{"report_id":"c9ff0e24-df44-47f0-8f5e-98aac2a2a447","version":6,"status":"done","tags":[],"date":"2025-11-26T23:42:18Z","url":{"schema":"http","addr":"megaporn.ws/","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":0,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"megaporn.ws/","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"title":"Free Porno Videos 🍒 Sexy Porno \u0026 XXX Porn | MEGAPORN world","dom":{"size":8641,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4023)","md5":"79dd596a5a0a7daad4acc6d316d368e2","sha1":"56b98f1c86a58a44732616bf9fbfcf92bd10186f","sha256":"eb9d34fa75c15dcd3ab2aadebd0a5aa15fde5c9914d72e42f4b159a65489f45e","sha512":"0b70b3f398d0937bf98ea07ed47cd5fd58aa904a6c039db27f5a88d41419187d2befab199dee85f1d994215fb90e62c7748b88c128e972c241a7997820ce4ebb","ssdeep":"192:zvWQNSY0Ky4Lk5Q5DnHLoozvWENSY0Ky4Lk5Q5DnHLovQCkCaO:zvMKy4AQDnzvaKy4AQDP2","tlshash":"e0023a61edc832b29465f0de323e665dac30671b2806cd47789d53ca1f58ba4ce6b8e0","dom_hash":"domhashdc54fbe1ae197f2d0347c91caad45e38","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"megaporn.ws/","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":0,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-31T23:42:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":15}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"megaporn.ws","ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"domain_registered":"2013-07-17","domain_rank":378452,"first_seen":"2025-11-26T23:42:20.230248Z","last_seen":"2025-11-26T23:42:20.230249Z","alert_count":0,"request_count":103,"received_data":2584208,"sent_data":52372,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:4","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-11-24T00:40:14.564661Z","alert_count":0,"request_count":1,"received_data":33151,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-11-26T14:07:32.683098Z","alert_count":3,"request_count":1,"received_data":377,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2025-11-24T11:08:16.198347Z","alert_count":6,"request_count":3,"received_data":13949,"sent_data":5311,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-11-26T02:27:57.618223Z","alert_count":3,"request_count":1,"received_data":530,"sent_data":763,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"moundconclusive.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-05-12","domain_rank":0,"first_seen":"2025-06-20T00:22:59.447503Z","last_seen":"2025-07-17T16:46:47.17987Z","alert_count":12,"request_count":4,"received_data":369933,"sent_data":1790,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-23T22:16:03.791483Z","alert_count":0,"request_count":3,"received_data":1135158,"sent_data":1330,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sourshaped.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-06T14:35:38.581947Z","last_seen":"2025-11-21T12:44:25.979418Z","alert_count":1,"request_count":1,"received_data":513,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"3.69.209.9","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2025-11-25T17:43:17.257249Z","alert_count":0,"request_count":2,"received_data":840,"sent_data":876,"comment":"","tags":null,"fingerprints":null},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-11-26T07:38:15.50569Z","alert_count":3,"request_count":1,"received_data":85956,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7213511e04dab19752e9a610ec421a87","sha1":"4cef522e126bcf1a4b7fbd84024de5a791a90516","sha256":"5e0a847462fb67b802a424ac13ef2537acfcc63328fb733bb97282cdba803864","sha512":"3718a008bef6d10c2d9a8e5824c8b1ae43a60d23749e801189bd1de05997ad2458d1cb6372300fa341443664f51ccdefc7b71ec93f54c0194b71b32bd8c09465","ssdeep":"96:QozvWdZEICsP0j8ER0KBI4kqR7k/L1XglTDvPHJ40rnCx6pw1jDQCfMEDaH:5zvWENSY0Ky4Lk5Q5DnHLovQCkCaH","tlshash":"79912815adc432b55466b0af223e665d7c30670b1805dd077c9da3ca1f24fa4ce7ace0","size":4608,"data":"","first_seen":"2025-11-26T23:42:28.978423Z","last_seen":"2025-11-26T23:42:28.978423Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"06c8a74df48b8d5ee116c81a215687e7","sha1":"9818dfe77d9fa01f6a0494635c478ce1e19cce17","sha256":"25436d2cd127318ae15c5c519bb1fab8a5372dffc54fa694e0196f2b179f7d49","sha512":"8623bc5fb16362c0853b8148e5e521f32324b66ef225168c5aa74fee201f98f439855f7ff604f49bf0a564855783cd47b0b4a2ee8cae535ce57743a67c365899","ssdeep":"","tlshash":"f23107b5a489326c8659f2ca701e76de7e302f3d08069b02446326cd0f89b61cfa98b4","size":1556,"data":"","first_seen":"2025-11-26T23:42:28.979266Z","last_seen":"2025-11-26T23:42:28.979266Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moundconclusive.com/4ee6c04493e65d3658b84c9ee341e298/invoke.js","fqdn":"moundconclusive.com","domain":"moundconclusive.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a71f971f616f950c9f92448cd60b0e5a","sha1":"6f11af9bdb0482efd3dd3f922cd0e45a3785bc71","sha256":"2d613f81b0c38f693442608e35481eb16ed644c8c0acb6e8a533487599e27f10","sha512":"da65fee212d1028c229f471e72ff757a2156218d6c40d630c6a947d596fab29b589662c02634d9ab9bd1312ff555ba16b74a46b4c2008e610fb087a56427d9bf","ssdeep":"768:+t9VtXvZi5DpYscQ7V1UQeUMa1Y/D56JJZ/nSt:c9VtXvZYD6s/7V1Pela1Y/oJJZfSt","tlshash":"4723e88a3f91f05d83da317732af900bf85e4c96618cd444e543b4b4efb636ae536a14","size":46524,"data":"","first_seen":"2025-11-26T23:42:28.956698Z","last_seen":"2025-11-26T23:42:28.956698Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/misc/bootstrap4/js/bootstrap.min.js","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","size":58072,"data":"","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-05T12:04:48.050574Z","times_seen":23565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"65400a96000c9b945fbce4a7145f7451","sha1":"5938443acc24184dc18cf62d73fc66e47e45dd5f","sha256":"1c349b05b05f11635aa3a2cd780e2da89977a1bc0421535a6abe650e322054fc","sha512":"8560fca9c247c39cfa0ac637f9ff6f7a5682270caf34575e627599fb9ae26e62704734ca3f5f22c97f13a252108f5f38c07e1447efebaa25a97549d3b403d79f","ssdeep":"","tlshash":"2ec092e4d548f2ea80b3cc161abce145e7108e727969d03f2ae5583b43a0d49d4e3bac","size":139,"data":"","first_seen":"2025-11-26T23:42:28.980008Z","last_seen":"2025-11-26T23:42:28.980008Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/sandbox%20eval%20code","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-05T11:47:26.902119Z","times_seen":773788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-C1ZJFLEX16\u0026cx=c\u0026gtm=4e5bi1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f3479a9273e1c5e2521f8a2647ad810","sha1":"df6aa4b5d0616acd6272ef3b432d2835e236267d","sha256":"86e791f31ab8a07e889093bc4d014737d0930b9c1b8779bc8852fdd250425511","sha512":"030655ad798c8c3f8b863838c9325a237683750024845c7c46e94ece5867501ff5469436b572a20d2d19c2ab7cf38e0e56933967e887cf248af0fd9459080142","ssdeep":"6144:jJkBUKCtJeUI2XVUULUVWo6O7GQEO7S1URoOr+v9:9oDC2UnVUUtO7U","tlshash":"f08419ce73d674265392b478502f018ba57b68a2f44cc895f1cacde52e70a9a4277f3c","size":384399,"data":"","first_seen":"2025-11-26T23:42:28.940892Z","last_seen":"2025-11-26T23:42:28.940892Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-05T11:47:26.901553Z","times_seen":772230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/misc/jquery3/jquery.min.js","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-05T11:47:12.601716Z","times_seen":115217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/templates/bootadult4/js/all.min.js?t=1746527692","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea06e90cfc1b52a77b5c8db6e2b9207e","sha1":"976536a54a570151f85f49f5dd9876b4dfcc6ea5","sha256":"bdc5427d542b61bf535f3839776c614c6c4746b6616b7c0666b7f876b98644cb","sha512":"70ba773fa61591caead09d1ae600c1fff6688a0093cf7eec77b0cf1077854727da2fbee6032439e5823a5d7c27590bcb117bddebc390fcddb644e176020d5bb3","ssdeep":"1536:t+UsNlkmGsKhVvhg34FH26LjPxodvP8kME1rH4p9A+:t2Dkm3Kh16ovfPxoIb","tlshash":"21935bc8b691344252ff21fa816f160b62394e6b850dc508b43dead05f70969e3e7f6e","size":92132,"data":"","first_seen":"2023-03-07T13:49:33Z","last_seen":"2025-11-26T23:42:28.9045Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moundconclusive.com/cb/7c/bc/cb7cbc519c1d62075f76d028c13574a5.js","fqdn":"moundconclusive.com","domain":"moundconclusive.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e03f6d27485f619a7e8df2ae93551bf","sha1":"6f9787e9462daf16fe53ccef38c394804f9fe84b","sha256":"ff14b65ee91c4bb3de5e4b8c862e4b8b9504ced36768d42b5ec7c2f9b550530a","sha512":"625a5f615215e6949c72da71245425700a32e681ab517fded3764c596144526a3a865d8b9c676f637b3394c88a529d5f9de42dba80e1ec9708ac35276ad66907","ssdeep":"3072:wIFdgoZVCY9rTvLxFoTqNpV/ivcSgwAtWcle35RBOMIbB1T5xk0RcviyNE:w0zZ8AY4QNE","tlshash":"28a3a3887f41f1ae036b6076217fe506f19b8e5064ccd658f113eca56bac31ad43ee29","size":106458,"data":"","first_seen":"2025-11-26T23:42:28.933407Z","last_seen":"2025-11-26T23:42:28.933407Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"62de2feab29ed96b2cb9791b5ffd9868","sha1":"622f932e6eaa6f0932b744800776f7e917f07b80","sha256":"8a626c4281552f07289ba85ba1f2bd2c483f5598bceef2efbe829df1607ef7eb","sha512":"6dcb1e92b6218800f3dea0b0f9ded0c40c066a2048bd99940257c110c4092b09de57fdbf02fc2be9d7b171d46c27b682fbebf9fe593849818d18d7400d950bbd","ssdeep":"","tlshash":"a5c04c6b9221f14b83416983e45aae999a5be9ac8ec4ac8084df761029082775513153","size":165,"data":"","first_seen":"2025-11-26T23:42:28.98186Z","last_seen":"2025-11-26T23:42:28.98186Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"6575c7807eba096bc525c30cbdd14b92","sha1":"3117e095fac4fdb755db59cf3743c5347dd09373","sha256":"6b09c949792b8a466aebab50d9f606e7da0a73d41f272534ab303d1abf82de74","sha512":"a2aae3233928c284145477486031f523b576a9cedd026cf545450ca4314a7e98ec7577d8043c3fda20d5cefee4b640e577c0f67ce6338f6b8d502e0dd83ed845","ssdeep":"","tlshash":"83312b16eb89339394aaf0ba021e067d5ce0db8b5987c487096907c5245caaba237cc1","size":1820,"data":"","first_seen":"2025-11-26T23:42:28.982662Z","last_seen":"2025-11-26T23:42:28.982662Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moundconclusive.com/cb/7c/bc/cb7cbc519c1d62075f76d028c13574a5.js","fqdn":"moundconclusive.com","domain":"moundconclusive.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2e2af812f29b01c1973ad499f2ca3d4","sha1":"a3674c1ce8f1c643350cc671faf5b20843f309f3","sha256":"6b72dda70f91e6de9aab07a98373596b248838f87adb2d894ce0380090efabb1","sha512":"245cd4abd2b48de4a09f650f39553aedd8bf7ecd5c5298866219850dc7431f691067b32238c55179ba2ae817199d1755b6e19245d25027e177b21988c06f21cc","ssdeep":"1536:DdaIWucpiczPP6RdHf8741ia98IWRmtmD:tcxz36RS/RmtE","tlshash":"46a3d8c87f51f47c03d77476223f610af06a9f00659ce598e013ecfa296871be479aa9","size":106604,"data":"","first_seen":"2025-11-26T23:42:28.91689Z","last_seen":"2025-11-26T23:42:28.91689Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-05T11:55:32.942939Z","times_seen":13261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SDY68QC3QF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0572083716383408bb2f3a6fd0420133","sha1":"ca17fd6a9480f80fa3c792ef65fa82eb95be272e","sha256":"a5eba3455e68f900ff6cf33576c38ab39e4e314d43a716da976215b08ec08d65","sha512":"51786d87cabfa41ea780f558da15bd3c127fed5d09339783867609b04489e9730fa44679b3e99458b785eba7d378d4e984bd7bccabb66a7f3a6a424fd77fa7a3","ssdeep":"6144:5L2BUKltJeUI2XVUULUVWo6O7GQEO7Qn2ElVFBoOrOcx:5LKDl2UnVUUtO7QbX","tlshash":"6d9418ce73d674225396f078502f018ba57b28a2b44cc899f1c9cde52e74a9a4277f7c","size":430407,"data":"","first_seen":"2025-11-26T23:42:28.932737Z","last_seen":"2025-11-26T23:42:28.932737Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-248508786-1\u0026cx=c\u0026gtm=4e5bi1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d6f3600fed7e05a6823cbbc0966fee1","sha1":"e9c9da09c386588d0276a1eed71c9b3f31aed891","sha256":"476dcf12fb920a43d243b78fba5e935cfeab9402bdd11ea67dd47f4edc176087","sha512":"e07847975fe102e1e8265e37f1450a0c2eae3067724753b61e6f22e8fa544a7e200df108becaf4bb47ee122517a31be596fa527e7e2914fa4a764a3d27dbe974","ssdeep":"6144:wkBUmt+eUI2X6u0IVWo6O7GQUO7eYgU87m:wonVUn6ugO7ik","tlshash":"e36407cd73da742283a3a474503f018ba17b69d2f84cc895f186d9d52e70aaa4277f3d","size":318534,"data":"","first_seen":"2025-11-26T23:42:28.964035Z","last_seen":"2025-11-26T23:42:28.964035Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7648b81de994d2bb9fd9cd8cb3d4262","sha1":"40cbffb46051fc23eddf00a6cee84026820ef5cf","sha256":"06e031523a9df2cee03a44068c254e7f733de3c583951ece1a5131b97af26259","sha512":"d1bd26706f2ab78bc4f3d9a34fff53919a0b2def2eeea15b1b1105e519f0a4c46c0c667bcc368b8b1b1c46c3575563d0be7ab5c914c918aacec068ae3f6f2d59","ssdeep":"","tlshash":"49c04c84ba4634b2aa717c5f675aa384eac40b67f831e50e19d88197a59782ad052888","size":145,"data":"","first_seen":"2025-11-26T23:42:28.983512Z","last_seen":"2025-11-26T23:42:28.983512Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"58730c187bf620b563ca76b27a50df03","sha1":"7025fc9476e3549d6ee97033accaed63d04b9615","sha256":"b59529d3f706f9d2e2a2439627b93e6f002a85d008dbc07b72f9fbf7834f625b","sha512":"498541e366e9fd9c845715b930f362a1fe801116bebb48b18d2a54c73574bf60b26f9a6c431b8e4291fb64de881935a4fcf791fa8b2e79ed4cbab7b12a60e7c6","ssdeep":"","tlshash":"91c02b8c212b0c7042fb27008b3fb604b043327494d1b9324c492304cf30e03df44810","size":153,"data":"","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.98428Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/misc/popper/umd/popper.min.js","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"e21a6649041ef6f5f1bf43f11946621f","sha1":"01bcaef811210de0ea58e55e47fbefd77be5c442","sha256":"7d3b9482d4fb3b6aeaa089b08eb84381b5d3294c32c71ba320c4482bb4dbb8d5","sha512":"10d373506802082bb1121092294e2ac7cf5695024a2ac9ce3e5d0a83f71b8fe906c3d9b736c667ecbba5a340d73e284f1cf710f393a1614d051bf4ee21ac8d87","ssdeep":"384:kmQkLrwVOyzirV9nNbRGlB9D45HjiWZ8xpOxvRVgD75zBY5vImg3+zopL9TidOg4:vLsgyziJ/0D45sxpOxvYD73Y5v9zwL9F","tlshash":"c792a3dc3294b06643a791a7a0bf960eb2339875610e9410f19df2d97c30ef9917bc7a","size":21162,"data":"","first_seen":"2023-03-07T01:17:32Z","last_seen":"2026-04-05T10:46:46.724901Z","times_seen":2232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moundconclusive.com/cb/7c/bc/cb7cbc519c1d62075f76d028c13574a5.js","fqdn":"moundconclusive.com","domain":"moundconclusive.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6776ec362ac3ec9dfd9e630481e5c9bb","sha1":"9d5a0f4b75a1868b2e51b67ba1964d5e0811b4b8","sha256":"32eeed567ec342f8232f79d979e11eadb0ce83b931e3715959076377cccba257","sha512":"901b3e67a2d1f8de485ec7dd3312ef7d489b15f9f117b3a6d9716588cf53fdb76b57ced57b7be235edc25d2bf04af80cad1b4d89809ec12df42e2715f9c14122","ssdeep":"1536:vdaIWucpiczPP6RdHf8741ia98IWRmtmD:pcxz36RS/RmtE","tlshash":"71a3e8c87f51f47c03d77476223f610af06a9f00659ce598e013ecfa296871be479aa9","size":106610,"data":"","first_seen":"2025-11-26T23:42:28.936569Z","last_seen":"2025-11-26T23:42:28.936569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/150/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/150/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10590\r\nlast-modified: Tue, 21 Oct 2025 09:17:34 GMT\r\netag: \"68f74fae-295e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10590,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"04fb84f9d6bff30f238e8731ca694c4b","sha1":"f623cce49c09773098be7e2891626cf12764c96d","sha256":"270b0fa8b91e757a956356ad260ba25570ff6caf460d8e379dd0c292c712f02f","sha512":"44e7fd819322e2deee7759ed22a737a68392d39f384d98f5e79f3f2feacf27009755d915c58f5b54ed6dd9ef215516ae31b8222e52e5ba239b0457b3dc3f4d93","ssdeep":"192:G4UFE5XlOJ9Ae963ENs4TpumZn5Zu/c7fGFK/u/RrWWtdJrbN1ExHwi687:EFE5SAexm48mzgc7IxWwQxQil7","tlshash":"5d22bf5af7154594dc0e2bfa9e4c976036426f50182c3957e9d93134afae3b3cee02d0","first_seen":"2025-11-26T23:42:28.89049Z","last_seen":"2025-11-26T23:42:28.89049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/011/372/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/011/372/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9540\r\nlast-modified: Sun, 02 Mar 2025 08:56:03 GMT\r\netag: \"67c41d23-2544\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9540,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"b8687e85b566b31516f2288b64699f9a","sha1":"443b98b927732f7e898f6e8993c3f49e716be810","sha256":"4c5f9993c07566d98408ffd719bd67f21d133d7c20d3523c4c969ee07400723e","sha512":"28bf3b7e396c06230568cf61ba7ff775d11582352c0cb054abff09035e459b5dfa5d7c7e0faec67ded9bd25cd4972519d61d9df9ed743f36bc8e00e880e80dd9","ssdeep":"192:DhYOGZZerjhLhJaODktiR9UQMGqBDlkRXUoj0Xhicz:6ZI2DkRKQMG510f","tlshash":"9d12cf544de2d022df0ec7f03da24090da609d8a88419a3bfdb1b8a8631e5b1ff815f7","first_seen":"2025-11-26T23:42:28.89153Z","last_seen":"2025-11-26T23:42:28.89153Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/cat/8.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/cat/8.