{"report_id":"cbbe1a7e-2ded-45a4-bb95-b01c28de6653","version":6,"status":"done","tags":[],"date":"2026-01-06T04:29:58Z","url":{"schema":"http","addr":"xmalay2.net","fqdn":"xmalay2.net","domain":"xmalay2.net","tld":"net"},"ip":{"addr":"172.67.159.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"search.themainlist.com/reccheck?token=e131dc2c0ae994c1690430a17b0deef3c8518c946acb34fa5540a5a79620b543\u0026q=Klassisk+tiramisu\u0026market=no\u0026utm_source=14697\u0026campname=cq_3707818","fqdn":"search.themainlist.com","domain":"themainlist.com","tld":"com"},"title":"search.themainlist.com/reccheck?token=e131dc2c0ae994c1690430a17b0deef3c8518c946acb34fa5540a5a79620b543\u0026q=Klassisk+tiramisu\u0026market=no\u0026utm_source=14697\u0026campname=cq_3707818","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xmalay2.net","fqdn":"xmalay2.net","domain":"xmalay2.net","tld":"net"},"ip":{"addr":"172.67.159.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-10T04:29:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xmalay.xyz","ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-29","domain_rank":0,"first_seen":"2025-12-29T20:47:21.954423Z","last_seen":"2026-01-06T04:29:42.347539Z","alert_count":0,"request_count":36,"received_data":1843154,"sent_data":19218,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-04T22:18:41.67311Z","alert_count":0,"request_count":1,"received_data":408836,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xmalay2.net","ip":{"addr":"172.67.159.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-15","domain_rank":0,"first_seen":"2025-12-17T20:55:54.410606Z","last_seen":"2026-01-06T04:29:42.380072Z","alert_count":0,"request_count":2,"received_data":134209,"sent_data":913,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"divisiondrearilyunfiled.com","ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2024-05-21","domain_rank":53089,"first_seen":"2024-08-08T10:52:35Z","last_seen":"2026-01-05T16:11:28.385852Z","alert_count":0,"request_count":5,"received_data":168545,"sent_data":4165,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-04T22:21:06.427471Z","alert_count":0,"request_count":2,"received_data":261176,"sent_data":1009,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"a.magsrv.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":51490,"first_seen":"2023-08-04T16:18:00Z","last_seen":"2025-12-30T09:00:06.745142Z","alert_count":3,"request_count":1,"received_data":185899,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2025-12-30T10:36:46.668022Z","alert_count":2,"request_count":2,"received_data":8287,"sent_data":1363,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s3t3d2y1.afcdn.net","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2022-06-27","domain_rank":0,"first_seen":"2025-11-21T12:51:16.33547Z","last_seen":"2026-01-02T20:39:03.970784Z","alert_count":1,"request_count":1,"received_data":7595,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44dceba43473437922c051f70d61701b","sha1":"adf212ab94927d8b5f32bb8f1cf045bc8323dfb1","sha256":"e2ca5db73892e4b00e35699bc46d1ea4fac2fbcbe8521ae4e5b499d6baed796d","sha512":"b3d68a026490858b258ccd6fb902f70f627ee5c073380d2306cf7615e85af5575da61b8035f446b2501d916bea9a2287a776b59ebd9ebf03e805e8f50775209e","ssdeep":"","tlshash":"12f0d82c75e2553251db246c76af0248f939444320098515786d82882fb2b9a8550bed","size":478,"data":"","first_seen":"2025-12-29T20:47:30.721849Z","last_seen":"2026-02-26T07:48:49.360854Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09ec92d51d99acfe6baab357bb8fc6b0","sha1":"56c81ebc4680aa05e5818dcb1dd10646231208de","sha256":"a7d037d37a85b2f0cc146f1d0aa3e0788a0fb85a794b7bf094b2747993f67b7d","sha512":"89fef905c94788a401032c343ec008072b89914baccfa6e1d3e5eaa35f089dc354317a10a12bb617c48931a09bd4d3f77ffeab5c024e17234f6fecdf88dd9856","ssdeep":"192:2HZHIu4isHJ3o0iL6yTyU9EXdJtDDZxFE8eKGoPH8hX4dJgpLGLhYCvyc:25oug1P73E8eKGoPHgXYJgpKFYCL","tlshash":"be421faff1f3196245a379bf73db4a88353240079846c5263b9c86492f92ba096737dc","size":12085,"data":"","first_seen":"2026-01-06T04:29:48.965483Z","last_seen":"2026-01-06T04:30:01.952206Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/check.html","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a528a2557670f519e26e8e0f21e4784a","sha1":"3a52fecc1b07c426f1acb2ddcef627b16085a031","sha256":"276a2189f7ab53af21b401ee177a026b4aa955dc5d4504239a3865a18321cee6","sha512":"5004d6b7c6c30949224ac885872deb85437a21dd3301e2b57fa0104ac5007ae88038dc131a9c523976a75e7ca13fed7ff3d4239e07e3911b5ef572a4e0638ead","ssdeep":"","tlshash":"b101f95fb6fa24a15a73b23b472f9188343b211f390a89093b9f47800f945545296de5","size":757,"data":"","first_seen":"2025-12-29T20:47:30.7317Z","last_seen":"2026-02-26T07:48:49.365598Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"190c07a82f450fb7e42995c626ab06c6","sha1":"5102f1a564add22a09729db0ecf9d08b35e7495a","sha256":"4c9ef1dae8eece7dc1a4430baec1f1587a7e8648d655118658721afdc9956599","sha512":"a9cb45050dd92fd580de255671931623e61aa5bf590844cdc32a69b75f1c892546f0a9c78d6c39889db90a21c3a2dbc15133d116dbcd231a9ca5c32fba87443a","ssdeep":"","tlshash":"c641dc2d78f7b0b35b33707d8baf91997ab35023580ac9017c1c9189afe053546a5eec","size":2224,"data":"","first_seen":"2025-12-29T20:47:30.733246Z","last_seen":"2026-01-06T04:30:01.95584Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185387,"data":"","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-L827MYJR9N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"84a9996948db8ad779228f4a08cf87e2","sha1":"beafcd256bca20817ec6493680fa7bcd2ab03f6c","sha256":"39ff916845ba23986c1f3fa2ffee9277dc1e01d7a4964c2a06ab81c4115bc225","sha512":"08fe31f403b1bd1aeb0af931b5cb3a6a58b98c825aa47052d4b12973ec50213feef0f2015b82cd0f6b9e9fa98bf4439b8900c0960a6dca02e86379f224b73969","ssdeep":"6144:+wsC6+1BIiU6IVlmCOt28Mk9TURKIKivW9E/rn7b:Lt5Bw6I7xRK6WK","tlshash":"5694198e73c674269396f078503f118ba57b29e2b44cc895f189cce42e74a9a4277f7c","size":408232,"data":"","first_seen":"2026-01-06T04:29:48.920025Z","last_seen":"2026-01-06T04:30:01.898005Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/2044342?zoneid=2044342\u0026jp=_clcyzxdzguugosehhzbivs\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=UbdZFYPD_WRacKmPllDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=siJLNUMaHR0cHM6Ly94bWFsYXkueHl6Lw\u0026afid=397321245377536\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1373\u0026rlp=%5B0%2C4%2C109%2C81%2C6356%2C4717%2C2239%2C4659%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b64047b6e966ee4dd65259ac4bf1809b","sha1":"3d43f025d38f17c784aa794e18b42bd8d24f0f16","sha256":"c950a2099f897d148634768fb95c1bcec2a198bd28971b84d2f9729903ac9ebc","sha512":"685c63d604d7b3b5bacbe665ebd28af952569e3a56b7ddb91353bceeb729853d0000bf33261e989701ec1d56e6a0d690ef6a4f784d687dd8d66a35033a182cfe","ssdeep":"","tlshash":"a97184943895c7c47a81ac4ef7b9be892bdb28e6ce038e400165e15b3b7017caf91c06","size":3523,"data":"","first_seen":"2026-01-06T04:30:01.913353Z","last_seen":"2026-01-06T04:30:01.913353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"870f0294f35ec8d4a7c436a39719db16","sha1":"1fed99e73d7b64bc91c6be9dcacb1e98314177b6","sha256":"dfb68b689ca3ac165d4ce76cfc577234242f5e3765b6e3f263a4f7f7e7af3fbe","sha512":"83198e55d26a79909215494a1d5653ea081469e2c8cdd28b2092f4679c087a2030fa36f572f5215707af17b827bf9dbc5001e512d2080d4082eaf314f7b2e41b","ssdeep":"192:oVRF3jBAbkQMYfe4ppOc0pAEfi9rsgWKYpEH9lEiB:oVP3joMaOc0pA59rdzYp+h","tlshash":"8af12ba670a3ee6547b10cea147b3038d07d6144344a8560fa7c7dc6797528e83b6f3e","size":7761,"data":"","first_seen":"2025-06-21T23:55:30.637799Z","last_seen":"2026-02-26T07:48:49.363083Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"febb137213ff9ff40cce8b622c8d5e26","sha1":"003aaef7f693e30f023c5a4e3c2392aaf715587e","sha256":"f5e872205a5cbd25a0b81e04e58dd740c2f8867cdae82d118af2e2115f03f679","sha512":"6799eacc61173b16c97179b7b3c9ecd1bcf04c593e81b954e154ff9e9e7d116c4ea1852026bdb752d2d2b8a24c4d8e6d418e49ff896b768da75d67cc70333d8e","ssdeep":"","tlshash":"872159ef25f3212065e371ed3a8f6754252204af3905ca087e1c4ad04f9197b82b2fa8","size":1381,"data":"","first_seen":"2026-01-06T04:29:48.968324Z","last_seen":"2026-01-06T04:30:01.957781Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/aas/r45d/vki/2044342/1dcd16ff.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b55db48d8e1846e78ea9322672924142","sha1":"63bdbb82041f9cd4776d5660340274c1bbd5c949","sha256":"c6826e788ec1bc2e7104844cf90e7c6e5422347c0e0ff126e925e6e69add57c3","sha512":"ba54b2edb0dba53b5d5fbaf62132853d19409726088d2c5167c85d8738ea5420d4a85a72db2fa534999f820f6d17751e68d65c3a1c1ae48ad8c326c693edc8c2","ssdeep":"3072:8U0KJ2LLbnYgLevgFghmlx+uEzUgL6TQX2bH8q:MTZXyslxv+6+Nq","tlshash":"0ae3638c62cee4f50b4290e9cc3f3702b63a58e29f5d41a6b573c1c929b950ed315bb9","size":156166,"data":"","first_seen":"2026-01-06T04:29:48.954764Z","last_seen":"2026-01-06T04:30:01.943944Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/2044342?zoneid=2044342\u0026jp=_clovepyfcivawfwytylqah\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=UbdZFYPD_WRacKmPllDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=785\u0026psu=tduU1LBaHR0cHM6Ly94bWFsYXkueHl6Lw\u0026afid=6308295757202944\u0026ppucnt=1\u0026eclog=0\u0026snc=0\u0026ssc=14\u0026tp=288230376151712260\u0026tl=zQIAgqFs0mlcj7GhYwE\u0026vp=0\u0026pkw=0\u0026pload=1495\u0026rlp=%5B0%2C4%2C109%2C81%2C12137%2C5729%2C2478%2C5671%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026freq=1\u0026uf=1","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17c2df2a6bf888d26293e0fb7e4656c","sha1":"efa661e8e991413bbadf0704048a90fb54c4ade5","sha256":"63b4c9d0a37471ec8a8a53e6c0efbd7b7e5583c933101d6463ece7135c69809a","sha512":"62436abe4c070f2de6cd3af88f843693a5b545b80d88e67d876eb4bae35ba3af527bff2257b289a4a41a9f91f527f02bf03b0a041927e0473df5340003775794","ssdeep":"","tlshash":"b87181ba15adfba81867991a07fbae14ca30f5c98c179ec74d65489f4709833b34b800","size":3536,"data":"","first_seen":"2026-01-06T04:30:01.945248Z","last_seen":"2026-01-06T04:30:01.945248Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-09T01:51:18.599724Z","