:11:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 1156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BoslFzY69%2FHZ344QYqllkq%2FPkFsZlHmGJzYD0EYhhQ8dtjnwdk5ylZy%2BFd25NWv3x52tOIlYkw5%2BPtCyamViQLCoZtG0rv6l0CSgNQ%3D%3D\"}]}\r\ncf-ray: 96b10d59cd0da61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x400, components 3","md5":"d73a771ac04f74d7eb09ff79e88777b3","sha1":"2cc0d83e8ddd29f437416db5a164273a1893b830","sha256":"d5b3fb1e368497014873d85e405f142cc83f2a58a8a031644317eaffb185abe8","sha512":"4319a1f6d0ba140a6e381c4baf504dafa34bbda872641625a5ede39d857875f9bac97de973736494bf03b44c7709966713f699509a6f4017e0aa723337649a36","ssdeep":"3072:Mu6gSXqTFOSdrRX5F5GccTMrFj8+ZYxiyZKD:MuljFOSpTF5Gccg59uO","tlshash":"bbc312ee26e05f9301f0cf39761447127336cf5a2b992c266a3953aae54eeedc15720c","first_seen":"2023-06-19T20:11:22Z","last_seen":"2025-08-06T19:51:23.954022Z","times_seen":9,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.amplifo.com/data/creatives/25064/516410.png","fqdn":"cdn.amplifo.com","domain":"amplifo.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1820655202.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 16:30:43 GMT","end":"Mon, 15 Sep 2025 16:30:42 GMT"},"fingerprint":{"sha1":"7C:4A:8C:FA:4D:0F:61:B5:83:DE:86:52:15:25:52:DF:3A:F4:2A:60","sha256":"CD:BC:2D:BA:FB:91:5D:60:3C:80:F0:80:61:A8:1B:B8:C0:9D:C5:48:9D:13:86:B3:63:1C:58:6B:73:28:C3:29"}}},"request":{"raw":"GET /data/creatives/25064/516410.png HTTP/1.1\r\nHost: cdn.amplifo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 143938\r\nlast-modified: Wed, 06 Aug 2025 19:19:16 GMT\r\netag: \"6893aab4-23242\"\r\nexpires: Wed, 06 Aug 2025 20:21:33 GMT\r\ncache-control: max-age=3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Origin, Content-Type, Accept, Authorization\r\nx-77-nzt: EwgBuUwJCgFBDAG5TAoBAbPyWwAADAElE8IuAbdRBgAA\r\nx-77-nzt-ray: e2f7542049a1da068eb19368bcf8aa33\r\nx-77-cache: HIT\r\nx-77-age: 1617\r\nserver: CDN77-Turbo\r\ntiming-allow-origin: *\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":143938,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 360, 8-bit/color RGB, non-interlaced","md5":"bd2d171fd0ce1e3590be09d820dcc7d3","sha1":"070dd1cadafa2b0ff42531b739f0bae5d6bbd912","sha256":"d716e234bfefd45d3ff907015871b287d17186f2f065b0f5ebc41fffde1d4aba","sha512":"3d117fd8df8c1329da3afe71587f4b50d2a73ba4b2b7f84b44518edd0b754166d78670fd237983ded87b7af9d9451261728dc4fbdb8079f47f126f9050f70480","ssdeep":"3072:6Tko+J7UElSUyEOWwh35KFjdcs+zIDaJatJ+mKZhpDshw+LM7c:CkokUEEUyQyJKfcu2JkCihwBw","tlshash":"94e3127655f7025ac697243d383098f38089a84f1be1d5baa9be75eed24c34c41e463b","first_seen":"2025-08-06T19:51:23.955969Z","last_seen":"2025-08-06T19:51:23.955969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":231,"dns":206,"connect":7,"send":0,"wait":52,"receive":31,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/sw.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /sw.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.heavy-r.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 39740\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kYGKrbWmvjCdHVyep7fvQwoTZKC%2Bgyr2ADDx2XdrwkpfH6Zulwdz1zOa63MbjzwrCCOIX8rNpwsb1%2B2GJ5kSe%2BLPPolXTcNFiLFtrrwdOs31W5m54eYVDJyRDX%2BWoxWg8Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 30 Nov 2022 18:16:55 GMT\r\netag: \"118614824\"\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 5880\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f785d56ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3954\u0026min_rtt=354\u0026rtt_var=4663\u0026sent=82\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=43131\u0026recv_bytes=9381\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=579\u0026inflight_dur=32\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103032,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"84b179c184cc8c42e2abc52deb5fd1a8","sha1":"66dc21c677a25ccea6fab8968a346d7005c0fe2e","sha256":"0dbc1a5c670c9b705a1dfa1dc4a54aa9dc92416db0fefed9eaadb573357b7e31","sha512":"85d0e8c84fd8bb87a098d138a3c445f5c08212f62becd54f98128b7ad46d3eee36d368b8d4fa3f856b3ea7de6c3104905470e2a5f68fb8b9d91383b296659992","ssdeep":"1536:vSpw5PMhOhJ6ZbaL7l65oQ668X4BtmG9vpjthaoytu//M:vSpwVJ6EXX4rvttkbtu8","tlshash":"7aa309497252389617c7e03e177fa5cb6d7a4a09bc698d974051c3c02d2a0dec6e3fba","first_seen":"2024-12-04T21:53:23.922265Z","last_seen":"2025-08-06T19:51:23.958978Z","times_seen":18,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/css/members.css?b","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /css/members.css?b HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 1464\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=USePMg3CsG5fKmiCGYjxDoMV%2BOa6Lj6IOiHO%2BpVU4TjG%2F88tTPnfkbGZ7g3FXWACmrTb0c83sI29tKB4mi04iD75DPxzZN0BZxAmLWhL3%2BxWzA9lcSolThSFR%2FXKW0DY3w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 10 Nov 2017 12:19:51 GMT\r\netag: \"2172495735\"\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 5880\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f886156ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3954\u0026min_rtt=354\u0026rtt_var=4663\u0026sent=80\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=40960\u0026recv_bytes=9381\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=577\u0026inflight_dur=32\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4762,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (770)","md5":"a911e8311a52bfb1ac73e95e4e790b85","sha1":"6bb9a3b24bebc3c3ca4e40b81b1017f8be502c4f","sha256":"ae75b7b066ec03658065e7f9388189a7344a18ff379d9d2bd23d5357e60abf3b","sha512":"42eeb7853a2952dc5f4887cc53de156443e2060a7d0f94b906027fd50790f66db3f831da5c55c84f2366a0b8cc67a7a1284481c5a4d5cd41f773300388ce862a","ssdeep":"96:jkQFBwhWBFSvmZJwkjTnoXnu6l6VOUIZ96ZSvNg7f3FmSFuNF/Vib+Ga1fRh9:jkGBc4F28JwkXnoXnuIGOUIZ9sFmSFuD","tlshash":"0ba1ccaad6f5172e75139cdc2d92169673980007724ece788fe630b8fa852c65d33f86","first_seen":"2024-12-04T21:53:23.931326Z","last_seen":"2026-04-22T02:54:54.068621Z","times_seen":19,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/cf/f1/6a/cff16aac77f0a16_7.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.826Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/cf/f1/6a/cff16aac77f0a16_7.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1518,"timings":{"blocked":1450,"dns":68,"connect":91,"send":0,"wait":0,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/c7/e3/63/c7e363f87597744_4.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.820Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/c7/e3/63/c7e363f87597744_4.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1375,"timings":{"blocked":1300,"dns":0,"connect":23,"send":0,"wait":0,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ded6443-edge12.bcvcdn.com/hls/stream_ParisSaintGermain/public/stream_ParisSaintGermain/chunks.m3u8","fqdn":"ded6443-edge12.bcvcdn.com","domain":"bcvcdn.com","tld":"com"},"ip":{"addr":"195.85.23.248","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:31.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ded6443-edge12.bcvcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 06:13:42 GMT","end":"Tue, 28 Oct 2025 07:13:40 GMT"},"fingerprint":{"sha1":"FD:E6:64:D0:44:79:11:E4:F9:AD:BA:CA:17:06:37:E5:E4:0F:EF:0F","sha256":"74:E3:B2:CF:2A:A3:34:C3:AE:CA:5B:57:05:9A:F9:50:E5:A3:B5:30:22:B5:3E:7E:5C:8D:CF:FE:8F:7C:60:9A"}}},"request":{"raw":"GET /hls/stream_ParisSaintGermain/public/stream_ParisSaintGermain/chunks.m3u8 HTTP/1.1\r\nHost: ded6443-edge12.bcvcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nOrigin: https://www.heavy-r.