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52175\r\nlast-modified: Fri, 04 Feb 2022 07:47:58 GMT\r\netag: \"61fcda2e-cbcf\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52175,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 225x300, components 3","md5":"1b520c839c3557fcfd65736e24876e97","sha1":"7acb94532e02b3f7f2aa7f2317cab392d3e7d4a8","sha256":"1234ab9af3683c35c37cc00d982b98a2a04ca7e559391801d25dcd1a3f0083d5","sha512":"0cfbab6d358025d37037aeb0baca1dcc047edcec26313b14391174827d46b7174a928da8ba1629c0f2b98d05f65f85b9ebfae7ec7aaa5d52a2777f7df2edf2e1","ssdeep":"768:GmJzIXX3r+wixkTkyLxKMhhn3VRQcHXmBUnM+MQDP3VENw5m48GxRi//4h9nZ:G4zIXX79KAPLx1hl+OeUkO668GxQ//KZ","tlshash":"0d33f16f9106a3b3d69e542afe874026f46899453ddf0e53330d4bb5cc14109b2d20fe","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.8925Z","times_seen":11,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/models/54154.jpeg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/models/54154.jpeg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30929\r\nlast-modified: Sun, 23 Nov 2025 19:26:54 GMT\r\netag: \"69235ffe-78d1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30929,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x334, components 3","md5":"08678d02496f0a397d0c69f94a58d09c","sha1":"6390387c953498ce563b153a6423132d6e3ccb4a","sha256":"34e40ce11424ed87785d510260cb4aff1ff2c5eac680718825389c45ab018447","sha512":"214eda7738b9126e0dbeda9e2fc80234e1ec8d0f019a4487ac8245e8577eece220bda6d621a9884ea5b6731489eef2525174769e8b5d1543f25fbfb829eac3ac","ssdeep":"768:xCXM88y4zwTZ+cCLsQ3lQ4hvxtz/7P6XTwlw+5jRc:xIM8bbdeLl7jP6jEN5ja","tlshash":"fed2f137212a78db3565b6d2a8143e6573cc55c9a08b70cb0dec90748a7d0b4daed2a3","first_seen":"2025-11-26T23:42:28.893098Z","last_seen":"2025-11-26T23:42:28.893098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/605/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/605/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10539\r\nlast-modified: Sun, 23 Nov 2025 19:20:18 GMT\r\netag: \"69235e72-292b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10539,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"5a1a301c5d449276b1974dec02d0a5a5","sha1":"5061d1ec07f8abca5b9b8e7e702b0becdc9bab66","sha256":"20eb6737c487456309d94b72bec6214c6b1463e2f22e142a5aef7d34a8969d81","sha512":"625fa13d4e9875d375a75f9c66fd6b1b69b054d2e0aed696d2ab0568faf62652858779f67883e85a45f8064c56ae467eb16dec78754966ee51f18fb6f7513488","ssdeep":"192:/SCK3stPl2WGyyIml8/isWqGlvU/YHxaCmyIov479cGRq4AUQR/HARRY:ad3sX2Py/GPRmYHjmyNqgUQR/HAU","tlshash":"0222b01a9b04f406ee3c4b349ed5b2b255853c2410964eabe41a2b602f7d77d6bb14f1","first_seen":"2025-11-26T23:42:28.893964Z","last_seen":"2025-11-26T23:42:28.893964Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/014/764/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/014/764/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11405\r\nlast-modified: Wed, 30 Jul 2025 09:53:16 GMT\r\netag: \"6889eb8c-2c8d\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11405,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"1634ad10447c4ff1fa5c6b58f6ec097d","sha1":"68cc862cb790aa73e190d29ab1ea2c56e2e649d5","sha256":"ffb2980f8b576e97c949013e95e6910380ad2c3b695a68d1419c737c870ac765","sha512":"3d32f0bb16e4f13f41cb4457fc34d97c39ed977e240bcc838cc169cbf8d1eb9f9fe85d1e866883552b7325c842e3c607dd386e755b821b6a65a37f3a2a75a04c","ssdeep":"192:Ch0mGK6lCHmzsGHq7rgCKtWaBRURwtzumec+KLguzRg9zdPK5MZvRP0ID3:rmGK6lCGbHYRvarURwhIWkEgbPK2t3","tlshash":"6b32bfa73a0ce467e70d2ff94f990517db918d2700e8d28bd4e61dac1bbda7058049f9","first_seen":"2025-11-26T23:42:28.89492Z","last_seen":"2025-11-26T23:42:28.89492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/cat/2.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/cat/2.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 61768\r\nlast-modified: Fri, 04 Feb 2022 07:47:58 GMT\r\netag: \"61fcda2e-f148\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61768,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 225x300, components 3","md5":"e29a9cabf2d0d866001083cb62f7f384","sha1":"c45e7ab365bd57deea7f2f204d27a7728b98fc13","sha256":"14f33ff9d3c8307c38384266c55b1a6385774111b6c6bfbd92d513c8bcb02d73","sha512":"7d712ae0b0a4bd14a27996b402c4b3e3e7e206473f5867cb6f5ffc70a8ed42f5d836213ec2aa7022588289b67773c35549ffa7ec7db016212ff90aeb8181cf22","ssdeep":"1536:G7Oagk+hMHH64yJCIko/+j2zmYMZBZVJnsCXb30UM:Ygk+hkyJtn2amYM9Xnp0UM","tlshash":"015302f4adda584487d699c6a7803d50966c14cf78b8b636ec1c810bce7d35b484f8be","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.895555Z","times_seen":11,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/614/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/614/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9169\r\nlast-modified: Sun, 23 Nov 2025 19:34:28 GMT\r\netag: \"692361c4-23d1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9169,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"1017e070e10f8e62a8a9ccf6208d4983","sha1":"42d11e7d52d6e911331bfe197a23617dc3ce389a","sha256":"0865750bb3581f060a859f8940811453add09cb2d0625f9f12a0544815a8d973","sha512":"2c34d9c22d918cb806cbb6c4dbf0ccc3bcd63ebaa1662bf2ea335432b0cc758f9bdeb1e5fe792d7ea77a04e7d6d0fc4c795188ee5d71e20c22d8c3f862f8287e","ssdeep":"192:CRKD568o2hGJSqFrEM7zirIK5fI8AwfItp/ONkTQ9G:OKDc8X0gqBjz4tawfItEYqG","tlshash":"eb12ae663b859831c96d237b2c5943bbb2035e14d27302c7e715656bab6f7fc01e09d2","first_seen":"2025-11-26T23:42:28.896538Z","last_seen":"2025-11-26T23:42:28.896538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/611/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/611/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10707\r\nlast-modified: Sun, 23 Nov 2025 19:26:58 GMT\r\netag: \"69236002-29d3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10707,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"759747848f5e87033f3aeb3c2b179c98","sha1":"1cbef50f70b5d10127bf4e421d6aadffdee696a9","sha256":"4b40c96721d128ce6219da510a25aa10ff183a46176c491a059b9ecb9268be76","sha512":"94c89d4870bd3de2044aabff17754f4003c05d76f57bd94c4fe1a397cf3d6b4d0b158b60f79f0bb51ba83e44a0732023fc045c6b39df5f915d8721c3bd8104f5","ssdeep":"192:LjomZ7TpwqmfxY77ACZYbZVmxN8r2hHOCMBdcJ20zSIBa/pjQIv40060V+AZ:L8mZ7TpwqmpY77/ZYtVmUr2hHfmeJnOA","tlshash":"1c22ae452ac8505be94d2b3edf392e5ae769fde1301784e3d59217365b8e2f208942e0","first_seen":"2025-11-26T23:42:28.897328Z","last_seen":"2025-11-26T23:42:28.897328Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/users/563.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/users/563.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 78475\r\nlast-modified: Fri, 19 Apr 2024 00:11:36 GMT\r\netag: \"6621b6b8-1328b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78475,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"52a0b0900fa9d2d595a61476f046a22b","sha1":"feaddc000819278fff77848a98825290b1962d2e","sha256":"6173d89d422c445082fb0af5dbaf7c3bf845025f88d2b3eebf5c973482ff7561","sha512":"cfddab53cf3fd0977d97e5f318e0b49df038d955497cef96ffd99746a127b48586ffa05ce13858e3d8a9c48892040df68da2cd55f61bc82e0b9f90e4e0ed55d5","ssdeep":"1536:5XrOFQUj0WS7P8wIoYpoID//chDNaVKMgWJFXmpQ62zH:xK9SH+L/chh/MgWLXJ62zH","tlshash":"207302fc5bd62aae1d461a534fd1584a3c7bb89c47c937c2d93b30d365820e08b2d136","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.898305Z","times_seen":11,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/596/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/596/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8859\r\nlast-modified: Sun, 23 Nov 2025 19:03:29 GMT\r\netag: \"69235a81-229b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8859,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 30878x30849, segment length 16, progressive, precision 8, 500x280, components 3","md5":"7986b0c96107183b0e578a2473dc50f3","sha1":"52f30efa56f2fa4ee4e6f35388341f5be3472341","sha256":"c6fd19d39167859677def23404283d775b2f52da4ce5540bd1cedc49e0a0aa93","sha512":"94f236f4fac88a7d580f1c87f5e5916fa60b4023d482ccb4751f42dc1991e32ce26ac276bc5da94fb66ec570a5e3ab40bd29b60c03fe25133fc197330d2463c1","ssdeep":"192:ltQxXfxkjVfT5iYRGs1vpUv8iUTd248/kKPjlIj0d3GuZ:lUfWjF5i9s1ev8DpwkKPh20V","tlshash":"fd028d431fd1e903e8fe3f70dca3416a9c455e19a626a9c3e64a944017fe47cafe84d0","first_seen":"2025-11-26T23:42:28.898848Z","last_seen":"2025-11-26T23:42:28.898848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/users/733.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/users/733.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 110759\r\nlast-modified: Wed, 03 Jul 2024 02:53:31 GMT\r\netag: \"6684bd2b-1b0a7\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"9a8c1f741d02b0db1447d3a72c70738c","sha1":"1c1566e77a58fb57d17dbfcdc3f4725940a7899f","sha256":"7623a5e9052569db0924364b441a8ee842e05d53b6c980ecad68f4e1cdce8caf","sha512":"651e8cb84b6728a627bea3d769df194f4cb7b2842d6549d433a1dab1ce8fc90a707cced597c2ede03a81cf78b59d145bc115934f9cbac36503b71e2a293e4b16","ssdeep":"3072:8fLiE/FgBen9fQZElKy4mP/j6TOe0fy9XMUsK52qcMj4gFV:2Fg4WhmWX0fymUr5FRjxV","tlshash":"34b31243d8ea67a85bd3622efeddfc0c4576b283171a26883462d0e05ec5e469e65b03","first_seen":"2025-01-02T18:15:12.777214Z","last_seen":"2025-11-26T23:42:28.899693Z","times_seen":9,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/photos/thumbs/4998.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/photos/thumbs/4998.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15339\r\nlast-modified: Wed, 30 Oct 2024 08:14:52 GMT\r\netag: \"6721eafc-3beb\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15339,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x250, components 3","md5":"1912e7a3171700e75cd88aebd60b54f8","sha1":"98d1cdcb6c3277a6a3720ac3a65d0faa5e6970c1","sha256":"e177ec09e4b9a0cab98529fb07c056fada195fb8b3b7c7262ebac6fc3f0601a8","sha512":"b3c5510294a841d9dbb383ec239520d23bd6dc884ad883e4e856fdbffdac47a29a8cd477758244cc9b5032136d650a365f59678cbb22e841751ab4e2171033c4","ssdeep":"384:0w8UMr/qQB6H6HPx0ZPxh8ZK+okJxBbhYSiHwV:x8UcTp4pqZV1BPiHwV","tlshash":"e562bffe1fe688d8f1f28efa45534f5fe1d620349b71a64cc6ce992e53208d20d18226","first_seen":"2025-11-26T23:42:28.900307Z","last_seen":"2025-11-26T23:42:28.900307Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/templates/bootadult4/css/all-dark.min.css?t=1746527692","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /templates/bootadult4/css/all-dark.min.css?t=1746527692 HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 48611\r\nlast-modified: Tue, 06 May 2025 10:34:53 GMT\r\netag: \"6819e5cd-bde3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48611,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (48611), with no line terminators","md5":"f3f5fe5f6688189cc4b446c7d750a556","sha1":"626823615df72e2d31c2a83f71fa234956d185de","sha256":"35d382e68ada75f948eb462abb43f9eff0c731aec3114d27c467e4ff1bba1a9b","sha512":"31a65158ff46fd2857ffc6c32afd6f71f5fe0c19e7c90c1b421d7d84a505e99a1242977f1970212485b8a24c6076f814cfe6ecd1f8887fa939c5c083ddc56359","ssdeep":"384:eT3dT1deokRg+mL/2umF0mcJUpUXwa5hUGDbVH9BdRMNuLc/QS9YepFGyj9Ade8v:eTfHL/GFZc+eXwsGGDkGdXaOo/uh","tlshash":"8223b82bd250120a64ffa52aa9d79fae433c8153f71546fcb8aa6d30a30e5740637fd4","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.901115Z","times_seen":12,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/channels/11.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/channels/11.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8949\r\nlast-modified: Thu, 17 Feb 2022 16:53:20 GMT\r\netag: \"620e7d80-22f5\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8949,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 250x166, components 3","md5":"b721acd66cc3ca08a2e09ada4137eede","sha1":"1f935eae2209bed51e9b5a4d4c7779fef72e1075","sha256":"6aae6e16f4c310e5a62fa6a5af1ce0a5cc10259c1c55bb0d41c4592345e4d86a","sha512":"311aa8654ac2e34d912a1d3def7ecac8b1f509bf387b29a7993238e5e362c09732a3f57e878385a4ecce0ae9baa6e6f80d1bd04300d68187b565b788e2b3e4df","ssdeep":"192:czCXHfZXO9s0PYOia5zL1cLyUB4XZd6zGdlTyuqTHFuy7BzdW:czMfZ+O0wWXiLyUB4XZdEeTsFH7Bz4","tlshash":"6002292237a3cfcbe68187774490bdac50c251b83b5a9bf6c8a3ef2dd080ab4c656455","first_seen":"2024-08-19T19:04:46.276368Z","last_seen":"2025-11-26T23:42:28.901659Z","times_seen":3,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/003/827/2.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/003/827/2.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17413\r\nlast-modified: Fri, 14 Oct 2022 07:21:22 GMT\r\netag: \"63490df2-4405\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17413,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"aecca774249c1097e86e8ab3b26782b2","sha1":"33fab227e7b935230f6ba046957f433baf9ee167","sha256":"14232a782940923e6e838ec17bfeac4a6460f80282f6f255f7eca221b76baa1b","sha512":"2c5b083f7c574113cc211664cf49a7049de100159f99bdaaf19e1e6c29a20a86a1c11b2d6ef2c3968c37da21efcc13c8f2c65f9afa19221f849e2483cf3c851c","ssdeep":"384:hDQLfZ/FpjvvCVopBYX4WtTaO17FJ3rQkH79Gp9:GL9SVoXYoWtuI7FOYe","tlshash":"a672d07b83bfd039c63de935c257626c7a44ed4805dc77aab92528e3a36c00dcc852d6","first_seen":"2025-11-26T23:42:28.902907Z","last_seen":"2025-11-26T23:42:28.902907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/photos/thumbs/5117.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/photos/thumbs/5117.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11123\r\nlast-modified: Wed, 13 Nov 2024 04:36:20 GMT\r\netag: \"67342cc4-2b73\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11123,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x250, components 3","md5":"c8b78da7332532f99f1f7ff9de0665da","sha1":"4fb9c269ed438e0f985472a83b98ff5da35e08e9","sha256":"593c420b626c0b07bf1b45e1e9028f3c67845eaa64bdb6c69bac9dbff04f7400","sha512":"8dbb317f6d56d0a6074d6e8e4bc592918b2773b8d986989d15124a6f6d470081986d6fb14d8b683fbd6304260be909c90e194b205577f3958a703663466a876f","ssdeep":"192:0wWI60oePwzOSzSxUkAflXsC/FWKjSTqXEL+dLpJbaRCbBo0Tw:0wWAZP1R32lTPRCF","tlshash":"9132bf26e79307edfcd339f4452b0f819bef7d6246456701b2f2309a8cc02466aa795e","first_seen":"2025-11-26T23:42:28.903651Z","last_seen":"2025-11-26T23:42:28.903651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/templates/bootadult4/js/all.min.js?t=1746527692","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /templates/bootadult4/js/all.min.js?t=1746527692 HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 92132\r\nlast-modified: Tue, 06 May 2025 10:34:54 GMT\r\netag: \"6819e5ce-167e4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92132,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41849)","md5":"ea06e90cfc1b52a77b5c8db6e2b9207e","sha1":"976536a54a570151f85f49f5dd9876b4dfcc6ea5","sha256":"bdc5427d542b61bf535f3839776c614c6c4746b6616b7c0666b7f876b98644cb","sha512":"70ba773fa61591caead09d1ae600c1fff6688a0093cf7eec77b0cf1077854727da2fbee6032439e5823a5d7c27590bcb117bddebc390fcddb644e176020d5bb3","ssdeep":"1536:t+UsNlkmGsKhVvhg34FH26LjPxodvP8kME1rH4p9A+:t2Dkm3Kh16ovfPxoIb","tlshash":"21935bc8b691344252ff21fa816f160b62394e6b850dc508b43dead05f70969e3e7f6e","first_seen":"2023-03-07T13:49:33Z","last_seen":"2025-11-26T23:42:28.9045Z","times_seen":16,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/flags/de.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/flags/de.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 545\r\nlast-modified: Wed, 28 Mar 2012 12:47:26 GMT\r\netag: \"4f73085e-221\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"ddabae687ecae5edaaeb808d440543e6","sha1":"1daf2d67ccaa5be01a330a231ac996a9d5575594","sha256":"3323814006fe6739493d27057954941830b59eff37ebaac994310e17c522dd57","sha512":"5bfbe453e635ede38a7e495badb349a2ebaa152a794d26d5b69b657f8e8fd5188436542bfe8c35d0c1117c3a25500d0404069d4b854faece914e07684d07a928","ssdeep":"","tlshash":"46f026d6514092d3ca1910de2c031651f5b3dc91498dc070011a8e8055f68c9ddf2650","first_seen":"2023-04-07T17:29:43Z","last_seen":"2026-04-05T07:00:37.476089Z","times_seen":4255,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/011/373/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/011/373/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9126\r\nlast-modified: Sun, 02 Mar 2025 09:00:27 GMT\r\netag: \"67c41e2b-23a6\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9126,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1017x1016, segment length 16, progressive, precision 8, 500x280, components 3","md5":"3d1fdde013a566541f71bfb6dd47c2cc","sha1":"e46b44ec4379ef98a675a95d1179472c55b2b443","sha256":"0cbec0c9eb55c20a709c2a0b71e194bfc94c91fe7ed48c1f68d57be3f2d70fd2","sha512":"dfef4970305287c6ae8617066a0fb16acc424182c2812ef89f234b53d9d8f44b71f0721d744585c6a56dd94a5608b0a85c133a96ecde931dd964fb7f0e6dda64","ssdeep":"192:ib6ibG40nhxj8vXx9ip5WBoaoi7ZclADUDkSacwnY:izR0Yvh2weaoOZceQDkSacn","tlshash":"fc128e61118a4e50e73c2735cd88c70a51f5ec2ca56a069bf5c9129afb0d2bbff092c8","first_seen":"2025-11-26T23:42:28.905493Z","last_seen":"2025-11-26T23:42:28.905493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/misc/font-awesome/css/font-awesome.min.css","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /misc/font-awesome/css/font-awesome.min.css HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 31000\r\nlast-modified: Thu, 22 Dec 2016 20:50:34 GMT\r\netag: \"585c3c9a-7918\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-05T11:46:03.007332Z","times_seen":237175,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/flags/it.