times_seen":11501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9af565b3466867135f9bea90afa2998","sha1":"01bd4ad005672a20e3877782d9f3a8d6ca4f642d","sha256":"f6d46c904f3d86430ade965231e74dacb88535261fa620e6a73b451e6e9287b2","sha512":"417c39f654d9f837ad707d32319564df9f008ef27de5e9ef8bf171cde13ce8b782f92ea35dc3585343ec63c3f59198cb9a9da51b1c6d003dc06beb4e9cd82966","ssdeep":"","tlshash":"a0c08c8c220a1c7141a626008b2fba00b042321494d46932481923084f20e17d754810","size":153,"data":"","first_seen":"2025-06-21T23:55:30.638753Z","last_seen":"2026-02-26T07:48:49.374299Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"01ee5dc9692a15db03a687ecd9e299d6","sha1":"216cefafb23e0f4f8391640d0b3d427f77ca7064","sha256":"3f2d9c97ed1d1ac42cbaaa08194ca5dabbb1a3981ddbe0d6e1497957d35e2fe1","sha512":"d09347fe76c97383d7c29974d067ef1f8f8101a2d2cde67a1562460353da091e1bacdca929e153f56c54e122846a16ca73bb69361ef954c5b3cffa3fe3f5b5c6","ssdeep":"","tlshash":"0051b22e69b315208567b16e7bbf525c32741017f912da08f80dddd0cf908b4466aec9","size":2782,"data":"","first_seen":"2026-01-06T04:29:48.975086Z","last_seen":"2026-01-06T04:30:01.961725Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"809be0595a55f9ea38a2198503b4074c","sha1":"0056f73c81ed80e31d118a85802997ef735209de","sha256":"967ed1c047268e0fd8f0a0d7ca9be2c8f7071da40e7626838878107ac6a43ef3","sha512":"fdc83f64cdfe805232a229ce35f0fc2353819170ff5ceb2ee6e667e04b97195eae3775155ac4a304f5c3698ba95d22f573d9c0ece34d48789ea4b832da4031aa","ssdeep":"","tlshash":"199002100c79c0e0605144040852600150406d870510b4857585d31a89985c449214ee","size":43,"data":"","first_seen":"2025-12-29T20:47:30.767005Z","last_seen":"2026-02-26T07:48:49.376217Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-09T02:15:37.081964Z","times_seen":11728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cebe8d8cb15efc477e68eda68deabb27","sha1":"b6ed02c956b5fbcae6787c9eb86c3d30284b16d8","sha256":"56842cc1cd4fb468af4b21bb0242de4e0139fa475204759fe726a5c3a419125a","sha512":"bf1ab5a7b98ab87a12b7f87a380cf3093b55957f3a9617f19c8b7aa2a73bdd7c763c434891f8cd89e1a8d85d1a757d3ab8e2f0560b866f697a04dab3f8aed672","ssdeep":"96:LhzH5oHEv0IpHJHy7y14ZsxoXa8HJjqKUi:LhzHuH9QHJHEuoK8HRqKUi","tlshash":"4291db0fb1f2153744f31efaa7db62a4772e4c836044c5363a6d87451f81b528662bee","size":4489,"data":"","first_seen":"2025-12-29T20:47:30.768607Z","last_seen":"2026-02-26T07:48:49.380154Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3a0d54e5ad83b19deb54a2e48d795cb","sha1":"2c7aef9edb71f90c2b521a7fd1b6c3c0dfebc168","sha256":"55cf77c68e27d23ccba2fb696034f211a0d4e058be8e98f6bfd78bcfcba794de","sha512":"f7f5f64233fd569599d4b2b33754b98434cde608eee541b62db08d5119bebd66d54cc3e79562b082b9b0584fec2fc78ad9b24bcadfa7b3c3e065097d3179290b","ssdeep":"384:nhvLjOopm2mJlMc071A79rRrYpwkhvLjOopm2mJlMc071A79rRrYpwyTU:nx3Oopm2mfM571A79rR0+kx3Oopm2mfP","tlshash":"5f822ba67192ee6107b10ce9157b383cd4696105340ac820fa9cfd8abb741ae83b5f7d","size":17943,"data":"","first_seen":"2026-01-06T04:29:48.981408Z","last_seen":"2026-02-26T07:48:49.382068Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_17424.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_17424.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40059\r\nlast-modified: Thu, 11 Dec 2025 16:08:33 GMT\r\npriority: u=4,i=?0\r\netag: \"693aec81-9c7b\"\r\nexpires: Tue, 29 Dec 2026 14:23:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u1cUnd7Pcf0NzwkLfgxVoNdmF65uGtTY1rX96SiNn2Ki%2Fx431M2NWUKghmIAFdTg59MUzIxZ0sGBL5rv35aDTQpciBqrdgqZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1e82c5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.54.100\", baseline, precision 8, 832x848, components 3","md5":"bf35ee3d95271f20c3b69630719dfec7","sha1":"d17141ecc32c8b5062e2e9cbeec3e8724f70038c","sha256":"5b90e7eea3721c4eb1b6dc7fd67f073796eeadaea8d26df9e431a5cdb90049ba","sha512":"e09f53c221b8e8fed54113a6d54a8d9d9423f26ff512034d7208ac56f0d1d67ea96bbd2115c8349c086e4efe5bbf0b8fe415e7df5c20a79bea7fbc1f0355cd17","ssdeep":"768:HpocjiA+tgUwE4JwGODeoojRAxkgPHiednOCXJgVYDU2XB26:KNAIvwE4J/AeooWkWHieACXtU2c6","tlshash":"3a0301a166197f61d5a8c4b399c3362879124b943fe1436e1d631e203f870fadd3e624","first_seen":"2026-01-06T04:29:48.943888Z","last_seen":"2026-01-06T04:30:01.885536Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1767657499_3d32b2391741d015.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1767657499_3d32b2391741d015.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23723\r\nlast-modified: Mon, 05 Jan 2026 23:57:56 GMT\r\npriority: u=4,i=?0\r\netag: \"695c5004-5cab\"\r\nexpires: Wed, 06 Jan 2027 00:32:46 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 14210\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gh%2FGWlzyPd%2Fpzj9Qt3gmJOvFcQ9Veob7sJvAFMxU18%2BAXIVgr6PrmMuRxUKLaiG734VEDcSVhL%2BraOrQ4bfq7TVPVK5PXevq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1b8175691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23723,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 262x480, components 3","md5":"4f1fd7ef5851c4e2a83d84215fa7c01c","sha1":"aa97de949c70cb6aa806171c3821e725a95d6c52","sha256":"8b52265b5c8ac97ce23ddc57a2e41846eb5cabe7fcba2bd6ff7818051238bebb","sha512":"b3695e44244b6bc86e32bca9d2b2b3c615311d73ab14e7fc4a3b394f6585d6f4d3dc0a1b751e9ed146290b5a00f616b77b3156ef950a8f6a37c42f439399c836","ssdeep":"384:9wsYdwtF0zsWH4V3kM7skBlu6taLm0O3zxH49XlMLW5Bk49ROI6eZDCHIUqLgE6e:CLdpYWYV3FoMluSaLmxjxY9VMsBk4j6S","tlshash":"cab2d199206ac620e79697fc41e15b4fc33e30316af0909ef17a6be6c3655d0ad90bc6","first_seen":"2026-01-06T04:29:48.940871Z","last_seen":"2026-01-06T04:30:01.888354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1767286033_4e669362759d9cc1.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1767286033_4e669362759d9cc1.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17744\r\nlast-modified: Thu, 01 Jan 2026 16:46:48 GMT\r\npriority: u=4,i=?0\r\netag: \"6956a4f8-4550\"\r\nexpires: Fri, 01 Jan 2027 17:06:27 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 386589\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQS8aN1fX9ND5ydmUWxIBnWWDweW0O9lrqxIHobpRejVEl6RJUZfK39eC8KPIMAmk%2Bkc1AwFo7fuWmdmGsa7a%2FRP2U0pIUgd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1c8205691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17744,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 262x480, components 3","md5":"da05d65385f4bf04214b99bcd8f1ecb2","sha1":"4573a745cf1ef4008b4ac1e2fb78b066f1165133","sha256":"34487085cec78f198e372a19dbb0647340cdb48377b3c16e0c68c912488e099d","sha512":"6b8cc2db4c56281d92a90deff2d285fe811a9616cf36c917705e5fe68df0617ff290538d924cefa92997d1cc017b0acce83636fa0b250e6a7589233fe2512dc9","ssdeep":"384:9wRDVwTpzDGBJ+YSx8o7zVYUWMVvp7cbzPUA6k+tbTHqqB4GobXph:C0TtDGGYSx8a1XVROwltbTKqeGoj","tlshash":"5e82d0b26746df27f1f8b330e0913b6293976b44af423311b49112ec57c4ccca61069d","first_seen":"2026-01-06T04:29:48.92822Z","last_seen":"2026-01-06T04:30:01.890675Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/assets/bulma_v1.0.4.min.css","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /assets/bulma_v1.0.4.min.css HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 27 Dec 2025 21:12:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69504bc2-a582b\"\r\nexpires: Tue, 29 Dec 2026 14:23:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 655565\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2F5JueRR%2Fzm5vQu9Tj%2FqErNuMZ63Ffqx5VaA3ZHMAiKsPDOl1Upq5s1UgjCl5D%2BbonWYN6dM8qjXyjqQKaHWE8XBRLugmeZE\"}]}\r\ncf-ray: 9b9879b1b8145691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":677931,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65518)","md5":"0e2e7a8607809f97d48158808dd7bb99","sha1":"bc473708a37a026274754b0e9fb73a82f6eb0928","sha256":"67fa26df1ca9e95d8f2adc7c04fa1b15fa3d24257470ebc10cc68b9aab914bee","sha512":"ca1d91134c1909565ecac1a2a93c034cefdd29e9426d2f5b3f62fde14bce16d97f14a5dc3408dedd8da8060fd9319dcb4b5b22718938758546b437b1ef97efbc","ssdeep":"3072:lHNcTpAve5yuj6/cOsOyTmvk07iJ2cSyjk2apsxK:lHNbuj6/cOsOyTmvkiiJ2Byjk2apsxK","tlshash":"a2e4ca99e800f9352d223769431c67ec9a393450fe5ea739b1c1d2e096c3bf751eb628","first_seen":"2025-04-27T15:28:37.121477Z","last_seen":"2026-04-08T15:38:30.704161Z","times_seen":81,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1767382420_84c45b8ef0d66bba.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1767382420_84c45b8ef0d66bba.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25032\r\nlast-modified: Fri, 02 Jan 2026 19:33:26 GMT\r\npriority: u=4,i=?0\r\netag: \"69581d86-61c8\"\r\nexpires: Sat, 02 Jan 2027 21:05:37 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 285839\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E2RGMcnEmwd3IK%2FJMyz%2B5pNZEaaRrWdcTcWLfzDEOFXrl6pRftY5lL5hjQXitkz7lxcRLqHVlNLP%2F4ZT5c3StqMSX%2F0QWhda\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1c81d5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25032,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x480, components 3","md5":"943ccb94642ba1eb01b7060f0a117399","sha1":"695e452c0a694ac494655808dd9ed381c7847b5c","sha256":"1c2ed93ad66b36cff87ff7b96d959ea7524fa9fdb5a8ba7762f5800bde688cca","sha512":"1f86dc30aa2e2c46a6e06c2a849a68fd92463bcb0249afbca7152fd5b069a776638521f64a221e66c2c9e82c0d7e2889b31ec2affa9d59f4e131981293a4e20c","ssdeep":"768:CkS9hnfuv7cpteCYy+2D3Vz2O8sVXjEkv/f/:cfc7MteCViO82Rv/H","tlshash":"b2b2e1e9c2b84288daae2f783817d7d4a355d57fa909760c02025097ae25bc7db48c1a","first_seen":"2026-01-06T04:29:48.963703Z","last_seen":"2026-01-06T04:30:01.894287Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_17411.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_17411.