{"report_id":"ce16150a-3d9f-4582-8d7f-35924118ad2e","version":0,"status":"done","tags":[],"date":"2026-08-07T21:13:14Z","url":{"schema":"http","addr":"stggas.com/","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"104.21.5.186","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"stggas.com/","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"title":"综合在线视频 - 中文影视视频资源网站免费观看","dom":{"size":6690,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1594)","md5":"adb586294368bbd049fcf392552137e4","sha1":"46b6d596ef3100a4af7d6ce45bcce2876bcadc4c","sha256":"c3d4369188e4c3040537d99de924da5e7b30433a363af2581dd3d482a6ff1e84","sha512":"9067def1de9eb77253f182cb387184d7d36c8ef0a76a46997fd50f8b91127a46f569f900bbbe2c2946d51f77eeaddaef6a02093dae05c77b3f263859de9e5c09","ssdeep":"192:B2RyyYcUGcfZLGjFHfMGEWENtu23euSu1Anm2FHgW81/UAD3:B2kyYcUGGKzAD3","tlshash":"6fd198abbf8310295413a6246bfff5182134e4039607ccacf9ac5519cfd27a954e3bad","dom_hash":"domhash5160a68bd72d07105ae27180f5866064","first_seen":"2026-07-13T07:21:12.191553Z","last_seen":"2026-08-07T21:13:28.067977Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"stggas.com/","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"104.21.5.186","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T21:13:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pic-c.pigspic.org","ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"domain_registered":"2026-03-15","domain_rank":0,"first_seen":"2026-08-01T15:46:49.716713Z","last_seen":"2026-08-01T15:46:49.716713Z","alert_count":24,"request_count":24,"received_data":372679,"sent_data":12096,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ys.ye5whwa4.icu","ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-02","domain_rank":0,"first_seen":"2026-07-13T07:21:04.797585Z","last_seen":"2026-07-26T17:27:20.99022Z","alert_count":0,"request_count":9,"received_data":4431148,"sent_data":4386,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"node92.aizhantj.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-29","domain_rank":2777266,"first_seen":"2025-06-02T19:05:33.428728Z","last_seen":"2026-08-05T21:04:37.425431Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":470,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stggas.com","ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":35,"request_count":35,"received_data":4776794,"sent_data":18234,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/?aff=seo","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d8ac198ec3f6c2043a9d0495758cbf1","sha1":"d004b2ec26a0943bc2e60086eb5c28f1e467baf3","sha256":"bad41a2665f503547349db870991a98e7bb6dbd1882f1cc2db72307ec3ef9d46","sha512":"f2d1cdb795e556ddab7f0c58c3926cf97da7abea0d5cfed2c86966a31d7dfccdc237d2f7fb5183e28d74c1f3e1c9209e133f2263c8e60c340b28040d926abb7a","ssdeep":"","tlshash":"ace02c4f34e380a8a9a7743a42bf8688303469030405ce563d4c99008fa2aa022bbac8","size":347,"data":"","first_seen":"2026-07-01T04:31:08.677317Z","last_seen":"2026-08-07T21:13:28.132921Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/?aff=seo","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f64fd7792b3d0638c750d9f7297afddc","sha1":"e8dca4864cdf4db9147e97f14f901fda2d9fa285","sha256":"e6b4942cba3157dcfdceec67b0fc32341c1bd076225da11947a061d8e84a618f","sha512":"f75f9212138f1c19faa4ff378f17b577e802555795fad9a8ff8edb43eac2e0f2b94856718e50debe4e8b97b557fb50bca09279e957f16f2999e81505b89235dc","ssdeep":"","tlshash":"bb01d1dc3ee72075c26322690eaf8502f1618e071188d898f91d42291fd0a074a2faac","size":678,"data":"","first_seen":"2026-07-01T04:31:08.678048Z","last_seen":"2026-08-07T21:13:28.134374Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/main.dart.js","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b26f026e9a6b4276c98d542e1349d90d","sha1":"c8234d4aa695ad79ba5ee69c8169c80b2bbce7fa","sha256":"78d9bd4c7ea3b51373972e07d98337a910d3acf1352ec8e1b4de4a469bd4d333","sha512":"096ede9b14e17b2192a557491d05311d482631a15e85f509df2dd5dfbed43b83155066a1ddff3e3f566579670acaf8ebe38abff9fc0a574a8ebcbe00c4b579bc","ssdeep":"49152:M/eOUQZFgFM4fdoig9nzt2zkYET7MRQNDj7YfWb+oXDzvh0Qz3JojR1tlOoSF8y0:Gekrs","tlshash":"f816098429f369e8a36304d488473253e95dadb7e81c583cb0f6ccd9b6783659721bbc","size":4340498,"data":"","first_seen":"2026-05-15T19:47:02.350518Z","last_seen":"2026-08-07T21:13:28.135604Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/?aff=seo","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a7a76e1d02f4296de75091bdc796f491","sha1":"25d22672056bb1bdaa2678499b438e5e2f635d48","sha256":"cce603782273ffc94a4b0832386f891f116dc28e7e7d5e698eef782445efb96d","sha512":"b32df87054f86a5e06f518d95bd6cdf98787e54fd4f75f87b442cfb2e9adc8cd4f43dbf88102f7bb8f556f75b14308ec288f4a2747c314fd184e5ae07cfb5ed0","ssdeep":"","tlshash":"4fd05ea9fb67b071528a303e8b2b85483239551f5189c5c0344c51a05f73a298629b8c","size":266,"data":"","first_seen":"2026-05-15T19:47:02.341603Z","last_seen":"2026-08-07T21:13:28.136122Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/assets/packages/wakelock_plus/assets/no_sleep.js","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7748a45cd593f33280669b29c2c8919a","sha1":"e17ecf67de61920504d79194dbee5cd552a01cfd","sha256":"dce4eef0b197b640ad6aaab2228ee1ee7dccf8bd6d6b5de5484dd1bd16430a78","sha512":"49b3225a5994b724b16b1890e41697c71096402f48c338fe193cb538ac8f88b7d013c0b70e81786d476be3eaf3170049df1ced6cd8957098fffecf11c13b5586","ssdeep":"192:nRG+Fgkw+wi+FrZJqbzr+5rA7wbUCzebIkuHeIabmEWUSiaNRGApaFnoNhCaTLIf:n/gzi+FrZJqbzrarAyUX5uHej27W","tlshash":"e052b87b25f1bd6acf77146acd1d61002c2ca85f8a1e4961bf4c42989ff06309be5eb4","size":13344,"data":"","first_seen":"2023-03-08T09:25:38Z","last_seen":"2026-08-07T21:24:26.445548Z","times_seen":1123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/common/common.js","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9422c9ffd205c971d4398577cea83bf","sha1":"d3ed88e6f7c8240f1a3942a9653c184c338fea97","sha256":"32b385fae1248ceb85f92bea969ec354843b5a72d121c0a4428d6d826b876c9e","sha512":"0c7c2b1d7b81039abad5a51c3b9ed5d31dd1d5c58d85d64eb84c74978561c6b3ed3cc3b5c8e6f6c697df14ecb8212a3429ba5249e46f83626aa3f8e08165bd5c","ssdeep":"","tlshash":"8a21417f6d7105a1c53b50ea2db7aa4c38f020277631c01574cdca495f8dd40842b7dc","size":1165,"data":"","first_seen":"2026-07-13T07:21:12.26732Z","last_seen":"2026-08-07T21:13:28.100183Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/assets/js/main.min.js","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a078152a6b8dea8ef