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/flags/it.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 420\r\nlast-modified: Wed, 28 Mar 2012 12:47:25 GMT\r\netag: \"4f73085d-1a4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"784f7eb333f0591558bcce9616a3c105","sha1":"c786c15b1b86629c1bbb6ac12be5fba39181dec0","sha256":"c7992f57d67156f994a38c6bb4ec72fa57601a284558db5e065c02dc36ee9d8c","sha512":"0f3feaa63385520f2565c7aed0d6d7a0b6f66b78fb6c8845a026199c375707911822b93534033c15f0f517677c1e9a400263c1b6022794401cbf8d7367639b6d","ssdeep":"","tlshash":"fee0faaf7650c85ddf5ef5415cc7c77ab41709df0515a39d688564bf0645607d0cc143","first_seen":"2023-04-07T17:29:43Z","last_seen":"2026-04-04T10:58:23.430918Z","times_seen":2220,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/010/578/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/010/578/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10766\r\nlast-modified: Fri, 27 Dec 2024 10:34:19 GMT\r\netag: \"676e82ab-2a0e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10766,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"4620ca69b150aea839fc19c345bd5acc","sha1":"6189640261b5e8b72b2b2f08824cd6267f99e205","sha256":"2695e14db59551dc7406ddaa16eccd661f27c6bc30e5f23e319c13812d2438c6","sha512":"e228a4c37f5b4545d7b5cc5a23d73d909f1282c3d3428646ae49c92d85e2e33ee8435c8c909a91bd9434c60f1103f4efb70fe491d803c3eacca7159bd4c33d16","ssdeep":"192:7EWwiCO+s+od/0HW+p9WWfx8avsTmYLrAACsIWae0CEukmAszO:wWwiCTI/8W+p9d3kTmYwACUKmpS","tlshash":"75229d9d9046d508ed7c63795c0c43719754af81e2494eabeb068d70af3d13b8fa9ae0","first_seen":"2025-11-26T23:42:28.907249Z","last_seen":"2025-11-26T23:42:28.907249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/a1/07/5e/a1075e7ca775b2e1920fa64ed3be3e76/1756656529.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:56.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 02:33:02 GMT","end":"Thu, 05 Feb 2026 02:33:01 GMT"},"fingerprint":{"sha1":"FF:BB:C7:F6:31:A3:EE:08:8E:72:C4:2F:A2:C8:78:1B:3C:22:C4:57","sha256":"93:BE:65:88:B5:AC:E6:69:91:EE:F6:7E:27:3F:D6:9F:59:B1:AB:46:F7:49:0D:E8:F2:1C:9E:A9:BE:F9:B6:95"}}},"request":{"raw":"GET /cti/a1/07/5e/a1075e7ca775b2e1920fa64ed3be3e76/1756656529.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 26 Nov 2025 23:41:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32801\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 16:08:49 GMT\r\netag: \"68b47391-8021\"\r\nexpires: Fri, 28 Nov 2025 23:41:56 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32801,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:29 16:46:53], progressive, precision 8, 320x50, components 3","md5":"2122047ada86924adfb2504a4a648c2c","sha1":"669edfed7190eaff3fea13206e7f12f61e206141","sha256":"22eeba58c86c2639bb407d6d638cb0f0a5ba1c7112fd4c210b01fe4398fb6173","sha512":"b94e21f1f324fe6e7c84bdcd33062dc5487a5550b2c1473d04f6e017941fa9a5ec201829927390c195b0ca46db3cd87ae0a9193c1eef1ad3e5495779a5f30486","ssdeep":"384:nZqMJUtXiiuqMJUtRn6SDAvQYNg7afgqWlIQtVQatLFkZkva/fUjpmATvfR3:3JQXiVJQRhYyGQtrkKvakNmATvfN","tlshash":"e5e2b029b7a0dd23ede1e73508f1c7a26b72ef90a7c3a5c5b8ac550d3bb12525d4c206","first_seen":"2025-09-02T22:39:34.421204Z","last_seen":"2026-04-04T20:32:32.963633Z","times_seen":265,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":103,"dns":58,"connect":19,"send":0,"wait":19,"receive":26,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/010/897/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/010/897/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18037\r\nlast-modified: Mon, 27 Jan 2025 19:35:34 GMT\r\netag: \"6797e006-4675\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18037,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"09559d8b49cf200ac1942702b0a8bd6a","sha1":"53686bb43b00f572d4b6b8469d7ab41687fa7eec","sha256":"925064ed5d5b936f223e93fd5da9ce1183ba3729e0278c5f638a8cbcb51684a1","sha512":"76a6f8498a6764d9acdbf98daa4ee2115c10d4764e9dc836831713b5f9aec7b2606452c495c3cc26c2b29fda377c3a0a7c5cabfe9103597390ed710338e06701","ssdeep":"384:afMZmllB0nBbp803S36fNayfW2eo3TxuIxgOr90eTJEipb7r:vIlTObpLpUyfWTeTxQOrSCJEir","tlshash":"8f82d094bf44b761cd3a3b3137361f6afd8599d25ceac53eb6e61440bb0a4088dc18b6","first_seen":"2025-11-26T23:42:28.908638Z","last_seen":"2025-11-26T23:42:28.908638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/flags/hr.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/flags/hr.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 524\r\nlast-modified: Wed, 28 Mar 2012 12:47:26 GMT\r\netag: \"4f73085e-20c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":524,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"0868c49000b253d9b4f290471898c961","sha1":"8b062d3b39a66b26919661bd4192939b7247c14c","sha256":"b4d87ecdeef29042f05b26ad81fbfece47292270eb0cfb10ab132f18c3ce98cd","sha512":"004e15979848f43f4ffbba7758ab0353e2f36cca4ff39d55feae9c4dadd3a9e44c1e86491b9a2998f7b8678e04304fd992a7a54542ed3bdf90a54463afdb9024","ssdeep":"","tlshash":"b6f075c3b251c8f0876c0f715c23011de81e8c464ebfa4f8582f4c074933e00d9a024e","first_seen":"2023-05-08T17:27:13Z","last_seen":"2026-04-03T05:16:43.821608Z","times_seen":380,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/615/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/615/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8998\r\nlast-modified: Sun, 23 Nov 2025 19:55:45 GMT\r\netag: \"692366c1-2326\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8998,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"1e599ac73b63ad9eadc482e8c6e0ed74","sha1":"92ada712e0214972f944eb64d611045f146ea7fa","sha256":"c956c79878fb37ccd22a8cf9bb92a9ae2dd8038611fe1b8f618478157c3e6a94","sha512":"205e0e52096c8a1bd53317d7a784fdeb503849beddc7c2d2b3130e126b870ff9f066c4f3833cff6b17d5e4a77d2884d11cd9769d16e182692a4024c8c7e4ca3c","ssdeep":"192:cZlwekqxUg3wwOWbIfuv21tf9k9ut3TV6T:MqRqx0r8Ifuu1k9utM","tlshash":"09029d2c93522919e59e23bb5eca5f5096024f64345e2b67ef60479533df230fda02e0","first_seen":"2025-11-26T23:42:28.909938Z","last_seen":"2025-11-26T23:42:28.909938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/flags/us.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/flags/us.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 609\r\nlast-modified: Wed, 28 Mar 2012 12:47:26 GMT\r\netag: \"4f73085e-261\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"968591e0050981be9fa94bd2597afb48","sha1":"dd9e149e2b5ad59dd8b4b262f5fdeb5cc10ecf43","sha256":"36cce5cae3d2e0045b2b2b6cbffdad7a0aba3e99919cc219bbf0578efdc45585","sha512":"ba8e09654cff264d428b1b3cf6df764699c6a754f2db329643881fb75cc8647a9c2777f05bb8c0d81b9d648d345796ffdb14fd231e2bb1caf71530098d12f219","ssdeep":"","tlshash":"9cf002c1fb856ae9e16a52610d7a16701c07c3a4217640a46c26ded41929f0dc2d8221","first_seen":"2023-04-07T17:29:43Z","last_seen":"2026-04-05T11:12:40.693793Z","times_seen":6432,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/users/nopic-male.gif","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/users/nopic-male.gif HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3681\r\nlast-modified: Wed, 28 Mar 2012 12:47:25 GMT\r\netag: \"4f73085d-e61\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3681,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 121","md5":"4104111b927da077fbdb247d463a830a","sha1":"841ad3426d4218820653f0e6ede03d83a13d28b6","sha256":"6719bad38b101e353417bf0667db69cd75394cb5a46838d6e24c85f164aa0bc5","sha512":"db298523d0f78b176b88f715f8a293c15e9407d326dd6a9bee5b86730201d7c97eb80c36cb2f35c8afe0cd7483e81b8dfe6dd9ecf8268aa359321773aee891c7","ssdeep":"","tlshash":"ca718e171c088032174a1393bd2c8ed1ba49ad5bf194fad3eaa79b57f0b3313211c51c","first_seen":"2023-05-22T23:46:33Z","last_seen":"2025-11-26T23:42:28.911041Z","times_seen":14,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/609/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/609/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11254\r\nlast-modified: Sun, 23 Nov 2025 19:24:46 GMT\r\netag: \"69235f7e-2bf6\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11254,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"2b5ecc752815a6402c1716034f6b2f94","sha1":"cf34ca25a303162bdc7603963b713c9ffbd04d76","sha256":"e5b5db9b866bbc8b65615cbb76077610eadf7ea61de814ca72659588befed568","sha512":"a959efe3a8c8acedbe3d3d80956e0fa5f7571dbc0548897e55d8ae947a5e5a4b55cd4a251d75a6d6795333da58c15d08c6f9039b85b8a23332da8b43546afe97","ssdeep":"192:iE8gjP7Pt0YGmNMIMOA+JGls1nyjzaxhtuZ2XDti6Z4t5jAZPHuHR:iuDt0kMz+JGlscjzaxhoZ2DQAZPOx","tlshash":"09329e5e436989c7c44db3322c598e69ac006f92e2dc18a3cf4a5a681b5ccf4dbdc1da","first_seen":"2025-11-26T23:42:28.911953Z","last_seen":"2025-11-26T23:42:28.911953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/014/181/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/014/181/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10093\r\nlast-modified: Wed, 25 Jun 2025 08:22:17 GMT\r\netag: \"685bb1b9-276d\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"af986268df5cd5bca5f9d797a5a4f9a6","sha1":"9713dd3c604ed98d2d74be9a42b592148772da24","sha256":"abb9eb1e8368d11787863f89f0e856138dab56d2dde704a080ce10740fe3cb67","sha512":"c7e54e47757bb2317e3fe63c61fa6678d8bad88d1bfa5a670f97780fdca6f692737615cfffbc29043302980cb7d8c369db8b1278784d8bd4523b655023ff677c","ssdeep":"192:deRjQGtsCPllJVU+eI8e/3g0m17gwJk/YLmOzD8w5Gl4IBn2fQ:depPPveI/vg0m7LmO5TIQY","tlshash":"2822af57c7a58e06e86e23384f5dd3804ec85e0d7224b28be105bd591f1f9f950c84f5","first_seen":"2025-11-26T23:42:28.912741Z","last_seen":"2025-11-26T23:42:28.912741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/photos/thumbs/1317.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/photos/thumbs/1317.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16870\r\nlast-modified: Fri, 04 Feb 2022 14:18:53 GMT\r\netag: \"61fd35cd-41e6\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16870,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x250, components 3","md5":"70d95000999da6c688da92269a613f33","sha1":"09df28ec01543b840f742963710ec7aac86cde8e","sha256":"bfa9dc3eefae3db9551620a2d1a2fc9efb30f5e53771abcbd3b8d56e7174f358","sha512":"b2b18a602dba58ce39d1f14dd9e6478d965fa70c86589ea1468c300314a820ad59ed734aee1383cc7906561b491bba7bee3ac34ef628bb046b2642aedf0930fd","ssdeep":"384:tjsiK1Nmc+rA6Uk7AlF5k7PzTxqchCixtzxThxk/Qj/H:tjemc+rA6UkUF5IPzoq3xt9vk/e/H","tlshash":"4072c0e3f9ac9a284d3d1b39774330e53525f8860dc79aed568971c46c029d8323afc6","first_seen":"2025-11-26T23:42:28.91366Z","last_seen":"2025-11-26T23:42:28.91366Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/misc/bootstrap4/js/bootstrap.min.js","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /misc/bootstrap4/js/bootstrap.min.js HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 58072\r\nlast-modified: Wed, 13 Feb 2019 14:47:50 GMT\r\netag: \"5c642e16-e2d8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58072,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57791)","md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-05T12:04:48.050574Z","times_seen":23565,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/templates/bootadult4/images/logo.png?t=1563971424","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /templates/bootadult4/images/logo.png?t=1563971424 HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 20501\r\nlast-modified: Sat, 01 Mar 2014 00:19:56 GMT\r\netag: \"531127ac-5015\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 247 x 53, 8-bit/color RGBA, non-interlaced","md5":"d7e9587951b57a3edcd93293306a87cb","sha1":"228d88d8900da02ad89f0e7a12a242162ca81cb1","sha256":"a6bffc997e99d3ea390ff6962b414bbdc164ca23d5d32611e119da399c6a9e43","sha512":"f8b2a0fdde4e755745bf36c7f966670f3a1814abf3ce7013d46e15b5c7a5462bb3d641b8c49e3412ee9d8b0d5a3cfa23d673125b34ec880d9392f4737ad858a7","ssdeep":"384:+JXE0590yOj1fG7aE2Zn6Hz6AyRIAG+5ObWVC8+aUn9JuC8M/u8RE3/B+x8m+7:+3590hfRR6HzsY3WRlUngM/uvZI8b7","tlshash":"e092e11f72731787b87a7c32979d74163eb025285b9e0a6c20d96a65b4724cf2804cef","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.915006Z","times_seen":11,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/models/54151.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/models/54151.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18069\r\nlast-modified: Sun, 23 Nov 2025 19:01:23 GMT\r\netag: \"69235a03-4695\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18069,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x239, components 3","md5":"45e1c27d950f443057e9b8cec4aac42f","sha1":"1a4e40c3a1d7edae568030ff5173148ed0cd048e","sha256":"dedd7f09bf1a8f64a4c06c916843d56275fa3ba5080aa3120d809f502f761e8e","sha512":"882334a8a2fb2957d7ffa62697b8f43be38186023cbf1d025d7598ac8cbe884fac7be5b487faf5900438a9fd912a675f32af54383ceb8618161467878e40f0c9","ssdeep":"384:cUbLnnKV4HVovzHlWt84Ij/nX2YifjCxVcXiqJmI3XsAPH:cUbLa4HYHlGC/X25eVb8sIH","tlshash":"8582e185bb2c77c4b1174a36b5745e7775cf6f514a6ce32e81c3840a60ecae048916ba","first_seen":"2025-11-26T23:42:28.915565Z","last_seen":"2025-11-26T23:42:28.915565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/users/548.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/users/548.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 63358\r\nlast-modified: Sat, 13 Apr 2024 16:55:54 GMT\r\netag: \"661ab91a-f77e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63358,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"096560f058bacc652e1fb5cb1d8f47f3","sha1":"f99a912a6ba062e466e214d406a786aeb0bb8ba4","sha256":"2b87b655b63412e199ab6faf89c80f17ee974b766f2fe1a795461291f37f14b3","sha512":"8d6fa1632b8f930a3e55d688d531073b9bd4c10b9fb9a929d1337ff5bbebf7df265a755c6e8c485ea86f96bd35ca6f02dd5363219834098bec505e3a0cab280e","ssdeep":"1536:VaKQzBYV/fdZwf40a+1tnRGBGP/jC3UE4AWiA7c7ryU7OPGST1:ABzBYF8tVk6gYAWiAWyEq1","tlshash":"1c5302d61b7c24834ab06e44a0471454f171403d6c9c1aeee94339f9de7fbab6bd128d","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.916394Z","times_seen":11,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moundconclusive.com/cb/7c/bc/cb7cbc519c1d62075f76d028c13574a5.js","fqdn":"moundconclusive.com","domain":"moundconclusive.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"moundconclusive.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 21:50:08 GMT","end":"Fri, 06 Feb 2026 21:50:07 GMT"},"fingerprint":{"sha1":"48:83:B3:3C:56:45:26:1B:12:EE:17:0F:F3:C4:15:10:62:3B:95:66","sha256":"03:92:92:0E:19:CD:33:8C:B6:01:98:43:AA:4A:A1:B2:A6:3F:7B:2E:EC:C0:48:6E:39:86:8F:1F:2E:89:F7:45"}}},"request":{"raw":"GET /cb/7c/bc/cb7cbc519c1d62075f76d028c13574a5.js HTTP/1.1\r\nHost: moundconclusive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 26 Nov 2025 23:41:55 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38198\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: 4b4e7ab587d59b22ad7bcd2439afc363_HD-44991=0; expires=Wed, 26 Nov 2025 23:41:55 GMT; secure; SameSite=None\r\nx-envoy-upstream-service-time: 5\r\nHost: moundconclusive.