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 113549\r\nlast-modified: Tue, 09 Dec 2025 19:48:19 GMT\r\npriority: u=4,i=?0\r\netag: \"69387d03-1bb8d\"\r\nexpires: Tue, 29 Dec 2026 14:23:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=udEKACaGELBkbxRU7KR4wxo94HcWGCGG0vottUrFlIlG6OR2ELyO6tFKj9lplDnwgk%2F%2FlM0L0lgsiAajLtU4cqMbc0kDXCnJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1e8325691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113549,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.54.100\", baseline, precision 8, 1080x1920, components 3","md5":"a5f7ead8178306f2f1ff6799d13be7ea","sha1":"286ea0f07dd43ba430bf525e205de34b36a15179","sha256":"8d19a28d5cf28c995eee868de13ab1a7602f800db9b81cf35efd91f84b224b30","sha512":"6d1bcf038775ef7ad24c6b866bdba1a0bef5721bda1d3dd32000e35e30da3495ba63a9cf970b8f4ee2b25f238fe131b3e088a0ebcce6e6d5d798d0d74292d0e4","ssdeep":"1536:KeDkykYmgLmxqJyfrZHmAJKcQWvXNqgPnOR7u2hjRwj9gTUTsArecXsTH9i6HwRz:zTUVt9b6x3gT3rd8RHHwRpUcNZ","tlshash":"afb3020b96909f73ec7db2b0bec729942b0f4f76162b5a6b49188e11c585324f406f5e","first_seen":"2026-01-06T04:29:48.920932Z","last_seen":"2026-01-06T04:30:01.895995Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-L827MYJR9N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-L827MYJR9N HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 06 Jan 2026 04:29:37 GMT\r\nexpires: Tue, 06 Jan 2026 04:29:37 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 137827\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":408232,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"84a9996948db8ad779228f4a08cf87e2","sha1":"beafcd256bca20817ec6493680fa7bcd2ab03f6c","sha256":"39ff916845ba23986c1f3fa2ffee9277dc1e01d7a4964c2a06ab81c4115bc225","sha512":"08fe31f403b1bd1aeb0af931b5cb3a6a58b98c825aa47052d4b12973ec50213feef0f2015b82cd0f6b9e9fa98bf4439b8900c0960a6dca02e86379f224b73969","ssdeep":"6144:+wsC6+1BIiU6IVlmCOt28Mk9TURKIKivW9E/rn7b:Lt5Bw6I7xRK6WK","tlshash":"5694198e73c674269396f078503f118ba57b29e2b44cc895f189cce42e74a9a4277f7c","first_seen":"2026-01-06T04:29:48.920025Z","last_seen":"2026-01-06T04:30:01.898005Z","times_seen":2,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":107,"dns":1,"connect":15,"send":0,"wait":47,"receive":45,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1766937576_c2b8600f895650f8.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1766937576_c2b8600f895650f8.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22774\r\nlast-modified: Sun, 28 Dec 2025 15:59:00 GMT\r\npriority: u=4,i=?0\r\netag: \"695153c4-58f6\"\r\nexpires: Tue, 29 Dec 2026 14:23:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655565\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYMuExW52ShIKAWP8F%2Fng64pqQWIHvdhdBH1HshiRLlMgDVvqR%2FFXg1HLzZSxuc3gY6v%2BXpHO3WPJQW0EalxqG8V1QwIXMrJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1d8225691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22774,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 262x480, components 3","md5":"32a5d207b0e8cd18748fee4e7ec49550","sha1":"610d504a40c2b308b65fd09389e1357a2058af9e","sha256":"20e3cb93effc46f186f26ecda47929895230a2c50587a8dd391f5d81ed2171f2","sha512":"72480aa05f74cdcda3963670472c9128b406636ad4c3cfd558f67ef257c1faf114e8a52263aa758cc1ec2c3b1d222899510dd408be7f3363efe8249fb6236989","ssdeep":"384:9wV3FWCJ52QiCAoHBGW+fmDT8aNcvvU6jsEiu4mjByx9U5I/GWeIjuh0R7KPd:CV3FdJ0QVonfmDcRjouhVyx9ktWeI6ei","tlshash":"4ea2e0e65fa4c77eea111838414a1d6c7f7c2a2372efcd4ca848fe2d59e610ad90021f","first_seen":"2026-01-06T04:29:48.948243Z","last_seen":"2026-01-06T04:30:01.899442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_17454.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_17454.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36034\r\nlast-modified: Thu, 18 Dec 2025 00:39:20 GMT\r\npriority: u=4,i=?0\r\netag: \"69434d38-8cc2\"\r\nexpires: Tue, 29 Dec 2026 14:23:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnYfiWSHpPW4t3nFLgGr1cEPbXw3bSljBCRFKCtTKrsi8%2BqPr10%2By8beT963OXbZRIBQOGpn56Eyh%2F2Mhfv3gJdIc%2BCiS%2BPq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1d82a5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36034,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.54.100\", baseline, precision 8, 480x854, components 3","md5":"dc8c67454e1196d918860ebdb0f4406b","sha1":"e9895f6262ab7342ea9ae116ff1cceae0af06dca","sha256":"196b379cb522daea97151511e1d1bcae18fde777b715f0caf8aeebfd27076d36","sha512":"caec92036ddbe01b0df20a5fcbda7b459d851d324b8eaef8b7d2a5427e6a307d0c6557e797201394f3d060efcb7751bb1753d26143c810c7408aab6b9f80310b","ssdeep":"768:0L++cmbhuP7YEJG/7i+RslyCV5CMwiLfe8W0ZxDQ:zohnnjxRsjV5S6eCQ","tlshash":"0cf2f1036928a98ac6ec22329c6f68f02612cde6f9d2d7a495147714d370af37d8f74c","first_seen":"2026-01-06T04:29:48.932464Z","last_seen":"2026-01-06T04:30:01.900972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_17422.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_17422.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32453\r\nlast-modified: Thu, 11 Dec 2025 16:08:19 GMT\r\npriority: u=4,i=?0\r\netag: \"693aec73-7ec5\"\r\nexpires: Tue, 29 Dec 2026 14:23:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJ%2Bor4Eexg6QcGDlc3E5syU%2B91sEhlYBalmG7HZd6ddgbSBVK5c3J%2BWpzJVPfNiX2wdyz5XV2OTLR5KIUHSH2pcMj2kscj62\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1e82e5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32453,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.54.100\", baseline, precision 8, 480x848, components 3","md5":"49658db5bc446d49024fb40e2eacf025","sha1":"d8afb4e1fb397e3ea3b6e4616e544d201c44096c","sha256":"f7d681197f196683c592bccac7318e4c1614aa75b8dcb98374b776da268ffe7d","sha512":"a44624d471cf729d7e3f6a5552d8ad3382b309bcece1fd8ce948f08767f5df97769ccb00af00c67554e7b621b866a0879b1fc623d88218207725074449440eec","ssdeep":"768:aKq5N3HVrZkL2N7vtRAx06+xqeWidP/Eb2mH2:MnkL2Nr36+xqeW0nEbpH2","tlshash":"d7e2f2b06c8ab2e241bba07814f3b4c255a7f57ed0bd1cac5ed5f41ad744a03783d25a","first_seen":"2026-01-06T04:29:48.951104Z","last_seen":"2026-01-06T04:30:01.902415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_17419.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_17419.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37570\r\nlast-modified: Thu, 11 Dec 2025 16:07:58 GMT\r\npriority: u=4,i=?0\r\netag: \"693aec5e-92c2\"\r\nexpires: Tue, 29 Dec 2026 14:23:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ObSX0WIgGQCSGbONeMrEWdAFkFjvAGvaFCCkm0jdl%2Ba1l6bNGPDsKjTSg9Rmsnmnok9CnSFF1g2il2HBRZeON54iwrd7kWm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1e8335691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37570,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.54.100\", baseline, precision 8, 464x848, components 3","md5":"a2be7e4f5f26bb32bdbd4b5df5802e3e","sha1":"9afb987e70f989b5115f4a43c8f7b44aef033158","sha256":"bd6c98907c35933c20cd125273211de2d33558dab578edce0094710ef04ba538","sha512":"b5883d54883e4ec73a3d8ce41130b709467912df69277bcec42560afbc8baa532a9afbbb462514099462efce99b5f9729a3d360452afd849c3821628f957ffc2","ssdeep":"768:Wp6+oDF1+QvGSeM7ywCUAr2XREMi/6snJk2Oz8SXRJex9/CrvAv1WX:WYIw1CHr2BEVO2IXRUNC0v16","tlshash":"d5f2f174708195e8e79ca9fda006013841a08951ac520ed47abbeb57feebd7bd0fec41","first_seen":"2026-01-06T04:29:48.935299Z","last_seen":"2026-01-06T04:30:01.903909Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/assets/rating.gif","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /assets/rating.gif HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:37 GMT\r\ncontent-type: image/gif\r\ncontent-length: 745\r\nlast-modified: Sat, 27 Dec 2025 21:12:34 GMT\r\npriority: u=4,i=?0\r\netag: \"69504bc2-2e9\"\r\nexpires: Tue, 29 Dec 2026 14:23:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655565\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zPO8lgcG5ut66zn5CuRa0SLcmwxGjJ0zr9j7ZgXkSRko2rfXdQo4TVrtZY8fT3fESKHEfAAYKzA5ask8%2BMDRpnOLfh3a%2FtQ8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b4d8355691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":745,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 31","md5":"0852d285a79d04f03211161a15b098db","sha1":"5a38bea21f4837cd7955bac7b50a61eadd96f23d","sha256":"345048ae5248afb4e9977dd80ba624e8c7ed13b46f334a297176015733138a61","sha512":"bca9f68c763373de640bef841bf88af551ec614f31c776a8b7e2e42f9d2b65e23460e7663198f733cb202ac283d822315dbea61fed36555bc727f1be9e812296","ssdeep":"","tlshash":"6901c8a2b3bfc0a6cbc091bd37c4150707d0f0442e07e8dc387480ade126105352314d","first_seen":"2023-05-21T11:16:15Z","last_seen":"2026-04-03T12:51:22.426416Z","times_seen":158,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01Q0U7DMAz8FX6gke3EsbN3XkGaxAeEruWFDYlOqEX+eJx0DHKKfLr4zlYIKA+AA/ADxQOVQxQrGAqERAE52dPz0RLaeq7vdaNwma6GpWRVyxKB0RCUciFjBWDIxqAmUaNoNkRiLRzVElg0cBDHlDoTsMeXY7+eElDEs8x5G2kETTUkhRWBmmWihJzlRHPM+SQz0wRaakWv9bU2A9wWDev23Yc4AkRmf6NfwTG01ogpki/jB6zLddkuo9m9jfNe+u7UAprP/gX9Qe5sH7WEc31bPr/C+HF26eZC7KULO8EJpFAWTdnh9DTKPIl/KRet8AMjzpm4oQEAAA==\u0026cb=e2e_695c8fb17b0e06.98552662","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01Q0U7DMAz8FX6gke3EsbN3XkGaxAeEruWFDYlOqEX+eJx0DHKKfLr4zlYIKA+AA/ADxQOVQxQrGAqERAE52dPz0RLaeq7vdaNwma6GpWRVyxKB0RCUciFjBWDIxqAmUaNoNkRiLRzVElg0cBDHlDoTsMeXY7+eElDEs8x5G2kETTUkhRWBmmWihJzlRHPM+SQz0wRaakWv9bU2A9wWDev23Yc4AkRmf6NfwTG01ogpki/jB6zLddkuo9m9jfNe+u7UAprP/gX9Qe5sH7WEc31bPr/C+HF26eZC7KULO8EJpFAWTdnh9DTKPIl/KRet8AMjzpm4oQEAAA==\u0026cb=e2e_695c8fb17b0e06.98552662 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nOrigin: https://xmalay.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __uvt=s%3A32%3A%22b224fb4824f8f835e8fe91faa5f2d4f8%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 06 Jan 2026 04:29:37 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://xmalay.xyz\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T02:38:17.241927Z","times_seen":13523349,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmalay2.net/","fqdn":"xmalay2.net","domain":"xmalay2.net","tld":"net"},"ip":{"addr":"172.67.159.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-06T04:29:36.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay2.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 11:42:56 GMT","end":"Sun, 15 Mar 2026 12:41:33 GMT"},"fingerprint":{"sha1":"B0:60:17:86:D4:1E:CA:8D:42:30:8D:1C:F2:C8:C8:92:AE:00:C5:0B","sha256":"C4:7B:68:9B:EC:1C:05:71:3F:DF:89:22:A7:E1:EA:A3:50:70:83:41:62:E4:65:86:B0:69:1A:1C:9F:F2:A0:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xmalay2.