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:31 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncf-ray: 96b10d5e7c30ebcd-CPH\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nexpires: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"02c666d479d604648c0cca67ff162759","sha1":"376dd6cf615525c1030455adaeb998af9a579ad6","sha256":"cf41124ce147012804bd92d3868da3f14f948ce30a51756370390ba4900f0814","sha512":"f10201a6f3d816be0151824f7a399324d3d2dd648d0083dff80e3c51fb8441f07a86b2715e0dc9254042eac7fb1d258b619ddebe043ae6a07d717f61be362967","ssdeep":"","tlshash":"56c012c39715ba41353d8dd6c062b250b0d10d589889d76a7356224b4979a1d7bcb430","first_seen":"2025-08-06T19:51:23.96182Z","last_seen":"2025-08-06T19:51:23.96182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fluidplayer.com/v3/current/fluidplayer.min.js","fqdn":"cdn.fluidplayer.com","domain":"fluidplayer.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fluidplayer.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 10:52:12 GMT","end":"Fri, 31 Oct 2025 10:52:11 GMT"},"fingerprint":{"sha1":"0F:F8:C7:DD:BF:D5:B9:FC:C3:7A:8E:21:3D:30:70:9D:B9:8A:1A:B9","sha256":"FF:5C:3C:AD:0A:5C:20:63:1A:3E:62:FB:7F:7D:84:16:65:06:E3:5C:3A:90:E4:DF:17:CB:DF:95:2E:F1:04:57"}}},"request":{"raw":"GET /v3/current/fluidplayer.min.js HTTP/1.1\r\nHost: cdn.fluidplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Jul 2025 15:50:30 GMT\r\netag: W/\"6877ca46-402cc\"\r\nexpires: Fri, 18 Jul 2025 08:36:52 GMT\r\ncache-control: max-age=86400\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJGwH3Tp0AAAwBuUwKDAGTgVEBAAwBw7WvBgGTgVEBAA\r\nx-77-nzt-ray: fdb54123833b3ffd8cb1936808e37133\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nx-77-age: 40270\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":262860,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65459)","md5":"66bab2a71ffc0b64398e20b38e20196f","sha1":"cb48cb37bfcf83e82b5ebbe70cb9a3e9aec0f17f","sha256":"8cf61b7112c22725b08f2e1c245d1538a14937c56c1704f2ebaa22ba063d16f0","sha512":"c2665478ec09c531235076ba914070c2c987e78d4c6033d192fa74a4476b187c04069f972aa0b82fdea80fe8e814d54cccff856870908fe50f010899b2b96777","ssdeep":"6144:QokyLucaeewSwuZFFUXyGpK2S6RmyIQMomFcX4ieg4xvtIkoMg5zx:lI2S6g3IJMg5F","tlshash":"684419cd35906a3049976baff3df9101b23c691da826612db017fc8e1bac484d553bee","first_seen":"2025-07-18T15:36:57.748762Z","last_seen":"2025-09-12T13:45:11.516127Z","times_seen":54,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":78,"dns":70,"connect":13,"send":0,"wait":9,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmz3nd5oywtsw.cloudfront.net/?dnzmd=894738","fqdn":"dmz3nd5oywtsw.cloudfront.net","domain":"dmz3nd5oywtsw.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.31","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?dnzmd=894738 HTTP/1.1\r\nHost: dmz3nd5oywtsw.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 35944\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 0MbqRs4ujBoZUSNaa0kytLw1yALeB9ZJ28P6jSxtJ4YLkyeQKcd5_w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":99639,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (5919)","md5":"5c9630f22ec83ca11c5021abe096cc46","sha1":"f52b687676c0a510e4f1deaa2e039a8d2e24ce1d","sha256":"ce480fe30b8c98aa4525c17e1c12be89649ddf14934ff1eb179c09f901c0c411","sha512":"c56960843093d32843bd0393404e84638c9bad0b69e19d834fbdf22a3edb7fe3f05dfec35aa85f9c4a3dbd8ac570e73d7c85fae2bbd1fb619279b9fb2d4bc350","ssdeep":"1536:iTopdqRBuGUQ0B1oxHDZp3oCpVHQVpROv9oI/fkmCVH9DGHotxgF5sw8i:lXqRBMoxjZBjNvD/8mCRkJ","tlshash":"89a36c2976523136836270f6847f570eb17aa466fd0048a4709ad8d09efcf9812fbf9c","first_seen":"2025-08-06T19:51:23.965775Z","last_seen":"2025-08-06T19:51:23.965775Z","times_seen":1,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":38,"dns":15,"connect":4,"send":0,"wait":166,"receive":2,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/c8/97/5e/c8975e4f55adc70_6.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.791Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/c8/97/5e/c8975e4f55adc70_6.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1325,"timings":{"blocked":1221,"dns":3,"connect":23,"send":0,"wait":0,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nriceukwater.org/utx?cb=jdOpWfGs8anj\u0026top=www.heavy-r.com\u0026tid=894738","fqdn":"nriceukwater.org","domain":"nriceukwater.org","tld":"org"},"ip":{"addr":"54.240.174.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nriceukwater.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 18 Jun 2025 00:00:00 GMT","end":"Fri, 17 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:B9:C2:B0:80:25:B4:9F:4A:5A:3F:59:7D:8C:EB:E5:24:9E:1B:D3","sha256":"31:53:26:7C:49:16:64:70:ED:2A:C7:35:1F:35:B9:87:88:BA:ED:D7:41:93:4F:5F:26:A6:8A:7D:2B:32:CA:F3"}}},"request":{"raw":"GET /utx?cb=jdOpWfGs8anj\u0026top=www.heavy-r.com\u0026tid=894738 HTTP/1.1\r\nHost: nriceukwater.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nOrigin: https://www.heavy-r.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/plain\r\ncontent-length: 0\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nset-cookie: AWSALB=vRw8PgLPTbWq0IQHwvtLuHJrtsHjhCCorkFM0edvgbeR33syDSw7ADSr4mfdLb+ibNFKOTVFBj/p+nGHd5dk4exmW/QzGvawrbPdApYuBDZAeqzZOJ+c3z5PD+CB; Expires=Wed, 13 Aug 2025 19:48:30 GMT; Path=/\nAWSALBCORS=vRw8PgLPTbWq0IQHwvtLuHJrtsHjhCCorkFM0edvgbeR33syDSw7ADSr4mfdLb+ibNFKOTVFBj/p+nGHd5dk4exmW/QzGvawrbPdApYuBDZAeqzZOJ+c3z5PD+CB; Expires=Wed, 13 Aug 2025 19:48:30 GMT; Path=/; SameSite=None\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.heavy-r.com\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nx-cache: Error from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Bit6jZofWu6c1EFhXuz-G_ap1scZaXp4YyT-245pd3AtXlbpfryZKg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/css/myaccount.css","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /css/myaccount.css HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 597\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RX5nAVkBRyAVqTPG59IH6NREGVwiBFBraJgol54z27YeOU0o1dl5nzjNTMk%2FKHG5CGh%2FIcMwlLNnSpvDF1IdiSWssGNwdcmYxrmLDq45ddcPAcJyJ9m9x2eC9v91zMV1pQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 15 Nov 2016 20:03:01 GMT\r\netag: \"2986297702\"\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 3197\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f886456ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3698\u0026min_rtt=354\u0026rtt_var=4008\u0026sent=108\u0026recv=64\u0026lost=0\u0026retrans=0\u0026sent_bytes=77540\u0026recv_bytes=9428\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=590\u0026inflight_dur=40\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2264,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"39e5c2328b76d0fa52931b2b8a23faf4","sha1":"6169758923e62e4bb7bb82ea33acdc1ea0b5d344","sha256":"845e7e158edaf24ed206195f16cdb96a6772c459c8a3350135aa29b3fc61160b","sha512":"46090058d2378b7cc41b2453accf64997bb7edf1fc75e24bc779a65a4b83c285cb4fd1567c7ee9211747442ec24b28133e831a5c6d0ffe02fa630f4ad63b555b","ssdeep":"","tlshash":"e94157169ba30751bb1252a4ffbfa59533c6b5238899d6667e983258cfc9080b0b970c","first_seen":"2024-12-04T21:53:23.93769Z","last_seen":"2026-04-22T02:54:54.107402Z","times_seen":19,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/images/logo.png","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 3186\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uNRuyq2gnOIKyc8LjXQ3yECGoHkBT0NKgiBVE77Lvgg2hTqCqzprGxtOTgCRPLlYuat4iXu12GB2Xs7SCXqojLDyqviiX%2F8xnB33Bg4TcOJK6N%2Bv36Ee3IiH0r%2B2b5eeGA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=7418\r\netag: \"3973454358\"\r\nlast-modified: Tue, 15 Nov 2016 20:03:02 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 