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 54a9ff1705676fc93682a7b4c4963780\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":106604,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2e2af812f29b01c1973ad499f2ca3d4","sha1":"a3674c1ce8f1c643350cc671faf5b20843f309f3","sha256":"6b72dda70f91e6de9aab07a98373596b248838f87adb2d894ce0380090efabb1","sha512":"245cd4abd2b48de4a09f650f39553aedd8bf7ecd5c5298866219850dc7431f691067b32238c55179ba2ae817199d1755b6e19245d25027e177b21988c06f21cc","ssdeep":"1536:DdaIWucpiczPP6RdHf8741ia98IWRmtmD:tcxz36RS/RmtE","tlshash":"46a3d8c87f51f47c03d77476223f610af06a9f00659ce598e013ecfa296871be479aa9","first_seen":"2025-11-26T23:42:28.91689Z","last_seen":"2025-11-26T23:42:28.91689Z","times_seen":1,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":227,"dns":19,"connect":94,"send":0,"wait":99,"receive":93,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/004/967/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/004/967/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11160\r\nlast-modified: Sun, 15 Oct 2023 19:19:20 GMT\r\netag: \"652c3b38-2b98\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11160,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"e02d6b15d55d766469f329b9956d6b7b","sha1":"a52b9ae2c982d479e42e17435ce828ebc65eb692","sha256":"86c9384431bfe7a98e30ebbba40a3dfffc355aa894852a29a2f3aff21ffcf54d","sha512":"73c385d858b02f760cee5cb587537e0ca44c0899f2918bf6031a10de5b47f8d18c71085a657dabf7cb0c0b11af0607859c0538398ae7acf1a43d135b23549306","ssdeep":"192:PqGmg8IwgDmczHoudAGxA9Or+orOU2FH46llr0IYSdvHcEi6QUT+5rO:P2g8IAc7ZAWz8j7r0gdvHcmKO","tlshash":"07329fd566b2f320f58ea7392c409309db146e745ddd03f7cc44a984a73e1b688f11e5","first_seen":"2025-11-26T23:42:28.917756Z","last_seen":"2025-11-26T23:42:28.917756Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/620/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/620/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9713\r\nlast-modified: Sun, 23 Nov 2025 19:44:37 GMT\r\netag: \"69236425-25f1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9713,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"2e6a7019e3879d3f80253ef381038418","sha1":"eb6a26c9d37d7c41bc3904f71ac660dad77ae6a0","sha256":"af244c2da4a4f58abcdf24fe67bb3a2b403a87a14d526c4185290184642a0279","sha512":"cf1e080fdc018435cfbfb4decc61546336217f27887d997c5c57ea6eaec5d78411b8e6ccf7d158e11fb42238177d2f6f60770179bd9d75650778d7419455e51d","ssdeep":"192:3DdwBFgPGL9SRk+VVCaW1eHlqJRgie555qS/R9otKwoG:5wgPM0RfVAeQJ6iI5sM7woG","tlshash":"81129e9e96355402ecfc97334c68a3d3a6008f00b3125a5bf4447976ebae47495c2bec","first_seen":"2025-11-26T23:42:28.918566Z","last_seen":"2025-11-26T23:42:28.918566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/607/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/607/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10053\r\nlast-modified: Sun, 23 Nov 2025 19:22:55 GMT\r\netag: \"69235f0f-2745\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10053,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"845b16429e0ecda18c2f4f0c3af85b51","sha1":"ec25250f0ecb7d5a1193d8dcbb37711e1d45f873","sha256":"5526645de661d08e2531f4df0215a9b7c6a723c1657807736db4cd628216d429","sha512":"60dfcd8c6317f75d719069cd7c412f4899222675a70e3bb4eae256df23cc68c671975c0b4577c174c235a222b91abaa0267c1bfba73c2bee98edb75714be54c1","ssdeep":"192:cl79tNCXI0ubkEF9D8dGD7hF0cNRjz8sW/Gs05Vs+l2Hcjv84CQWhj7FkxY7:K7U4Dk6I0R/8sW/R05Vs+c8AJ7Ci","tlshash":"f122ae8f0fa52426d81c6bb64d90922e6428be26206716f3d9f720b49b6e0fc3dc61c1","first_seen":"2025-11-26T23:42:28.919246Z","last_seen":"2025-11-26T23:42:28.919246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/599/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/599/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9438\r\nlast-modified: Sun, 23 Nov 2025 19:11:45 GMT\r\netag: \"69235c71-24de\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9438,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"e306094c22de984853b5cbeb6afe7b52","sha1":"c195b302e2269c00525b9ba174891f00fb46104c","sha256":"5b3c37d3fb97ca597de7cbb7a36003261bd0f12007f8452df8b94a293e11eddf","sha512":"3629689280ca0d230a3a45e3fb250ced242e17a182fb16d902c8156f05af9aa0e7b4a0a9f46ac4b8e11ead1cd16147351a6cbc15b8cd3b089f125b2c140c9654","ssdeep":"192:cXskhOI8jCSLMIGyutKL9CcQSB5/15Gnmc8p+IFbPAKaTYNJxH8M89jPO:cXssLeCS4jtQCcNzRp+IxPAKaTYNJd6A","tlshash":"a612af02e205ac03ee9f4738cd123532b718fd95a3387157dc28ae886b5e6f59f951c4","first_seen":"2025-11-26T23:42:28.920032Z","last_seen":"2025-11-26T23:42:28.920032Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/618/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/618/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13408\r\nlast-modified: Sun, 23 Nov 2025 19:43:23 GMT\r\netag: \"692363db-3460\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13408,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"b170b20effef5e1b6ba267ed738524e3","sha1":"37af4ca5e80d0a764df4597f069402bb3c20ec00","sha256":"3974554b1585b2502a7dd2b539084191890615d52fc90461eb9367808bf6c198","sha512":"6b2753b4f73d563ffe42170bc321bb43acc88b5084cd8256e6182994df17cd54929fcbd7a8ead1597962393de72093e79c4c4cc671699d8c270358ef410b25bf","ssdeep":"384:bMoV8+RxjKcZWsVzJI/IaGLeJsa23M508LRQ:bMoHx2c4KIRy/3M5VQ","tlshash":"1152cfa056dcf702f21d37789cac506c02716c38b5adb55be847903b176d8bd1cba8d6","first_seen":"2025-11-26T23:42:28.920758Z","last_seen":"2025-11-26T23:42:28.920758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/616/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/616/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7643\r\nlast-modified: Sun, 23 Nov 2025 19:40:34 GMT\r\netag: \"69236332-1ddb\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7643,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"da6c2a7a2db946683c1684624a4bf2e7","sha1":"a32d1426fa9bc41730d09d4cd7da7ea36102e838","sha256":"322b628163ffeea1088050ca216c4881e24f315017f8e2e435d3e847fccfa668","sha512":"cd1bb1465863504f83c6388808ff40a25734e4b90270c7edc9e7c822ece4bdbc259031f078bd92cd5155458ccdecb65cbf01797547c1bc3ad00c51bd60a9b9a7","ssdeep":"192:ukO/4+Hyk5Wy9Wl51E93ll51EoZaUxTJS5UtGVRHSKB4:ZO5J57WVaEoZr1Y5UMyC4","tlshash":"7df19e02c7819d04d82e8f776ebaacb1860d5d0969bb259fc14008ec636f2f629847f1","first_seen":"2025-11-26T23:42:28.921577Z","last_seen":"2025-11-26T23:42:28.921577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/610/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/610/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8929\r\nlast-modified: Sun, 23 Nov 2025 19:26:32 GMT\r\netag: \"69235fe8-22e1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8929,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"fa45d200029a9b3de019b15484ed205f","sha1":"fc20983a26e96d2c95f47a229eea9d09cf383595","sha256":"ab57d7503633772a4220a2e672cbb7ec673cf5ac6d450bc49030a4456dd35e41","sha512":"fbad2cc2035104ac91b810991c892ba06fcdd3cfd24f0c4c7dbf1acd7730857eb14df5405887a7b1468828d5b2b3fc1a1df2c768067a1db9b2b8d86010b27265","ssdeep":"192:Cr5BsX+YXq/J/PNxFL1b4vI2g770wxYw7WQg:Cr5BsuYXkzFLxDkDwI","tlshash":"5202aeb5bb231041e45c03f70e05062561785da00aa3aa9bd9b575be2f6ed72ccd43dc","first_seen":"2025-11-26T23:42:28.922321Z","last_seen":"2025-11-26T23:42:28.922321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/608/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/608/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10736\r\nlast-modified: Sun, 23 Nov 2025 19:23:59 GMT\r\netag: \"69235f4f-29f0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10736,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"23fc22694f93b05188fe46dadc03dc41","sha1":"73c7399698e36863f5a8c41eea2dcd0760e9045a","sha256":"0149536eb2c9ac4773d4333dce01b4cfa30d4681e7e4ffe575f3195dc20efe43","sha512":"ee180e1aef67b557e22c2d3b73aaac11546a97d746b186e9c08ccaa7845461502d3812bbbcb921703d571f917e8ca7c9df2942f3b24585eaa1af705d864743b5","ssdeep":"192:GR6pLWqqvFtjDNyIkHG/hS+zop5c85kNhsEwT+T8mkFG7dhTMl7:C6pLmJRKQxGeY+huRTFMdhI1","tlshash":"9c22ae5875a41011cc980736ad28033ba14a9d9cc6f75b63f12f26864beecf607c1af5","first_seen":"2025-11-26T23:42:28.923243Z","last_seen":"2025-11-26T23:42:28.923243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/606/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/606/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9612\r\nlast-modified: Sun, 23 Nov 2025 19:22:08 GMT\r\netag: \"69235ee0-258c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9612,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"690c3f118fe7034497e237823b25ab1a","sha1":"e63da35e69ef611ae74f713ea01182573243293c","sha256":"b552290934db094aa272f4ec6a8b08c317a4c47466395e21712c65dfaece74f5","sha512":"80aefb25c3549c12239de766521d05ad230e10ce5d14d8a40d2b410ec958408a6c5b01c88a3b4460347038a0a1c04df7ed45837e66c3eb8ba06f39fb0f787cb9","ssdeep":"192:UmHY1N8WHfSxo2IT3JtuTiVmsR8vqoQb/8YDRqu4eSWE:Um4ZHY4cH4XDRlDi","tlshash":"ff128da1b3b59845c9af5b797fa8eb215a608e2857e80247c5057f066b3d0fdfca30c4","first_seen":"2025-11-26T23:42:28.9241Z","last_seen":"2025-11-26T23:42:28.9241Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/misc/popper/umd/popper.min.js","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /misc/popper/umd/popper.min.js HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21162\r\nlast-modified: Thu, 04 Apr 2019 13:25:58 GMT\r\netag: \"5ca605e6-52aa\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21162,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20989)","md5":"e21a6649041ef6f5f1bf43f11946621f","sha1":"01bcaef811210de0ea58e55e47fbefd77be5c442","sha256":"7d3b9482d4fb3b6aeaa089b08eb84381b5d3294c32c71ba320c4482bb4dbb8d5","sha512":"10d373506802082bb1121092294e2ac7cf5695024a2ac9ce3e5d0a83f71b8fe906c3d9b736c667ecbba5a340d73e284f1cf710f393a1614d051bf4ee21ac8d87","ssdeep":"384:kmQkLrwVOyzirV9nNbRGlB9D45HjiWZ8xpOxvRVgD75zBY5vImg3+zopL9TidOg4:vLsgyziJ/0D45sxpOxvYD73Y5v9zwL9F","tlshash":"c792a3dc3294b06643a791a7a0bf960eb2339875610e9410f19df2d97c30ef9917bc7a","first_seen":"2023-03-07T01:17:32Z","last_seen":"2026-04-05T10:46:46.724901Z","times_seen":2232,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/channels/33.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/channels/33.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5109\r\nlast-modified: Wed, 03 Aug 2022 16:35:38 GMT\r\netag: \"62eaa3da-13f5\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5109,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x166, components 1","md5":"4d4a14d5e95b94c3a0e66496086ce40f","sha1":"067d38f9ccdfab5428a316b6fe7203d1850b1f08","sha256":"141fa40dba63a416c3594355c312f9197dbc4d687fb1d9ccd438bab5c170343d","sha512":"02243aa20a33de2a49e7b1f2ab95764a67f6b73596864c89f45696a872dd5b3a00536b593d9bc47aa4313559f7371dcd323b52e5f66e22f25824ccd550300f8c","ssdeep":"96:3nM894vFA3l1zSywms57YNSTRdL7vrv9wuDN8ogtO5itatbw8ouz0:Hv+ywms5ENmRdL/quDeHtO5CQo5","tlshash":"c9b15cd0332f2e0dcd4957719aa8087afe016fe7ce85239f40a5962cb9c95e75823a05","first_seen":"2025-11-26T23:42:28.925522Z","last_seen":"2025-11-26T23:42:28.925522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/598/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/598/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8902\r\nlast-modified: Sun, 23 Nov 2025 19:05:33 GMT\r\netag: \"69235afd-22c6\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8902,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 26240x26313, segment length 16, progressive, precision 8, 500x280, components 3","md5":"c13dc4e02703fef13e4cc18853f9e7af","sha1":"2aa432c1760ebfae989e65e8e3ce8ce1dc0b093a","sha256":"f1a4c2dbd1daf195b65f2b73025ebacb6bcf080db0c17e4f09c80d15676f59cd","sha512":"f2d4931718fff05f0bdbb538002aac0ea4809ef4ca03852931c99b0853b5257ad87876c21959a117491573aab9685eaa2ecc7fbf61aedfaff0f3aff82d805c15","ssdeep":"192:0oksjop9kL8eFVBHusLUCE5MTqF5TqoBCbdThE+LSm7GwC:ntjQ9de5OsLUR5MT+5TqoUbBec7GwC","tlshash":"40028e973fd1c071d80d07345d2a1612a385fe2854d1aadbedbf2558973f0b4ae923e2","first_seen":"2025-11-26T23:42:28.926379Z","last_seen":"2025-11-26T23:42:28.926379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/011/645/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/011/645/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13171\r\nlast-modified: Tue, 04 Mar 2025 20:12:29 GMT\r\netag: \"67c75ead-3373\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13171,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"8c7d1246d60d8527c94c287c29921fa4","sha1":"e1550f0311043dbdff625ef56cfa772d50c29f33","sha256":"391689ffc931c0abba30fb3e38fdfece460aef030b5788f4e8db4e7ab4082deb","sha512":"ba08bc32465f7c2c753e5ced08d511d9dc754d44ea3da97a1dc69b4ae860717c7a0ecb636a9eb2b4cf0d591d68f363890d0819cc9db8fe7c5116e96c2754b1c9","ssdeep":"384:cErMth7FYnT+kmd19c0M7x9gdRTD0ynQmyply:cErX1Y309gbs3Jy","tlshash":"eb42bf1ea7612a79d42f87b10eb83430999e5fbf91e8434be9991808533f1fc8844df6","first_seen":"2025-11-26T23:42:28.927283Z","last_seen":"2025-11-26T23:42:28.927283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/014/261/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/014/261/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21835\r\nlast-modified: Wed, 25 Jun 2025 10:25:12 GMT\r\netag: \"685bce88-554b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21835,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1280x1281, segment length 16, progressive, precision 8, 500x280, components 3","md5":"9ec0ce735df604ee450378a8d6c140b7","sha1":"6f91cf2d20ce05d20347e5ae0c9ba11d43ad45b0","sha256":"813547d532e8f6e802a3492acf7db3e05489e8f77b49e932021995b3f90858c6","sha512":"0d8293d2d5a222291e6e55de62b290d0067f8b45462340fd6a035a23cb4e6c03320ffa834dce9b58c0238003f9fed891463a3f228f6ddad13998cc8cac1f61e6","ssdeep":"384:tw5Kyi+2khexd5LmvLcSM9Yke+kjFoVowavJT4waJ/cYHszCa2LpZsnL4:K8yn2k8x3LmvQ9Le+khoVop5IJkkszxa","tlshash":"7aa2d07ed24b4719f04c2965864a37e8f362d42e481a9692b12413a60f9e35c8e7efe1","first_seen":"2025-11-26T23:42:28.928148Z","last_seen":"2025-11-26T23:42:28.928148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/003/776/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/003/776/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34640\r\nlast-modified: Sat, 01 Oct 2022 12:39:22 GMT\r\netag: \"633834fa-8750\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34640,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x280, components 3","md5":"984d1bcfc22cadb747b2ac4432e1c540","sha1":"6ac5c2bf0847541cd28f762e6eeb5acbd20a2b4f","sha256":"4f719312fc4c2ac8fa031dcea1fdc0dca549a218bd3ea10e69a70d7acacd2ed5","sha512":"845989168b94a7f81d946e4b344dfe9ac14a41b068af9f5539e96ee65ffac263d6acf9cf52d2d708f027a5b8a8ccb5d64522b39cc59bdb1498aec2062b4fecba","ssdeep":"768:PafYb3voVLK8YeawtrLNHODG8kb4941syC0IWVisJJ1eOcC:PwYjvoVOGawZLBODG8xXJAVisJJZB","tlshash":"c9f2f1253ee36a349226362c7e0b3cd51361b26a62f314379871cb5327dfe6ac06b41d","first_seen":"2025-11-26T23:42:28.928834Z","last_seen":"2025-11-26T23:42:28.928834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/214/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/214/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11973\r\nlast-modified: Sun, 26 Oct 2025 20:49:32 GMT\r\netag: \"68fe895c-2ec5\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11973,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"fcbf6c055bad12ae511d7e432a6cb33e","sha1":"a15df595489e6e975ea367ea2c0a109d5bb74153","sha256":"b6af3daf7b9ee1187c67bf30265395e4dc7b6722c51221eddd273ab8a2fbd794","sha512":"e05142a8ae992a20f4a735db818157a64093a0feb6e4cf4aff4b3068b765085b790b1d756b3dd4f554f0a0dc77aaf454d1d4345751d6b82c633132f1401ca137","ssdeep":"192:USeQqV4XxRCF8pxDtoN7dtBj2QxntVABfRExb96KUGL8dP:Wv4XbGxdtBjqSxBTZiP","tlshash":"df32b086fbbc366ac85e7b375ece176b4504bd012d422d7be66289219fac43845019d4","first_seen":"2025-11-26T23:42:28.92976Z","last_seen":"2025-11-26T23:42:28.92976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/photos/thumbs/1557.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/photos/thumbs/1557.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19660\r\nlast-modified: Fri, 04 Feb 2022 14:21:04 GMT\r\netag: \"61fd3650-4ccc\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19660,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x250, components 3","md5":"2f6abfd380b0ccce9a77e14b8ebbfe9f","sha1":"d1694a98ff873f045445c17ee3f9150180e92ef1","sha256":"276fbbd6892ae5132c652b9180c51c43ecbb2f547ed7bfcf4a01db4cacb38f3e","sha512":"22361312500c8232e9cf4e11ebc9761810204f0a1cef3cad925928251c04626dfc476b4dd2c40f5e0d463c3eb04e3341baba1182c4c780041d7668ba84855f0e","ssdeep":"384:vzvfvET/wAY4AG4XzwDUYTydW0GptJEoaHEP0x0ukzGRU9QfdLVPqu:vz3v6YrGuzETPbtBUvxVkzGRUUdLV3","tlshash":"d892d0a3959600c9ceb26860f68c41a296e3bd0cb2b5f67d68d572c011b7be82d49d88","first_seen":"2025-11-26T23:42:28.930517Z","last_seen":"2025-11-26T23:42:28.930517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/users/1399.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/users/1399.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 89903\r\nlast-modified: Thu, 27 Mar 2025 10:58:22 GMT\r\netag: \"67e52f4e-15f2f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89903,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"47d2b88665da2ee6104b713c8d440044","sha1":"5c5f5253713b4928d801095e2147f5caf14288b1","sha256":"3012cf9735b9191a1a46f58934c6d8e8abd91fcaf49017c447ce2bc06fc5c1e7","sha512":"d6c827f07c6ae043e130f0c8141efe962bba50e81ee7d389c30a59f3017ddba9c9696c9507217d65fb84cf0de8f11a5f58afe0aadbe88436526a6330ec9227e4","ssdeep":"1536:O8f35QjUhRYx/8yhfZJ/tU3DcWCEXq2OCTiDyPFAD4dXdElTv54h21mpJeS/i6h:bfJQjUhEp1ZJwDcWQ8iDyiD8dElTh4zx","tlshash":"b4930283ab5611d3987c6f8cd350337ed99c6099580edd891dde06f78f5eac00bb2229","first_seen":"2025-08-14T06:59:41.58576Z","last_seen":"2025-11-26T23:42:28.931434Z","times_seen":8,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/007/501/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/007/501/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11033\r\nlast-modified: Sun, 19 May 2024 21:32:21 GMT\r\netag: \"664a6fe5-2b19\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11033,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"e862df884c8d9ecd67bc38687a609ba4","sha1":"f3177a10cd2f0b9bc6099ec433bf9bcefdb469c8","sha256":"6ffb3d193c3d69ed33e976d554aee0bc6270271300124df9e35ccc41ad59d22c","sha512":"4f92a3b895eed4dbbe61532dcdb0385746e4aa7d9afe297192182a427b18eb18f98620e6fe2d87faf3304b218fbbaaae285f0c5366154dd2e5c4c0d65624e8f3","ssdeep":"192:sd0k/MVxZMTLGGII5rRmUY4KZ7/aL43s6UwAhEdBScXOUF5gfXyYN:sd0k/1PJxRxhKBaLcs6cUJVMyYN","tlshash":"e3328e33274d4513f65f2bbe8c86642229419d19b0e965ebde321217433fa799ce82f8","first_seen":"2025-11-26T23:42:28.931912Z","last_seen":"2025-11-26T23:42:28.931912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SDY68QC3QF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-SDY68QC3QF HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\nexpires: Wed, 26 Nov 2025 23:41:55 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143321\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430407,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"0572083716383408bb2f3a6fd0420133","sha1":"ca17fd6a9480f80fa3c792ef65fa82eb95be272e","sha256":"a5eba3455e68f900ff6cf33576c38ab39e4e314d43a716da976215b08ec08d65","sha512":"51786d87cabfa41ea780f558da15bd3c127fed5d09339783867609b04489e9730fa44679b3e99458b785eba7d378d4e984bd7bccabb66a7f3a6a424fd77fa7a3","ssdeep":"6144:5L2BUKltJeUI2XVUULUVWo6O7GQEO7Qn2ElVFBoOrOcx:5LKDl2UnVUUtO7QbX","tlshash":"6d9418ce73d674225396f078502f018ba57b28a2b44cc899f1c9cde52e74a9a4277f7c","first_seen":"2025-11-26T23:42:28.932737Z","last_seen":"2025-11-26T23:42:28.932737Z","times_seen":1,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":170,"dns":1,"connect":8,"send":0,"wait":33,"receive":28,"ssl":286},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moundconclusive.com/cb/7c/bc/cb7cbc519c1d62075f76d028c13574a5.js","fqdn":"moundconclusive.com","domain":"moundconclusive.