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-length: 0\r\nlocation: https://xmalay.xyz/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gl1YxhI50ikWBiRTeEBxknk3biK%2BdJhClZTnt4LQKdDdJHpj1NYhIuPuR%2BgoYsrCqHTxRZHq44Em0O6ogDnzvXQv1ukj4PQnYau8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b9879ae480c0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132447,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T02:38:17.241927Z","times_seen":13523349,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":2,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-06T04:29:36.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: user_session=8cbt5njrrokufncpro9mi6oe7k; path=/; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncontent-security-policy: frame-ancestors 'self'\r\ncache-control: public, max-age=7200\r\nx-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=evx%2F81JtVi7tUHcfsnmAG5IeppqtWSzsdol6LXfhwSOGmX1nosncod1FsNhNCgR2zYwGCoJ%2Bc1GWTlcjV9%2BL8DCkxT9w35H8\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b9879ae69615695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132447,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"87c3581beece40d76a7b2f4bf038ae7b","sha1":"17b98ad57589ca43795a790e03cacc86dc2359e0","sha256":"d216954acf4e0a7d7587914ef24e9b72eb733324888db464722e1e8c7f20f68d","sha512":"866d5cfba426c1830c3b42553371a3f491b742f2fec5235804b62f0bd55e995a0788b3bfcc44587dfaea359802b72c45d8a489ff5ef34332e77019fa493286c2","ssdeep":"3072:YXsXQ3laXfX9ubjcfqabpl8lBXCYdRwSyGJW5Xyl/J:YZaXfX9ubjcfqabpl8lBXCYdRwSyGJWE","tlshash":"b0d3e76aa4f31476412390ea77f71748bb669087d94ac8193adc07c58fc2f969433bec","first_seen":"2026-01-06T04:29:48.946039Z","last_seen":"2026-01-06T04:30:01.906436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":348,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1767384221_9c88f9470c8e75e3.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1767384221_9c88f9470c8e75e3.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25076\r\nlast-modified: Fri, 02 Jan 2026 20:03:15 GMT\r\npriority: u=4,i=?0\r\netag: \"69582483-61f4\"\r\nexpires: Sat, 02 Jan 2027 21:05:37 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 285839\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jt0hkyAcVx1OjY%2Fs8ZmgHX%2FQg9dXZb2THBB79Sj8mq3%2BboveKgLZt1Qrx4tm0gR7jkIRjGBR3UYTlF389ee4jXvymoVq5qgh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1c81a5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25076,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 262x480, components 3","md5":"ce02896c7031e47f44ae2f1f6446d7e1","sha1":"c559854feb788e962045470dc313babae52da361","sha256":"103db0263e80c0dc21402a03a7b715e7dfca27b2aa43ec7b7ebbbc60d5828404","sha512":"cd646dd936ebe169ed75adb6af6bedc7e9dc11432901c37d0564a6f774db34144f9507e84671ed5cd60d9247a5a6aeedc9c2df9fbfb546c685681dae403243fd","ssdeep":"384:9wYachB/U7utBvBy7UWBTkHYNnfoq6MAENkZeuIel8BgXInLCTECLp/X61J/KD5X:CYachpUqtBvBLSnNnD6a+Z8Dq0/KNhh7","tlshash":"8cb2e032951e2a78dfa4ec7ee631b351d726f2a7590c0e04cc5628ff5e0697a3e4089d","first_seen":"2026-01-06T04:29:48.922789Z","last_seen":"2026-01-06T04:30:01.907791Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1767382419_5df0e07e790a0fbb.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1767382419_5df0e07e790a0fbb.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25960\r\nlast-modified: Fri, 02 Jan 2026 19:33:20 GMT\r\npriority: u=4,i=?0\r\netag: \"69581d80-6568\"\r\nexpires: Sat, 02 Jan 2027 21:05:37 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 285839\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LHBzIt04sPHuXXfABb%2BxtFrApsDuJv3GpBGzdqOj5YjljDqzi3C29rMITBDGjEOt8d9mK4Xq4BYZsh7NlQWwgVKI%2FMXZBRzu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1c81f5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25960,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x480, components 3","md5":"aa3cd58485a7540563c71f7239001698","sha1":"efb1e2b9ac9e3c055b416bfd718d88ffe1f291ec","sha256":"fe6350a6645736b57cfa44a30b9d44c8cf8714dfbf97c041df92dc3b2f581925","sha512":"0ab4d522a6129eb9458c37d74fbda539afef25795d64591b60e36fc6f2dac6b7c984016dce8fea21abfd4661c6941c8ed368e1766330da396f8b6030975d98d8","ssdeep":"384:9wqEePo5ZTmMR7vBuQulOB9cXf0wl5oCBUaLEkMezW/Rvm5:C3D5ZT5XyOGxliCBUmmpO5","tlshash":"7ac2e1747771c202fa66813987e683a2fa59cef14c6c9523864051c5a375ae73fe38b0","first_seen":"2026-01-06T04:29:48.941829Z","last_seen":"2026-01-06T04:30:01.90899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1767286030_85526f7ac562295a.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1767286030_85526f7ac562295a.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23214\r\nlast-modified: Thu, 01 Jan 2026 16:44:27 GMT\r\npriority: u=4,i=?0\r\netag: \"6956a46b-5aae\"\r\nexpires: Fri, 01 Jan 2027 17:06:27 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 386589\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IGSyCSCxCeT%2F1pyhqS6D9UuR3oNif4TRJgTYOw8W153Xw73yFKJ2wRAmW4I%2Fw0uN%2BYcnX5oSUP%2Bq7jO7H6SLq%2F0HxVwygABS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1d8235691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23214,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x480, components 3","md5":"bbf6277d70954c39b4fdaf686ae48611","sha1":"2bbf1af33022940f68076672ec4fdf788ee29bde","sha256":"17104f2c0d79bf3c2c567229c9fc61293b35bd8c92036787b9ad4f7dbc347d06","sha512":"89f4188c8e842f91b3794d506bf401ab4613e96bf0f81d686a3e2800447107c93fe11155608ad55fe2b8c97e2516ada6dca0264001edcd43bc02b54b0c4aa553","ssdeep":"384:9wN5DxiWgaA+XB68vqcASfHFxjC4Agc5f+Kfk+5K2ii0WskJmFJ7d/AFzSr:CN5DcWLAaB6oqzSvFxegc52KfkUKS0AS","tlshash":"97a2e1f2e37b2b99fd897d30e8d799371e48b59a4aa8d93ec13d0ac31d910318d81857","first_seen":"2026-01-06T04:29:48.929129Z","last_seen":"2026-01-06T04:30:01.910293Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay2.net/assets/rating.gif","fqdn":"xmalay2.net","domain":"xmalay2.net","tld":"net"},"ip":{"addr":"104.21.58.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay2.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 11:42:56 GMT","end":"Sun, 15 Mar 2026 12:41:33 GMT"},"fingerprint":{"sha1":"B0:60:17:86:D4:1E:CA:8D:42:30:8D:1C:F2:C8:C8:92:AE:00:C5:0B","sha256":"C4:7B:68:9B:EC:1C:05:71:3F:DF:89:22:A7:E1:EA:A3:50:70:83:41:62:E4:65:86:B0:69:1A:1C:9F:F2:A0:4B"}}},"request":{"raw":"GET /assets/rating.gif HTTP/1.1\r\nHost: xmalay2.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 06 Jan 2026 04:29:37 GMT\r\ncontent-length: 0\r\nlocation: https://xmalay.xyz/assets/rating.gif\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mlGb5SC2rOo0gTMY3WxKHmmkDm4Q%2FaFbTaM5oO2zFQvNaQ0XTG0qAbkizUGLnnLvLaKilwLfHlNemXui2myRhhIZQQVqhEhJ3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b9879b30ae756a8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":745,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T02:38:17.241927Z","times_seen":13523349,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":4,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_17455.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_17455.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50000\r\nlast-modified: Thu, 18 Dec 2025 00:39:14 GMT\r\npriority: u=4,i=?0\r\netag: \"69434d32-c350\"\r\nexpires: Tue, 29 Dec 2026 14:23:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dwOPRhduDz%2BvdHl3MBJomgP%2FbiGFMs6ae6J4zmiiCLl%2FqVz34l%2BJxXQIkHsi2tsXjnUcvFNLgx%2FT7HWK3TawijrU1%2FkuJT7y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1d82b5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50000,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.54.100\", baseline, precision 8, 480x854, components 3","md5":"ed786380490b1a6790eefc958b29136e","sha1":"78b2e2c0a57e7e5760cc3a36d471435f5a57262e","sha256":"3b8a2e45c3c1a2f739eadf0449c92633eb13d0a3f4aff904e4bd53b7bb2f2d00","sha512":"c5efac2dea825fac1d8ec647fcd5ce789757923d37058809bdebc46eb64f99fa3f2356dca4cb69fa6e89dfd1f82b0036ca0795600081d6d8822f6d31b47406f0","ssdeep":"768:eYzx5oEo8tgj7qf7LlUP4g3S4iyJ08o2CFJ0DFsuBNNWTkLQERsFBkMrtBRq:eYtvo8+j2fX24g3aB77c9kTkgH7rw","tlshash":"fc2301eb2ce1d27de8e034fe999d712ddf0ac4a158e8ae70179c256452f0113fda849c","first_seen":"2026-01-06T04:29:48.961765Z","last_seen":"2026-01-06T04:30:01.91179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/2044342?zoneid=2044342\u0026jp=_clcyzxdzguugosehhzbivs\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=UbdZFYPD_WRacKmPllDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=siJLNUMaHR0cHM6Ly94bWFsYXkueHl6Lw\u0026afid=397321245377536\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1373\u0026rlp=%5B0%2C4%2C109%2C81%2C6356%2C4717%2C2239%2C4659%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 06:08:21 GMT","end":"Mon, 16 Mar 2026 06:08:20 GMT"},"fingerprint":{"sha1":"A6:8E:EE:BF:79:66:17:05:24:33:50:FB:D0:B7:31:78:BD:3E:CD:BE","sha256":"B7:CB:4F:13:8D:1E:42:88:F4:20:6C:4E:85:6F:86:9B:F0:A6:43:5E:73:8A:9A:89:8B:89:6A:82:8F:DF:B2:EB"}}},"request":{"raw":"GET /get/2044342?zoneid=2044342\u0026jp=_clcyzxdzguugosehhzbivs\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=UbdZFYPD_WRacKmPllDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=siJLNUMaHR0cHM6Ly94bWFsYXkueHl6Lw\u0026afid=397321245377536\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1373\u0026rlp=%5B0%2C4%2C109%2C81%2C6356%2C4717%2C2239%2C4659%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 06 Jan 2026 04:29:37 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Tue, 09 Feb 2027 04:29:37 GMT; Secure; SameSite=None\nPTS=zQIAgqFs0mlcj7GhYwE; Path=/; Expires=Tue, 09 Feb 2027 04:29:37 GMT; Secure; SameSite=None\nUID=26010523290e23e95570d44a559c6ac1671c; Path=/; Expires=Tue, 09 Feb 2027 04:29:37 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3523,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3523), with no line