750\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4fa87956ab-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3698\u0026min_rtt=354\u0026rtt_var=4008\u0026sent=108\u0026recv=64\u0026lost=0\u0026retrans=0\u0026sent_bytes=77540\u0026recv_bytes=9428\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=586\u0026inflight_dur=40\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3186,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 326 x 42, 8-bit grayscale, non-interlaced","md5":"0da028e2d6918c4354b3c06bb8551cf1","sha1":"56d108a556fb533603d185536db7e554b706ef65","sha256":"1a1566473c1dd1d20e97cff6eb533ea461a09613efe0d4caa143c40f7e4e3121","sha512":"0c479d330294b45a93f3e1d2ada6f0ae9b4bf91cc970ccab4d3e12423c288c421bda284a09b47116e62f08728062b5ec2805487efe34fd1f6cbd3aa622169d75","ssdeep":"","tlshash":"e9615ceb53d04db2654ab666b31dca22f1131b0954709ecd8b3b54d57216d2a003fdab","first_seen":"2024-06-10T00:08:52Z","last_seen":"2026-04-22T02:54:54.098253Z","times_seen":31,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"everefor.buzz/aGkzQk4TS0A1ER0bX2B0SgFHNj4bUxxtOR8eHSorCR9KbzxGClwvYRseHSg9SkURMSMOSwlzYkoaXjRsUksHbH1KRRE2Lw82WiZsUksEdH1RWQdgYkoaRiARAQ0BYHRKWFBxegtYC3JjXAgGJmNcCAsjYwpRAXFjCwtVe3gLXgN0fwpdET8","fqdn":"everefor.buzz","domain":"everefor.buzz","tld":"buzz"},"ip":{"addr":"34.225.16.8","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"everefor.buzz","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 09:36:39 GMT","end":"Sun, 05 Oct 2025 09:36:38 GMT"},"fingerprint":{"sha1":"E5:D9:85:81:4D:9A:A0:8B:C8:24:C3:8D:68:E7:06:DA:29:4E:7E:1D","sha256":"A5:87:68:0D:44:92:B4:65:42:81:26:98:BC:7D:C3:E7:24:CB:30:78:74:A8:0E:94:B1:D8:A0:94:D2:BB:3F:22"}}},"request":{"raw":"GET /aGkzQk4TS0A1ER0bX2B0SgFHNj4bUxxtOR8eHSorCR9KbzxGClwvYRseHSg9SkURMSMOSwlzYkoaXjRsUksHbH1KRRE2Lw82WiZsUksEdH1RWQdgYkoaRiARAQ0BYHRKWFBxegtYC3JjXAgGJmNcCAsjYwpRAXFjCwtVe3gLXgN0fwpdET8 HTTP/1.1\r\nHost: everefor.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.heavy-r.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nset-cookie: 168d00fd113a9857881266b7251f26b2=1; Max-Age=604800\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST\r\naccess-control-allow-headers: X-Requested-With,content-type\r\netag: W/\"f91b-vyRtAs0r5UVEVaeN21/HWLMculQ\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":63771,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (63771), with no line terminators","md5":"810b29f321838f6cee55215fe2de200e","sha1":"bf246d02cd2be5454455a78ddb5fc758b31cba54","sha256":"b2e84ec94d1d3e0b364fe4a24ac992ac78751bb55f81b91c40bc649fe2c06149","sha512":"c71a08273b53018d0c4d8116d078e1e533214bf26767f107736e39a517f957cf83d6e4f97b4f5ecaf09d8783b9619e8d57ce0c1193ada71c05c895caf806a50b","ssdeep":"768:FztzTFMttCFipWJfWoHY/2fETPcFY0+X9/0XheaEicPClOxxS0reI71xDSs:FpECEp/SY/2fad0O0RDUClOxxDesx","tlshash":"04534cd172912083c217f1f59e2fbe07793f4e12d4895ae26ca7e081ad7909e91e3e74","first_seen":"2025-08-06T19:51:23.97012Z","last_seen":"2025-08-06T19:51:23.97012Z","times_seen":1,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":320,"dns":6,"connect":103,"send":0,"wait":108,"receive":0,"ssl":210},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/ad/21/64/ad2164105292849_5.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.794Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/ad/21/64/ad2164105292849_5.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1240,"timings":{"blocked":1092,"dns":148,"connect":171,"send":0,"wait":0,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/wtf-two-dicks-16838.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/wtf-two-dicks-16838.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68483\r\naccept-ranges: bytes\r\netag: \"78516475\"\r\nlast-modified: Thu, 10 Dec 2020 16:40:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 5466\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8DwUPvsdn6ISQ2DJozAaX9NuzzJaJMIzOHJUcgevBjI735EdE8SMRgHabU%2FIUR6EhiuV8OygzlMIw%2B8CCCDrWJUQPh8%2Bw0WJm93c0A%3D%3D\"}]}\r\ncf-ray: 96b10d59fd6ca61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68483,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x226, components 3","md5":"80d0754958840c24ca1df0c1a3770e42","sha1":"48f8d864c57bf68695a00e1890238eba04abc3a9","sha256":"46ff26a38d2eaed46919f06ee3ef339a5c0e498137890fc49fa950f2fde3bba4","sha512":"af63e83a3e52e082dff96f586f3b7e8c0d0feb862c6f583f0e6fcc61711f83cc2f011fea336c094618962cae0e97a181dbec75e2f7182f082dfa09bdf601b8ee","ssdeep":"1536:zSmclwr7/ifX8Mk4g9A9pGpz8Q1LWsSkGClFMpFnCm9EOvGOTi3zP9:Gjwr7/ifMD4g9WpGpwAWs/vmPnCm9E+K","tlshash":"6c6312dd768aa3215ee0cfd024a9298bcb9711d545c120b96fd88e9cc3bf32b463715c","first_seen":"2023-06-19T20:11:22Z","last_seen":"2026-04-13T22:34:36.563772Z","times_seen":10,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/00/4a/05/004a05ae17bcccf_6.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.836Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/00/4a/05/004a05ae17bcccf_6.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1511,"timings":{"blocked":1442,"dns":69,"connect":99,"send":0,"wait":0,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.quixova.com/eactrl.go","fqdn":"live.quixova.com","domain":"quixova.com","tld":"com"},"ip":{"addr":"46.166.186.6","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live.quixova.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 21:02:08 GMT","end":"Mon, 27 Oct 2025 21:02:07 GMT"},"fingerprint":{"sha1":"6D:33:8F:01:57:1A:20:CB:F1:26:2D:B8:C8:92:C0:E3:EC:6A:7B:69","sha256":"9F:9C:F2:F3:F8:80:A2:F5:C4:B9:C7:C7:DB:2D:35:FA:F5:CE:D6:DD:03:9D:CD:38:B0:DC:9C:26:A1:0F:75:65"}}},"request":{"raw":"POST /eactrl.go HTTP/1.1\r\nHost: live.quixova.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1090\r\nOrigin: https://www.heavy-r.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: application/json;charset=utf-8\r\ncontent-length: 3425\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccess-control-allow-origin: https://www.heavy-r.com\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token,X-CSRFToken, Authorization,sentry-trace, baggage\r\naccess-control-allow-credentials: true\r\nexpires: Mon, 03 Jul 2001 06:00:00 GMT\r\nlast-modified: Janon, 06 08 2025 19:48:30 GMT\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0\r\npragma: no-cache\r\nx-backend-server: go-web-12\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3425,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"045d007af1ec50acfef8d9b0220483c7","sha1":"ef8cb10981e29ae42d491430cfdc29ff47d594fd","sha256":"4b0dfb19cbfd9f6da48ef19f74afb3421c91e2a39755c4056c34068e88ef06f6","sha512":"e8fc9eaa6ccdf678d9825c087d21ac6bf0189e710964d62b85269996db79d48c2eb02bdbebec4f54c96c3cae8236c21ea77e5fd8556c5ac2f1d3a04fd4f07ea9","ssdeep":"","tlshash":"b86184899641bdff0a548bda3c5af8d5e37d3182b9c88e1085f2d910cbbc3bc1217258","first_seen":"2025-08-06T19:51:23.975195Z","last_seen":"2025-08-06T19:51:23.975195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":87,"dns":3,"connect":21,"send":0,"wait":21,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cluster.aawspeedy.com/inc/b_min.js?key=zxIHgImX_-PbQCcxbgmcmZ-Th1SVKSCZcZQIMaYsk6FVAI_TPSY7b6zjYoF218GQy-YRBEA\u0026inter=z14w6F16oYNndG1hh9ZJj04Bp9KnU3nZiC6hVgmDh5wwvfUPhkANLF2LRg2VcI8TRwYQBoQ\u0026ch=\u0026d=2\u0026p=43200","fqdn":"cluster.aawspeedy.com","domain":"aawspeedy.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cluster.aawspeedy.