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"moundconclusive.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 21:50:08 GMT","end":"Fri, 06 Feb 2026 21:50:07 GMT"},"fingerprint":{"sha1":"48:83:B3:3C:56:45:26:1B:12:EE:17:0F:F3:C4:15:10:62:3B:95:66","sha256":"03:92:92:0E:19:CD:33:8C:B6:01:98:43:AA:4A:A1:B2:A6:3F:7B:2E:EC:C0:48:6E:39:86:8F:1F:2E:89:F7:45"}}},"request":{"raw":"GET /cb/7c/bc/cb7cbc519c1d62075f76d028c13574a5.js HTTP/1.1\r\nHost: moundconclusive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 26 Nov 2025 23:41:55 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38133\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: 4b4e7ab587d59b22ad7bcd2439afc363_HD-44991=1; expires=Wed, 26 Nov 2025 23:41:55 GMT; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: moundconclusive.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6a71d3572b5c9bfa7f247e10ed3d0203\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":106458,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1e03f6d27485f619a7e8df2ae93551bf","sha1":"6f9787e9462daf16fe53ccef38c394804f9fe84b","sha256":"ff14b65ee91c4bb3de5e4b8c862e4b8b9504ced36768d42b5ec7c2f9b550530a","sha512":"625a5f615215e6949c72da71245425700a32e681ab517fded3764c596144526a3a865d8b9c676f637b3394c88a529d5f9de42dba80e1ec9708ac35276ad66907","ssdeep":"3072:wIFdgoZVCY9rTvLxFoTqNpV/ivcSgwAtWcle35RBOMIbB1T5xk0RcviyNE:w0zZ8AY4QNE","tlshash":"28a3a3887f41f1ae036b6076217fe506f19b8e5064ccd658f113eca56bac31ad43ee29","first_seen":"2025-11-26T23:42:28.933407Z","last_seen":"2025-11-26T23:42:28.933407Z","times_seen":1,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/cat/6.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/cat/6.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47082\r\nlast-modified: Fri, 04 Feb 2022 07:47:58 GMT\r\netag: \"61fcda2e-b7ea\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47082,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 225x300, components 3","md5":"9defea5f55ae57d129e1242de39aa20a","sha1":"fe0a99f41e3d5810fd5434cef24d018761962052","sha256":"081229f93e3f9530d4eb484b863ff90a697c22c5ce9199607471e090b921267f","sha512":"916b388e037c9bb7db95e2965efa98cd963b897086a696588dfa018991acfc3688a7bcb3e1d0ae6e2fdc411c72e5b2fcfb7d4a758855e0e1afd461e351b46f9e","ssdeep":"768:GeHhhuzzrEO8cAFJKxL6LHY1NS1m04RtXSku2GTpzRe3zXPpp+Pf6MGCuQuysV+R:GeHhw4OhVWSNx04KMGVzMKX6M6QmoICf","tlshash":"8323027053450473c9a6744a9cfac49361d8ef6b316106cf8dc9f678faf9ab869e0c06","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.934195Z","times_seen":11,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/models/54152.jpeg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/models/54152.jpeg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34651\r\nlast-modified: Sun, 23 Nov 2025 19:11:48 GMT\r\netag: \"69235c74-875b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34651,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x250, components 3","md5":"73efea00fb6288e0ae8a28633290422c","sha1":"3aa0dbacd5999db85a4194e2ac644a4af21ecddd","sha256":"fe2cfe3330afe001f2e79b9e8cbb461ea0363cf460f5f52715a99e935ea917dc","sha512":"c9c2a6a2ba9535c63b0900a10eb9da4655bc24d72891bf3b531456bb14be8f55c776b0a8fc114f60c2d422f68fa9e0f666127400083fd8cd80a5510e0edcb677","ssdeep":"768:FlebDy1f4s/vBkikqIoD1fv4hJOOh7w0WJL03orfbgjsY:FJ1f//v5dIoDJCS0ufbg4Y","tlshash":"44f2e194a565ddd82d579978c2cdedf59a829ac3572e1f0510c30215a8cffc2b232e3b","first_seen":"2025-11-26T23:42:28.934759Z","last_seen":"2025-11-26T23:42:28.934759Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/users/nopic-hidden.gif","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/users/nopic-hidden.gif HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3453\r\nlast-modified: Wed, 28 Mar 2012 12:47:25 GMT\r\netag: \"4f73085d-d7d\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3453,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 121","md5":"403f1f519fa7266cea2b4c95cef498e7","sha1":"be6b9ecdc71c058f25dfcde90badbfd13397f5d6","sha256":"5f9c716347bf56b314ea02cde86f13cc46243e80aa9cb1a5dbf2892ea4cebc35","sha512":"c065b1a91b19eecf632f0820647c9daa351ffa32db6e458e8a2d90c418447bc265213fad872f7f4836f42da17cdc62ea23aaf99555e79fadf5b4f5fefe3411d0","ssdeep":"","tlshash":"1961297c5665202ea34526f6816d5b19faabeb848c60b79418fe800762f2878326c34b","first_seen":"2023-06-20T14:32:36Z","last_seen":"2026-04-04T21:42:10.074605Z","times_seen":137,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moundconclusive.com/cb/7c/bc/cb7cbc519c1d62075f76d028c13574a5.js","fqdn":"moundconclusive.com","domain":"moundconclusive.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"moundconclusive.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 21:50:08 GMT","end":"Fri, 06 Feb 2026 21:50:07 GMT"},"fingerprint":{"sha1":"48:83:B3:3C:56:45:26:1B:12:EE:17:0F:F3:C4:15:10:62:3B:95:66","sha256":"03:92:92:0E:19:CD:33:8C:B6:01:98:43:AA:4A:A1:B2:A6:3F:7B:2E:EC:C0:48:6E:39:86:8F:1F:2E:89:F7:45"}}},"request":{"raw":"GET /cb/7c/bc/cb7cbc519c1d62075f76d028c13574a5.js HTTP/1.1\r\nHost: moundconclusive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 26 Nov 2025 23:41:55 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38179\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: 4b4e7ab587d59b22ad7bcd2439afc363_HD-44991=0; expires=Wed, 26 Nov 2025 23:41:55 GMT; secure; SameSite=None\r\nx-envoy-upstream-service-time: 3\r\nHost: moundconclusive.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 22b262c44bda73619fe90712634727eb\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106610,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6776ec362ac3ec9dfd9e630481e5c9bb","sha1":"9d5a0f4b75a1868b2e51b67ba1964d5e0811b4b8","sha256":"32eeed567ec342f8232f79d979e11eadb0ce83b931e3715959076377cccba257","sha512":"901b3e67a2d1f8de485ec7dd3312ef7d489b15f9f117b3a6d9716588cf53fdb76b57ced57b7be235edc25d2bf04af80cad1b4d89809ec12df42e2715f9c14122","ssdeep":"1536:vdaIWucpiczPP6RdHf8741ia98IWRmtmD:pcxz36RS/RmtE","tlshash":"71a3e8c87f51f47c03d77476223f610af06a9f00659ce598e013ecfa296871be479aa9","first_seen":"2025-11-26T23:42:28.936569Z","last_seen":"2025-11-26T23:42:28.936569Z","times_seen":1,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:14:37 GMT","end":"Wed, 28 Jan 2026 01:14:36 GMT"},"fingerprint":{"sha1":"5A:67:AA:88:D5:BE:C4:00:42:86:CC:4E:FC:E7:73:FE:CB:85:71:60","sha256":"F5:6C:A4:39:AC:04:F6:11:7E:DB:94:93:4C:93:FC:EC:A2:B4:4E:A4:FE:19:8E:22:C0:D8:D4:84:67:37:70:C0"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 26 Nov 2025 23:41:55 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9c00371a87ebc27aafc60998769e0fb6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":58,"dns":2,"connect":17,"send":0,"wait":17,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/favicon.ico","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:56.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621; dom3ic8zudi28v8lr6fgphwffqoz0j6c=d8f9269f-f86e-4446-941c-bfd475a21325%3A3%3A1; pp_main_cb7cbc519c1d62075f76d028c13574a5=1; _ga_SDY68QC3QF=GS2.1.s1764200516$o1$g0$t1764200516$j60$l0$h0; _ga=GA1.1.1324275671.1764200516\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:56 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Thu, 04 Aug 2022 05:55:14 GMT\r\netag: \"62eb5f42-3c2e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"e3be20ed698aa02e497d3806fe7cefb3","sha1":"2190a022cfa9a6704889199956f35b4bb62f4086","sha256":"45e309f265b2732234b00c01059fc2af1ecdce5f6a1a69329ecdad909e135bad","sha512":"81ca34b1bd9353b1b1fe90383cf6c082ec36b8fc6c0f47adbe9a9f4de8216517a09439b60c29250254893344ac1a783bb2778059400877865b801e5b9860b8e2","ssdeep":"192:3RRRRRRRRRRRRRRGIRRoRRpR8RORRXRRvRRuRRRVRRRRRRRpRRRR6zRRRRtRRRRb:NNathS22awb","tlshash":"af62c7e993b4a52fe01cd27e39264d4d565e7c3af4b16309242cf1314e7a2e35846b4b","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.938304Z","times_seen":11,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/604/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/604/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13926\r\nlast-modified: Sun, 23 Nov 2025 19:21:13 GMT\r\netag: \"69235ea9-3666\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13926,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"0e363fa57e0e1482a70fd656748aab65","sha1":"96361c9abde08970712fcdd44eebb1078d08302f","sha256":"c12328a66c665e8a74e6d8a8b45e5c72d0662555ecedbcd5a7c885afc7e528df","sha512":"5ea8f83da14f8a0f9860e092a0bbc23b3b52a9e83edf28e24bb814cc52554872cde235a920ff69952c603f2a09b4a382339f0cd59f080703ce950b7eb6676100","ssdeep":"192:mkAdaxanAS0lPRu8pDSbZM0XJugQXRGvz1iPnpKrdFiaO090/2L7TAYsIVYB8Z:jxanAd5p0bW0ZHfzzRk/8AYsIay","tlshash":"0d52bf0ae261cc96e52c3778ad5c5060d3808e45a31e298bc78398855b7f5fabb4f4f5","first_seen":"2025-11-26T23:42:28.938844Z","last_seen":"2025-11-26T23:42:28.938844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/003/793/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/003/793/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38499\r\nlast-modified: Sun, 02 Oct 2022 06:14:09 GMT\r\netag: \"63392c31-9663\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38499,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x280, components 3","md5":"12eef97d9f7effe73b53340580cede20","sha1":"d680cccf9f12dcfce8fa0d0e182560eb07ad5bad","sha256":"bde2132c48d89ad2e96db691804612e22c5ecf3955640409a18c5404da8d47a3","sha512":"7c881d4c6c877a8105488ce9c20e1db3627a67ef0cacd43d1329b6f5c47c66145e010f8bf9ef75c3925096320082e6f695b9619b018ef983e6c7e142be949fc9","ssdeep":"768:F1e9+sk1kIdtOW6VcvyxnPiuGAHq53FiXxVGhFv4ePFypApWH9kC4m1q:F1A+7WW6cdSKniXMh4ePC4WGx","tlshash":"b203f1ab86613088cd5d19152765ba224ea7a920ac1df8ef40747ff147c88acffd6b41","first_seen":"2025-11-26T23:42:28.939581Z","last_seen":"2025-11-26T23:42:28.939581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/misc/jquery3/jquery.min.js","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /misc/jquery3/jquery.min.js HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 88145\r\nlast-modified: Wed, 01 May 2019 21:14:27 GMT\r\netag: \"5cca0c33-15851\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-05T11:47:12.601716Z","times_seen":115217,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-C1ZJFLEX16\u0026cx=c\u0026gtm=4e5bi1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:56.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-C1ZJFLEX16\u0026cx=c\u0026gtm=4e5bi1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 26 Nov 2025 23:41:56 GMT\r\nexpires: Wed, 26 Nov 2025 23:41:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 132292\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":384399,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"3f3479a9273e1c5e2521f8a2647ad810","sha1":"df6aa4b5d0616acd6272ef3b432d2835e236267d","sha256":"86e791f31ab8a07e889093bc4d014737d0930b9c1b8779bc8852fdd250425511","sha512":"030655ad798c8c3f8b863838c9325a237683750024845c7c46e94ece5867501ff5469436b572a20d2d19c2ab7cf38e0e56933967e887cf248af0fd9459080142","ssdeep":"6144:jJkBUKCtJeUI2XVUULUVWo6O7GQEO7S1URoOr+v9:9oDC2UnVUUtO7U","tlshash":"f08419ce73d674265392b478502f018ba57b68a2f44cc895f1cacde52e70a9a4277f3c","first_seen":"2025-11-26T23:42:28.940892Z","last_seen":"2025-11-26T23:42:28.940892Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/models/54149.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/models/54149.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27420\r\nlast-modified: Sun, 23 Nov 2025 18:50:44 GMT\r\netag: \"69235784-6b1c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27420,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 233x350, components 3","md5":"a267024fa896c419fdb17a3e9c08917b","sha1":"20aa9410b4cb6db7017a46d8925482cd77f10fb1","sha256":"2ac57b0442e222d3bb98a761cc0d8fbdd6cbb3c79cb4dfb4faaf54698dd9cbf2","sha512":"4353edabbc8e9670ec5f9caa9e1f8412587a005c406ea34d4194cb54aea4019e8f1ace73a6a3b1f778462f28a5609d52cd3b318c066245cec4ba50949ce6a746","ssdeep":"768:qGOKr1oOsXSgCU/oHMH5Fi2mlS6FZqQrTN:Tj1NsX7y3IqqQrTN","tlshash":"e5c2d1d84e90c1a070eb3db1a0691eb72bf594918bb522de82e115ccdbaf55b04c4b6f","first_seen":"2025-11-26T23:42:28.941641Z","last_seen":"2025-11-26T23:42:28.941641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/users/521.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/users/521.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 77199\r\nlast-modified: Tue, 02 Apr 2024 05:07:50 GMT\r\netag: \"660b92a6-12d8f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77199,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bf1af033ab7d68ef5d9e4ff201f7bc42","sha1":"8aaab8b201eacbd17ed5eb0d483d225201010294","sha256":"4acb90792c5bb140a9042393c6027eb1a4c92fdf6bd61dd707d4398e057ed36b","sha512":"381f8f172c452f4b2735d9411deadd1af190a5b06ca77d09ed4dd4951d7120e95a70a463f52e1058d38f83ad61e580ffe239d6fb5d0c41abadca2881da2b406b","ssdeep":"1536:bm+uzyrrW22Hi2JQz/j31XSAWyKmIWqGkkidxZBUsOLIT9DbpzWSarcZDObDT:CxzGrt2d6Lb1XSDLWqGBKvUssgBMSRhE","tlshash":"467312ce659f988b9afbf554eae324005f182b803b5772cde304ead64036f86d51c939","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.94236Z","times_seen":11,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/users/795.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/users/795.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 56849\r\nlast-modified: Mon, 22 Jul 2024 09:31:25 GMT\r\netag: \"669e26ed-de11\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56849,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"773e7d00271101be191e7fdc44353cb9","sha1":"45a2de6cbc3a1cb8fe7d6e955457a63986aa77f8","sha256":"2bb55e5030c46038c3b179ad13336448d9d94df055420fc64b088a6326b747b3","sha512":"363dd7b16c1e7a12f8310b31da75a4f4628ec1b8abccda1b777d1f41697ba52b4978f8dc58030ff513f9b3723d9e0c0d3e90bcdb06aa3ca99213bfc9a9e909b9","ssdeep":"768:/eHQzEMeTviT/N0N9m59oMo7nokalCgOT2dBRlQBoQZ4jLIOzA4MDvUFlCZcaOuK:/ecEMeTvwJ2bo+9T0Tl6iLfiDsPa3nK","tlshash":"9e4302258dd9d608eb0ee7e5ff60f0862f255a637ca53941640b9c9a4f4ae084dad3c0","first_seen":"2025-08-14T06:59:41.410381Z","last_seen":"2025-11-26T23:42:28.943513Z","times_seen":8,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/012/522/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/012/522/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17447\r\nlast-modified: Wed, 02 Apr 2025 10:13:55 GMT\r\netag: \"67ed0de3-4427\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17447,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1280x1281, segment length 16, progressive, precision 8, 500x280, components 3","md5":"6e6ab93e487bb88f66a610722900b525","sha1":"4c92ae2a96ecb65f47ebce706172d57515d59e37","sha256":"b8a1eb9a9e1adc902b7c2500988ea2f32c3f055afd52b8e8819ed5cc36245d75","sha512":"bd65290417929a98a52ea7e540a9eb5e4c691632369fed839eb94f18ad939dded8035443adb3a072ff5930ab9288c79194516a2e0182748bc3b9997f3e8fb70a","ssdeep":"384:udhLDuxLfuhQ8wlmvABsfWXzEiV8Z81wy9akYHzJywtF7wO8CL+c9A:u3LIuCfmvABseXVV8Z8AJLAq7A","tlshash":"9072e0a2feb07e0cd8dd2d0059b6e33f6ed4f9626e7314b940df91696b3d40785a24a0","first_seen":"2025-11-26T23:42:28.944384Z","last_seen":"2025-11-26T23:42:28.944384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/003/791/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/003/791/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36052\r\nlast-modified: Sun, 02 Oct 2022 06:20:43 GMT\r\netag: \"63392dbb-8cd4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36052,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x280, components 3","md5":"cc4135e2522c39301290840ab5c3d647","sha1":"ca424275de87f552f48fc97bdf46a001610844d4","sha256":"5c9082e7067bfcdd0665781722f4f5e5da8a612f51952a064cc06f1ff33bc4ba","sha512":"d6d90ac95831b11014b86815b32318ecbef8f9fea737de7c49e77f6e07321fbe07b94f4e27afd7591368bb30aab35d57055edd8ea8c5cac5fa16722e927fe876","ssdeep":"768:wCNxzi2jcxnfBcjDMho2neSOQQIw7XxMQFJflIHQ68s:wYi1fCjDEo2efQQdx79I6s","tlshash":"d0f2f22a31374eefd35d029ec864bd2ae8251feae9d6b7eb5c5246f087044f1a14e0d4","first_seen":"2025-11-26T23:42:28.94536Z","last_seen":"2025-11-26T23:42:28.94536Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/misc/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /misc/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/misc/font-awesome/css/font-awesome.min.css\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\nlast-modified: Thu, 22 Dec 2016 20:50:33 GMT\r\netag: \"585c3c99-12d68\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-05T11:47:59.02952Z","times_seen":412973,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/cat/5.