91cea21703f7955","sha1":"c3e62f0bc34ad79558f29e73d6e2b731fcd25297","sha256":"efef56ace3e9ee0800fa230d1e76db747ec471eeb04a1babce5853d0f8b073f6","sha512":"a55bcf04b96846224dbf7b3360edfa8be0cd276159025e0705c82a3e52d4101f9cf178dba1e4e6ba1a20b006f617316797af450f762ef334c12ab7dba68aa1b0","ssdeep":"192:DWQRg8VhJnTw2Cmy2Fva2a9DwYuxsW6yOxw:DXJnTty2OwYuxyyOxw","tlshash":"4bd1f6f9badd347583e320b5616f2245f2b52a49b8099040d494d0d42dbdd8bc27ffe8","size":6682,"data":"","first_seen":"2026-08-07T21:13:28.110532Z","last_seen":"2026-08-07T21:13:28.110532Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/flutter_bootstrap.js","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"819731220b7322961e7565edfb5ba4d0","sha1":"4bcdffd9a71a191bdd021f8342587b1785b3f32d","sha256":"58ceeb60bd6edf03fe8e92a1af6b9c7711aa5ae65480c4b8b08a4292c0d50305","sha512":"9309e73626a8d9789865888aced3c533166468b9f425173efc64c429bad9e496a7879c50e040a70f5294c457265f6e037ea897cf2f155c042d29ef77ede8440a","ssdeep":"96:/p4/4uKRtrGWiau5ZbRtVU1EvWj8RoJJXcvQbRuAaqSifC21PeUM60srOMHYj/m3:/nvXubRtWEm8RoJKvCuAa9iA+HYC2Js","tlshash":"d402c4f21eb3e5391755f940ec3f13a2e28e126b188dd009b2dc5a6d658bc05a8b6f71","size":8500,"data":"","first_seen":"2026-04-01T23:25:25.340339Z","last_seen":"2026-08-07T21:13:28.116482Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"Injecting \u003cscript\u003e tag. Using callback.","filename":"https://ys.ye5whwa4.icu/flutter_bootstrap.js","line_number":1,"column_number":1846}]},"http":[{"url":{"schema":"https","addr":"stggas.com/images/954b8f64d0b28674a16a0967d5362f49.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:43.068Z","timestamp":1786137163068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/954b8f64d0b28674a16a0967d5362f49.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:12:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7CzJsqYlVOrAg8t3tReb0ogzRwS5CSOoh7%2BnZ8XYGo%2FLF6SOe1a5vXDKFsKg3uOdzTmuOBVQTmP0ZD53tdoJnnzUL636ceRBmrsMwAq2xy6o7E686uZ2QjGt8Oc\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:12:50 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27947f52de8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138610,"size_decoded":139229,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 540x744, components 3","md5":"d5a77a8a100d9b78df6024355ca9a3f3","sha1":"cd20fdb4f98ef9ff28a999e25288d5719d0cc1b1","sha256":"935d901c38aae59cfff228eb226a5fd129c4943aa30d030c84f2625aeadd564b","sha512":"1f0aabc4972dfa45ebbc8643d0bed426d94204e1ac96afc9104eedd8989dac005ada01c420e5ce50348fd8f72272b68faa10e26d348f9e2b905ac9bf165c00bc","ssdeep":"3072:oIrWWxDqEDcEHTuGLYpDkV4hh/OXeCTibht8cEClSNHGLjGOsCrS2r:zrWA+EDdzZLYpDkV4hye+iYROjGOsCrn","tlshash":"a0d312833b268ca77b6760673d375cc025a7f1a962e704744c5da61fcaaacccd342636","first_seen":"2026-08-07T21:13:28.069535Z","last_seen":"2026-08-07T21:13:28.069535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6995,"receive":470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/b3ad858b12bd11ef5b2ec876892aeafa.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.374Z","timestamp":1786137170374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/b3ad858b12bd11ef5b2ec876892aeafa.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFOWifu2JUzEHgG%2BdwduZ2WqDp7g39%2FA56MC%2FbOrF6AifBvsHKOd4V5VIwEPmL6cusKPJgfBMDfjl2bGMUwx5GN6PRlwgY2cxY37Akh6UimnCjQAkUus%2BkHZ%2B82j\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822dd48783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84269,"size_decoded":84894,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 540x724, components 3","md5":"ee3cf0e3b8950ac6fe9cf79c19dbbdda","sha1":"8cdd380118799fc35fbd58acb3b04e0fbb03f429","sha256":"cfd74f4c6fdf5ee6d7998eea61d9e6067c92efabe49518a0235945ea83f6329f","sha512":"428fb2321e693d1db4aa08fe513d79032d30438384229ec402d13dc140e3cdea70c5bc32496acc2a80d69caee9682e6bc06a5e970949b43276a0a91f05f6bcf2","ssdeep":"1536:Ws6stgHnMJ+yXLnNElSpmOHfntTaslF8IoDeS3mpiqbIATnF9so70DEFWOYD:16st+nyHLnNElSpmO/nHlDkPMiXAbF9W","tlshash":"eb8302ca45b0c045f2575a38bd056d220ffeae7abb16c35b89c6bc18adff03169485d1","first_seen":"2026-08-07T21:13:28.070573Z","last_seen":"2026-08-07T21:13:28.070573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17197,"receive":310,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126800/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.001Z","timestamp":1786137177001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126800/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 11:41:56 GMT\r\netag: \"1786102916\"\r\nlast-modified: Fri, 07 Aug 2026 11:41:56 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 15984\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15984,"size_decoded":16449,"mime_type":"application/octet-stream","magic":"data","md5":"b0e760e1c4785df2243dd278bef4212c","sha1":"7f6c065f9b05683b1fc6e657c571febdf791d654","sha256":"4d8b446e9cfef704a93f91a2197c22e68ab7f6ac760fba5c1571ca077b72efc6","sha512":"ff44fcea0e8ff489573194bf52443d6a67fcb8c27994a25ab86cd05388dbaef6c790456049def40d035e766ca959fb150f00800586473f98783455c67c80a008","ssdeep":"384:pa3XaHJGbkFnsaU6DpE3UtDmZhwm9rATpgaECWnf:panaprnk6XDmZhR9g8j","tlshash":"2672d0a1fbd4577b64ac2163d6b5ce6879d922babd48b3e00303504d6d7db10a1b52c1","first_seen":"2026-08-07T21:13:28.07156Z","last_seen":"2026-08-07T21:13:28.07156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/127000/127015/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.195Z","timestamp":1786137177195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/127000/127015/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 09:11:20 GMT\r\netag: \"1786093882\"\r\nlast-modified: Fri, 07 Aug 2026 09:11:22 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 12288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12288,"size_decoded":12753,"mime_type":"application/octet-stream","magic":"data","md5":"284cae181cd04e6d778bf61fcb937ad0","sha1":"fa24b752d63e5badbc2a394b40d7adf7801cd3a5","sha256":"e761a6738ae82019125c2457452a2e505c9501de6788e402b80e1930a7fe1331","sha512":"417976718bc92b94b9eafc3f2db6fbef9ee4f326e56c5cab6af95af0c3b24a9f23d1deb6895585298c2ab6fb6973f791de575a63f2eecb6558b63d1156c69ab1","ssdeep":"192:rf2tGBGVqEzNwLCs94lghRwVpOlvTLHoSA3Udv1/u4WXwbqmSSpFZv9:j2YgBz+elVVpKTLISAav1m4IwbFZv9","tlshash":"d742c015bfba600db932d502c6e3515e1c065de3b6d7f3916894db96c0fa7642c183cb","first_seen":"2026-08-07T21:13:28.072473Z","last_seen":"2026-08-07T21:13:28.072473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/f8e0070ca26fe58c98631ab608a819c2.