terminators","md5":"b64047b6e966ee4dd65259ac4bf1809b","sha1":"3d43f025d38f17c784aa794e18b42bd8d24f0f16","sha256":"c950a2099f897d148634768fb95c1bcec2a198bd28971b84d2f9729903ac9ebc","sha512":"685c63d604d7b3b5bacbe665ebd28af952569e3a56b7ddb91353bceeb729853d0000bf33261e989701ec1d56e6a0d690ef6a4f784d687dd8d66a35033a182cfe","ssdeep":"","tlshash":"a97184943895c7c47a81ac4ef7b9be892bdb28e6ce038e400165e15b3b7017caf91c06","first_seen":"2026-01-06T04:30:01.913353Z","last_seen":"2026-01-06T04:30:01.913353Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/assets/uploads/logo-1766872554.png","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /assets/uploads/logo-1766872554.png HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 31574\r\nlast-modified: Sat, 27 Dec 2025 21:55:54 GMT\r\npriority: u=4,i=?0\r\netag: \"695055ea-7b56\"\r\nexpires: Tue, 29 Dec 2026 14:23:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655565\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NVHWqkHoIrX8e6MLioxThdi1ib4YVmCfJhbRbQ2Dq%2FSAiqcrNsrBKRSuIs%2Fz0R5y6AcrigwdHL7EHUGGAUHVk6iMST%2Bv2uA8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1b8155691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31574,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1075 x 135, 8-bit/color RGBA, non-interlaced","md5":"f7c3ebf8bd8bf91d13d5a32fa60f11fd","sha1":"5024ff75250e61c1a03184f0e1f1e27fa05fd8ae","sha256":"91fe9b4464763d78393e57800999bd30504d34475015c8f88b5782b90908a2f6","sha512":"cacc2b89ea31d1a98c641f4a9d1495a135a1a90d6bc3e024141221b6ca9a5f9f953daaedda93f3558e41790e1fecd2f454b573c6187957c3964915f71f87310c","ssdeep":"768:Tr+EWM0UntiZmZIfhgoe5H/Csa7HkOxSQRM07hJtmLt:OE/0kQmZMhpF7EOMKx7hfmJ","tlshash":"2ae2f18843fcf05583660311eb8ade2ed81316151a9aeda8fe837cfe88e8390c5f01c5","first_seen":"2025-06-21T23:55:30.609866Z","last_seen":"2026-02-26T07:48:49.305808Z","times_seen":9,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1766937575_66dc17be99a1b36b.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1766937575_66dc17be99a1b36b.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24341\r\nlast-modified: Sun, 28 Dec 2025 15:58:53 GMT\r\npriority: u=4,i=?0\r\netag: \"695153bd-5f15\"\r\nexpires: Tue, 29 Dec 2026 14:23:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDzS%2BCiKCRadkVz2sLGAnM3UfC8QbGdNatnIBA3Vjje2ZIIc4IMuLCH79nrgzkIy%2FSLeLf7KAE8M5jG6co0bHh%2Fbo3vZiO2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1d8245691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 262x480, components 3","md5":"1b67cd144aef5ca16c920898d71b4934","sha1":"e534314aae10b315dd64f105f19431513e36d964","sha256":"b899b52d925bac1487aeabbf0ab930841d97136ea2a93847d9d2a29173b0f20a","sha512":"10a89efb0692bbf60dccf3416ed038f73d52e532fb8ce12c40f64d632120e9eb55c951371dffaa3ae125fc254e55ecb092204bb4b84abd7bc8f0c0dfda10318f","ssdeep":"384:9wnQnCCQJh7E30jUZp0GwyxQjeNYXu/5figmYgJbfApMFqn1tWjfrfIFeagY:CQnC6EjSpPHxYqf/1igw9f5FOWjrfiaY","tlshash":"d2b2f16118e960dff2602ff514760e51cfb4632496fc0c82c1626dcee6a1e23d34ce81","first_seen":"2026-01-06T04:29:48.933313Z","last_seen":"2026-01-06T04:30:01.915764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/a-big-round-ass.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/a-big-round-ass.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29633\r\nlast-modified: Sun, 21 Dec 2025 15:28:10 GMT\r\npriority: u=4,i=?0\r\netag: \"6948120a-73c1\"\r\nexpires: Tue, 29 Dec 2026 14:23:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UgUj2wSP%2FN8RKSn9kohWT7Ii4vKV3nQQG12P0Ten%2FT7nWR0bwpOE3oWaUVQpvy272xLo5jKHxyx9R%2B51%2F48yn74Gg1JVwJD2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1d8285691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29633,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x1792, components 3","md5":"2de9e3ad4c3f74e5b260129148d91109","sha1":"401953cbf8063c4e694536ddd8f40223d6a61806","sha256":"0fb1030eb9b6c5b7272b4c6069baef243f4a7dc2a25a8df035bf5f01ae5e8c77","sha512":"73bf26809ecd09643ba2154fcdd72792e55ff7dd0b0b800e31b04bd4e1e429a6de4b86ebe93b3587cbb8e916db7366c6aaef2bd784c1b1d982318e8ecf87966d","ssdeep":"768:CsDVS1+/RR9zbgW2psKxb02zjDu9BXJw7FPZYXPc:s1wjlgWsRxI2ABXi7xKk","tlshash":"add2e1236321eb90c0c867b7aacb4704373745e51f55c706698e897f8ecb78939b81a6","first_seen":"2026-01-06T04:29:48.916966Z","last_seen":"2026-01-06T04:30:01.91713Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xmalay.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 06 Jan 2026 04:29:37 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156496\r\ncf-ray: 9b9879b3dc3fb512-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"65692999-26350\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1458508\r\nexpires: Sun, 27 Dec 2026 04:29:37 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=p%2FPhoI9L4O4Eq%2B4afU17Hc9Yu%2B2kZ7%2FfuS%2FNl%2FBMq2km3irwkzsVh6%2B35MYLFQqD6J8XO1kSaLOp350r612IXXR0q4VtRQMPk%2BKvQcsiywcOforDa0YLQofySUHmbd9Vfbh%2Bdygx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-04-09T02:31:09.926672Z","times_seen":33668,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":19,"dns":1,"connect":0,"send":0,"wait":12,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1767657498_fb9d4a97080b79d6.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1767657498_fb9d4a97080b79d6.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23317\r\nlast-modified: Mon, 05 Jan 2026 23:57:49 GMT\r\npriority: u=4,i=?0\r\netag: \"695c4ffd-5b15\"\r\nexpires: Wed, 06 Jan 2027 00:32:46 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 14210\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ioeAeCa%2BcccvMyH%2Bc%2F0G282li8BrrfRpslu1wbEPVz%2FlJtDW2HKYLocPPsxgB%2BzdTxzZIAv3QNEnCk9eKDkeJAx7Cp3p4ZEv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1c8195691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23317,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x477, components 3","md5":"5870b37305b515c4d89f3bb9dcde1f0e","sha1":"11bf23f098982de0997346d1175df6092f8d4e08","sha256":"4294c3ac84bc5f1899ca0fae79c611f429d183538dfa9fc0b5c83c573f3c7d02","sha512":"9ebacc8558f1eda77a386367d72decabe1837307faff995cf9d5bf7d7d12ac1a244acde94700023cb45ba5feaf39aae0e846370430c6e7d2ea154fa4ba194be9","ssdeep":"384:9wxW6b/KaSU/xIs4aFVVJKGrocLbRwkkgiMI9HgbE+g8bgousyzgrcj76uR/Xo5d:C9CzuaGNbRwIioMPVmGHR4OAiiq6","tlshash":"03a2e154fbdd0841d1320f7c00ebadd4eee4d97d5691a30b5a88e7da8187523c932312","first_seen":"2026-01-06T04:29:48.945066Z","last_seen":"2026-01-06T04:30:01.919354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1767383643_5821839884034ac7.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1767383643_5821839884034ac7.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27184\r\nlast-modified: Fri, 02 Jan 2026 19:53:44 GMT\r\npriority: u=4,i=?0\r\netag: \"69582248-6a30\"\r\nexpires: Sat, 02 Jan 2027 21:05:37 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 285839\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wfqKcrHLuNc1BMbZkzbGERd0qBV543tB0ohyxsI6PYEhU9828g7G3FHadcD8IjCKJutB2iXm22anrPFamlsd33YmCW1K%2Fqi%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1c81c5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27184,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 262x480, components 3","md5":"cec5145b6d45960e922a2373af52c12d","sha1":"750363c0bab0c2b3035f248446219d4976b11868","sha256":"a0f4d1cda30bcfa4d818bde85cf398948aefdc12b80cdae05887f92cd0e7df16","sha512":"9a4b0145eb887c92e114f7a7a155fe685a84f7327fb3bfcb428045af37b74e43240a6ad4d8cc69b95a272f7dccf2ab31308280ecb698de0e78bc0ea3617ad166","ssdeep":"768:CfyeAhJsWK6C1BtjS1O0mlAtTYT/adsra:AFAhi6CBtr0mlGCe","tlshash":"a6c2d0a353dad5a9f4a4223c37299b11f0283772f2cb9b924d72727ccb8639cf145502","first_seen":"2026-01-06T04:29:48.92365Z","last_seen":"2026-01-06T04:30:01.921316Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1766874859_c8b14cb659fe2038.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1766874859_c8b14cb659fe2038.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16223\r\nlast-modified: Sat, 27 Dec 2025 22:33:58 GMT\r\npriority: u=4,i=?0\r\netag: \"69505ed6-3f5f\"\r\nexpires: Tue, 29 Dec 2026 14:23:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p30aUS%2BNmRMg9x7D0S%2B%2FzPQb2umcLtVxYZ3311aIhX9xhcaVO1WLWZPbAfHbcstGvr1dq%2FiUGfLUN%2FvZOC%2FJJNzawwjrQyZC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1d8265691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16223,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x480, components 3","md5":"5cb494d21e1be2751cca7c24b427142b","sha1":"08e170bfdd8f958f91362043ddfe2361f10e0dc5","sha256":"1c3e8413e43f67a0e28c44a91ec5fc0d2125b43de7d936495f645a361aa9f12c","sha512":"be41c64601cea3d5ad76f73683454a1c21880f4a7516d8759d90c26d8674c15bec794db62206dcb8979957e1dde0779e7367593a3dbd01c4f8956029a2e83eb5","ssdeep":"384:9wzEMwO1ovgBg92VUZoebVthtxZQ0UfVPsJg2599tncxV7gsZRclz:CzEMwjwVUmYthjZQ0KsJd9O/7ZcB","tlshash":"ea72d091e7d08f24f9785bb3a03b06e99f5ea8c417cf3e09d5d850d9ae235b818939c4","first_seen":"2026-01-06T04:29:48.950138Z","last_seen":"2026-01-06T04:30:01.922789Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_17423.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_17423.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16601\r\nlast-modified: Thu, 11 Dec 2025 16:08:25 GMT\r\npriority: u=4,i=?0\r\netag: \"693aec79-40d9\"\r\nexpires: Tue, 29 Dec 2026 14:23:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=blGQ0TZyMm5ZsHYNMDYxNmEWhAofBA7EOABqZV%2FUoIvm2zLB3jZMbK8IzZNVLVKwILr3nNvFkxEKcfq%2Fanzd%2FGHX7h3VIDFz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1e82d5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16601,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.54.100\", baseline, precision 8, 480x848, components 3","md5":"a05f0344d4b65556fbb3aaf0cbd24b68","sha1":"faf59a46fd473515e6563cfc440e7031aaf56b37","sha256":"b69181045728ec62250ef463c81a6e990e6e06adb4ac97576995b1b604989671","sha512":"eb4c8240f56f3ad760c2d6892b6ae968e1cf03ffa8927adae5cae1ebb743dd082ad9a9d2ab03673d0e6cd8dab33fbbadacf89f72124e4a7de690208e3da4121b","ssdeep":"384:zBgMwNobEZXIL8W2zgqCmUF6b6HpRJSIjZK:z6HobEZtPUhH6QPJSX","tlshash":"d772d0f417563d98f4f0aab073aa82491547caed9102921ebbd61bc044f92ddbece193","first_seen":"2026-01-06T04:29:48.927347Z","last_seen":"2026-01-06T04:30:01.92435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1767286032_062fcd2381625159.