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/cat/5.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56865\r\nlast-modified: Fri, 04 Feb 2022 07:47:58 GMT\r\netag: \"61fcda2e-de21\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56865,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 225x300, components 3","md5":"88e1fdbd623895b5c0ce6ed98d5819c7","sha1":"19f7976f8a9dc62ade4b6d86d1502a4eca201006","sha256":"d6357277ee559bd8c57b6f850e5bf5ee8081a459860bd8cbca9f8dff7ee8022d","sha512":"8d5e564d7c8965343b0546b2402545da4f6c6baf45729cfdde291c62ccebf92ede71bf0f4c56b89391c5f8a14c34a18b821a69df5664b2e4cb72c765ae171314","ssdeep":"1536:GrkB/6fSaQhVYswRYZBhJSodDMJnAc8y+BsxxtKOz:vLTYsBtdDWT42hz","tlshash":"e843f1ed8d42dd589c1a523dd8f391cb2fe89804b37ba769816d8673ea8009e7d05d48","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.946639Z","times_seen":11,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/012/095/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/012/095/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18673\r\nlast-modified: Tue, 18 Mar 2025 10:55:06 GMT\r\netag: \"67d9510a-48f1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18673,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"ce1d12d4420320e925d9e16ba92ffff3","sha1":"8982a9eebee19c4a1c22da342989fd077f1f7980","sha256":"e532ae2aa453b7df5ff3cf683f0f6b2678f13ebb8b478457f1e1de3bf695a107","sha512":"8be6d59264d6316d2334d137e29d9dc4869c36babf107841e67acd6111ee6dd1dd0cbc062e2ef617908e0c5e4121b5d194aad9b4d681ea1fe9ebc13b55e6f5c4","ssdeep":"384:qMlMD3uJdAPw9daj/J4gY5UWtjyBSA4svyAFJawbMNxytVL:UDuaw9dmpQylfvVFIwbMNxO9","tlshash":"4e82c0b9a3d8ec31e41f6f3548a266217548df966db6aa0bf8344290570e6fc8e903d0","first_seen":"2025-11-26T23:42:28.947546Z","last_seen":"2025-11-26T23:42:28.947546Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/613/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/613/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9648\r\nlast-modified: Sun, 23 Nov 2025 19:33:29 GMT\r\netag: \"69236189-25b0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9648,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 404x405, segment length 16, progressive, precision 8, 500x280, components 3","md5":"2d00f2d8aa50dabb568926fbe1c7397d","sha1":"2b690f07ed3b53fa637719e09dd0f3cea5a4ca1d","sha256":"dad929d0568e63fa59a731fb9ceee7a834ed25974c1ef37431195bc1eb7b794d","sha512":"d67f3b43d7ef168c11a02badd728c828a1bbd110357e0c96f039b5ec4071ed88eb084d95c4c52c4c4606c7f1362340d26e0e4b685bcb411c9841ddcfc8ec99e5","ssdeep":"192:OxQ8y7qiCy8ZU39PlNcXmdoM05iuikcP+yNg1m:Om8yeiCbyhhoM05Nc+yNg1m","tlshash":"ab128da7a955d75ada3e57704c5d376bf3609c0a08470ea3ea4b4a6c2f1e1b024e1df0","first_seen":"2025-11-26T23:42:28.94834Z","last_seen":"2025-11-26T23:42:28.94834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/597/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/597/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8805\r\nlast-modified: Sun, 23 Nov 2025 19:56:03 GMT\r\netag: \"692366d3-2265\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8805,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"a72bfabe6a7d7db93fd240d9ac44d454","sha1":"1802ff58a1a41bccf253fd15dac342175359e7a0","sha256":"17d54a99d10593ca890ba4fcff41c14bc12eff4914221a30b9cfc157292eafe0","sha512":"cf733a7f1245788d27bfeb27c828ef51d166976ebc3beae77c81ac634d963dbe04f4cf2e2c0e91d29ad0befddeda57e0ec8c829bc20d4bb344fea94234bbfbac","ssdeep":"192:pnsVqUaqslfDuDdmXrcKu8ZTMJvV7De8cANwj7pN8sXwBtI:pbP0L0gJFDtcZH8sg7I","tlshash":"52029e452230e80ef5ac0f364c570272b74d8f0b11c6eb97ed650a781b3e2f816e66d4","first_seen":"2025-11-26T23:42:28.949228Z","last_seen":"2025-11-26T23:42:28.949228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/flags/tr.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/flags/tr.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 492\r\nlast-modified: Wed, 28 Mar 2012 12:47:26 GMT\r\netag: \"4f73085e-1ec\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"31ea1f705854ad57c432845068bd05d3","sha1":"e1821d04141354bfdeb2e25e488ac8a7face8900","sha256":"292d592f7fa1df2fa653ecc1e03d5eb2ae68277c6df264f762aefb8218e23454","sha512":"48258f8dd8184851243f72ba042d00acec6c3fade4b3acb6265a41ec078802505352c7f09a307567ee9331583568bcc8165e806648a462e637856e2d272413b5","ssdeep":"","tlshash":"3ef00eaa65a25770c0870ad2b6c2b321cc6b869a0232cb0e1c0ac89ba71b483c49130e","first_seen":"2023-05-08T17:27:13Z","last_seen":"2026-04-04T14:56:45.071133Z","times_seen":732,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/053/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/053/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11973\r\nlast-modified: Mon, 13 Oct 2025 08:16:51 GMT\r\netag: \"68ecb573-2ec5\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11973,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"fcbf6c055bad12ae511d7e432a6cb33e","sha1":"a15df595489e6e975ea367ea2c0a109d5bb74153","sha256":"b6af3daf7b9ee1187c67bf30265395e4dc7b6722c51221eddd273ab8a2fbd794","sha512":"e05142a8ae992a20f4a735db818157a64093a0feb6e4cf4aff4b3068b765085b790b1d756b3dd4f554f0a0dc77aaf454d1d4345751d6b82c633132f1401ca137","ssdeep":"192:USeQqV4XxRCF8pxDtoN7dtBj2QxntVABfRExb96KUGL8dP:Wv4XbGxdtBjqSxBTZiP","tlshash":"df32b086fbbc366ac85e7b375ece176b4504bd012d422d7be66289219fac43845019d4","first_seen":"2025-11-26T23:42:28.92976Z","last_seen":"2025-11-26T23:42:28.92976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/watch.499577759497.js?key=4ee6c04493e65d3658b84c9ee341e298\u0026kw=%5B%22free%22%2C%22porno%22%2C%22videos%22%2C%22sexy%22%2C%22xxx%22%2C%22porn%22%2C%22megaporn%22%2C%22world%22%5D\u0026refer=https%3A%2F%2Fmegaporn.ws%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=d8f9269f-f86e-4446-941c-bfd475a21325%3A3%3A1\u0026shu=9f66586ecd0d029dbfb5391c9575daa9fb1638529916341652ee01e6c3477c051d378dbfd80e1cef0abeac7bd0531e685574d8d663f358d6238a4c16a9a15a157fb6de3c6ac62052a0d458f19fbfd8b2c68049779db92f44c598b9\u0026pst=1764200576\u0026rmtc=t","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:56.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /watch.499577759497.js?key=4ee6c04493e65d3658b84c9ee341e298\u0026kw=%5B%22free%22%2C%22porno%22%2C%22videos%22%2C%22sexy%22%2C%22xxx%22%2C%22porn%22%2C%22megaporn%22%2C%22world%22%5D\u0026refer=https%3A%2F%2Fmegaporn.ws%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=d8f9269f-f86e-4446-941c-bfd475a21325%3A3%3A1\u0026shu=9f66586ecd0d029dbfb5391c9575daa9fb1638529916341652ee01e6c3477c051d378dbfd80e1cef0abeac7bd0531e685574d8d663f358d6238a4c16a9a15a157fb6de3c6ac62052a0d458f19fbfd8b2c68049779db92f44c598b9\u0026pst=1764200576\u0026rmtc=t HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://megaporn.ws\r\nReferer: https://megaporn.ws/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.dvQT96pxNTfrFyYTze4QqT_X8gwgD1wMOwJiqJd8lHk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 26 Nov 2025 23:41:56 GMT\r\nContent-Type: text/html\r\nContent-Length: 3611\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://megaporn.ws\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=d8f9269f-f86e-4446-941c-bfd475a21325:3:1; expires=Wed, 03 Dec 2025 23:41:56 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Thu, 27 Nov 2025 23:41:56 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 27 Nov 2025 23:41:56 GMT; path=/; secure; SameSite=None\npdhtkv32=true; expires=Thu, 27 Nov 2025 23:41:56 GMT; path=/; secure; SameSite=None\nuncs32=1; expires=Thu, 27 Nov 2025 23:41:56 GMT; path=/; secure; SameSite=None\nu_pl17920260=1; expires=Thu, 27 Nov 2025 23:41:56 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 7\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 51bded3f2481c783474914efc18d9f63\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4640,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3764)","md5":"75f9dd61a0f388445a1393974096008e","sha1":"338fa0f665707b6ce56c056647afabbce2cbc7b1","sha256":"56872f72f4ff07b4bea7f03dc538f78c8cc7c3c8b588587265e3f6fc8e50fac5","sha512":"3cff08e3530d274edbc7b6a3be96f34c7a4fdee9742fe4d71570032e6a64d1a69c74e4722787767e650994426431f57000bf63393c78dcb1a7ebfe2b8a001be3","ssdeep":"96:VozvWdZEICsP0j8ER0KBI4kqR7k/L1XglTDvPHJ40rnCx6pw1ZDQCfMEDaH:izvWENSY0Ky4Lk5Q5DnHLoVQCkCaH","tlshash":"9da13811adc432b59466b0af323e625d7c30a70b2905dd07789da3ca1f14fa4cebace4","first_seen":"2025-11-26T23:42:28.950525Z","last_seen":"2025-11-26T23:42:28.950525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/603/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/603/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13230\r\nlast-modified: Sun, 23 Nov 2025 19:18:17 GMT\r\netag: \"69235df9-33ae\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"0d3c0a191599269fcd3f42b7e3ab05a4","sha1":"9e50fda1c2760b6dca377def878ff65c0e7433aa","sha256":"12e74f3189a8ae023272c67c3132f1898311a0a53f460ed8f07aa4194b5abebc","sha512":"ea03508898adf29100963b08289a519d2424c4401ec932cc7c52c6f36d0a99543c8ea597fa005873441e981df08864c57dbed43974eee2f07381f8bc192d50bf","ssdeep":"192:VIJDC43WEC0H7rYVu6k0u+YEB76Adx1psq0EqdPfQXrhXV7h5gi69b:oPlCWradkCCAb12q8AhXV95gvb","tlshash":"b552ae04ab844a69d97dbb72cea7d72405903f24b08d7ae3ea7b10182b7d1b1919c2d9","first_seen":"2025-11-26T23:42:28.951503Z","last_seen":"2025-11-26T23:42:28.951503Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sourshaped.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=960\u0026rd=960\u0026fd=611\u0026bv=25.11.7853\u0026tmpl=70","fqdn":"sourshaped.com","domain":"sourshaped.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sourshaped.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 00:22:29 GMT","end":"Wed, 28 Jan 2026 00:22:28 GMT"},"fingerprint":{"sha1":"AA:F8:F2:CD:8F:90:E0:34:26:52:5F:28:83:02:25:29:22:DE:BB:79","sha256":"E5:C6:96:84:40:94:64:CB:57:23:67:51:0E:0F:27:85:86:63:98:09:63:88:91:67:0A:01:DC:33:5A:53:16:A6"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=960\u0026rd=960\u0026fd=611\u0026bv=25.11.7853\u0026tmpl=70 HTTP/1.1\r\nHost: sourshaped.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 26 Nov 2025 23:41:55 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: sourshaped.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":892,"timings":{"blocked":398,"dns":26,"connect":185,"send":0,"wait":93,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"sourshaped.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/watch.499577759497.js?key=4ee6c04493e65d3658b84c9ee341e298\u0026kw=%5B%22free%22%2C%22porno%22%2C%22videos%22%2C%22sexy%22%2C%22xxx%22%2C%22porn%22%2C%22megaporn%22%2C%22world%22%5D\u0026refer=https%3A%2F%2Fmegaporn.ws%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=d8f9269f-f86e-4446-941c-bfd475a21325%3A3%3A1","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /watch.499577759497.js?key=4ee6c04493e65d3658b84c9ee341e298\u0026kw=%5B%22free%22%2C%22porno%22%2C%22videos%22%2C%22sexy%22%2C%22xxx%22%2C%22porn%22%2C%22megaporn%22%2C%22world%22%5D\u0026refer=https%3A%2F%2Fmegaporn.ws%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=d8f9269f-f86e-4446-941c-bfd475a21325%3A3%3A1 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://megaporn.ws\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Wed, 26 Nov 2025 23:41:56 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://megaporn.ws\r\naccess-control-allow-credentials: true\r\nlocation: https://wayfarerorthodox.com/watch.499577759497.js?key=4ee6c04493e65d3658b84c9ee341e298\u0026kw=%5B%22free%22%2C%22porno%22%2C%22videos%22%2C%22sexy%22%2C%22xxx%22%2C%22porn%22%2C%22megaporn%22%2C%22world%22%5D\u0026refer=https%3A%2F%2Fmegaporn.ws%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=d8f9269f-f86e-4446-941c-bfd475a21325%3A3%3A1\u0026shu=9f66586ecd0d029dbfb5391c9575daa9fb1638529916341652ee01e6c3477c051d378dbfd80e1cef0abeac7bd0531e685574d8d663f358d6238a4c16a9a15a157fb6de3c6ac62052a0d458f19fbfd8b2c68049779db92f44c598b9\u0026pst=1764200576\u0026rmtc=t\r\nset-cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.dvQT96pxNTfrFyYTze4QqT_X8gwgD1wMOwJiqJd8lHk; expires=Wed, 26 Nov 2025 23:42:56 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 5\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: efe1102033b9b3930e7b7786eae34044\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4640,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":718,"timings":{"blocked":305,"dns":27,"connect":93,"send":0,"wait":101,"receive":2,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/617/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/617/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8751\r\nlast-modified: Sun, 23 Nov 2025 19:42:13 GMT\r\netag: \"69236395-222f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8751,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"135dccc8e4d7e2ffbffad3eb7751a6cc","sha1":"900f6c2348d816483c3b1fca08af12b0d4c5a2b4","sha256":"67cc5ee7c7079d5ca185e109ec9c19dd0823361b5675c8a5b7eb73c3faca9f73","sha512":"c09b4ff6eddaa8f0cd584cc3664e195730664f68086bc8a15b70ed101f963e72988cce7e5b94f7303cc13ead1d8e84c800514badb68e3b76adb46ede9094123f","ssdeep":"192:J5X48/9iRNRpM2EymRBiuB0UdCU9yJf88q49hdYs9/2pD7:J26w7QymRDQUk6Ahd0D7","tlshash":"27028dfa51a22c61f41d63b40dbe2f438a32eeb72a6153cbd35212556f9e0b114c45d2","first_seen":"2025-11-26T23:42:28.952111Z","last_seen":"2025-11-26T23:42:28.952111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"3.69.209.9","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://megaporn.ws\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://megaporn.ws\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=d8f9269f-f86e-4446-941c-bfd475a21325:3:1; expires=Sat, 24 Nov 2035 23:41:55 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"cc499ad1a0f7d936915e83fe1a11edfa","sha1":"2b4a80bfd066bcd2d5593862ddd50875f43ae85c","sha256":"26b1a7ef471dea12a5c6e6f2b62bc6741ccba63acc3e7c971fd27d23e504f6d4","sha512":"456e8d22902442f0241f8c5561e41c1046a58a9ab3ec7842486e9ead3b307aff33a82e136e94eb83703dd80beb166820c01260c02a1252b54c87819cd017dd7c","ssdeep":"","tlshash":"d290041f500110df31441dd75f70d511353551d3c3f050d00c554fc5454d051f3cd445","first_seen":"2025-11-26T23:42:28.952941Z","last_seen":"2025-11-26T23:42:28.952941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":80,"dns":1,"connect":20,"send":0,"wait":21,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/012/817/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/012/817/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13093\r\nlast-modified: Wed, 09 Apr 2025 17:23:50 GMT\r\netag: \"67f6ad26-3325\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"deea603d305882c867b0eeb1af76b9bd","sha1":"14fc0cb3420827b73fb43d7bc0dfa9e01c3d545d","sha256":"6b843b14fd4c6be30adcce6735ce2a8113109a2630edcc03046f2e60cabe167a","sha512":"90a1f8b1ca5a429e0255318366d722a6c3ff8dae2e5072ed1182f50699d10a4720c72e82e091f2b685644152bbe1801403c7c1096689dea3ba111ceffc0071d5","ssdeep":"384:a4qGuvQ2wG+vsGbYHzGlri+d+tD/cULPxL:Zqc2whsG8Slt+tIyL","tlshash":"5442bf36c6219512c43f73b65de9f9ae0144cf40616dca47d93e40609f7f6b6048d6f4","first_seen":"2025-11-26T23:42:28.953597Z","last_seen":"2025-11-26T23:42:28.953597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/impr.gif?sid=H4sIAAAAAAAC_1RTT4gcxReuzu7vJ-hBY4LgyREE_-DOVndX93Sbg7jGSDAmSxLJQTzUv55Utqe709U9vVkQggEJnsabOSi932yy6AbRg96UMOstIO6I4B6yF69eRMhZZrOw-g7vfa--ovhe8b2P1-s94qPmu8vv5msmTfli0KWdly6ZTOWN7Zy92HFpl57oXDJZyE50VmepHL7m-qxLX-68reVKvuhRl1KXup1TptRJvrq4z8IUd2O3G9Mu87puwLBa_re3tQPLHajhHnkaRk2f_CN5H0ZOkA2-OantSpUXr741qFNe5SWGavO9bCXLmwyDQ5iUDpJs8-A2cjsl5LMjyLPNgwmQDzdmE0CYKTnyzAOIbPNAJsTw9iOlIoXOINQTaIYT6HQbhk8g8xswaocAUuHsOWSDO2fzsuHXHrF8xk7J_MO_YZopmX9wHNng66XUrHYu5GldmTyzWE1amNUJTH-Cot5GtebANNuQ1Ucw6mey-PAMssHGOZvmMGr3BRUlsRfGyUIShXqBMRYuxMyVCyJRrBdwz_W9YP-LTDIBt3OorYPaOKgTB3XhYKB2O4xGTLrcD5NYyR5lnDGlBY0jj1Ieyx5qOdM-QlWMINMRZHkdRXkdK-bWzrNbO8d_Wd5xPt2Z--75nf99cWVKyCZHWd-Dvbz7fZyEYRCFWiqqqBcrkYjAj10ZB71AcR4nwg39KPDi2A195oaBpzV1dSh91utJGrjK70VKJCqi2pU6oVxoLntC0cB3dRgFQY-pSIWhn_hBpELPjziTbshj7gbcDXqJCJX2Zchl6NHA41SxIErcOJm9KTwZRpTFvV6sROwljMkgjkQMqxzYimCoWjSaoLEEDSdoDEFTETTD9rZKrWfbOyq1tXAPqndQ_XacV_11fjuv-joj4OUIpWo3THHV3oCs5sZriVXjfJa4qNoxF6pdL_bI0ZlJnKNX57GidztM61BSxmJfh4HywyASEZOx1j5ztRdHsKaFsUfArYM1MyXPVX-iMFPy2G-3IPg2bLoNaZ4Crzvgzdj3KPhlBBRr2dZA93mRl1m3sVB5i6KaR3XNWU_3yLHx-YtL9_b9-sHvH0LL--QgIMsWRdniivmJoJ_eHJ_PG7JxPm8s-fZcUZmBWeMzL1-oeKX__9U7-lqTl-r0STv68g05I2bw7kVtqzM8UybrW7K1ZJTS5am8lJr8cNpe0mK5tpeX6jKrizPLb546PShKba3Jswm4mZLH__oE0kzJsR9v7e9p8MrnkMV12OJQp80JREGQGoJUH55z0cL-qxeHeN3eRL90wKsbyAYthmWLYdqCpyPYem5cFeX913_19wMidcYiLcmGSMsZb3Y7ia89SWnUC10_SrTrMyWTIGKxCjn1fY3KTs2Lo5P_BAAA__-umAGXRQUAAA==","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:56.