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 12:03:17 GMT","end":"Thu, 09 Jul 2026 12:03:17 GMT"},"fingerprint":{"sha1":"82:B6:2F:BD:86:EE:2A:27:BF:70:56:3E:F3:05:40:5C:7E:C9:EC:E6","sha256":"79:1E:D9:B1:29:C2:53:43:24:3C:E4:F8:AB:EA:6A:64:52:0D:05:A2:F8:98:73:B1:1C:5D:B7:68:89:CD:40:FC"}}},"request":{"raw":"GET /inc/b_min.js?key=zxIHgImX_-PbQCcxbgmcmZ-Th1SVKSCZcZQIMaYsk6FVAI_TPSY7b6zjYoF218GQy-YRBEA\u0026inter=z14w6F16oYNndG1hh9ZJj04Bp9KnU3nZiC6hVgmDh5wwvfUPhkANLF2LRg2VcI8TRwYQBoQ\u0026ch=\u0026d=2\u0026p=43200 HTTP/1.1\r\nHost: cluster.aawspeedy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 21281\r\nx-cff: B\r\nlast-modified: Fri, 11 Jul 2025 18:02:59 GMT\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1754319786\r\ncf4ttl: 2678399.750\r\nx-cf2: H\r\nserver: CFS 1124\r\nx-cf1: 44766:fC.arn1:co:1754319708:cacheN.arn1-01:H\r\nx-cf-reqid: 22e21aea586b3e4369b7144ea8fab394\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":21281,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21240)","md5":"63a50c1c79ff15710f41c6062175c088","sha1":"39f030a5f2cad69924d2a4a7844970acce5e8b5b","sha256":"fc65ee05160138857bee5e140d9229620cdbfe2227cd5d333f6c5c894033da4b","sha512":"526409cf8565051e5636377af5068e3280e4cbf7ec4089e8f01deb53e9b48f2dcecce2302591bcb6530d67574d083c55fc6e2261cee7efd43adb61d7ad8bce72","ssdeep":"384:5RLPYLnu8eo6B5RYOShiFhQDLuoah3WSwBSdp98xJzBokN46KEw+v5A:5RLgLnu8XkRYOShiF6DLuoah3WSwBSdJ","tlshash":"b9a2a5054520691d13a6ae76571be849dbf28c64c658ac8361c8fdb871c2f23dfcedb4","first_seen":"2025-07-13T10:35:17.726634Z","last_seen":"2026-02-18T04:14:46.617325Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2271,"timings":{"blocked":1106,"dns":68,"connect":8,"send":0,"wait":22,"receive":1,"ssl":1060},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/big-natural-boobs-16872.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/big-natural-boobs-16872.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 185622\r\naccept-ranges: bytes\r\netag: \"649392444\"\r\nlast-modified: Fri, 18 Dec 2020 15:43:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 1930\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hN8fVKqGqktm48YqOOwl4qGxwE2ifp6LL558%2BJ0JMKXNpGlFFZqW0rNb1qMDykBBD09NqqntK8XQ%2BsYgYm34lb6GIxWamDoqm6v5Q%3D%3D\"}]}\r\ncf-ray: 96b10d59ed44a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x419, components 3","md5":"8facc1ebc224dcb52051200908490292","sha1":"e0c5ccbe7d326f73fe0139d45e9f797b63aeafa4","sha256":"20836672b1afdb2236a4256dffaecf5aa69f490043f5be600ba7fb4d891c956f","sha512":"f4dd14c191ee14ccf59babee0f4fe18e9ddc52e4a196ff132f245741649a137a148a5288df26b1fddc3cc615b111d4e7c4a44c2648cd331014379834f1cea138","ssdeep":"3072:JyL8bM3+PW7Nd4GCbaolRa7X7M/j8lCzbiJ3CHIMzWbv7wG5DYGN+71K7inm/Sz3:6wxPW7NNZofeXc8dJb5lrK1K7kP+s","tlshash":"6304236016215b94f31963be3ddb1339e6c9c9e02e94e68e6ed4cfe6c41f86740b81e1","first_seen":"2023-06-19T20:11:22Z","last_seen":"2026-02-18T04:14:46.602157Z","times_seen":11,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/templates/bootadult/js/imagesloaded.pkgd.min.js","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /templates/bootadult/js/imagesloaded.pkgd.min.js HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5%2BxhK%2FxtCWKKkqLxqdXs2%2FDOCA32MDtXZvkp6ul8ZnCZiGuCBlMUVhOGonyPw9qNrwHyvkPyE2eW56CBZdzVyqF5KXU4OalqdIVog%3D%3D\"}]}\r\nvary: accept-encoding\r\nlast-modified: Sat, 25 Aug 2018 17:15:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4127\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"3966525014\"\r\ncontent-encoding: br\r\ncf-ray: 96b10d59ccf5a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7424,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7307)","md5":"c1ee4820e419b7db9e46bac9e6036dfb","sha1":"92359731b85a5169158fcd090f223d5bf32e02bf","sha256":"a45687d15a46bd0c0469f9c3d38b5edb3f3449478bf0a0c4cdca10b48d86c2b9","sha512":"aee500c67a7bda8c33e9e77612ca9f2340c6364b6d01766989eddc3364ad04f01d7a0a1820e8eefb2458e4ca16b3d93cd2ad4ef7a63bd370529fbd2e3639445f","ssdeep":"192:bwmB7GGWyoU6hRSzOrtrqe4nPCTOd9rEY/g6G9sxMt6yG8J9Gc:b7B7GGWykhRSzOrtrinPCTOdl//g1sxo","tlshash":"63e14f8c37a2b52523d6e1b3b12f020fb276805d941c411c7a59e8f22dbad8d5633fb4","first_seen":"2023-03-07T13:12:54Z","last_seen":"2026-06-13T08:39:03.822743Z","times_seen":105,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/css/style.css?b3","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /css/style.css?b3 HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 11996\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MntWcLmNpl9YkVh1e2xA4hIlGiri6NGbkMmzHrErSUAWPL%2FsYzYktSNziGtSiVGlxMd9aByw9nAmwB7Hp%2BRZwmOXWfixe6dMsQSK5DnxdMKNzoxUbQqZMDbHoLmnlsrOSg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 16 Apr 2021 20:21:53 GMT\r\netag: \"2283685840\"\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 5880\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f786056ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3698\u0026min_rtt=354\u0026rtt_var=4008\u0026sent=108\u0026recv=64\u0026lost=0\u0026retrans=0\u0026sent_bytes=77540\u0026recv_bytes=9428\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=587\u0026inflight_dur=40\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53476,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (39759)","md5":"f0d24a1a4302803eb26bc24c991be633","sha1":"6bbe021b913c738a10bd47cd5f3a5087345ab561","sha256":"282c52d7b8fb60d78ea4406c0379ab74798d07a24134d6a7c4180f23af89ced3","sha512":"36bae7851f30e9cfb4d7e2ddbb71797a578ae2311629bea37c7934cc63d2ec4c732f8fbc44c3322d4dc97cf68cf5dbbcfd4106eecf7c104e88f952ce5ad6a3ea","ssdeep":"768:clu+Klk3YlEfhYUfgm74En2L4a7ORwUAMbRyaOVE+p3swvDZXakFaT8fmTgqy2wc:clunljUfKii7kyfPN2","tlshash":"6c33dcb1e14d21d67336c04bff81b36c32b8f329d6410ea9f51f6a1d8ac529511e2fa9","first_seen":"2024-12-04T21:53:23.94598Z","last_seen":"2025-08-06T19:51:23.982195Z","times_seen":18,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/images/icon-18plus.png","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /images/icon-18plus.png HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 431\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5pr3wo3vg058rQTg%2F9zlBKWAooW6zxSzj3qF1oL24qPOQR00K4y%2BegaLEcvVgDIulideQURy20Wvkucf%2F7UWYT%2FyXRQ2d%2FDPgknJbXRzzbOQt75sdEf19jku6esHDoLWKA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=762\r\netag: \"171161295\"\r\nlast-modified: Mon, 23 Aug 2021 18:38:04 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 6828\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4fa87856ab-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4242\u0026min_rtt=354\u0026rtt_var=4095\u0026sent=128\u0026recv=65\u0026lost=0\u0026retrans=0\u0026sent_bytes=104708\u0026recv_bytes=9477\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=596\u0026inflight_dur=51\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":431,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit gray+alpha, non-interlaced","md5":"ddcb7a942365aaeff7c7baa18240feb7","sha1":"acd67464987d85ae300eb4e4a68ce488a4498cb0","sha256":"181e270ade27b4eb80ac22277bda96854041819a0f5dc128ca3f5936830e6931","sha512":"153623f75a08791a0c1f7f5f6e77289f8315395627ad2a31fd5870508721d0b555f1a0cbf95ec9db881d12b31447da67887b953e619f072c44a6b63ff7551b64","ssdeep":"","tlshash":"d8e023a31b605b2cb434d161516d31680ea4e1522b00d61484dc4cc9270e1b61382343","first_seen":"2024-06-10T00:08:52Z","last_seen":"2025-08-06T19:51:23.982976Z","times_seen":26,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/b2/e2/ab/b2e2ab2cb4bc6a3_5.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.800Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/b2/e2/ab/b2e2ab2cb4bc6a3_5.