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1767286032_062fcd2381625159.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20195\r\nlast-modified: Thu, 01 Jan 2026 16:45:42 GMT\r\npriority: u=4,i=?0\r\netag: \"6956a4b6-4ee3\"\r\nexpires: Fri, 01 Jan 2027 17:06:27 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 386589\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8GdTTMq%2FTp3vRa8xaI2YirV5OyDnlq%2BuGu990S2X2VJEEx7jty%2FtYowV4JOX%2Fms8fKPjd%2BDJ%2F9zove350pPWdhiMd39SHPHd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1c8215691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20195,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 262x480, components 3","md5":"d306916139115f1154ed0c36514f62ec","sha1":"0b5b46e648624e7483f22eb55d6cbd7168a87bf9","sha256":"7975f6243b45cacbd49e4a3f78045495b986edc17f8839733f4d182683ca966e","sha512":"113a3960d043c8241f1e11b589bec95cadcb5e24f8b5e4178234344d047a2aa1d28034538f7272791e2f3ff720d03e49188685df15f11c55c4a6b45520c121e9","ssdeep":"384:9wyW6l3SqBivVRYC8uR7QvCZjPFOlEsg64P8O1kbm4psaUGCQ2fjJ25U:CyWCCZmu2EjEzgnP8O1kbBsaUGCfbJ1","tlshash":"b692d1272b49f250e4346cb230538fe58331761bfcca66e8a5815de2972bbe3525d230","first_seen":"2026-01-06T04:29:48.956287Z","last_seen":"2026-01-06T04:30:01.926268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_17420.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_17420.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32892\r\nlast-modified: Thu, 11 Dec 2025 16:08:05 GMT\r\npriority: u=4,i=?0\r\netag: \"693aec65-807c\"\r\nexpires: Wed, 30 Dec 2026 13:18:24 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 573072\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YILxcROIXoGmgaK8X%2BX2h6JRM2U3a9o7DHxc3Ef8iZyNoLHQgXko7e0Z8MKeGZjnIVTWb6IPH%2BMYhgLst1L%2FAWFQA5c7y9k8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1e8305691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32892,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.54.100\", baseline, precision 8, 464x848, components 3","md5":"0f209cda6c531b38af0b92cbc3716206","sha1":"370a73e390f2dee2e8d1d28ebc6de6eca343b779","sha256":"4a3da567b9955751819361bcf16268a2ff3986f8422c6efb927bb327ba5cf473","sha512":"9ac7b808c2985a2b6a5d48f7996a31626c0128b0cc1c8e85347bf6b3e9d9b2d2b9acbd7d34e278d19cfd4aa46503b8bb1a2a408bfe25e4e93bf0b31d3c60533f","ssdeep":"768:caJyaYVqq6g3sGiAOWEezjT/DAmfKQLduE+yFqSr8OtJp7s:co1YJD8gdLT7AtQfqSr8Apg","tlshash":"2ae2f10b9135db06d8ae2f5deb176ece8d5728b4ead466c43c199af342c7040ead0794","first_seen":"2026-01-06T04:29:48.934347Z","last_seen":"2026-01-06T04:30:01.927745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/assets/uploads/favicon-1766872559.png","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /assets/uploads/favicon-1766872559.png HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 27302\r\nlast-modified: Sat, 27 Dec 2025 21:55:59 GMT\r\npriority: u=6,i=?0\r\netag: \"695055ef-6aa6\"\r\nexpires: Tue, 29 Dec 2026 14:23:33 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9StNW8%2BUnj8tqaoDgQvC6XudmoMbUaOThwEJVIKdx4XYEs1UNmJqs7ns4W1brvs928M1Tq4hYX3PUnBF4RKuYRTOp5vlec9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b598395691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27302,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"1bed4288d14a6037e711374d4ddf64db","sha1":"057d77fbdb72947b5f8d5497ae3324525b2f58b9","sha256":"2e2266273bb31604b2e25ff4cd88c598e376d28225d433910bc5a4044abe1ed8","sha512":"e480e2a03482cbbf6794e386d22ab6e4c7442f9f5f5ff58729fbb45d408b33e2986886ddc6b73fbc2f6523d8aefb7c1e1c5b0d9d978c6dbbd65a081727d578fb","ssdeep":"384:izMfk4YUl192GFs2lsbEoWQMGiIFizlOEZrWKKP6rmo43/lRc6lJSWYR8HSdCsg:EANYUl32GLoWwbFizvDKkm53/A6SaHSM","tlshash":"7ec2e0c4b5c4cb51bbe8b5c4ef874114433da1695b0409bcb4a8d77275bea3288f899b","first_seen":"2025-06-21T23:55:30.634938Z","last_seen":"2026-02-26T07:48:49.283042Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 04:29:37 GMT\r\ncontent-type: application/javascript\r\netag: W/\"92eb331739d51c65226b5fdb07e\"\r\nexpires: Wed, 17 Dec 2025 13:24:25 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3mwAAAAwBuUwKEwH3IQAAAAwBJRPCMQG3fwAAAA\r\nx-77-nzt-ray: 2a494a15073dfaaed68f5c69ffee6809\r\nx-77-cache: HIT\r\nx-77-age: 155\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39040)","md5":"6bd931315f9ec922d23220a34a506421","sha1":"92eb331739d51c65226b5fdb07ec2d74924f200f","sha256":"28f33740f0a341c823243413c7780d92e7ae39254641174a86a4f51ac805b576","sha512":"26bb36ab577ba2b6486f482177e31992c81c79322070edc9d55af10d7ab8f3e1b9dccc89f7c925a47a68e464f522736c0e64d3d7e4acaa016745e0104bddb167","ssdeep":"3072:cWYjf7+28VOk2DG2cUMaElwnRlqI1fsBHisiEolY4o/CXMXpo:U+28VOk262lElwnRjfs4sXhpo","tlshash":"96045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-12-11T15:18:11.624048Z","last_seen":"2026-01-15T17:17:43.902034Z","times_seen":1441,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":18,"dns":35,"connect":1,"send":0,"wait":1,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1766874863_a062621b308ecbff.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1766874863_a062621b308ecbff.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15624\r\nlast-modified: Sat, 27 Dec 2025 22:34:00 GMT\r\npriority: u=4,i=?0\r\netag: \"69505ed8-3d08\"\r\nexpires: Tue, 29 Dec 2026 14:23:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UI5P06cm4bgbKvBbvay1Cs0t18E2TAuo1MdwUssAhOhZ3XGW3834nzyKz28i8IIm63goWbVwEXFt%2B%2BApCAMWIxRsXija0wbd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1d8255691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15624,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x480, components 3","md5":"9f145463319b60308539c61be0817e03","sha1":"8e811743535a00e3a3c6b601582278cdd4a7a683","sha256":"b739bb88e519bff398280076cc27a883e4f542eab538630866b54e3f4e0283e2","sha512":"75ea31d05e65fc46e528870591346140bfc411d96d36ffd671619ed891aee5d50db1e1412f39eba4451e6e0bba4a30c6b03b292adb14f768c078377786054696","ssdeep":"384:9w+PQ6uov+eKV+KL3eB1sxJDwv/wSLOG3yNonzbm:Cw8wErefsHKwsuQbm","tlshash":"4962d07023a58960cdb51436e0e9a3737296ee2e475a6d980cf150c18acdbc1dea7b70","first_seen":"2026-01-06T04:29:48.957243Z","last_seen":"2026-01-06T04:30:01.930537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/best-pussy-gf-baddie.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/best-pussy-gf-baddie.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58614\r\nlast-modified: Sun, 21 Dec 2025 15:30:44 GMT\r\npriority: u=4,i=?0\r\netag: \"694812a4-e4f6\"\r\nexpires: Tue, 29 Dec 2026 14:23:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mtPzDSffip8Mv6fRcoZpJdFhdVNwcDbwF8Qy4sa4NOL55JTS5uOnmtJF3izTWXkVoTfAaCLqNKYcVPCIPqwbSAMRycKU2kY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1d8295691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58614,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 928x1696, components 3","md5":"d871f05f00cab716a0100ae3d841a1fb","sha1":"a498931095028db3206be1416f3da6005d907315","sha256":"e67c171f3e10ebeb0da350b54353bb929bf8da9760d3f0d40bd7da6656e4cb4d","sha512":"1d7a53ee84910dfb6070ecbd33d4fd8c6b97c4c8baa80673ee34c33a337154b5f58cb4c9b0677b8fa14cb2e09bebd15db1e1417b3ae8da3300758e02dc3e9cdc","ssdeep":"1536:0XJh2ULIZ0lHkgBFARZdrBqtP+ttw+5MaDFATWlLHsFlteOi4v7:0XJEVZKHhFARZdFqtGtNWaBATWlLQltl","tlshash":"3643f16b9b5f313fd92e31f2426f6b1822e31fb2e7df8912710c85b655383911daa110","first_seen":"2026-01-06T04:29:48.938995Z","last_seen":"2026-01-06T04:30:01.931756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/api/views/?slugs=hot-baddie-so-pretty-pussy-3%2Chot-baddie-so-pretty-pussy-2%2Chot-baddie-so-pretty-pussy%2Cmy-big-ass-gff%2Creally-cute-gf-so-good-3%2Creally-cute-gf-so-good-2%2Creally-cute-gf-so-good%2Clucky-delivery-guy-3%2Clucky-delivery-guy-2%2Clucky-delivery-guy%2Ctalent-kira-pamer-body-yang-mulus-3%2Ctalent-kira-pamer-body-yang-mulus-2%2Ctalent-kira-pamer-body-yang-mulus%2Cbig-boobs-cravings-2%2Cbig-boobs-cravings%2Cvaraaa-hijab-t0c1l-3%2Cvaraaa-hijab-t0c1l-2%2Cvaraaa-hijab-t0c1l%2Ca-big-round-ass%2Cbest-pussy-gf-baddie%2Cone-of-the-best-pussy-creator-baddie%2Cone-of-the-best-pussy-creator-baddie-2%2Chot-tiktok-baddie-7%2Chot-tiktok-baddie-6%2Chot-tiktok-baddie-5%2Chot-tiktok-baddie-4%2Chot-tiktok-baddie-3%2Chot-tiktok-baddie-2%2Chot-tiktok-baddie%2Chairy-but-very-yummy","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /api/views/?slugs=hot-baddie-so-pretty-pussy-3%2Chot-baddie-so-pretty-pussy-2%2Chot-baddie-so-pretty-pussy%2Cmy-big-ass-gff%2Creally-cute-gf-so-good-3%2Creally-cute-gf-so-good-2%2Creally-cute-gf-so-good%2Clucky-delivery-guy-3%2Clucky-delivery-guy-2%2Clucky-delivery-guy%2Ctalent-kira-pamer-body-yang-mulus-3%2Ctalent-kira-pamer-body-yang-mulus-2%2Ctalent-kira-pamer-body-yang-mulus%2Cbig-boobs-cravings-2%2Cbig-boobs-cravings%2Cvaraaa-hijab-t0c1l-3%2Cvaraaa-hijab-t0c1l-2%2Cvaraaa-hijab-t0c1l%2Ca-big-round-ass%2Cbest-pussy-gf-baddie%2Cone-of-the-best-pussy-creator-baddie%2Cone-of-the-best-pussy-creator-baddie-2%2Chot-tiktok-baddie-7%2Chot-tiktok-baddie-6%2Chot-tiktok-baddie-5%2Chot-tiktok-baddie-4%2Chot-tiktok-baddie-3%2Chot-tiktok-baddie-2%2Chot-tiktok-baddie%2Chairy-but-very-yummy HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nCache-Control: no-cache\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:37 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: user_session=cu83kvqb8tr4ga17larte4gtlq; path=/; HttpOnly; SameSite=Lax\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-cache-status: BYPASS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aaDg3TVG6tji%2FYIkeKtSXecHdm%2FToyYGYvyIcUlEI13nn9WEJ8fZC3Y13C13LTLV6fksut5ChLS1HsNEUa8K6xYmMUJIrrsK\"}]}\r\ncf-ray: 9b9879b6f83d5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":947,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a65d57fa389936eebf8cc90df9b21525","sha1":"8c5e65d1b1bdf3fa21ca9ac2f0174d08a1bb3bc2","sha256":"053d95d3f57129115fd102e53166514acd3dc925b1095e04fc6f5b00c2b07189","sha512":"5d1162f066660e616dbe3e69c3f0e59773e9e897fa98936ddb9a28e07d5ab5013f14da3942b86fd5eeb4dcd57bc2832adbb8b2457d287200d0225b0b19d622f0","ssdeep":"","tlshash":"3b11bd667e100b64905ef720ae2e3148c7a81482d5639a578c15f39fddc5a4c3213df7","first_seen":"2026-01-06T04:30:01.933387Z","last_seen":"2026-01-06T04:30:01.933387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1767382418_1f15cf89904d016a.