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:12:52 GMT","end":"Wed, 28 Jan 2026 01:12:51 GMT"},"fingerprint":{"sha1":"67:43:25:0A:D1:7D:95:9F:2D:A3:3F:97:74:7C:0A:AE:D2:D3:98:61","sha256":"09:09:97:4E:79:6D:B5:F4:D7:B7:F6:8F:BE:97:4E:B6:04:9C:25:29:FE:4A:0E:A2:BE:82:F0:6E:CF:8C:74:F0"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTT4gcxReuzu7vJ-hBY4LgyREE_-DOVndX93Sbg7jGSDAmSxLJQTzUv55Utqe709U9vVkQggEJnsabOSi932yy6AbRg96UMOstIO6I4B6yF69eRMhZZrOw-g7vfa--ovhe8b2P1-s94qPmu8vv5msmTfli0KWdly6ZTOWN7Zy92HFpl57oXDJZyE50VmepHL7m-qxLX-68reVKvuhRl1KXup1TptRJvrq4z8IUd2O3G9Mu87puwLBa_re3tQPLHajhHnkaRk2f_CN5H0ZOkA2-OantSpUXr741qFNe5SWGavO9bCXLmwyDQ5iUDpJs8-A2cjsl5LMjyLPNgwmQDzdmE0CYKTnyzAOIbPNAJsTw9iOlIoXOINQTaIYT6HQbhk8g8xswaocAUuHsOWSDO2fzsuHXHrF8xk7J_MO_YZopmX9wHNng66XUrHYu5GldmTyzWE1amNUJTH-Cot5GtebANNuQ1Ucw6mey-PAMssHGOZvmMGr3BRUlsRfGyUIShXqBMRYuxMyVCyJRrBdwz_W9YP-LTDIBt3OorYPaOKgTB3XhYKB2O4xGTLrcD5NYyR5lnDGlBY0jj1Ieyx5qOdM-QlWMINMRZHkdRXkdK-bWzrNbO8d_Wd5xPt2Z--75nf99cWVKyCZHWd-Dvbz7fZyEYRCFWiqqqBcrkYjAj10ZB71AcR4nwg39KPDi2A195oaBpzV1dSh91utJGrjK70VKJCqi2pU6oVxoLntC0cB3dRgFQY-pSIWhn_hBpELPjziTbshj7gbcDXqJCJX2Zchl6NHA41SxIErcOJm9KTwZRpTFvV6sROwljMkgjkQMqxzYimCoWjSaoLEEDSdoDEFTETTD9rZKrWfbOyq1tXAPqndQ_XacV_11fjuv-joj4OUIpWo3THHV3oCs5sZriVXjfJa4qNoxF6pdL_bI0ZlJnKNX57GidztM61BSxmJfh4HywyASEZOx1j5ztRdHsKaFsUfArYM1MyXPVX-iMFPy2G-3IPg2bLoNaZ4Crzvgzdj3KPhlBBRr2dZA93mRl1m3sVB5i6KaR3XNWU_3yLHx-YtL9_b9-sHvH0LL--QgIMsWRdniivmJoJ_eHJ_PG7JxPm8s-fZcUZmBWeMzL1-oeKX__9U7-lqTl-r0STv68g05I2bw7kVtqzM8UybrW7K1ZJTS5am8lJr8cNpe0mK5tpeX6jKrizPLb546PShKba3Jswm4mZLH__oE0kzJsR9v7e9p8MrnkMV12OJQp80JREGQGoJUH55z0cL-qxeHeN3eRL90wKsbyAYthmWLYdqCpyPYem5cFeX913_19wMidcYiLcmGSMsZb3Y7ia89SWnUC10_SrTrMyWTIGKxCjn1fY3KTs2Lo5P_BAAA__-umAGXRQUAAA== HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.dvQT96pxNTfrFyYTze4QqT_X8gwgD1wMOwJiqJd8lHk; uid_id2=d8f9269f-f86e-4446-941c-bfd475a21325:3:1; pdhtkv=true; uncs=1; pdhtkv32=true; uncs32=1; u_pl17920260=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 26 Nov 2025 23:41:56 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8ac07d38af796869eb3093cb11808929\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/cat/9.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/cat/9.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52920\r\nlast-modified: Fri, 04 Feb 2022 07:47:58 GMT\r\netag: \"61fcda2e-ceb8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52920,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 225x300, components 3","md5":"29fbb116ad27941dc74fdd8ebc682eb5","sha1":"380872bc8c9aeecf177d4e81b4f5e113f5fb2f46","sha256":"bb4d4315932e5ae51dcf338957e3e699eacf521957721a35037e23f0910adf57","sha512":"442905d25b783032d74fce1418d5424eb290ae4f2cdcc8b2613f486de4212c9683fc74f35654efd6c099f0a947ec4e733568733c676e76cb2b46fceae2fe56e9","ssdeep":"1536:GTSdJQ0g4WFoPbincG2k4a9BCfFdaVRkw4byu+btoZc:VTtg4IWbinUkP98fqfGSbtoZc","tlshash":"873302d615ea7213dcedf10e947878eb541341b326684f5b0f657ca7c84ccda28e862e","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.954461Z","times_seen":11,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/channels/2.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/channels/2.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10430\r\nlast-modified: Tue, 08 Feb 2022 18:39:38 GMT\r\netag: \"6202b8ea-28be\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10430,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x166, components 3","md5":"204e877ceb298c15b9ce72083081c7cd","sha1":"86d1be1cc27cee73d9db1b32c41511717f100ad3","sha256":"401c402c60ca817676f400ef1d4454451d67ef4178aa21a1f0a682ff93e09558","sha512":"61dd6037f70413c80fbba2a032d237b655dd100eb7a1085f12ab9fb3dc60b73f0ae18ef64ccd6f40d51c0845538d24235c3cd199034c20a1e62f21f5c0a9cdda","ssdeep":"192:+cpY+Tj2jCYyfAsDvVu+4/TcnqmMzzSkh6soPI0YPyhrXl7UnntXS9:+cpTO+j4sDvk+4onqmMzzZMI00YXlwnk","tlshash":"c722af638ae71bcffa55cbf096c00f63e8dbfc14412d93c54ecb268a64528e49e60141","first_seen":"2024-08-19T19:04:46.273684Z","last_seen":"2025-11-26T23:42:28.955387Z","times_seen":9,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/005/802/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/005/802/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19695\r\nlast-modified: Tue, 05 Dec 2023 19:46:28 GMT\r\netag: \"656f7e14-4cef\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19695,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"df5b9fac4495dfdca94ded3e5a3565b7","sha1":"7171bf3e212045d326314805cdfebaa083bec6b9","sha256":"49395d78037d77d8a1a6e808d0f46a83d0e69dbe20a1b424c97115ae65196eb3","sha512":"b003dfc706eb2f1a9b9c2dc456387aad0a97cfd264fa00e3b4897f5ec08717540d758fcfe23344431ee467e6a7d1d12640fa12e95e1455e0484127ce6a75e0d0","ssdeep":"384:SrnnkWuBB3Bj38yjkmTOIMxNq2bypmtLyhaybplI+QQZPGy5CrtILQrQ7O8:SDkW2BjMEkm0xN3bypmteRHctIU18","tlshash":"e992d06f93795e18f8af9f3a845362405f1c9712134dcbc59a03a45af7d33b2e58c40a","first_seen":"2025-11-26T23:42:28.955894Z","last_seen":"2025-11-26T23:42:28.955894Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moundconclusive.com/4ee6c04493e65d3658b84c9ee341e298/invoke.js","fqdn":"moundconclusive.com","domain":"moundconclusive.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"moundconclusive.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 21:50:08 GMT","end":"Fri, 06 Feb 2026 21:50:07 GMT"},"fingerprint":{"sha1":"48:83:B3:3C:56:45:26:1B:12:EE:17:0F:F3:C4:15:10:62:3B:95:66","sha256":"03:92:92:0E:19:CD:33:8C:B6:01:98:43:AA:4A:A1:B2:A6:3F:7B:2E:EC:C0:48:6E:39:86:8F:1F:2E:89:F7:45"}}},"request":{"raw":"GET /4ee6c04493e65d3658b84c9ee341e298/invoke.js HTTP/1.1\r\nHost: moundconclusive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 26 Nov 2025 23:41:55 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 18547\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: moundconclusive.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ade1846c8ae374490ea913713f03e6b2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":46524,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46524), with no line terminators","md5":"a71f971f616f950c9f92448cd60b0e5a","sha1":"6f11af9bdb0482efd3dd3f922cd0e45a3785bc71","sha256":"2d613f81b0c38f693442608e35481eb16ed644c8c0acb6e8a533487599e27f10","sha512":"da65fee212d1028c229f471e72ff757a2156218d6c40d630c6a947d596fab29b589662c02634d9ab9bd1312ff555ba16b74a46b4c2008e610fb087a56427d9bf","ssdeep":"768:+t9VtXvZi5DpYscQ7V1UQeUMa1Y/D56JJZ/nSt:c9VtXvZYD6s/7V1Pela1Y/oJJZfSt","tlshash":"4723e88a3f91f05d83da317732af900bf85e4c96618cd444e543b4b4efb636ae536a14","first_seen":"2025-11-26T23:42:28.956698Z","last_seen":"2025-11-26T23:42:28.956698Z","times_seen":1,"resource_available":true,"data":null}},"time_used":697,"timings":{"blocked":208,"dns":26,"connect":91,"send":0,"wait":94,"receive":91,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"moundconclusive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/misc/bootstrap4/css/bootstrap.min.css","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /misc/bootstrap4/css/bootstrap.min.css HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 155758\r\nlast-modified: Wed, 13 Feb 2019 14:47:50 GMT\r\netag: \"5c642e16-2606e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"a15c2ac3234aa8f6064ef9c1f7383c37","sha1":"6e10354828454898fda80f55f3decb347fd9ed21","sha256":"60b19e5da6a9234ff9220668a5ec1125c157a268513256188ee80f2d2c8d8d36","sha512":"b435cf71a9ae66c59677a3ac285c87ea702a87f32367fe5893cf13e68f9a31fca0a8d14f6a7d692f23c5027751ce63961ca4fe8d20f35a926ff24ae3eb1d4b30","ssdeep":"1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26F:b/Riz7G3q3SYiLENM6HN26F","tlshash":"68e386a6f5a0312de4a7c61964d0bafe156f8145d7220bfbf8273b7447892c70a63e4c","first_seen":"2023-04-05T08:00:04Z","last_seen":"2026-04-05T11:55:22.404918Z","times_seen":36849,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/612/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/612/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3162\r\nlast-modified: Sun, 23 Nov 2025 19:28:55 GMT\r\netag: \"69236077-c5a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3162,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"f2e36d936bf01c7c9e037271bd948017","sha1":"c88b388fe6fe5b4aface736bde64f4d31cabc4ab","sha256":"15d3d5f05c2d1f5bda58b3ccfe204e42807d04ab8b9c8423acc8ae6409d4a039","sha512":"dca7f0e64da593bcd9c55fc07934ecdc95913084d23ac0c7c77b90f356278e431ff6956c100098c28161a800d560962505ef25eb1142701536699a8225f0a8d6","ssdeep":"","tlshash":"6f5108b2a7b5c4d3c89f9672c1b40296ab85ce013a728b47c5a9fd20676d6c88de14d2","first_seen":"2025-11-26T23:42:28.957814Z","last_seen":"2025-11-26T23:42:28.957814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/photos/thumbs/4952.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/photos/thumbs/4952.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11677\r\nlast-modified: Fri, 25 Oct 2024 00:54:37 GMT\r\netag: \"671aec4d-2d9d\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11677,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x250, components 3","md5":"403ed84fff9e2fc693ab1c138c85b8e6","sha1":"a638ca325932f6793ca744ebf57ec31cb71fe5e0","sha256":"37a2d74e0eaf76ab2be95af930e9069e19a024e6c6ed6536f1a1adc90dfaaf2d","sha512":"30f4b101e219af523cc97c394d3a92748e54a926845261962849b618c96b1e3de6baba9e3a63f66adcbf19d52a16592479e7d3c9ddce26db8aa2dbfda49d5d66","ssdeep":"192:T0AjhhnAvfa+zNJT8y2S3/yPiFMhNi4p4svuFaji7Ml:Tlj3KS+74i4p4s5pl","tlshash":"e632afebd685dac8b22eb6f31d210ecf86e78724156b05a606d976104f7c779ba05700","first_seen":"2025-11-26T23:42:28.958634Z","last_seen":"2025-11-26T23:42:28.958634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=d8f9269f-f86e-4446-941c-bfd475a21325\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=cb7cbc519c1d62075f76d028c13574a5\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=23","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:56.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 22:02:45 GMT","end":"Tue, 27 Jan 2026 22:02:44 GMT"},"fingerprint":{"sha1":"F7:0F:08:42:86:24:7C:1B:49:6E:E0:01:4D:B6:85:C3:51:09:E9:4B","sha256":"57:4B:E8:D9:F8:CD:FB:C3:56:16:42:88:21:1B:6A:B3:83:F2:4E:B5:2C:AC:2C:6B:0E:46:6B:15:51:D1:3D:17"}}},"request":{"raw":"GET /pxf.gif?uuid=d8f9269f-f86e-4446-941c-bfd475a21325\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=cb7cbc519c1d62075f76d028c13574a5\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=23 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 26 Nov 2025 23:41:56 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: efdf6450f2857b0d2c04206ca6194f7e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":275,"dns":1,"connect":92,"send":0,"wait":98,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/flags/gr.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/flags/gr.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 487\r\nlast-modified: Wed, 28 Mar 2012 12:47:25 GMT\r\netag: \"4f73085d-1e7\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"fd9b321b80be31c027585c8992f1799f","sha1":"a7642c9048b600752746cbeb619db06986cb33aa","sha256":"5648d2078756ae0b084312c46b02d82905cd9fb84262267cafcf9b71828ac358","sha512":"9cdd89209e8d465e054f7259b3134bd4f45a758f7a1c805bb9839fa2e1a016887b0853b8cf943b1e64b8bb08155256bb1f1481e491b6d1df09195aac8f9c9d34","ssdeep":"","tlshash":"fdf054e147243004ea9000b387cba3329f374fc09f2bc1732c07bd039262505d85826a","first_seen":"2023-05-06T02:52:23Z","last_seen":"2026-04-04T06:01:39.382734Z","times_seen":412,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/007/746/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/007/746/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12131\r\nlast-modified: Sun, 09 Jun 2024 16:38:07 GMT\r\netag: \"6665da6f-2f63\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12131,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"c1b75be48a92c0d62765b1d1846bfbc6","sha1":"4ab9f59225c8fc3310a95078849170e89d23f6bc","sha256":"c40f6125052cbae01660a76ef8697e70fa39c3a50e1700d59c6fff59541ec48b","sha512":"d03b86af770bd839e6be700b91734b89abbc8febb65e89749f053389ffb3502469c548355f7c33c7de53b1cb08130bd40cfee4b6a11d52d59bb1e753d664eb95","ssdeep":"192:yGRXvunzoSss1CCZ7Bnv4A4ciWHCfo6P2MtEsueJmmknLdq2m1rtGwB6PE227aTq:z0sUCAnv4A+xP2MbuImmknLd8gcZpr","tlshash":"f942cf6d53905a0bec7fa3790eb7e25d582d8c8266e28b47f3157abcbb2d0342c481c0","first_seen":"2025-11-26T23:42:28.959964Z","last_seen":"2025-11-26T23:42:28.959964Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/600/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/600/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11560\r\nlast-modified: Sun, 23 Nov 2025 19:13:27 GMT\r\netag: \"69235cd7-2d28\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11560,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"2b62397efb6a74a0ddf0bb3e5f9ee390","sha1":"494f8a451b871e1c1ed6910bef4939f1cc2ffe51","sha256":"edc173714ae0939560f41028aceaf2613e799661d9034cd4cda3266f34aa56bd","sha512":"e6bc69532c88b5248ddd53a6acbddbecf44fb95457256e96941e2255162c0cd49f51564180590a8733a2ad9e8f98002ecb95bfaf34268ab42d717620f2d36449","ssdeep":"192:8XuuQN+F6lw3BLhzyzn/VATpMgt/S5sFZM8JOWIa11RGg5k9UlTq:8BQN+2Utzyj9mpN0eZWWjxGgoUlTq","tlshash":"7532bf0c7e846806ca5d27b03dc45206b19a0db16473475feaf2298abf3d5f089281fe","first_seen":"2025-11-26T23:42:28.960746Z","last_seen":"2025-11-26T23:42:28.960746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/cat/4.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/cat/4.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45886\r\nlast-modified: Fri, 04 Feb 2022 07:47:58 GMT\r\netag: \"61fcda2e-b33e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45886,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 225x300, components 3","md5":"aa7eb97c45739159ac71530fbf03c7fe","sha1":"a2d9d6159462383e12269c1d1c725da405e32dc1","sha256":"d73ab63c87ebd506418dac03c4cf20681078a4667dc1aca1e1556851b826bde0","sha512":"1bc63ba832376d0e40bbbcb1df303d0d2854c47dde2063a6fba63604e9b4c309444ae1961b6374895346f85dbe1202a6fda84d87733e9452643b90c0b2e08422","ssdeep":"768:GQrKioc2yiT3IUKKEFvUqgpKhMEpuogH2/ajz84H9jKK6tdzh1d5QEyPcOXobk:Gdif2yA3IUKT7/ubGajo4dmldzTdmRPj","tlshash":"7623f1c7a31329684f9acf46cc3d11b28294467e6dd3e6fec41048bafd5a549285bf06","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.961474Z","times_seen":11,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/channels/31.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/channels/31.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5935\r\nlast-modified: Sun, 20 Mar 2022 14:55:33 GMT\r\netag: \"62374065-172f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5935,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x166, components 3","md5":"186e5c299d73211b7da1c6513ef9af1d","sha1":"ba07a48312c0877fbd260ec6e0e077313b7d776a","sha256":"3c3933cb9a547bc2ec0f7734293675733e965f0fcf2c43bda41e897ab093c5db","sha512":"f2a9bae5cf4a1ac0eef49cc8d48600e2715e1ed60848d3fe6560713635d0efcaf7d500845f22dfb096b99b0ba67079e7954b90e0b8a81346c7e7deee50120f6b","ssdeep":"96:PoAPO/26/yRkKmlf2z/MtmidlSW4MpdzTY28ttNAEFAlyQ74k9QWws:Pg/tyyKMez/ovlSnudX78ttSLyC4IQW3","tlshash":"05c16ddc95653cd0f0dc51f548b1ad2791e39f2376a3fc6dacda2c58d192b6d0836a20","first_seen":"2025-11-26T23:42:28.962352Z","last_seen":"2025-11-26T23:42:28.962352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/014/858/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/014/858/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10110\r\nlast-modified: Sun, 03 Aug 2025 00:15:14 GMT\r\netag: \"688eaa12-277e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10110,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"1a82b5ce2710b6b9bb1cb15946151cfc","sha1":"c06031eff6eba42e5ff606974aef68163b8b4f01","sha256":"98ff9ad5036f5e105a66379100c2e18fa479f32134e8979e3c1a450abb362cec","sha512":"32f4bf03c58d58f08dc2ab854d70657e0510937a9554791e67da4de69792c4fea2847923ed641ceb3ec91fd1f49311c5d7abb519d1ee5d5b6532fa02ad265e67","ssdeep":"192:uOL8/KaJurUSJyM1UryzhCB3d83HFltOLTNKuQF8FhoHmyQbbe2NDvVMKlCptN:uOLRaJuYSJ5UryzhCB3d83fkHNKu+8Fm","tlshash":"a8229ece3f524007edad13b00d2257139d5e7d8b5a69619bd288da00ffaf3b54d8a1d4","first_seen":"2025-11-26T23:42:28.96323Z","last_seen":"2025-11-26T23:42:28.96323Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-248508786-1\u0026cx=c\u0026gtm=4e5bi1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:56.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=UA-248508786-1\u0026cx=c\u0026gtm=4e5bi1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 26 Nov 2025 23:41:56 GMT\r\nexpires: Wed, 26 Nov 2025 23:41:56 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 26 Nov 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 110873\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":318534,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"9d6f3600fed7e05a6823cbbc0966fee1","sha1":"e9c9da09c386588d0276a1eed71c9b3f31aed891","sha256":"476dcf12fb920a43d243b78fba5e935cfeab9402bdd11ea67dd47f4edc176087","sha512":"e07847975fe102e1e8265e37f1450a0c2eae3067724753b61e6f22e8fa544a7e200df108becaf4bb47ee122517a31be596fa527e7e2914fa4a764a3d27dbe974","ssdeep":"6144:wkBUmt+eUI2X6u0IVWo6O7GQUO7eYgU87m:wonVUn6ugO7ik","tlshash":"e36407cd73da742283a3a474503f018ba17b69d2f84cc895f186d9d52e70aaa4277f3d","first_seen":"2025-11-26T23:42:28.964035Z","last_seen":"2025-11-26T23:42:28.964035Z","times_seen":1,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-26T23:41:54.