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1210,"timings":{"blocked":1149,"dns":1,"connect":22,"send":0,"wait":0,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/jquery.bxslider.min.js?v1","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/jquery.bxslider.min.js?v1 HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5314\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YCjpqeEDKIMZEu4TeaOLlXPSqNG0TeozFdmgvE0H1oF1dOI6viBxNlnZJ5qyxc0x909x634SvxZQ4AN042VkpBgqyDXc6dwdvY%2F7Dwgi4PUs4aYPu12bUgfEdZjfOE3Nqg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 02 Apr 2023 16:15:05 GMT\r\netag: \"3807110917\"\r\nexpires: Wed, 23 Jul 2025 19:09:13 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 1070\r\naccept-ranges: bytes\r\ncf-ray: 96b10d50288656ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3730\u0026min_rtt=354\u0026rtt_var=3103\u0026sent=163\u0026recv=70\u0026lost=0\u0026retrans=0\u0026sent_bytes=137570\u0026recv_bytes=10569\u0026delivery_rate=4087248\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=668\u0026inflight_dur=75\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20013,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19693)","md5":"756c25edfa78f7f3dc992c0a881f14ae","sha1":"756e301789c1ea48bba7324340ffd160f475543d","sha256":"188c40f62e702a0bcc361257b3249fc1823420e7da4d1b551871e1f2a3ef426f","sha512":"6177b0ecc73593b0ce6432f67aacf2909eac5ce8083398b95dfaac5a8c835d98488bb48ac2fdbfbd2ed44c4829466c1bc9b86040b8bef5f653eea6ba469af134","ssdeep":"192:7RbGBHN83BRKmfLblFV7DFjfHsT+3aARMWvPl14AzEJXbv/3xROzOrgWn05KzI8J:96t8W6VVV4xRUwueI8svwruwZ","tlshash":"8992541bb13436fe46b622b1f25dcb487276908ac537f8f861b5d94819e8cc4301badb","first_seen":"2023-05-09T22:17:11Z","last_seen":"2026-04-22T02:54:53.985392Z","times_seen":42,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/templates/bootadult/js/masonry.pkgd.min.js","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /templates/bootadult/js/masonry.pkgd.min.js HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOqSpld%2FFCS7Tq2JlKeiuBDlO%2BrC0teLdzaIWiA%2Fb7YUCwn8lxcnPYQddRjJNnbE4o5yYAZ%2BYAcrxi1w4%2BxLdp5Yz4uS%2BYpgIrFQaQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nlast-modified: Sat, 25 Aug 2018 17:15:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 4127\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"1505323854\"\r\ncontent-encoding: br\r\ncf-ray: 96b10d59ccf1a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28953,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28817)","md5":"c54e75edf5cbaf412bc16ba4145f6032","sha1":"67638430c92c23cedb89db038627876d361135c0","sha256":"733d7c26a5fb7240e83e8af2c822218b321b5143e28c2dd65ab2492297ac6bd7","sha512":"dcfa0adefbb8bf4b9cb2082d98b452daefae51137315003aabd021805f8575fcce8ccf0db78a7aa0a35c6c485d529c37b9de803bbc5a151a677a0e7e4012c55d","ssdeep":"768:S9+z0BFXYKby+HvOqvevgOkYtkdEvWBzigMPI0:SgKbbO0IkdEvPgI","tlshash":"3fd2b54ab70434209247f5b6a2af010f723ba5ade51484bcb299d8fa2db6c4d1137f7d","first_seen":"2023-03-07T01:02:58Z","last_seen":"2026-06-19T19:41:19.854215Z","times_seen":1725,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/cute-teen-licking-her-feet-16839.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/cute-teen-licking-her-feet-16839.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 108197\r\naccept-ranges: bytes\r\netag: \"1914939955\"\r\nlast-modified: Thu, 10 Dec 2020 16:40:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 5466\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pwworDhBzYpc3s0Bfx7egaPU3y4m8FaTPN%2BXSoLdXe9ppQHaVqHkSI90kxt0gdy0%2F0EE43r1dkUlBCQRL3zEWp7hgNNlFdwXX%2B%2B8oA%3D%3D\"}]}\r\ncf-ray: 96b10d59ed4da61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108197,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x400, components 3","md5":"d346a06050a02cd6fc97f1c642579c00","sha1":"f1fe1448fa9a9f511bf13a25a552398eb610359b","sha256":"afd1362a189e820f2df35b04812df2757b515b781f088f90a04e817f9ee27696","sha512":"917c2c16992a0989d2dfc5dee567ff1f63512cb752442e712a04f700d9522e8f31f26544fee2b2003adaee624737f8192c8636318a14da6ce3c529be7ce075a5","ssdeep":"1536:+NCeYuNVUvB/WcG67rOTuEmq6ncuL4E9K5kWw9VYIbo7UOEUZHm07dv:nuNVZT67rMb6nL4aKMs55Btm0Bv","tlshash":"86b3120dec1f78c0f074616d34ad95565b2baf65030bbab5892189f2ffd9283012b79b","first_seen":"2023-06-19T20:11:22Z","last_seen":"2026-04-22T02:54:54.026334Z","times_seen":11,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/e5/59/58/e559589b9fe924d_3.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.789Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/e5/59/58/e559589b9fe924d_3.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1415,"timings":{"blocked":1177,"dns":238,"connect":274,"send":0,"wait":0,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/f7/b1/52/f7b152ebd5ab067_1.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.834Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/f7/b1/52/f7b152ebd5ab067_1.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1351,"timings":{"blocked":1115,"dns":236,"connect":258,"send":0,"wait":0,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/21/fd/e5/21fde54cd0f1d57_4.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.843Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/21/fd/e5/21fde54cd0f1d57_4.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1172,"timings":{"blocked":1110,"dns":2,"connect":22,"send":0,"wait":0,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js?_=1754509709111","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.133","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Feb 2025 00:00:00 GMT","end":"Thu, 27 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"24:45:97:41:80:9C:3B:CE:BB:C3:B5:53:C5:0D:8C:BB:21:C9:56:20","sha256":"5F:96:09:03:1A:50:90:73:9C:60:3F:2D:35:D7:F2:4D:95:02:C6:38:BC:AB:88:FA:78:A4:8B:85:16:CB:F0:57"}}},"request":{"raw":"GET /js/jads.js?_=1754509709111 HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 06 Aug 2025 19:48:30 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Fri, 07 Mar 2025 18:31:37 GMT\r\nConnection: close\r\nETag: \"67cb3b89-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-17T22:25:48.855368Z","times_seen":2527,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":118,"dns":9,"connect":35,"send":0,"wait":35,"receive":1,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/old-fart-almost-dies-during-sex-with-young-girl-17002.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/old-fart-almost-dies-during-sex-with-young-girl-17002.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 166664\r\naccept-ranges: bytes\r\netag: \"3777434830\"\r\nlast-modified: Sat, 09 Jan 2021 11:29:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 5466\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5fcqgFrA30KjcgDJVc56eqGUs6d08KgRQI%2Bl7HLdJJuXkG3EVSl1STeICacpilbbcnm9vky4Z%2BchFp1Qtrsbw5Ch49rb%2BW4faoZAQ%3D%3D\"}]}\r\ncf-ray: 96b10d59dd29a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166664,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x409, components 3","md5":"3d3ecdf6633cf4bf5b9a3f18ee924e78","sha1":"8f494efd462e677ef5b8ceed84aeccb5b65676b0","sha256":"0b9de8b77e8b010da820d9d36bb6cf086637b4021edf1d418d798f608fd4707d","sha512":"6f3e829e8787d9f2c822462578ed76b48930095b7b970b1110af1cec541405d3260a389b8e78b8f202079765b0b21aabdf9f923f08060f86a39fd7655ad3157d","ssdeep":"3072:QFd+fq4wtI4Unq68cT+19bHxa0MisDNmxHO+MJsIFo306GND7:gdGWUL83IVoxHO+X30pNP","tlshash":"62f32366e4d6c2d326d7275681e36a0f08c8c766184d0fccb0e47ad0de4bd4e5a7be28","first_seen":"2023-06-19T20:11:22Z","last_seen":"2026-02-18T04:14:46.600172Z","times_seen":11,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/date.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/date.