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.370Z","timestamp":1786137170370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/f8e0070ca26fe58c98631ab608a819c2.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X13ebiQqjF6neOdXbyq0o4VqeS0ejwmmbuxMa6c3bgJ35de3DmD3UqmEO2XAsqKBqZgyS2oLNSa9DCePIn1%2F1lbQ%2B4uunbnRIxhAynwpRtlA42GzKQ3pIZq6aL%2FD\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822cd42783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48630,"size_decoded":49251,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 473x633, components 3","md5":"62f5f9918cb1c40365985389c000f801","sha1":"ecc0db15a8dabcbc26f97d32ba066e7d19116881","sha256":"67399b6f3dbedb2a3c90567f6837592e9cec555e88b6879dede6f036c00a987d","sha512":"c40081a8f2d24a99df45fe59d05502e4cd16ce6d152d1b9ab3c75ad874d798757e3e4aa8d8fa11ddcf825ef8714285f7e264b703313b6682ae0e60b5875b77c3","ssdeep":"768:gq/0yhii9U33i5/wgfRaroFMwcMramhttE6qTD1sgadortH2zDNq6IUkUddBZ8Ng:gqMyhi1nw/rRaromXSb7E6qTD1vaskqM","tlshash":"5f2302d877aebf797813b23745eca0c0a3d5621f384d197c96e8b70054d192ac99e13a","first_seen":"2026-08-07T21:13:28.073432Z","last_seen":"2026-08-07T21:13:28.073432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17087,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/6d8503678c7da081d6e2411c987697f6.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.381Z","timestamp":1786137170381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/6d8503678c7da081d6e2411c987697f6.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZNVxi6cJAJPscBkc8f8PxM94Nubh7tIBBlH2jG0sZ4CbwX4y2rbrPi4dIOVbeZzQQfocjdaMiQ9lIxvs2LfqUl%2BBFVg7K9uqLRRmbPhmrEsAeu0JFs4T07D28iV\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822dd4e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41380,"size_decoded":41997,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 471x677, components 3","md5":"2cab4161d36d090265e148e93224a87d","sha1":"d1382ddcd9662c61d0127cf515d61bab6009118f","sha256":"242b0a6cf96013e2422e7896192545047ddeda0efe15e9ec83c0e522381b435c","sha512":"d1059fd78e47ec1a4e4913e9c4cc981236aa656fe6e6d45fb00b1373ef8f98c29d2c23ef301ff6f57242145bc9c3ed8cf15a8b9ed4205633d7c8e9d62ee72b7e","ssdeep":"768:EZ+Z+/mo0zG4VDOF/15t0c675OPzHwEq+mwsGeU0RO7XHayeBqlCTMbgGM:NZ+/X0zfVKF/15t0VcP7wh+m/5RzDGgD","tlshash":"5f03f14d09abe5c3b67954b708aafb6085f4dc32cdd1131802f4c43946aaa7ee5d93ce","first_seen":"2026-08-07T21:13:28.074338Z","last_seen":"2026-08-07T21:13:28.074338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17191,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126721/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:56.890Z","timestamp":1786137176890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126721/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 13:07:07 GMT\r\netag: \"1786108027\"\r\nlast-modified: Fri, 07 Aug 2026 13:07:07 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 18720\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18720,"size_decoded":19185,"mime_type":"application/octet-stream","magic":"data","md5":"5de521f441c86b0a5105d36713fac24a","sha1":"740a0732391fd18b04dfee73595cb4cbd22b054e","sha256":"5e515e905c084c463a74a58c2c22f8c8aa520b4775b60c78f9c5d7489caaf829","sha512":"acde723c1fac10c4d6b69a48ae4c6764ad8250edaf934849ed3bab844fcf5793183e383405f33a1e04602804c8e618e47939520f48315b97cb17bddae7305fd4","ssdeep":"384:PpWO44WDJfeQT/xKGjtZhh4+9V+i/fJYoeJQY25cICrUCL:PUz4W1bjn4qT/fmj7/rtL","tlshash":"ee82d02a569f3d70dccc752905771e6834c786c2b26413420b9ff565d4ca96d8ca82ad","first_seen":"2026-08-07T21:13:28.075352Z","last_seen":"2026-08-07T21:13:28.075352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126756/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.060Z","timestamp":1786137177060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126756/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 10:11:22 GMT\r\netag: \"1786097499\"\r\nlast-modified: Fri, 07 Aug 2026 10:11:39 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 14048\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14048,"size_decoded":14513,"mime_type":"application/octet-stream","magic":"data","md5":"d50f81b5cfc46ea44b8fc37dc033f98d","sha1":"2d849661203d4a1b5267e2fef7d009bbbed19121","sha256":"98cce4cf6614083b7d85f6ad82fb7677869c53ebe5fa00277b3de76765c5537b","sha512":"fa760272954d4f6fddb525ddf9e8de7b85ec63d7530a7970a671174918a67e791660d3dcf240f218f77ff56d309924fe448b7006549395c6094019fc009e34a3","ssdeep":"384:kp/Mj/QAzMQ+2wwU2lIjW0OE3CKyya4ZDpJR8Tjs8:QWvzMQOw9lICZ0pPsg8","tlshash":"1052d132b423805ebc49538ab1676b8e177e59342eec35adc258b0dec6da733c012e03","first_seen":"2026-08-07T21:13:28.07631Z","last_seen":"2026-08-07T21:13:28.07631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126929/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.351Z","timestamp":1786137177351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126929/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 05:01:15 GMT\r\netag: \"1786078909\"\r\nlast-modified: Fri, 07 Aug 2026 05:01:49 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 14048\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14048,"size_decoded":14513,"mime_type":"application/octet-stream","magic":"data","md5":"c789971cc7932da2a43b031e0b3eded9","sha1":"377a5f10596a2926145bbcc73fd1a921983b848a","sha256":"8bd0cc51c03d2c181b3951224a9c245a934654c64bbe6ff70dfe50f54f89471f","sha512":"b95ed34eb163efa6a859a90a25aee23ab98d1a68df960fc8e7833fef7623c5f0f76fe37b767bbea9db776a34e3dc77e0424614d05938810d256f0a4209e8478d","ssdeep":"384:cH6DD6HHpFB1H5oeGTKwhOfTBnSthRhW7vIH0:FD6HJX1ZofTrhgTBSlg7vIH0","tlshash":"7352b0f47cd2898ee1f15f458a995e83a227487fcc458c3a01b877e18b6de1ce5cc468","first_seen":"2026-08-07T21:13:28.07776Z","last_seen":"2026-08-07T21:13:28.07776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/ad916a8da326ecb9ac5b4dd14948946c.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:43.070Z","timestamp":1786137163070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/ad916a8da326ecb9ac5b4dd14948946c.