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.4.33\r\npragma: no-cache\r\nexpires: Wed, 26 Nov 2025 23:42:54 GMT\r\ncache-control: max-age=60\r\nset-cookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621; path=/\r\nlast-modified: Wed, 26 Nov 2025 23:41:54 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:4","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":88934,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1180), with CRLF, LF line terminators","md5":"27909e115865299f4d27f4a8ef893491","sha1":"91d78f504b57aa6fb790f6e1b12e7cee0b524a8d","sha256":"97ce73d456f38449ab6359be7124c009b84a75ed8d2cbd3a5b066f36e92bd43e","sha512":"dbb3127a5461ededc54fbbd7dfbcb9f70ed7b2858006c8c20e8a3f6514825def470c62f596fd39f9a6744343159e08fc52b5ce70ba88328dce0e06aec4d4eb82","ssdeep":"1536:IDAUCPexKqvWw2a1H8VpMpJfnBwuZaQ7d:IDAzexKna1coZaQ7d","tlshash":"ba9365b6e150203b194b86e43fa07b2a71c69bbedb176d04b6fb13d987cadc4d8494c1","first_seen":"2025-11-26T23:42:28.964681Z","last_seen":"2025-11-26T23:42:28.964681Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":61,"dns":1,"connect":18,"send":0,"wait":150,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/flags/cn.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/flags/cn.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 472\r\nlast-modified: Wed, 28 Mar 2012 12:47:26 GMT\r\netag: \"4f73085e-1d8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":472,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"a82ff00f39eff54062328b4474c33dbc","sha1":"9c7185e038ea1000382fb1b14b88f3e9f2d99c14","sha256":"7058233b5bdfdd4279e92e9dfe64bd4a61afd7e76d97dba498ce1d5777b92185","sha512":"be801e5bbd51f6edb324dcd5b19239c64e011bb559e976875b2bcfe71b6a6eb1fd210454cc60402e7aeb6560e3ea6f277b1ca1eb4ff81bbb3dd99c3175a625f7","ssdeep":"","tlshash":"f2f054c863bd3cb1c1ca41a218036a98d2334d2505eb83f01d038c808572fc395fd313","first_seen":"2023-05-05T00:52:02Z","last_seen":"2026-04-04T19:22:24.971074Z","times_seen":3000,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/users/551.png","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/users/551.png HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 91455\r\nlast-modified: Mon, 15 Apr 2024 01:06:04 GMT\r\netag: \"661c7d7c-1653f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"7078727ce577d3dc5ac3686977fe1d42","sha1":"c37509af69dc70498bff17d287aaec45d93e223e","sha256":"5d219630a9687380fd5feefc336aea6a778241927ad935caab54a25a701bd003","sha512":"e8eeb2b9f9e5b2941cda55943ab61f90a4e286b6e42065fc28a4ae8ffd1c2958d18a9eaac25f243f6faae35af9be82e64e43d5477c89d89f3653103000772638","ssdeep":"1536:WnxQyUQb04eqUJvcIG1WVfuRxIXHbj1Dq9rE0d6sBcretG0LvcYh5mi1GWLP5z:KxQyUQiHJEWVfexIXbj1G9rEUXBcStGI","tlshash":"c793120aad7df46ef6ce25133303245e24f36891ca3447256574cae9b9874bb78cc29b","first_seen":"2024-06-24T00:09:20Z","last_seen":"2025-11-26T23:42:28.965829Z","times_seen":11,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/004/115/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/004/115/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22812\r\nlast-modified: Thu, 29 Dec 2022 23:39:27 GMT\r\netag: \"63ae252f-591c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22812,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1280x1281, segment length 16, progressive, precision 8, 500x280, components 3","md5":"991ca7cacef5c4f5fa998b49ac9b43c1","sha1":"69554e07faf20fa5bae4500602e61efb5233ce03","sha256":"6d20235053fd076359d56027eeb2ccf89279c2798acc1978a3a6ad03b17cc6bc","sha512":"1f7cccd3a37957be6913380bb053c8d3b6f315ca08a1a621af84aff40a5aff48dd64f4a25b090310a5cee6dca0cf414686fc7f6763dfca2cdbf5050971e649dd","ssdeep":"384:mwZH3yKBJi6rlS99Urz222252UjxgmZIqSSSzTtYRaEl1ZP82F1QNqTxIIMqG1HY:Ti6rlSvUrTDuys2d8i1NIIXyU","tlshash":"d1a2c016316a570bd0ff5a75b169bf24220bf271cabab3f3c9944b104b6c5c8603ea64","first_seen":"2025-11-26T23:42:28.966946Z","last_seen":"2025-11-26T23:42:28.966946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/photos/thumbs/5005.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/photos/thumbs/5005.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9657\r\nlast-modified: Thu, 31 Oct 2024 06:10:32 GMT\r\netag: \"67231f58-25b9\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9657,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x250, components 3","md5":"cd896b5ec55c9fdbd4fc02f26589daf7","sha1":"393ba8998697da6078ae7d7fb3f829d39c288c6b","sha256":"bfe9835058697aba99ea9b761f6deb314771c34370a803bdda08c14ba5dc5b19","sha512":"fab5472a49eb1a22e01d48e6aaf57eab11e1d2f5551af87ae28fbc8411e708f642fcb0cfd7d01743a5d9f618b462e630cfa7b287af8b7e8bfade93900a3a5a14","ssdeep":"192:0wiX6/nTmHFrrvCutlsqEEmoJU3oYLnwokRDy:0wiKfTmhDCu+feYLwokQ","tlshash":"2412ad70f3caa3e1f2893bbf92563d279bda7810d3c6a2cb22e4534ac8c55810659645","first_seen":"2025-11-26T23:42:28.967871Z","last_seen":"2025-11-26T23:42:28.967871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/channels/14.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/channels/14.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8569\r\nlast-modified: Tue, 15 Feb 2022 16:44:31 GMT\r\netag: \"620bd86f-2179\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8569,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 250x166, components 3","md5":"237d687b855a8d0ebea27a2cd34efad0","sha1":"bb22b583d5ee0b85b32ef8eaf886b51b0c92d14b","sha256":"194c141a2d296bf198dce33ca9ac6f9fe912285375fb2fc2c8be3e51d30ed960","sha512":"382b18f9429b09a338a034b4e97ef6554c3956dc9ea6f773afbcadd1da16f77d2b9c25e99da74f6443c9e84c92cccf153d7dd97b7f2df830955630d0db596eea","ssdeep":"192:FHAfbg5qi9RrXJYgTpUZqIp6eLeUTCwCv2HhOTKgqVCBj721yCZ:FHAQrXLaZHp6IssOWgqVe8y0","tlshash":"80029e896d8901c2b13b2388f3d02cd052dc9a699523951242f36d727b21d7ee5536f7","first_seen":"2025-11-26T23:42:28.968673Z","last_seen":"2025-11-26T23:42:28.968673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/models/54153.jpeg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/models/54153.jpeg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21124\r\nlast-modified: Sun, 23 Nov 2025 19:25:32 GMT\r\netag: \"69235fac-5284\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21124,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 232x350, components 3","md5":"ce87e3aef0f5bac5c3d35dc824fe29b3","sha1":"fa1737cfb6960ff24a602a4e47ba79a862aade80","sha256":"06bf783e9453fdd053f10e3339380b153ffd6a1c78921350e416013549592089","sha512":"60d11ad224028952815bcec3798f0dfc8c343950e4b3c04561eda0fcfb2baac58a3542a0804b5556a335c96abd7ad14e2c4033869c6695a45cf9b080b680f1de","ssdeep":"384:/rYzLUQ0BgdqiEfXCJRMPLg68UeuZFFtATp+GtEG/bjJQ4nps9oWRIQaN/Z7NJe:kPf0BgdqiQXcoSURHvCkGJq4npsmTX/E","tlshash":"e192d0d0c20d36f937e6de4e14123e3444c0eabe34fd684ea1da39157b788c7a49b95a","first_seen":"2025-11-26T23:42:28.96953Z","last_seen":"2025-11-26T23:42:28.96953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/619/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/619/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10314\r\nlast-modified: Sun, 23 Nov 2025 19:44:03 GMT\r\netag: \"69236403-284a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10314,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"29e1e5cfcb9344895f3dc1f9fc0213cf","sha1":"1a60da4a2d7fbe5a0439730057c0805498f6e60a","sha256":"1a803171ba9b596147fc3f5ba01086ecbbd3b32048f7b3bcaa9f9c6c216783fd","sha512":"500b7796b4fb8c2e79cbb5b87452a528bd52051a160657e92b05e9c2ed25d835537c9e77a2868c93c5fd2fa322be12358b6724fdc4f32ce6230ed45315447732","ssdeep":"192:YfqunEdj+H0GfAARDJ8vOn6joL9zSWJNtXCIDScjA/7snuHH4ZClB:YfqaElS0GfJDG2nqohOgjDSVzwun40lB","tlshash":"ca229db38e70fa40f2ac3b395e9966624934fe8294605977d87b15b53b2e0b49c4c0fc","first_seen":"2025-11-26T23:42:28.970439Z","last_seen":"2025-11-26T23:42:28.970439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/011/453/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/011/453/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9682\r\nlast-modified: Sun, 02 Mar 2025 14:45:07 GMT\r\netag: \"67c46ef3-25d2\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9682,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"6b2ffd7403d999f220a83c74bf340aa8","sha1":"52ed0c723e6dd2db5ad99d0b162b0a7510967860","sha256":"326b5176692680d5e09614c8ff2314cbb21f40060ec5e223a5e1fecba7adb82a","sha512":"3bcd6b07135530d292734da3daa7cd27f71e083158b727dd8918ffcd677b04849dd75eda566dc232a963efdbc0871079478815076b46cc418e248f2fa337cd34","ssdeep":"192:EKKUMHRgX78CPI7z51J9uqhEThDzs5mlCGU+y/QU8pX:32aGz51J9stDimlLUZ/QpX","tlshash":"9e12adf141a29801ce4e53f08fc5fb5a1a209d005c82aeb3ec47399a132d2bc66498f7","first_seen":"2025-11-26T23:42:28.971067Z","last_seen":"2025-11-26T23:42:28.971067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/008/282/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:54.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/008/282/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15564\r\nlast-modified: Sun, 28 Jul 2024 21:18:54 GMT\r\netag: \"66a6b5be-3ccc\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15564,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"bcd114e1a157987e52f0d72ad062a7a2","sha1":"1e1ad8ba227ddf57b0647adb67979ae46e5c604f","sha256":"493da479e6b3497398c05172c41e9f1978e15d3223f5927047afbdbed95d2509","sha512":"3bf8ba077eb06631c7cc622db0efb696cc35ce53ebd9ef7ca49e5e5b5c4eb0d7fc235aadf7e5c79171aca16be07584ca41650650bf515570b95041623478d1f8","ssdeep":"384:Xb0G7gYfaGAplZpHr2GpXHREBs1O1YJIEi7yGwjGJw6D:tUppTx2G1z1O1+OdD","tlshash":"2262bf1527c45406ffbf17b60c8a4ba437748eadf8a44267d0220ab4af3e57bc5c25e4","first_seen":"2025-11-26T23:42:28.971846Z","last_seen":"2025-11-26T23:42:28.971846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/003/803/13.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/003/803/13.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20369\r\nlast-modified: Sun, 02 Oct 2022 07:36:26 GMT\r\netag: \"63393f7a-4f91\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20369,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"1bb2a65a8b53a9dae5851a0c11cb41ad","sha1":"c702a45c56865c2567c73e07a69c427db4db66d6","sha256":"6b6eb4839cf86e8f073125c9b9d1692f9e67c87ec069e8037bfc108858e375f7","sha512":"123db4b205302e00001104464ec97da1a97b1512a23010a3398608cc0abb22b62b220bf384ad345ff5cad30b1c8ef624936dbfc1212d31ee80ebc163da7d44cc","ssdeep":"384:hH7j1nDZOmd86ZIS9DwZeTmALxmqnV45XVVi7hQpgv89ICns+AQK:J77d8weeSSxNytshnZQvi","tlshash":"a992d0972a24d5fbe50b611343d42d0945dfeab62c43d8470a21337abf751cabe8116a","first_seen":"2025-11-26T23:42:28.972715Z","last_seen":"2025-11-26T23:42:28.972715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/011/742/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/011/742/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10499\r\nlast-modified: Sun, 09 Mar 2025 20:37:59 GMT\r\netag: \"67cdfc27-2903\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10499,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"cb0b90df1737de066a8dbe8bc2e27cb0","sha1":"4eba9c54e53041c9bbb7bd0fd56fdf7ebeb3581a","sha256":"6334aec7fcde713d84b25675dfd6a8d78020b0cdffd7904d2232b17f281eee0b","sha512":"219c1c9c5940fdbad4eb41c0f285fd25a71549ce9a929f7d19686fc800e6db673e98033f2d136d136ca08a51ea4f384e9dd02c687dc9c56d30fe592798ca0ce6","ssdeep":"192:86MiU7WjI5i5IdFaVchq63v/VjAQP+31W5TWxJOE:86LU9aVcIeVjnWqMJOE","tlshash":"d4229e021ff89d12d83f13bccea0242956389d91b51e1787d6f9191083be1ba2dd49db","first_seen":"2025-11-26T23:42:28.973592Z","last_seen":"2025-11-26T23:42:28.973592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:40:35 GMT","end":"Tue, 27 Jan 2026 23:40:34 GMT"},"fingerprint":{"sha1":"AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C","sha256":"72:5A:79:00:74:D1:90:EF:9A:D3:3F:01:E6:E5:14:1D:41:4F:F2:28:D3:FD:4C:AA:70:DE:D8:BE:C2:15:3F:EE"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 26 Nov 2025 23:41:55 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 72eac542f9c14be48ac30d8fd78942e5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-05T11:55:32.942939Z","times_seen":13261,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":59,"dns":3,"connect":17,"send":0,"wait":20,"receive":18,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/602/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/602/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6707\r\nlast-modified: Sun, 23 Nov 2025 19:15:59 GMT\r\netag: \"69235d6f-1a33\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6707,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"cc10f027965e26cf44472058f14c0ee2","sha1":"ba790d8a2bbf69d1d5530660843f84eea88dec67","sha256":"e8457869593393c8cbb126af0cebb73c9881ffe745c3b2f329c1379c3885c05a","sha512":"c99f7788bde9e6a582c99a530792022d27ebc56a9261414db0773efcf554bbd8cc386bde2f6866f42cb7b6032ba86f099c1549282fc165d90460b4c74704f7c2","ssdeep":"192:A713h64Uo5cIYj6FP3d4mPQs+jEMEaRpG4:A2KcoN4mP9UEMFpG4","tlshash":"16d19eb91711af06e7ec1fb01ca04b1ab5298e01da037a17f39d966c576d2b68cf06d8","first_seen":"2025-11-26T23:42:28.974975Z","last_seen":"2025-11-26T23:42:28.974975Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/016/601/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/016/601/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11421\r\nlast-modified: Sun, 23 Nov 2025 19:16:14 GMT\r\netag: \"69235d7e-2c9d\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11421,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"15e70e4d99a0a2cda60d17a17fc28754","sha1":"43fba441b4728876a64c87114147407d7233aa27","sha256":"2bc498eb267c6d6469ed7ad41b96f07e1bd5529ed72a348bd4bfaad12c9b545a","sha512":"f25259009d0e65e14879a43e3cfa7766e06e2cb577ab550bcadcd8fa59d6e26e46b30322b80df3cf0862de3ca85db1301f68376c78d931114b54a3a5372e0c5d","ssdeep":"192:XpPK8vYT+NbRHH/sybFRmoYmR95zXqPyktW3stIe8nNcqs:XpPxvYTuHEybFam9z6kstgnuqs","tlshash":"4d32afbb33925006e4fcf7b01d8c46aa36406e143303a257e6e65a1d3b3d2754f606d0","first_seen":"2025-11-26T23:42:28.975801Z","last_seen":"2025-11-26T23:42:28.975801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"megaporn.ws/media/videos/tmb/000/005/160/1.jpg","fqdn":"megaporn.ws","domain":"megaporn.ws","tld":"ws"},"ip":{"addr":"45.93.8.234","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"megaporn.ws","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 17:57:59 GMT","end":"Sat, 07 Feb 2026 17:57:58 GMT"},"fingerprint":{"sha1":"67:8D:94:C2:24:83:FC:A8:DC:65:9A:D7:C7:1C:CA:D8:4C:9B:32:94","sha256":"EA:50:39:BF:0E:C0:F8:0D:F0:D1:3D:B2:37:88:61:73:BE:A9:E0:C7:0B:1E:22:16:CB:13:21:FD:CF:88:80:5A"}}},"request":{"raw":"GET /media/videos/tmb/000/005/160/1.jpg HTTP/1.1\r\nHost: megaporn.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nCookie: ASPro_de5cf80a88=a56f9604a0faa1852f0c2cb9be0c1621\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9042\r\nlast-modified: Sun, 29 Oct 2023 15:07:34 GMT\r\netag: \"653e7536-2352\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9042,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x280, components 3","md5":"dcf247ddf089d3ab54421467b5d40148","sha1":"ef98ff63b04a983717d25443f3d9f00e6508ba7a","sha256":"d231287b79f90063819fc028af814c405e23dfec114449901637191681ae8faf","sha512":"a32724ac44802f6bf2237d9ca7a1e0e37616912549dd49bdbd85aa03e812d5920945a4c0ad1c6bb1f807431f7b4b08aa7eb1619cac8f40c1149d43a5fbda5855","ssdeep":"192:6l9dDcvNGZUenKRkQt1MIIG+ohSMFDoWiLKXuVzsw8aRF:66YnKRvt12SRDXitp","tlshash":"61128d9b2b401138d22e53749fa42b563b41aea0b0834ae7e08f5f04831f4fa7c3d1e6","first_seen":"2025-11-26T23:42:28.976596Z","last_seen":"2025-11-26T23:42:28.976596Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"3.69.209.9","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://megaporn.ws/","date":"2025-11-26T23:41:55.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://megaporn.ws\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://megaporn.ws/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 26 Nov 2025 23:41:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://megaporn.ws\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=6f27f7e6-3824-4bcc-88c4-54e7fcf955cb:2:1; expires=Sat, 24 Nov 2035 23:41:55 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"50a400d0cc0ce1c9f95a359e0cc5e24f","sha1":"104f60955eab5da9754ef84777a7b70bb1a128b8","sha256":"6dfd9e683dddabedd9aef615fa0cc427e192f07f40268d895bcb4c85d72bc76f","sha512":"f0beb275ad48968f932960582e9226a00f539db5c13aadc8254d4531ace11741bc80ba39c5f8d90a9d54536a9575046dedbf223e080a441361e66f0cabc2cc43","ssdeep":"","tlshash":"a19004414470ff43cd57730155c17d5447c7130510c704144741d53111f34014351370","first_seen":"2025-11-26T23:42:28.977487Z","last_seen":"2025-11-26T23:42:28.977487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":125,"dns":10,"connect":21,"send":0,"wait":21,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}