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2394\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6e51oiRsLA%2FnAeivhcpgj5cYf4IjNH77Q%2FGbsg9dmOVAB9xt7VdeIhm5C%2BRZczOEe4ZDZRNm4QSRt4CxyZS6tBcGHqWbN3NrJxkDHZvvQ0yvV0tA1SM0pAGU700psapH4w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 23 Aug 2020 06:54:25 GMT\r\netag: \"2653494852\"\r\nexpires: Wed, 23 Jul 2025 19:09:13 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 5880\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f986c56ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4806\u0026min_rtt=864\u0026rtt_var=5560\u0026sent=53\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=9255\u0026recv_bytes=9288\u0026delivery_rate=676753\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18054\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=572\u0026inflight_dur=27\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6956,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3018)","md5":"7b01627cc49c1771b90680834af8efc1","sha1":"d9758c8a7458ff8feaa1942ccde59d664a076a4a","sha256":"c77462bf1b90d04c480496df47eed998e2d0d64e1ae9d39dcbe239bf723ba1ab","sha512":"04029271dda6700bda395684a1b7f82dd31eca17d02cb21d49f0ff670e0db395a05231ceaef169de4529f4553753e833d9b66e87fe8e663793ae2be8b00286b7","ssdeep":"192:p1U9t1hPGymld++hr1HdjV42UZ2WU2aQC09Y0nrxOCtvX:p1U9tLGxThBH/4TU/C1","tlshash":"f6e174677746636447ba0da21c5a090bff2858511f0cf0a7fa61f88974a0f8251ffbb9","first_seen":"2024-12-04T21:53:23.950635Z","last_seen":"2026-04-22T02:54:53.965942Z","times_seen":21,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/00/0e/d6/000ed6bdd58f247_5.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.788Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/00/0e/d6/000ed6bdd58f247_5.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1413,"timings":{"blocked":1173,"dns":240,"connect":263,"send":0,"wait":0,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cluster.aawspeedy.com/inc/combined.js","fqdn":"cluster.aawspeedy.com","domain":"aawspeedy.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cluster.aawspeedy.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 12:03:17 GMT","end":"Thu, 09 Jul 2026 12:03:17 GMT"},"fingerprint":{"sha1":"82:B6:2F:BD:86:EE:2A:27:BF:70:56:3E:F3:05:40:5C:7E:C9:EC:E6","sha256":"79:1E:D9:B1:29:C2:53:43:24:3C:E4:F8:AB:EA:6A:64:52:0D:05:A2:F8:98:73:B1:1C:5D:B7:68:89:CD:40:FC"}}},"request":{"raw":"GET /inc/combined.js HTTP/1.1\r\nHost: cluster.aawspeedy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 105563\r\nx-cff: B\r\nlast-modified: Wed, 09 Jul 2025 17:31:35 GMT\r\nx-cf3: M\r\ncf4age: 0\r\nx-cf-tsc: 1754319785\r\ncf4ttl: 2678400.000\r\nx-cf2: H\r\nserver: CFS 1124\r\nx-cf1: 44766:fC.arn1:co:1754319708:cacheN.arn1-01:H\r\nx-cf-reqid: 644679c1e5e016e10b7e616ef2254625\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":105563,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"47922873ff4e9b7097df0aa7b115df0b","sha1":"27fe61e2e3283aa00010d5e3462fc22c3df58853","sha256":"9fe0b98f0146aeca4da63a7399707b5aa57a318ff3ab982acdf802c1e8396568","sha512":"30901dd75adddb2f138bb7cd27866a7bccdb77e2ff6d2b5523d94069f7c8d5f2849aef1c9eb0e8af92e3120e4f68c3f07d1a6a5e75b2dbeb9c78a6d6629c8ea3","ssdeep":"1536:HRY8OvlYcEKvheTo+JxL86OXyvHikoHpu1u+EZ7F50mn5pg4i86F8xnZUCioMKUF:W8Ovaclc1Hl8Z0mn5pg4oGRZX2X","tlshash":"3fa35461710750d630e1d26e166ab3c12d795402f4298ca6fc21fb9fcaaed93419faf3","first_seen":"2025-07-13T10:35:17.732208Z","last_seen":"2025-09-15T06:32:37.008223Z","times_seen":15,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":229,"dns":68,"connect":22,"send":0,"wait":21,"receive":25,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.amplifo.com/data/creatives/25064/516410.mp4","fqdn":"cdn.amplifo.com","domain":"amplifo.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:31.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1820655202.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 16:30:43 GMT","end":"Mon, 15 Sep 2025 16:30:42 GMT"},"fingerprint":{"sha1":"7C:4A:8C:FA:4D:0F:61:B5:83:DE:86:52:15:25:52:DF:3A:F4:2A:60","sha256":"CD:BC:2D:BA:FB:91:5D:60:3C:80:F0:80:61:A8:1B:B8:C0:9D:C5:48:9D:13:86:B3:63:1C:58:6B:73:28:C3:29"}}},"request":{"raw":"GET /data/creatives/25064/516410.mp4 HTTP/1.1\r\nHost: cdn.amplifo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://www.heavy-r.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 06 Aug 2025 19:48:31 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1049765\r\nlast-modified: Wed, 06 Aug 2025 19:19:15 GMT\r\netag: \"6893aab3-1004a5\"\r\nexpires: Wed, 06 Aug 2025 20:26:23 GMT\r\ncache-control: max-age=3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Origin, Content-Type, Accept, Authorization\r\nx-77-nzt: EwgBuUwJCgFBDAG5TAoTAbMxWQAADAElE8JXAbcwBQAA\r\nx-77-nzt-ray: e2f7542049a1da068fb19368a3d7e120\r\nx-77-cache: HIT\r\nx-77-age: 1328\r\ncontent-range: bytes 0-1049764/1049765\r\nserver: CDN77-Turbo\r\ntiming-allow-origin: *\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1049765,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"46633946de6756a9aee560fba28aa597","sha1":"95f82db42f2feac43c9d63468fa633fb39cb7e63","sha256":"434fd8ca7453c7cb30668130f84fdb8206ce454fb04f7f0815cfd4474dbcbb2c","sha512":"1802b54687c45f6f49ece9e3c99693873e4ab439f4f9962761f55139adcf8accc1f1736a0949065dfd931526dcdd6254ea1892b032a77ada029a2c3d5ff5a48a","ssdeep":"24576:aKg080jcF9FLF119s1Mo/da2EJ8t0Hvz24R0VSImOiqAA/5:a28oG9FR9s15da360HLDRlDLqr/5","tlshash":"5c251218d7f1944adc295a3140ca1715bb72ef356b03839b8ac1363e9cabbd8de431d6","first_seen":"2025-08-06T19:51:23.988735Z","last_seen":"2025-08-06T19:51:23.988735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nriceukwater.org/floater?tid=894738\u0026red=1\u0026cs=Tll1RFF%2FYUB9ZXttTHQ0LGATcmF%2B\u0026abt=0\u0026v=0.5.54.0\u0026sm=83\u0026k=heavy%20tube%20free%20videos%20porn\u0026sts=\u0026prn=0\u0026emb=0\u0026fs=1\u0026aa=td1\u0026m=1\u0026ns=1\u0026ndp=1\u0026asi=1\u0026ref=https%3A%2F%2Fwww.heavy-r.com%2F\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026_q8S7=1754509710088\u0026crc=1","fqdn":"nriceukwater.org","domain":"nriceukwater.org","tld":"org"},"ip":{"addr":"54.240.174.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nriceukwater.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 18 Jun 2025 00:00:00 GMT","end":"Fri, 17 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:B9:C2:B0:80:25:B4:9F:4A:5A:3F:59:7D:8C:EB:E5:24:9E:1B:D3","sha256":"31:53:26:7C:49:16:64:70:ED:2A:C7:35:1F:35:B9:87:88:BA:ED:D7:41:93:4F:5F:26:A6:8A:7D:2B:32:CA:F3"}}},"request":{"raw":"GET /floater?tid=894738\u0026red=1\u0026cs=Tll1RFF%2FYUB9ZXttTHQ0LGATcmF%2B\u0026abt=0\u0026v=0.5.54.0\u0026sm=83\u0026k=heavy%20tube%20free%20videos%20porn\u0026sts=\u0026prn=0\u0026emb=0\u0026fs=1\u0026aa=td1\u0026m=1\u0026ns=1\u0026ndp=1\u0026asi=1\u0026ref=https%3A%2F%2Fwww.heavy-r.com%2F\u0026jst=0\u0026enr=0\u0026lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A134.0)%20gecko%2F20100101%20firefox%2F134.0\u0026tzd=0\u0026uloc=\u0026if=0\u0026_q8S7=1754509710088\u0026crc=1 HTTP/1.1\r\nHost: nriceukwater.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nOrigin: https://www.heavy-r.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 205 Reset Content\r\ncontent-type: text/plain\r\ncontent-length: 0\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nset-cookie: AWSALB=ve8qb48of5mRDtFSJIeMmTqVz+m3qXiOlFRIablVto+cCi2JVtpC2dFcVtns6t430Pk20xkKLLGRc3YJcaISPTjVGbqWqx68D4bmxcQHy9WAXgnlVCpx3yRGKtbp; Expires=Wed, 13 Aug 2025 19:48:30 GMT; Path=/\nAWSALBCORS=ve8qb48of5mRDtFSJIeMmTqVz+m3qXiOlFRIablVto+cCi2JVtpC2dFcVtns6t430Pk20xkKLLGRc3YJcaISPTjVGbqWqx68D4bmxcQHy9WAXgnlVCpx3yRGKtbp; Expires=Wed, 13 Aug 2025 19:48:30 GMT; Path=/; SameSite=None\ncsu=93608cc4-3447-4e0a-9150-f901003d2e32\r\nserver: openresty/1.17.8.2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.heavy-r.com\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: r0HlwibMXLjdoN5watfrzKTP1MYjG_spiOKfZxKHdrG3_VntTaKoZw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"205","status_text":"Reset Content","fingerprints":[{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/unexpected-butthole-examination-17001.