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:12:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Clz%2B%2BNjYHrHdT4L2RVyAybQltXHa4MnL1hZUqPdDg8FrySqDDctBjHkIdZ%2FUhFtv7L59ggJk5t47NLkCQiiF25Zj3Wp2sKhd19Fzwalcazr3gCGJxdmpfuthz%2Fbi\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:12:51 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27947f52dee783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111311,"size_decoded":111934,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 552x748, components 3","md5":"944722287913f77d8fa06402e780febf","sha1":"7661d21baa7ecb4ce6bc31ad232516d691604917","sha256":"00fa0fad2bdbf39192308eb5d17f7ec65d135e1966081d733b71d415e00edb46","sha512":"ef92ae4c0d62ba0ae740f9d45012c44651dd30ff91a6c315882a3173986c4562575b9fc5083e6f77e1869948e5cc1560f727bf2f97c6eb6b664ee6b4b1e00855","ssdeep":"3072:i/AUpvwHJdzaRlV2RUSFCDYR86H2I4JZePbXm9b:N2vwpsR2UaNdHaZejXmp","tlshash":"e1b312347f590940d33f5770cb5ffc329715a3128098af1683fb5f19a4a8ac24a56bab","first_seen":"2026-08-07T21:13:28.07867Z","last_seen":"2026-08-07T21:13:28.07867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10692,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7959,"receive":2733,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/6a756267c6c5b65e0829db8da67f4275.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.367Z","timestamp":1786137170367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/6a756267c6c5b65e0829db8da67f4275.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yy77BZ7h94BmGIX6m%2F4lRyq7cLGAx6CR6Mox2rXbzGQNg8yN99qBfWPfBPZMy1BPJI56cH5UCbepdUN02zJ3OtCb5CtUxeHXJZVa1ySNeip4Sz0Wv%2Btcvs%2BgeCC8\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822cd3f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69806,"size_decoded":70427,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 492x660, components 3","md5":"502c6e78ebb73150df9a05d4e86179f5","sha1":"6c0e1af553a8c8bac83c02a9ab57d42460e1b58b","sha256":"3fef9a8ef62d0ca1542725c5d1e000627f4674928c9e93dcac8aeb1d44ecab92","sha512":"6115437313541dfeed104b27ca2bd2ee6214883bc178bfc54ef55c34df385d825f94c55e17c39c355b6f8dbb8b1b1ad426a3908611fb82830dcc225a106120fc","ssdeep":"1536:zigJ73THijUOgPXmHwB1ZUiGP3gsvnvBdrlN8t4y6Fs6K+Q810hGtZX:GgJ7OmpB9GPQknvBd4SBa0QOTd","tlshash":"226302638a8724d7738e20db18b81df315bc5e23f150aea9b8d58e76d0045aec9992c9","first_seen":"2026-08-07T21:13:28.079619Z","last_seen":"2026-08-07T21:13:28.079619Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17087,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/358682a826bdbe0cebad5b6dcfaded45.png","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.375Z","timestamp":1786137170375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/358682a826bdbe0cebad5b6dcfaded45.png HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/png\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FNRvlnPIWp%2BT%2Bm%2BHt9ejw37I%2F0A41pNWEVrXPzf%2BtlbgXIiMAq%2BFVwS8HUtRxwbOFRmgW7ijfZELnhgGPQDarjnfD%2BN3XdiSftXQvDl%2FuJjeMD1PDqf1kl8M7rim\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822dd49783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782969,"size_decoded":783601,"mime_type":"image/png","magic":"PNG image data, 531 x 802, 8-bit/color RGB, interlaced","md5":"1fcc1a6f313b7b130dd9af962cda5fec","sha1":"686bc47cb7ac90e276777f15b127c0cf37c1806b","sha256":"c2af715f1efec61681e2bc80582fedb57ded61e64899be101be05bb2ac78b162","sha512":"6b08c5c61087250d4cd85c56dc4d0fe087bd61e1672a2861e46be2acc71c63183fe2ea7e051a35456410f0272032dafbcbae09e1c1481c2c0bdef9fc7e279272","ssdeep":"12288:UDJbOExvA98MemGLykYZGi3v58y32SZzvAkje2UHdMk27yRNdjG5cK2M4Uoo8HWx:I9FTWkYMW6y32IzprU+5+jG5cK2M4UoI","tlshash":"5df4233781b82f26652d9a57bb5b6da0236cc8d17280574d44d708dabd38fefa183363","first_seen":"2026-08-07T21:13:28.080545Z","last_seen":"2026-08-07T21:13:28.080545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18070,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17220,"receive":850,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126922/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:55.951Z","timestamp":1786137175951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126922/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 20:50:39 GMT\r\netag: \"1786135839\"\r\nlast-modified: Fri, 07 Aug 2026 20:50:39 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 17696\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17696,"size_decoded":18161,"mime_type":"application/octet-stream","magic":"data","md5":"e6e629d8b6de63a3a7afdf67c41c3033","sha1":"29e728986337dcf769b123b02b1643dea5edd13a","sha256":"750b7231f150eff4fd855ee016e0869e7006b4083f32cf1354651cfcb3c1f6c2","sha512":"1f070d03ff81d3fd442426598c34cc14f94acccafd4f10bae3a8c68f0a66c84b0d031854ca86e76740d6b84019709b6530f7e3b78042c3a152ee30fb2ff66776","ssdeep":"384:fsugHNiJNWpIfd4yFx9tq0fKVgyB3BJj9tgGFYQDIVRBXV:0uWN+NhfdnV8PVgWRJjheiuF","tlshash":"ff82c0e0cb2d2a42a058d71c2df92a0454695172a0b35b28e95f260aafe51ccd81ed8f","first_seen":"2026-08-07T21:13:28.081338Z","last_seen":"2026-08-07T21:13:28.081338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":101,"connect":164,"send":0,"wait":164,"receive":169,"ssl":172},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126645/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:55.962Z","timestamp":1786137175962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126645/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 15:29:52 GMT\r\netag: \"1786117365\"\r\nlast-modified: Fri, 07 Aug 2026 15:42:45 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 12512\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12512,"size_decoded":12977,"mime_type":"application/octet-stream","magic":"data","md5":"800f191463ea93d03f56b9cec7466fd5","sha1":"62afe865d0663b376af77ce553b797cbc7059e26","sha256":"3083db74812724d3339821180df0e87ce55a4434123964f410b3b96fc29b17b3","sha512":"06c89828849b21b073c203d33a17261fef4ffd2d595b3d4305d13a87361b92d8ec4b12def16fa0f2c3bb9ea422ab818ba0c25965aaf31f42823b198bfeeca1bc","ssdeep":"192:F7g15XxUbRsNyGJ+gqBZG44XfrITYmdqeJjlEBQMuYnZ+rYLIGApIA0/qh+7wgNA:FChcGDqH+PrqYmdqa2QhYnZakM6KgQ1","tlshash":"7c429f7ae8773f6c51b916f4fe8a313fb210b813168e62290c147a9c215031be7579f6","first_seen":"2026-08-07T21:13:28.082207Z","last_seen":"2026-08-07T21:13:28.082207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":934,"timings":{"blocked":-1,"dns":90,"connect":174,"send":0,"wait":437,"receive":52,"ssl":182},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126854/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.490Z","timestamp":1786137177490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126854/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 03:13:26 GMT\r\netag: \"1786072414\"\r\nlast-modified: Fri, 07 Aug 2026 03:13:34 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 