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1767382418_1f15cf89904d016a.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24247\r\nlast-modified: Fri, 02 Jan 2026 19:32:53 GMT\r\npriority: u=4,i=?0\r\netag: \"69581d65-5eb7\"\r\nexpires: Sat, 02 Jan 2027 21:05:37 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 285839\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5FTnMEkeuva%2FBkzYCZdFeWxtNUv82ae9CvM7WWn8JhrCaOW4nvSObnPfpB%2B6gq7657nsMwSTVwSUicztffHIoYdm2jJ0DUxe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1c81e5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24247,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x480, components 3","md5":"6cab4c152fd858e6a54df57126ddb9b0","sha1":"5ecc153d594ae9a1d21cf291350035f93638b441","sha256":"498782567a5c7e64aba0dcc226e3b4f93ea3294d1f318609799895c9b9c2ba7c","sha512":"8a3d5ca82f0f9a7e6dde4f5bc7497d4c8c45c29dc7ba0a9f71a6e3080c80cc11447366172979f074f68c0ab30bca46b6f5dcd24391c4a367e8c72bf8d2166833","ssdeep":"384:9wh2wHfv+N0UryulenvSw6gEBGPSOXie8Io1AXkmyHBdBFbzPthj8:ChZ/AtA6gsGKUietyAXkxHBdBtzDQ","tlshash":"c4b2e0266bdc24bcf2735675c1dab3553eebe64a98127abd4c0210d160a4afbcdc1e43","first_seen":"2026-01-06T04:29:48.911283Z","last_seen":"2026-01-06T04:30:01.935011Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-ray: 9b9879b1ed7c23eb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1726471\r\nexpires: Sun, 27 Dec 2026 04:29:36 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ozKf059cEblHADs%2BK47WozLqdQrVWupEJrilaKWhVkWtMAz0kYrAR1kUq%2FfqJLIzrXqp7fZCCGsXNXOjyKrfonIXppUIXYZlIJKq5j28EebI3AGbdwaYQEXH8OunOPjLqKnWJOCN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-04-09T02:01:59.621646Z","times_seen":22484,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":2,"dns":1,"connect":1,"send":0,"wait":13,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1767384218_6953ad92a16a477c.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1767384218_6953ad92a16a477c.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22947\r\nlast-modified: Fri, 02 Jan 2026 20:03:11 GMT\r\npriority: u=4,i=?0\r\netag: \"6958247f-59a3\"\r\nexpires: Sat, 02 Jan 2027 21:05:37 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 285839\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sscGaphnkTM5UOnmXFjLZd3H5Gw8wbvAGbndUlF0mtDzXJWVCFeSvHEG2lbgFSxHvnGcTieNFsiWbXHmiaUGn0wrWi%2F8%2Fu8Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1c81b5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22947,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 262x480, components 3","md5":"df51a303a5790a21048891a241814cbc","sha1":"01602b8ab08a902b18548ff9f07601adacecbe68","sha256":"44eb9963ceb16cff923592f114aad17d45da165af029b0af5554e75f62ebc578","sha512":"50e8834367ccb487271dbe493f3669c94fee534889bb789ea1e649c678dfe13c8b250be71eb6f3bf5534f587d20e4b952919a46757a25e66d4811ebf1cf8f8b0","ssdeep":"384:9wDHwehwnwRlTE2qgtogGXYTtZ4PFUFBHBgaIkwnNi4VV6D7P/HtjrTolbDMXpJD:CDHGwk2qgAytZVFkaImaV6XP/Htj/Cvu","tlshash":"8fa2e1771484a971dea70b35b920121dfa8bcfc107add64fdae15ae639820e48d0cb93","first_seen":"2026-01-06T04:29:48.916104Z","last_seen":"2026-01-06T04:30:01.936958Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/199688/e82d199b1e9298985fc73a2ca0c62e2316efc55d.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/199688/e82d199b1e9298985fc73a2ca0c62e2316efc55d.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 04:29:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7060\r\nlast-modified: Thu, 25 Jul 2024 08:11:25 GMT\r\netag: \"66a208ad-1b94\"\r\nexpires: Fri, 25 Jul 2025 08:58:07 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH3i0jZAAwBuUwKAQH30VwAAAwBJRPCLgG3XEfDAA\r\nx-77-nzt-ray: 2a494a15d8323cb2d68f5c691e391b35\r\nx-77-cache: HIT\r\nx-77-age: 14239883\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7060,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b3b2b1a57b013bf5c52582254450008","sha1":"e82d199b1e9298985fc73a2ca0c62e2316efc55d","sha256":"e4c86bb45cebfb92a7a1c0fdf07fe9908670ffb486171181627df32702dd87e3","sha512":"cf63deab0650f2f7d6f30c8f5515fa4a4643fa16c2b021835e6ce244937257950817a409a9cff9cd5e9b8cb429e4276a3936dced2445028616deace17fa3ff7b","ssdeep":"192:FSfqadZdroqMLJpfoGTeaQ+5jz4zrZkJIAF:F2hZo3LDoGTbQ+5j0kJIAF","tlshash":"9ee1ae65bf020a6d0e0cfcca08823b4f1ed51248af574b669406a56ace5e7f9fcce064","first_seen":"2025-03-03T21:22:15.539473Z","last_seen":"2026-02-02T22:30:23.045104Z","times_seen":869,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":49,"dns":34,"connect":1,"send":0,"wait":1,"receive":1,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/solid.gif?z=2044342\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=UbdZFYPD_WRacKmPllDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=siJLNUMaHR0cHM6Ly94bWFsYXkueHl6Lw\u0026afid=397321245377536\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1373\u0026rlp=%5B0%2C4%2C109%2C81%2C6356%2C4717%2C2239%2C4659%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 06:08:21 GMT","end":"Mon, 16 Mar 2026 06:08:20 GMT"},"fingerprint":{"sha1":"A6:8E:EE:BF:79:66:17:05:24:33:50:FB:D0:B7:31:78:BD:3E:CD:BE","sha256":"B7:CB:4F:13:8D:1E:42:88:F4:20:6C:4E:85:6F:86:9B:F0:A6:43:5E:73:8A:9A:89:8B:89:6A:82:8F:DF:B2:EB"}}},"request":{"raw":"POST /solid.gif?z=2044342\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=UbdZFYPD_WRacKmPllDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=siJLNUMaHR0cHM6Ly94bWFsYXkueHl6Lw\u0026afid=397321245377536\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pkw=0\u0026pload=1373\u0026rlp=%5B0%2C4%2C109%2C81%2C6356%2C4717%2C2239%2C4659%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nOrigin: https://xmalay.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 06 Jan 2026 04:29:37 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: UID=260105232901af4c9f776e443cb14c273e46; Path=/; Expires=Tue, 09 Feb 2027 04:29:37 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Tue, 09 Feb 2027 04:29:37 GMT; Secure; SameSite=None\nPTS=zQIAgqFs0mlcj7GhYwE; Path=/; Expires=Tue, 09 Feb 2027 04:29:37 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-09T00:17:50.858417Z","times_seen":20609,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1767657500_c37a1a418c068fb7.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1767657500_c37a1a418c068fb7.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23439\r\nlast-modified: Mon, 05 Jan 2026 23:58:03 GMT\r\npriority: u=4,i=?0\r\netag: \"695c500b-5b8f\"\r\nexpires: Wed, 06 Jan 2027 00:32:46 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 14210\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ua8HvGIED7eQMz%2B4Qy%2FKRmSi1%2FBUg69ZwWBxKI4XFZk5Ef4Klff%2FBFN90CjmJ8rsyFJrQR9sV3EBKlg5%2FFYOZBX4gdeIiNzS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1b8165691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23439,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 476x270, components 3","md5":"a3f3e07ce00128f192d9e49ae37ae7a4","sha1":"bbe5a26077e483e66782824158349d03da08c669","sha256":"f85ad553b1b2e587b17d075250f68824f44714cef3b448792d37a0a7ddd7ee64","sha512":"1c4f70e818d1c73eb38deb7d0e11a34ff0064fc3c70f56ee223c6e230a794002e500c11663ab37644de3d79962c96eac157cea593a6dc30a250ac0128c32916d","ssdeep":"384:9wgKa2Pi5Q8alEcHP6AldhvkSL4QjTGhqIXS/JfH0C48+iChAWpS+Hgid7ROkc5f:CgKTP+cHiAld2HhNqf0SOpRHgiFR7cLd","tlshash":"a6b2e0bf9773ea95c19c237837fb6f186a147224d701c30a1515fce735096a07d8e919","first_seen":"2026-01-06T04:29:48.908758Z","last_seen":"2026-01-06T04:30:01.939509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1767474049_b6c4813cffa98388.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1767474049_b6c4813cffa98388.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35759\r\nlast-modified: Sat, 03 Jan 2026 21:00:49 GMT\r\npriority: u=4,i=?0\r\netag: \"69598381-8baf\"\r\nexpires: Sun, 03 Jan 2027 22:39:49 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 193787\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFcmuc06sbIdk0%2FDkJxGsYPyOVvb2bHFJJXxEnmNKLIylGRtpTfm%2FiOJhVd4pSRSUAhXgLQvarzzhIE77FtZrqvFKt2XD2hI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1c8185691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35759,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 497x675, components 3","md5":"48fa45631e097a9dfd0d7f643a2b25c0","sha1":"0b3f7da3ac31fac505a6d1db8dc8dd4eff00b9d8","sha256":"1eaabc09faa36e3b6f22131a9734b9bb292f7cad6aafd12ebca36dfa7fa80899","sha512":"57c3c4c4795944760b33bd33b28af987c961d6986f1cfdd1bb1d00080a15827ef6b9c1a25c1b8d6727493a48eef6d7b1e86c84c4140913cda52a575b94ca3ca2","ssdeep":"768:spEZYyfU66YNhPc8ol2vpV3vQPEsv5p3tKoWQoP:spEZTU66YNhFols/VE3gP","tlshash":"22f2cf015b4afb16ed9272b67eb312ca8f74fa2ceaf00e0e5d2b459348047b0949d50f","first_seen":"2026-01-06T04:29:48.95284Z","last_seen":"2026-01-08T09:10:35.696225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_17421.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_17421.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34620\r\nlast-modified: Thu, 11 Dec 2025 16:08:12 GMT\r\npriority: u=4,i=?0\r\netag: \"693aec6c-873c\"\r\nexpires: Tue, 29 Dec 2026 14:23:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NYL9nKtvHJ2OvSFNJHwAV0ubrVfKY1nWVO1TRM8mV0Kz5hHC7Q2q7vtc1IOASu0btJ8%2BEGpBQ9cX6CQ4ai87IfXcwc7isJd8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1e82f5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34620,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.54.100\", baseline, precision 8, 464x848, components 3","md5":"7b659c4d5715f7f48658060d804c385a","sha1":"74d07a1452358437075d246975ec81f876631c32","sha256":"db06d5fdeaef6f6d0d8bc22ebb93dae59b2b1f3256d9ab8a1e72a24e7e969539","sha512":"83e4e146cd6963fdb636c67339c34c42ebc437a3ac97667fd4831ed762f359b4bf2d385a9ad2176ed09ec51f35aef6f92f2893181620a19ecf3b7df474846871","ssdeep":"768:4ZxQkmG/obcn5x6h8zLWrxYSZbyShYpKGyMTv2NfEuEIYyPL6yF:Y5mRInfzKrxYSFcLkEFI/6yF","tlshash":"def2f27196b1590fbfaa127610d00fe73e461ee718be6308ba46512acb123213fb52f5","first_seen":"2026-01-06T04:29:48.962772Z","last_seen":"2026-01-06T04:30:01.941714Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_17418.