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/unexpected-butthole-examination-17001.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65418\r\naccept-ranges: bytes\r\netag: \"4203388890\"\r\nlast-modified: Sat, 09 Jan 2021 11:28:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 5466\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GKnniIaok5PefZH5pM2aihfdznx3dx6B26BkfRKMA8rP6yooxlMQfx6m8ARpN859E5HqtY9%2BZZFKpxpHyTssuLia04ncjdB6RjE1FQ%3D%3D\"}]}\r\ncf-ray: 96b10d59dd30a61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65418,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x189, components 3","md5":"9f765a6bd9415f509256194e8c324f30","sha1":"7d5f91575dad354771d73ae73bfc95145b3bd9ba","sha256":"537b53aad5393ff038c16e117d4e90110b2be93f40d06c13885e93ca89a418da","sha512":"a854278951cd49bbbf0677f5253fe8deb5c5d3db273504229388db3e73fb2b65f951439842a1635b3d839e945522526d7a6aaa54e3523befd5a59be7d0c18586","ssdeep":"1536:UKVw8rBCicE+EkJfzBNku6YOHehxzF/HsJ4YN:S8Fb3QJtNueLR/HK4k","tlshash":"ea530232935b309b55e825bda4ff710e96b88d50f8f0e12363f6b490eaa4d7c5881bc5","first_seen":"2023-06-19T20:11:22Z","last_seen":"2026-04-22T02:54:54.0242Z","times_seen":13,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ded6443-edge12.bcvcdn.com/hls/stream_ParisSaintGermain/playlist.m3u8","fqdn":"ded6443-edge12.bcvcdn.com","domain":"bcvcdn.com","tld":"com"},"ip":{"addr":"195.85.23.248","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:30.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ded6443-edge12.bcvcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 06:13:42 GMT","end":"Tue, 28 Oct 2025 07:13:40 GMT"},"fingerprint":{"sha1":"FD:E6:64:D0:44:79:11:E4:F9:AD:BA:CA:17:06:37:E5:E4:0F:EF:0F","sha256":"74:E3:B2:CF:2A:A3:34:C3:AE:CA:5B:57:05:9A:F9:50:E5:A3:B5:30:22:B5:3E:7E:5C:8D:CF:FE:8F:7C:60:9A"}}},"request":{"raw":"GET /hls/stream_ParisSaintGermain/playlist.m3u8 HTTP/1.1\r\nHost: ded6443-edge12.bcvcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nOrigin: https://www.heavy-r.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:31 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncf-ray: 96b10d5dfb0febcd-CPH\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nexpires: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"c9ccf2005e35e5e4144b97979556a411","sha1":"80d08d99e0f34c24e9caee518419db41e0cb76d6","sha256":"8b174b6a026f5671a17d84144b7b1080337b805dd423952a6cbb808e0d12a978","sha512":"3cd8b9e9724cd874294e0ee3be8d0d4253f2450a3a6c96a03faef58fb5d417a66e980c20d10f626f25cb58c503f61afb33c4d03b78a6e2c53c4580aa70c7eecf","ssdeep":"","tlshash":"e9c08c29134ea109a514a8ca64a0a30178be34fe05955a15a2be64548606dac33bb00d","first_seen":"2025-08-06T19:51:23.991353Z","last_seen":"2025-08-06T19:51:23.991353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":109,"dns":43,"connect":26,"send":0,"wait":50,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/css/restyle.css","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /css/restyle.css HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 2162\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MshlpNq5bX2%2Fr%2BM31TN67HguYnp7OALJt5dtPmDcMZMsruMoD3rzjvq7c8JCm1NjWXqYUiZHQSCvSabJADWKVhCllO2oT41llf2GQmI1QVYlBJbTz441wuoRZi7jfuDLOg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 26 May 2020 15:01:33 GMT\r\netag: \"2296612473\"\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 5880\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f886656ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3954\u0026min_rtt=354\u0026rtt_var=4663\u0026sent=75\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=35819\u0026recv_bytes=9381\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=576\u0026inflight_dur=31\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9425,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"598189dba52ffe091dccdcf683d07e0c","sha1":"92fecb662b9368d7c0c5905963a9ca081be2e4bd","sha256":"6feff063f36ec602af81870eea332568481f07457571f7a6b7d3c40b8be2d90e","sha512":"5d5524bb207b9b98a4c0cf58b63b7c135c46a1ed824978da1cb63ac89d02452c74fc26f5455c66dbd966ef2a48093a7c78dc95f274c52550a0c6039dcd13fc3e","ssdeep":"192:3U2oook/D/3XMNuZMUCWKFs6wDMA/Dt4gN7Ds9UsQmfBx:3V/zXMiMUbKFs6wDWgN3oUsQCx","tlshash":"7d12df59b3b2352eb36a519c7af01b666b2190229387f3f5fee1c710c18897913e17c9","first_seen":"2024-12-06T20:46:42.694197Z","last_seen":"2026-04-22T02:54:53.972935Z","times_seen":18,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/18/92/90/1892904f3f88822_7.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.792Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/18/92/90/1892904f3f88822_7.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1311,"timings":{"blocked":1225,"dns":1,"connect":22,"send":0,"wait":0,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/general.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/general.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 837\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=L2BLq2SARErc8apdaos6UZEiA%2FCl3xGyEHbdh0OVzT%2Bs9qigV%2FpFWaKX2SRMyEfTtQaJiqnDxj8k7NvrVVLoUA%2Fcyhkj5619AozSkbreSl4rfjl7cagrlR6jhtVS%2BKmlPQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 13 Jun 2017 03:52:40 GMT\r\netag: \"3710786616\"\r\nexpires: Wed, 23 Jul 2025 19:09:13 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 5880\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f986e56ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3954\u0026min_rtt=354\u0026rtt_var=4663\u0026sent=92\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=57131\u0026recv_bytes=9381\u0026delivery_rate=3866666\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=34409\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=581\u0026inflight_dur=35\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1980,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"cd705698af7cb82f435e2b75a8b74502","sha1":"45abff4bfba358d2bfe601b13ecd722aad19543d","sha256":"fa9d7de280e612e016800891b43db1c5f63edcab6c790040f9cc45cf20d0c44b","sha512":"d494ba1cf4061048c36dfe5e160b141419218d62d993c0e9a1bba1e1ed976eeabba7123ddb5bf73696ca6142a479a8cac5726db50bf376382c0c448e74ef81d3","ssdeep":"","tlshash":"5f412319efbc5d77956a243d4abfc054271dc4636744c4c5380ca8e59fa0e585c7b588","first_seen":"2024-12-04T21:53:23.958634Z","last_seen":"2026-04-22T02:54:54.02247Z","times_seen":21,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/fonts/fontawesome-webfont.woff2?v=4.3.0","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:29.