16048\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16048,"size_decoded":16513,"mime_type":"application/octet-stream","magic":"data","md5":"502ffd0fb8cb5bd7f9f0bd9f59d770a5","sha1":"99e637c9defd2aea3750f577252b49a9f13bc05e","sha256":"36c382eb9bfea7d1c304fc7ed854ad3ab40af356852d7b809e9357b3f8f8e707","sha512":"409ced8d018b00d088b3257c7dc858889a5e63024e7ab17d1db611feb9613191a76a1b65f592c6f52d8f6d7bc3af011c281c810f4afc41126c37b636b8f0dbd5","ssdeep":"384:knRep3sHc4XFTtArF1W+vQVHbkGUS+/KQpiJjXHo:kRe+LbAp1Era/hp4I","tlshash":"e572d0fa2508a26970e8836f9fc2683d54c0dc7a604b41e3781e91c791b49ea875937b","first_seen":"2026-08-07T21:13:28.083405Z","last_seen":"2026-08-07T21:13:28.083405Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/cb96f517a5bb627bfa0257bf8849d14a.jpg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:43.069Z","timestamp":1786137163069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/cb96f517a5bb627bfa0257bf8849d14a.jpg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:12:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8dAviH9gmHvna9JlGBIujCHmHAXvrMPy7JF8Y1ipui55TopfKSLBMywdTUrgoKdPCtlK%2BGBSaFWxVsfOFG0sVO%2FRqtNeCNTs7u7%2BB%2FVKHj%2B7ggVOjkX5%2BN4UTOh\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:12:50 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27947f52dec783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74561,"size_decoded":75188,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 579x772, components 3","md5":"21a19c083e719843c4cb2747aeea1cda","sha1":"5b20a28c5fd8eef55712cff20dce9e7d22f27b7c","sha256":"9b98eb0720e9bc9d6f0675945d7c9b44fb899bd8f61b997e17d4eafb7a62946f","sha512":"1d72f2fa8fbd5c106aacc6736453291125106148bf8c9abb47f3d957b2368143bdbd7f907860098f11fe2891562848867a5ce8c877a345042dc52486bbbed1d7","ssdeep":"1536:RRYihvwz2+r7i0J6GtqBKWey/UxIr1S+1Z3VCb51fyIptLlFCkddBaT:RaLxHJ6RBVZMxIvZ3Eb51fyIpJykdd0T","tlshash":"5b7312583c674514dc0e2e720a6e49fe44ac305c91624a1feab01beeb1717d36bf6272","first_seen":"2026-08-07T21:13:28.084251Z","last_seen":"2026-08-07T21:13:28.084251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7040,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/cda6306c625e163bf7dfa784825091eb.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.378Z","timestamp":1786137170378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/cda6306c625e163bf7dfa784825091eb.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:12:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xfN0p2zDVlzCqonucZwlcU4Th9ODOCEPjBUj%2F6GHemMsl7qXmK2XqFhmblfOn6ymTkMGDkK9Rofy%2BbbE0WoLAyUqgXqDnhOtyU2c%2Fy%2F9s9xmlMnmqouX%2F66A6O3v\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:12:51 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822dd4c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84598,"size_decoded":85223,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 569x787, components 3","md5":"2a7f1c55f03e6464847c9ff9adfff3e2","sha1":"824c97dd8e121819228b6df2939ff158561844e3","sha256":"36d00b296f9a54f09258441852aa618a65833cce2e38eaffd1452a2e98997568","sha512":"4b3f8a2d85a22f085c0e5dcb5555b6e8d5551eaf1c549181ee2259ffc7eedbf101be09284d3ce923aaa886e831f928c9c9d341bb630144febf1a18630ef772c2","ssdeep":"1536:mE4GB4xznT1WM/t6o3zD7nAGJG7YW/bLmC8R+fk6hSFcGtnyilqxm:14txb/6ArJGEWTLZ8Rq5hVGRyium","tlshash":"f3831266d7c754d6acca4930e20a7b22f6c35f9a9249b7a124ca10463a918f09fd2f4d","first_seen":"2026-08-07T21:13:28.08523Z","last_seen":"2026-08-07T21:13:28.08523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1357,"receive":847,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/main.dart.js","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:51.257Z","timestamp":1786137171257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ye5whwa4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:26:05 GMT","end":"Thu, 29 Oct 2026 09:25:55 GMT"},"fingerprint":{"sha1":"D0:E5:57:A6:6B:CE:08:2F:C1:57:5F:22:CD:B5:D7:39:45:31:C8:9F","sha256":"21:5B:28:A5:E1:49:B3:FD:B4:25:40:23:C7:5F:2B:47:E7:0F:D0:7D:6D:22:B0:AA:76:4E:69:1D:50:4D:DA:21"}}},"request":{"raw":"GET /main.dart.js HTTP/1.1\r\nHost: ys.ye5whwa4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/?aff=seo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 21:12:51 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 22 Apr 2026 03:32:02 GMT\r\netag: \"423b12-650042ccd3080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gvgAfo3q55ImFRIinxNlkdQwKG%2Fw92I21HKMUuhRUuKJrtLZbX25Y4Ld2r0xjTqz8NWPb6cbTKug1wAMTDz72GuKCZzkXB%2FfSf53qBB9fuFWpj5sP86BEOGPMKGP5Z6l1s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\ncf-ray: a27948285e38783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4340498,"size_decoded":1288138,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (711)","md5":"0ce534016086a5fdae6dd0c8e7497c97","sha1":"b24e1de8c4725fe6643ddf71cc4caaaf03dddb39","sha256":"67d41c5e5f0e09065cef08266750bd310df6711dac0303d0adf7c71a0b589fa8","sha512":"ef35b2524e53643e72d33131dd953eb288d37d7e874403547ac9977c1f0ca8836933f24aa82f0e881c9c559cfc7b65870a3a9cdbd08b12ef48a65bd8b957148d","ssdeep":"12288:h2v40cCtRYVnGFxqQZtUv4M2/MyVuf6gBcDsfVhH084r3yM4tQrfOdoKo:M/RQOUQ5qSFsJFM4sOdov","tlshash":"3125a6d934f7724df2a250a6330b31a7d919a852a85c4c3c7072ecc6e97867e5622f7c","first_seen":"2026-05-15T19:47:02.303962Z","last_seen":"2026-08-07T21:13:28.086237Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1454,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":401,"receive":1053,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/97cb578c8c8ea57571a8bbd0c71dc3cd.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.378Z","timestamp":1786137170378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/97cb578c8c8ea57571a8bbd0c71dc3cd.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=34ciwRfXI%2FQKUs0fpxB5UrS9sFLmSfbakuyxZAv7pg7DYw1lVCGUn4pQ2UHEjnya3kBQ4dMPuDLugYkkZujDeKoUm85h%2BHqur%2FKIZAxjlO0%2BmClJojfhXav2nSLr\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822dd4b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97704,"size_decoded":98327,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 453x671, components 3","md5":"2ac28a2f34c89db5bcf42f62c00f1b85","sha1":"fe7ff0e1128a76d25c11f4c4e9988e82eb7e235e","sha256":"e9cbc0e2d51d58c94ea0336d702d0a47b942f9244cbe4198cdf148086978e2be","sha512":"a97b0b831534d8d7e115778ed3354b3e07b47a146197b2ee68a8217119feaf4770adeace7a0dabea7b733c5c927aeb0ddf1decf5bc52d8d1859860d26747c0e3","ssdeep":"1536:wRSzRz10nD3VvgYEarM0qKjYfdB7AfJMzGS5WHth3N0gde/LI5RZvc/Lr7lnkaV2:vRqLVFHqnfd2fuzeHql/LsZvGlnkaVQn","tlshash":"ffa3121e2f46a1c168a347cc0b5cac0b05c1ab2e7996ff2c7bc15f12b63a5e4bdc4a54","first_seen":"2026-08-07T21:13:28.087569Z","last_seen":"2026-08-07T21:13:28.087569Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17110,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/9e0d1bbbcc542b5dc02a32ef5d07cb4e.