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_17418.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38039\r\nlast-modified: Thu, 11 Dec 2025 16:07:51 GMT\r\npriority: u=4,i=?0\r\netag: \"693aec57-9497\"\r\nexpires: Tue, 29 Dec 2026 14:23:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tg6nNvEPvAS7Wf4SsGLB6TX1prmIHpqwFXQ5xeEEnETozeWDF5o0lnJuaYOUX3BKt3aB2TKFtJk8rhuEpQkNbbSPiumih%2BVq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1e8315691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38039,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.54.100\", baseline, precision 8, 464x848, components 3","md5":"0f05b68a95bdd59dc1bd198b8b480c3a","sha1":"bc6bb2864e29da61cc04c871411d60649b1f1773","sha256":"ab6b4969af5c43887e316c27450bdd58ea6c7c9cf362aca0514909bb0a13dbe6","sha512":"dddb8680f437fd79873b8d54c954ccec142db6a2192dccfdbad96d4e00928ff978256738e09b1b00d2fcdb52fd0a74d22b702a15b887217feca1ee6e485b3cff","ssdeep":"768:K+1P4iTYQiNBMmA0xGNrtflLiHLHcSruZDVgbAZkKdbP:91AyiomAxZLiH7roDVgWkKNP","tlshash":"5203f2184734b2e3ceeae93ef089f581458294453c6d85029bf51eff752eba417328b6","first_seen":"2026-01-06T04:29:48.953778Z","last_seen":"2026-01-06T04:30:01.942816Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/aas/r45d/vki/2044342/1dcd16ff.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 06:08:21 GMT","end":"Mon, 16 Mar 2026 06:08:20 GMT"},"fingerprint":{"sha1":"A6:8E:EE:BF:79:66:17:05:24:33:50:FB:D0:B7:31:78:BD:3E:CD:BE","sha256":"B7:CB:4F:13:8D:1E:42:88:F4:20:6C:4E:85:6F:86:9B:F0:A6:43:5E:73:8A:9A:89:8B:89:6A:82:8F:DF:B2:EB"}}},"request":{"raw":"GET /aas/r45d/vki/2044342/1dcd16ff.js HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 06 Jan 2026 04:29:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 24 Dec 2025 12:35:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694bde26-262aa\"\r\nx-js-ab2: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156166,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b55db48d8e1846e78ea9322672924142","sha1":"63bdbb82041f9cd4776d5660340274c1bbd5c949","sha256":"c6826e788ec1bc2e7104844cf90e7c6e5422347c0e0ff126e925e6e69add57c3","sha512":"ba54b2edb0dba53b5d5fbaf62132853d19409726088d2c5167c85d8738ea5420d4a85a72db2fa534999f820f6d17751e68d65c3a1c1ae48ad8c326c693edc8c2","ssdeep":"3072:8U0KJ2LLbnYgLevgFghmlx+uEzUgL6TQX2bH8q:MTZXyslxv+6+Nq","tlshash":"0ae3638c62cee4f50b4290e9cc3f3702b63a58e29f5d41a6b573c1c929b950ed315bb9","first_seen":"2026-01-06T04:29:48.954764Z","last_seen":"2026-01-06T04:30:01.943944Z","times_seen":2,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":40,"dns":1,"connect":17,"send":0,"wait":34,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/2044342?zoneid=2044342\u0026jp=_clovepyfcivawfwytylqah\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=UbdZFYPD_WRacKmPllDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=785\u0026psu=tduU1LBaHR0cHM6Ly94bWFsYXkueHl6Lw\u0026afid=6308295757202944\u0026ppucnt=1\u0026eclog=0\u0026snc=0\u0026ssc=14\u0026tp=288230376151712260\u0026tl=zQIAgqFs0mlcj7GhYwE\u0026vp=0\u0026pkw=0\u0026pload=1495\u0026rlp=%5B0%2C4%2C109%2C81%2C12137%2C5729%2C2478%2C5671%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026freq=1\u0026uf=1","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:51.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 06:08:21 GMT","end":"Mon, 16 Mar 2026 06:08:20 GMT"},"fingerprint":{"sha1":"A6:8E:EE:BF:79:66:17:05:24:33:50:FB:D0:B7:31:78:BD:3E:CD:BE","sha256":"B7:CB:4F:13:8D:1E:42:88:F4:20:6C:4E:85:6F:86:9B:F0:A6:43:5E:73:8A:9A:89:8B:89:6A:82:8F:DF:B2:EB"}}},"request":{"raw":"GET /get/2044342?zoneid=2044342\u0026jp=_clovepyfcivawfwytylqah\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.658\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=UbdZFYPD_WRacKmPllDVIIHN\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=785\u0026psu=tduU1LBaHR0cHM6Ly94bWFsYXkueHl6Lw\u0026afid=6308295757202944\u0026ppucnt=1\u0026eclog=0\u0026snc=0\u0026ssc=14\u0026tp=288230376151712260\u0026tl=zQIAgqFs0mlcj7GhYwE\u0026vp=0\u0026pkw=0\u0026pload=1495\u0026rlp=%5B0%2C4%2C109%2C81%2C12137%2C5729%2C2478%2C5671%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026freq=1\u0026uf=1 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; UID=26010523290e23e95570d44a559c6ac1671c; CHCK=1; PTS=zQIAgqFs0mlcj7GhYwE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 06 Jan 2026 04:29:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Tue, 09 Feb 2027 04:29:51 GMT; Secure; SameSite=None\nPTS=zQIAgqFs0mlcj7-hYwI; Path=/; Expires=Tue, 09 Feb 2027 04:29:51 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3536,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3536), with no line terminators","md5":"b17c2df2a6bf888d26293e0fb7e4656c","sha1":"efa661e8e991413bbadf0704048a90fb54c4ade5","sha256":"63b4c9d0a37471ec8a8a53e6c0efbd7b7e5583c933101d6463ece7135c69809a","sha512":"62436abe4c070f2de6cd3af88f843693a5b545b80d88e67d876eb4bae35ba3af527bff2257b289a4a41a9f91f527f02bf03b0a041927e0473df5340003775794","ssdeep":"","tlshash":"b87181ba15adfba81867991a07fbae14ca30f5c98c179ec74d65489f4709833b34b800","first_seen":"2026-01-06T04:30:01.945248Z","last_seen":"2026-01-06T04:30:01.945248Z","times_seen":1,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":47,"dns":1,"connect":17,"send":0,"wait":21,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmalay.xyz/media/images/featured/featured_1766874857_93a7384e8df5f394.jpg","fqdn":"xmalay.xyz","domain":"xmalay.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:36.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmalay.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 12:57:33 GMT","end":"Sun, 29 Mar 2026 13:55:50 GMT"},"fingerprint":{"sha1":"AA:AE:E1:F0:F2:CE:8F:04:BA:42:BB:B0:91:81:DC:CF:FF:A2:B8:5E","sha256":"EF:75:5B:FA:92:FA:5E:5B:B2:28:59:2D:5D:5C:1C:EC:09:5C:13:74:DD:F0:78:EC:E1:D5:D6:AE:2E:45:99:89"}}},"request":{"raw":"GET /media/images/featured/featured_1766874857_93a7384e8df5f394.jpg HTTP/1.1\r\nHost: xmalay.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_session=8cbt5njrrokufncpro9mi6oe7k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 04:29:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27718\r\nlast-modified: Sat, 27 Dec 2025 22:33:41 GMT\r\npriority: u=4,i=?0\r\netag: \"69505ec5-6c46\"\r\nexpires: Tue, 29 Dec 2026 14:23:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 655564\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbX%2BmJLgwDd3j6QctoeZbsZN4Y7NcaLuvCXO446gKvms9JwW%2FFqOlC58q%2BzS92ASLkLcJqqKLNkxSU7%2FNUeiJ3rhZLsP8tnQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9879b1d8275691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27718,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x480, components 3","md5":"ead5af70c8557589a4036f996e5643f4","sha1":"a75e55a5cf25a27e7f8591c19d3923ca8879c479","sha256":"86824024cafa37f3d3f3d0ed634db3a6f498d5ff9a7c3975f953f3d97a4a0b8b","sha512":"b6b9d23957c285e4e4aa7b3d65a7ea25b5511c276b6dc0f2ab1e0a2999988ba87269befcc52fb9a7e8448b7dedf07859435dc139667ae3d08ba493843f8fbb4d","ssdeep":"768:C9uuRCAqAgPYqpFBDlW7m8dbSk62weRxqg9ycC7C:My0qpfDg7mwp9x4dC","tlshash":"95c2f09382274639c82113727c8247d0ea91fc2d47a19d0b599f5ce7ab0b7a3e976f02","first_seen":"2026-01-06T04:29:48.931549Z","last_seen":"2026-01-06T04:30:01.946668Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nContent-Type: text/plain\r\nContent-Length: 426\r\nOrigin: https://xmalay.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":426,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://xmalay.xyz/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5800506,\"block_ad_types\":\"22,98,94\",\"extra_params\":{\"first_request\":true,\"zone_type\":10}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 06 Jan 2026 04:29:37 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://xmalay.xyz\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22b224fb4824f8f835e8fe91faa5f2d4f8%22%3B; expires=Thu, 06 Jan 2028 04:29:37 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7408,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c670f808bee12c4173b968232ef0c06c","sha1":"50770d8161d3a3ff3aa051e9847101394de91d21","sha256":"1e8af8654d0cc316a04dd7392c9aa91f1a38d70bea67b6abfeb6febcd5884640","sha512":"8e1de2cc8121dd3d97110e6e5a63cfaa73bfaeb46f2e59aed42c95dbcd32f31075f56a82e934f176a5e6aec57eac2f25727d36092924369c04b30e1ca6af7ad7","ssdeep":"192:fT/eqaO2Vl3r3CvGHkc3ZNRhxAoSIhUV1kS54gbWDX4pUoPoF6X:rr0Lj+rbs4pU+H","tlshash":"d3e1a83bfe8404f963965f91ade73af8a97c7007d6104e727b80a62793c8af10553725","first_seen":"2026-01-06T04:30:01.947906Z","last_seen":"2026-01-06T04:30:01.947906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":51,"dns":1,"connect":21,"send":0,"wait":55,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/check.html","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xmalay.xyz/","date":"2026-01-06T04:29:37.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"divisiondrearilyunfiled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 06:08:21 GMT","end":"Mon, 16 Mar 2026 06:08:20 GMT"},"fingerprint":{"sha1":"A6:8E:EE:BF:79:66:17:05:24:33:50:FB:D0:B7:31:78:BD:3E:CD:BE","sha256":"B7:CB:4F:13:8D:1E:42:88:F4:20:6C:4E:85:6F:86:9B:F0:A6:43:5E:73:8A:9A:89:8B:89:6A:82:8F:DF:B2:EB"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xmalay.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 06 Jan 2026 04:29:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 24 Nov 2025 08:42:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69241a69-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}