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.heavy-r.com/css/style.css?b3\r\nCookie: _ga_Z4XZQNBBYD=GS2.1.s1754509709$o1$g0$t1754509709$j60$l0$h0; _ga=GA1.1.243110635.1754509709\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 56780\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Svb1I9KSRWcvWxY%2B1H5Rh1aPryRat28VGvAPbmTSrRPbIrYytcb3qmFvrmUUcvvZkNcnD2MN9v56mkbZxGAugt1FCrlhcZ7Ml5BLiCYPNCxJlporlBFHHP0cnxRcvIfCjg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 315\r\nlast-modified: Wed, 06 Aug 2025 19:43:14 GMT\r\naccept-ranges: bytes\r\ncf-ray: 96b10d5758e656ab-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2530\u0026min_rtt=354\u0026rtt_var=1691\u0026sent=188\u0026recv=77\u0026lost=0\u0026retrans=0\u0026sent_bytes=166190\u0026recv_bytes=11263\u0026delivery_rate=4087248\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=1814\u0026inflight_dur=132\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56780,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 56780, version 4.197","md5":"97493d3f11c0a3bd5cbd959f5d19b699","sha1":"1075231650f579955905bb2f6527148a8e2b4b16","sha256":"aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c","sha512":"bfe4679bbe5d1db21f6ecb2d6c2810dd02d3b698efdd50004cc355c1d0bc51de8dd102707c796b26e8250c600b4b64db88b67d3f28157777b68e36ad7930bfc0","ssdeep":"1536:zxwdj+K8kLkunGAASpdw6hsxD/G+zSIoiCQN+n:zxmVY6dwJThoiCQE","tlshash":"eb430269f84b577202275a0509ee0d34ef804962eef247fbb1fb90c5d6309ac1ea1b56","first_seen":"2023-04-05T09:41:17Z","last_seen":"2026-06-20T02:05:16.40971Z","times_seen":27963,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js//bootstrap.min.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js//bootstrap.min.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 9538\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hoRpjCaOwlNOjdo3P0FViTl7pDhWHtxdgbkVuaTw439BFiyean4P%2BAc%2BCK%2FUG569Dh1DTkFPLsdxfIBL5%2FASUGJoM4tjP8uZzjjndOq91HKfLaC7xnhld5HBWQU%2F5Fb%2FBg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 07 Jul 2023 21:03:05 GMT\r\netag: \"3313370785\"\r\nexpires: Wed, 23 Jul 2025 19:09:13 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 3197\r\naccept-ranges: bytes\r\ncf-ray: 96b10d50288756ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3730\u0026min_rtt=354\u0026rtt_var=3103\u0026sent=167\u0026recv=70\u0026lost=0\u0026retrans=0\u0026sent_bytes=143170\u0026recv_bytes=10569\u0026delivery_rate=4087248\u0026ss_exit_cwnd=34409\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=669\u0026inflight_dur=75\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35951,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"8c237312864d2e4c4f03544cd4f9b195","sha1":"253711c6d825de55a8360552573be950da180614","sha256":"d5fd173d00d9733900834e0e1083de86b532e048b15c0420ba5c2db0623644b8","sha512":"e18a5959736a9ceef67b40daf7964c519c678d680bbda8d2c7679281f5d349a286c99b96ca24e7a8e64ce987d372d74ae12da7255c606ccfe27ac13a35b5a3d2","ssdeep":"768:b8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcKGf3Z1RQ:oe78+S1Klvla3ZrQ","tlshash":"f5f29606b23031a107dfb1e5515b020b72396a6ee90690bc78b9dae53db9c48717bf3d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-06-20T00:26:24.823127Z","times_seen":10198,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.heavy-r.com/js/zxml.js","fqdn":"www.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"104.26.2.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavy-r.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 21:40:20 GMT","end":"Mon, 22 Sep 2025 22:40:02 GMT"},"fingerprint":{"sha1":"3F:A0:C5:F7:3F:91:0F:F8:41:B9:C9:F1:2C:F1:DE:BA:5C:93:56:93","sha256":"7E:1C:04:B5:41:96:C5:A6:1B:91:36:CE:C1:A0:CD:6F:CB:EF:D0:FB:8D:D6:0E:A6:45:BF:12:64:B6:53:9D:C6"}}},"request":{"raw":"GET /js/zxml.js HTTP/1.1\r\nHost: www.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1908\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Hu%2BAsCgemRfKU9p%2BdBWTYul%2FdMPjIxiq4hgDu0B7pEsB0%2BxSRfaPeJvlkA6a5nGf1TptzONfXbFf7QqzS527eq2sYmSJPMjXxhXTw0xdY%2BnOdfJCCGDmYE4ctaNP7iO61w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 15 Nov 2016 20:03:02 GMT\r\netag: \"170460536\"\r\nexpires: Wed, 23 Jul 2025 19:09:13 GMT\r\ncache-control: max-age=10800\r\ncf-cache-status: HIT\r\nage: 3197\r\naccept-ranges: bytes\r\ncf-ray: 96b10d4f987056ab-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4806\u0026min_rtt=864\u0026rtt_var=5560\u0026sent=51\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=6571\u0026recv_bytes=9288\u0026delivery_rate=676753\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18054\u0026unsent_bytes=0\u0026cid=ec0d3be01fb67f27\u0026ts=571\u0026inflight_dur=27\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6483,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (6479), with CRLF line terminators","md5":"69a638b5db7e538ada8a1a5f778e25bd","sha1":"0b29c45838347a16e4a237d0ff988beeab248901","sha256":"ec8a68ba02d61dda13273f2d848d82f2f5a9167c04a6bddbb5dd250dac5356d7","sha512":"f80fcced2b83dc69b7c3485ebdcb4d834813151564fd48e9f2546bdb0b725487172878efc1c34ef2f95000623862a9bf96c03813c51d700d82e8b2346b3cab0d","ssdeep":"96:CdgGeUKC5fAyUDqOUfESXUnkpESXRIlLhqhZ7zsZHLI6nM:CvF5Zmd1nkqma2ZMk","tlshash":"e4d1b9096249a15b2d84b3ea6c7f45cdb531a4ad680482f4bb2cf8e66df4c01c65ff26","first_seen":"2023-04-07T12:29:09Z","last_seen":"2026-05-29T03:04:36.492017Z","times_seen":24,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/44/0c/1a/440c1a84aa64424_5.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.789Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/44/0c/1a/440c1a84aa64424_5.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1412,"timings":{"blocked":1173,"dns":239,"connect":263,"send":0,"wait":0,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.heavy-r.com/scr/18/0a/de/180ade03e3576b0_8.jpg","fqdn":"static.heavy-r.com","domain":"heavy-r.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.heavy-r.com/","date":"2025-08-06T19:48:28.816Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /scr/18/0a/de/180ade03e3576b0_8.jpg HTTP/1.1\r\nHost: static.heavy-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.heavy-r.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1382,"timings":{"blocked":1302,"dns":1,"connect":27,"send":0,"wait":0,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornedup.com/media/pics/thumbs/hippie-bitch-peeing-on-stage-17567.jpg","fqdn":"pornedup.com","domain":"pornedup.com","tld":"com"},"ip":{"addr":"172.67.205.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pornedup.com/embed/latest/16/","date":"2025-08-06T19:48:30.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornedup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 22:25:35 GMT","end":"Tue, 09 Sep 2025 23:23:48 GMT"},"fingerprint":{"sha1":"C6:4F:62:FC:18:7A:ED:2B:21:73:53:69:89:25:96:13:95:95:15:B8","sha256":"17:BB:38:FA:1F:3B:A8:B3:F9:CF:3D:E5:33:52:62:49:86:7B:DD:7C:31:4D:E9:A8:53:EB:6D:E7:A5:1B:4E:D7"}}},"request":{"raw":"GET /media/pics/thumbs/hippie-bitch-peeing-on-stage-17567.jpg HTTP/1.1\r\nHost: pornedup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pornedup.com/embed/latest/16/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 19:48:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 96991\r\naccept-ranges: bytes\r\netag: \"2657812282\"\r\nlast-modified: Sun, 21 Feb 2021 18:11:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 3478\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZOo%2Fvq1eB5tyfTktd9VQFcHV3Ikdi9htf4keUHhBcPoogSH2AGR%2FZxkc984%2BaypabhmCkncvmCKhXDmGfMza2DX4tJKf9CvOslsHIA%3D%3D\"}]}\r\ncf-ray: 96b10d59cd0ca61e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96991,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 300x225, components 3","md5":"30bb2074dca38aa028d180b09382cfe3","sha1":"4fed3afb0c2e630597cc0cc1e495f0f32c264e3e","sha256":"5f2af9e5412cf6da20062f3bf502c732ca4565a029d062ecafdaac875a107785","sha512":"d05e8b3b94a8fe4ee90b230d9fd31d6fa50dbdf96f91627c6fc78181475e5c9c461acaca4ee6a06538a118550d4139c1474a3ffe32302d42d894f41b9671e6e5","ssdeep":"1536:4CL6dIyVvuOPVgIbNX4fLvjksBs3qlHRws0fujz2c+pfFiSfEltLWAaixd72T+:7AqIbNUBByqlaAw1FiSoL32+","tlshash":"339312d1e0d2a360a05183b4b8112af940c28478754fb2d773abd1ceefb5e6d0486af6","first_seen":"2023-06-19T20:11:22Z","last_seen":"2025-08-06T19:51:24.012232Z","times_seen":9,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}