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.387Z","timestamp":1786137170387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/9e0d1bbbcc542b5dc02a32ef5d07cb4e.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5pJXYRv8qilybR%2FfqOzoYWkpGuhZWvLI%2FOfrLS3cNlILv7dQdUSepIVE3e%2FCjFBnVEKWek26aa4MEEgYrHmRg9SeqO3pHGO1Vh2S8Q33kZIqIvKi73sGxu%2BkBGMh\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822ed53783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62327,"size_decoded":62950,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 537x708, components 3","md5":"d8bc68d1240d76a25c7595ada1fc10f5","sha1":"a875b64e5e171c54e84bc9a9cf875490dc2d662d","sha256":"148063603ece17caf6db131308df04a59f1e45dae3619d0bd28d0550956a3802","sha512":"908fd6b53870273d6f98ed0a326c5c5d919d6d57d3adf29b3f8ad85bad1710300eb722a13ed450f1a255bb3e4e8f24c1ed225d6f317511fde1465656b92bc581","ssdeep":"1536:7t7PEjBGQCluDEqDvkpLnDqTo+OaGfUuecP:yjBiczDMlneT7OxZea","tlshash":"a753022f4b52ec829f040d2142db0ca99ff7ae0ead7597b870d9c12da11a35ece43885","first_seen":"2026-08-07T21:13:28.088493Z","last_seen":"2026-08-07T21:13:28.088493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17115,"receive":318,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126753/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:56.816Z","timestamp":1786137176816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126753/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 13:11:29 GMT\r\netag: \"1786108366\"\r\nlast-modified: Fri, 07 Aug 2026 13:12:46 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 16656\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16656,"size_decoded":17121,"mime_type":"application/octet-stream","magic":"data","md5":"64b0bf139159515acdc25d41472e6f75","sha1":"abeba565a1342e3cdf9b925be1e975b00400de43","sha256":"61651035e728efef47b9eaaf131b01be783a9fc140a41c7c82f86841fc2b2747","sha512":"a12c104dea0d1c1ec28476a83d6adf6a3aa3a7a2ebc57974b53113355c747ec894573d08ce9f56a4f7f3e516683b33fc13772abd006bf27b557619cb4890d681","ssdeep":"384:YRCeQN2lYxHmZtpUYNg7uPLOII2G33brh/BM24N6DkNAi:9eQ7mZLNg7uPLOIIxNBM22MS3","tlshash":"bb72d05c3a2310131f36a823bf357f2e13272a0f5f6d964079a76d6511983ee6f76281","first_seen":"2026-08-07T21:13:28.089501Z","last_seen":"2026-08-07T21:13:28.089501Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T21:12:35.740Z","timestamp":1786137155740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 07 Aug 2026 21:12:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WarghEpwE%2FszvSPKPHnRJ84sPu9nhx4UvK%2FVdf%2F0CvpqboZsxJCfGAQdlOHjSH4eZE4TM7lnmt6uPLp2KF%2FPbZwFD%2BrF0QCc5kTIlGF0nwCQ1ScfaPLmCSR9dvKC\"}]}\r\ncf-ray: a27947c79f90783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91299,"size_decoded":16618,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (848), with CRLF, LF line terminators","md5":"c159eb1522e1aac80b54750fdae3440e","sha1":"9137339dfc59bae54fdc63650e1937643c287802","sha256":"16af83d2db9bde734d7ac2a13e0489b847576e3717d012ce4a1d087614fd592c","sha512":"33b44769f58a46b6daa55fadca84a2602d382b8fecef60541a38be8007121f175b4517a1504669576d67521524327cc4b71a3ef9d6802eb6623c8ca0461edf57","ssdeep":"1536:Y77Gz5zwzZzTV76fJEFfhHjcx0eA9AELFPwzyA5:9z5zwzZzTV7QEfHjcx0eslLlwzyA5","tlshash":"5f930d1b208270de31364254d2eba316e4837705c990fe16767c615ab357afaf8e723e","first_seen":"2026-08-07T21:13:28.090475Z","last_seen":"2026-08-07T21:13:28.090475Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7414,"timings":{"blocked":-1,"dns":12,"connect":20,"send":0,"wait":7065,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/assets/packages/wakelock_plus/assets/no_sleep.js","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:54.266Z","timestamp":1786137174266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ye5whwa4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:26:05 GMT","end":"Thu, 29 Oct 2026 09:25:55 GMT"},"fingerprint":{"sha1":"D0:E5:57:A6:6B:CE:08:2F:C1:57:5F:22:CD:B5:D7:39:45:31:C8:9F","sha256":"21:5B:28:A5:E1:49:B3:FD:B4:25:40:23:C7:5F:2B:47:E7:0F:D0:7D:6D:22:B0:AA:76:4E:69:1D:50:4D:DA:21"}}},"request":{"raw":"GET /assets/packages/wakelock_plus/assets/no_sleep.js HTTP/1.1\r\nHost: ys.ye5whwa4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/?aff=seo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 21:12:54 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 01 Apr 2026 07:25:17 GMT\r\netag: \"3420-64e60fc4d1140-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VLTiE5e8ko2UGimxOoRAYYqQ8dfAPKZBNt%2BD%2B1gbCHVOf8BRKfbHZeufkjJdNaQwA8uw6AFSiRA5TYNFLYBzwavfpCSrszDSbS6A6g1GiFhPXAA3%2BJTIP1UKRMitQ%2B29qzg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-ray: a279483b2962783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4872\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13344,"size_decoded":5790,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6482)","md5":"7748a45cd593f33280669b29c2c8919a","sha1":"e17ecf67de61920504d79194dbee5cd552a01cfd","sha256":"dce4eef0b197b640ad6aaab2228ee1ee7dccf8bd6d6b5de5484dd1bd16430a78","sha512":"49b3225a5994b724b16b1890e41697c71096402f48c338fe193cb538ac8f88b7d013c0b70e81786d476be3eaf3170049df1ced6cd8957098fffecf11c13b5586","ssdeep":"192:nRG+Fgkw+wi+FrZJqbzr+5rA7wbUCzebIkuHeIabmEWUSiaNRGApaFnoNhCaTLIf:n/gzi+FrZJqbzrarAyUX5uHej27W","tlshash":"e052b87b25f1bd6acf77146acd1d61002c2ca85f8a1e4961bf4c42989ff06309be5eb4","first_seen":"2023-03-08T09:25:38Z","last_seen":"2026-08-07T21:24:26.445548Z","times_seen":1123,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/127000/127013/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:55.958Z","timestamp":1786137175958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/127000/127013/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 17:31:51 GMT\r\netag: \"1786124067\"\r\nlast-modified: Fri, 07 Aug 2026 17:34:27 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 12512\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12512,"size_decoded":12977,"mime_type":"application/octet-stream","magic":"data","md5":"df43a98aebc9d27469e278d8841780b1","sha1":"34dac0686d1998a92e8bb2c41b8a98a9a682c90c","sha256":"f0e127ebe1d037c54a76d90cc233d489042edebfece6e1943c5836fb29bb12c8","sha512":"44e213f0e493fc4eb349b072ff1fbc45d191ffd44f0cb966389ed92bb2a31bd27332989306166ef3d8b6b7ef7d3de0b843539a2fc3d69cd6f908a04dda0c6cb3","ssdeep":"192:eAC+sKoywfW4MHwvteqEDuyqNvgaayAwWcJP51dwPIfkN4U5:0+foHjBeZ/sUyA9etWIfk75","tlshash":"0542c05748d328420771a15da927087777be4cbd94887723385fac8031eebce80dcae9","first_seen":"2026-08-07T21:13:28.091937Z","last_seen":"2026-08-07T21:13:28.091937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":887,"timings":{"blocked":-1,"dns":94,"connect":167,"send":0,"wait":399,"receive":53,"ssl":173},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/86ca08775759cf463182da02c90e7494.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:43.065Z","timestamp":1786137163065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/86ca08775759cf463182da02c90e7494.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:12:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhAlP%2F7hJhus9gVDNRfTwCLmmL4X2WnPICXLxlWMrY%2BpyQJ4nX2pgNLn7rnbLyRGmkpibNGOarkkHtCu%2FDkj%2BQGHAKEMXX4WovXrTNpue4wssp2KjdwR5DF%2BHnGs\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:12:51 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27947f52de5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120811,"size_decoded":121436,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 500x500, segment length 16, baseline, precision 8, 420x560, components 3","md5":"db77db9b3b3977c0ac620904c2bf8661","sha1":"38f7de378120b324d632d50df50e651d7b9e6f78","sha256":"ca53ea208500f418c6113a510b89cb97e8871c98497deb82f9a6fe4ee73aee01","sha512":"6d0464314afa8f6a855cb6e138a1a1c86702567b908b9004706c6d218ba0d6891733af139c4e429ee25466291e37fbedac945876e0a1c9743ae02d1ae2abfe01","ssdeep":"3072:yoObV0Cz8JEgROF8ThmYnyjENC1KSe64yILdIGLVO8yLzUZ:yomVfWbsB9iyIZIGLWUZ","tlshash":"6dc31296968e1ec7f932b1b194100bc7712b7d6cae79043507e08dadcf84a697ca2f50","first_seen":"2026-08-07T21:13:28.092771Z","last_seen":"2026-08-07T21:13:28.092771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8022,"receive":485,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/assets/fonts/MaterialIcons-Regular.otf","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:53.876Z","timestamp":1786137173876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ye5whwa4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:26:05 GMT","end":"Thu, 29 Oct 2026 09:25:55 GMT"},"fingerprint":{"sha1":"D0:E5:57:A6:6B:CE:08:2F:C1:57:5F:22:CD:B5:D7:39:45:31:C8:9F","sha256":"21:5B:28:A5:E1:49:B3:FD:B4:25:40:23:C7:5F:2B:47:E7:0F:D0:7D:6D:22:B0:AA:76:4E:69:1D:50:4D:DA:21"}}},"request":{"raw":"GET /assets/fonts/MaterialIcons-Regular.otf HTTP/1.1\r\nHost: ys.ye5whwa4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/?aff=seo\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 21:12:54 GMT\r\ncontent-type: font/otf\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 22 Apr 2026 03:32:05 GMT\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"68d4-650042cfaf740\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7Yk1JkpbTHTMJXj6xuhuc%2BUH2aDHF4EQj0mqadCUmNU9%2FlhH8N%2BG7%2BFNh6LUDtghhP8R%2BlZpmW9VRNCWkS3iwrUzQT2ASzmf3X2mBrdVVqaI%2FwL%2BKk5w6FgKljOjp3Ronc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\ncf-ray: a2794838b90e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26836,"size_decoded":16001,"mime_type":"font/otf","magic":"OpenType font data","md5":"8343c5d64a99612b357dbe46cc6653c3","sha1":"97f2a783774e4ed2004e9f30e0a173f0a6a76cc8","sha256":"9c999e463547d034cef78bb8699a8f802a6e8abe170c1e88f02f48029ee4ca61","sha512":"5006978eda9e2fde78963e281f0aca3b08b468e979e5edda8efb771251420bf72b7397b99969682e36bc911eeac72b67271abc32021b0521295ee8cea5082dbf","ssdeep":"768:125tLBUMC24gLlAv82d16cSZjDjU2Xx6Jc1uLIxBm08:10tBUMjZLaJ1JSZHDXx6tIxu","tlshash":"ecc239218c9e8bcde44794f4d3e9093251da470f86074e89ebf7be25f806c64b64ea47","first_seen":"2026-04-07T13:52:55.929156Z","last_seen":"2026-08-07T21:13:28.093755Z","times_seen":9,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":382,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/assets/AssetManifest.bin.json","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:54.886Z","timestamp":1786137174886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ye5whwa4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:26:05 GMT","end":"Thu, 29 Oct 2026 09:25:55 GMT"},"fingerprint":{"sha1":"D0:E5:57:A6:6B:CE:08:2F:C1:57:5F:22:CD:B5:D7:39:45:31:C8:9F","sha256":"21:5B:28:A5:E1:49:B3:FD:B4:25:40:23:C7:5F:2B:47:E7:0F:D0:7D:6D:22:B0:AA:76:4E:69:1D:50:4D:DA:21"}}},"request":{"raw":"GET /assets/AssetManifest.bin.json HTTP/1.1\r\nHost: ys.ye5whwa4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ys.ye5whwa4.icu/?aff=seo\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 21:12:55 GMT\r\ncontent-type: application/json\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 22 Apr 2026 03:32:03 GMT\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"276-650042cdc72c0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfRIrcHnOhboQWIL6%2B7Jh5JOIKkz6WiFmtD9hyxR5LXnZFS%2F%2FGSbEkiZTme0wF%2F9PdWlLynwn2i9BxBlY%2BHM1qYFYch6JjeJmTJOsTAwojymBYw%2BLguwEHQr4vzaEc9F1NE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\ncf-ray: a279483f0a5f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":630,"size_decoded":1170,"mime_type":"application/json","magic":"ASCII text, with very long lines (630), with no line terminators","md5":"a446584d66c82e1118ae2e6579e25114","sha1":"b077ea9079825b2f5740f74f18bb0800616a5499","sha256":"957f0ca018852d7345cd4069bef45c48dc7a641f7f185b9483a6f006798bc40e","sha512":"80998cc618eb56944bb2dafd836aa16462b12f62afd8dfc9285aa391b65c21255e46c4fe3744822296b8251e5a4300d62c9d6ee0afdf38f2e19369f04944ec08","ssdeep":"","tlshash":"31f0e178158c1e02fdeab11baf60ce21178b3c6d01bc535610dbb2378a1a4415c6b5bd","first_seen":"2026-04-07T13:52:55.956796Z","last_seen":"2026-08-07T21:13:28.094354Z","times_seen":9,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/api/videos/index_byall","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:55.002Z","timestamp":1786137175002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ye5whwa4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:26:05 GMT","end":"Thu, 29 Oct 2026 09:25:55 GMT"},"fingerprint":{"sha1":"D0:E5:57:A6:6B:CE:08:2F:C1:57:5F:22:CD:B5:D7:39:45:31:C8:9F","sha256":"21:5B:28:A5:E1:49:B3:FD:B4:25:40:23:C7:5F:2B:47:E7:0F:D0:7D:6D:22:B0:AA:76:4E:69:1D:50:4D:DA:21"}}},"request":{"raw":"GET /api/videos/index_byall HTTP/1.1\r\nHost: ys.ye5whwa4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/x-www-form-urlencoded\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/?aff=seo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 21:12:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\naccess-control-max-age: 86400\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nyfCGCHSSnHE1wf3zlvtHDHj2uZqjNRmh0WPRTyIrM%2FDZA8bSGWn%2FeXbKhVjPmeAB9q86IdAgoIFLwxSIm7bQrv1G5o3uFXZJAV4uqUL1ZFjIhWXgMbGuOi92A028TNUDuw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-ray: a279483fba7e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12644,"size_decoded":10423,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8673890b250729bb7da4bdf8ebe1078a","sha1":"c9a276418be0c68b898bd4b9fd0b43b1272aabf2","sha256":"1eb8ce0dacda994a10d9139efb226e573f3cf82b70b97bbd615275f4a2851ff2","sha512":"09aaa90a2b7155d4515f7ccc5a0e0d8c3050bb3789f59b18ed81c817a6f850bba0fdd78e4776a73526477223ef76fbdee9a9b08108cadd4c0abfc3efea920e4d","ssdeep":"384:mnu4IptBNEEXdDcZvsqRjDyYDqI3p9Ib9g:mSfbEEKpDjqsQy","tlshash":"6142c096f5c22f2dd628710a44bcc7380db407f2e596518b9fcde4a04b06a764f49c3b","first_seen":"2026-08-07T21:13:28.094854Z","last_seen":"2026-08-07T21:13:28.094854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":397,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/favicon.ico","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:55.794Z","timestamp":1786137175794,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T23:24:31.532418Z","times_seen":17769129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126742/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:55.954Z","timestamp":1786137175954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126742/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 19:33:12 GMT\r\netag: \"1786131300\"\r\nlast-modified: Fri, 07 Aug 2026 19:35:00 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 13120\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13120,"size_decoded":13585,"mime_type":"application/octet-stream","magic":"data","md5":"76a9fd2909ddaeddced90f1d004a71f3","sha1":"93a56c4a6539460c89bdc5f806466f4526610661","sha256":"57b778c1745ca4bcdd90ff4d3fce7e799dc8513fdf677836a76c2a591619f878","sha512":"3740b7bb6a1fba90797d9418539c703b1449dd4a8c8831a9e4ee7841d3abbd9fae4e9601873b706ceed1ffc66ded7328f3a9de702b8e14cb171c036c5ebf02d0","ssdeep":"192:f5kyFVXSb7fE34d+ciGsOcWv6MgNUIWMRMCEl5oQUOF0BQyCKtLXjhnBc4wsRc3B:fzSb7EId+x/YvcWMRYoQ9Fu4mVdRh0","tlshash":"bd42c1ed34263eab69567bcbaec308d0d718139f1cc4a1a941c5c7081e8e773f919a64","first_seen":"2026-08-07T21:13:28.096418Z","last_seen":"2026-08-07T21:13:28.096418Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1027,"timings":{"blocked":-1,"dns":98,"connect":178,"send":0,"wait":526,"receive":38,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/36ea2a0b82a50377171b5c1ef61a0cf5.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.382Z","timestamp":1786137170382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/36ea2a0b82a50377171b5c1ef61a0cf5.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FytIkr77iJcNDWn3lb8%2BPnLnLOM5nxyk68vNRDmY7i1mGp8%2F28ea8Xt9jumBSiKkiKXwDdRL9ooCoBAx39h9Riuzvv4uwYwRkN6mGUN1bk2fLOT4Gz3PaSz%2F1kkP\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822dd50783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99074,"size_decoded":99695,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 516x714, components 3","md5":"8d1cebceecf683ac3db4d669504cda4a","sha1":"202f55f2987feb7306bc5387fc29e52c208d06ac","sha256":"fc4cd42b62070b06e0918b40806fe10561aa59344458558fa8b42729619c9866","sha512":"90f0b6b378d1feeac70614c1088ced47a5fe1d35b7fd7f0bb97f37390b093495fd7ef8300a5c43b01045a42d5abd298352ab07d2aa1ac048ffd215fc6cfac2f5","ssdeep":"3072:2z9+LMHe5ehpKZeQAq7T1TXbgFCVYGF46Sc0vUw9:89eM+48ZDfpFPe40f9","tlshash":"5aa312848e317d29a8a1739f283b8f4d7bd97fa0e183249107d15a07d7b44ab1d2c6ec","first_seen":"2026-08-07T21:13:28.097268Z","last_seen":"2026-08-07T21:13:28.097268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17161,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/ed17014d83c128c530a4c9a40d7ea744.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.384Z","timestamp":1786137170384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/ed17014d83c128c530a4c9a40d7ea744.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZeRn1XCVXBcPGZB0nkvQF8t9dUV3p6J%2F%2BenGkBT793hdiGtY7PmMlRJW%2BLiqyVG%2BFKDP15t5yJJAdAwA4GhYX1zAGwTN8W77APxHDbzVEdcZPZzhQwezBd8zWcrb\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822ed51783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54479,"size_decoded":55102,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 444x594, components 3","md5":"c193179cfb5bad4a913756a58832e9a5","sha1":"4e8eede827a130a1f0cb1cbd9c7ffca3a4058087","sha256":"11f6ea3af7e7e55f39be56fa65a1b782af8ce0af0981f9aac5d4863244156e33","sha512":"8ca29ce7c2ee7e42739a35675608b3be8c0f22b30b1e278e154d001cd0268399710ca32c5ddee07da5733f7ac93c0a5e69d0af8b55a25fc55dece8baedb66742","ssdeep":"768:gH+px8WjbfSMFxd8HBKPRneKNLGqs3YM9YsIWFtx0eIR70rPP6H5Yx2UZfquACVt:s+LF/z8yN1FGPYM9YsIWF2eKZWjt","tlshash":"ac33f157270229e1f06d1d35dd3e1e1d9ba81f1502c6c926f85b0f9eba2170f58b2ab4","first_seen":"2026-08-07T21:13:28.098183Z","last_seen":"2026-08-07T21:13:28.098183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17187,"receive":309,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126808/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.355Z","timestamp":1786137177355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126808/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 05:00:26 GMT\r\netag: \"1786078909\"\r\nlast-modified: Fri, 07 Aug 2026 05:01:49 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 12208\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12208,"size_decoded":12673,"mime_type":"application/octet-stream","magic":"data","md5":"de344a4bda91b34d5834b53eb7f1d667","sha1":"27f559a029c10e0abe5d91b967237310d461a812","sha256":"84c510b71d3867f4143301dad743936b174f6d9fa0703bcba0046eca991923d4","sha512":"dd52631d63b7eba8d2c360a83bc46286554d39921fa0cb1a1a3253548410ba8ea07e62da358a68f0892502345724f299ea60e18815cc6210e89f06ef89320ef6","ssdeep":"192:rK7TfwZK8ufT7M6ZNko931oIMDgCIHRyjeups6V+XPFiHSbUh7VpwNXnsJVkyDcG:OmK8uffhgc3eIRxMRpsK+UH5VO1sJVFV","tlshash":"1442af2772996a9343162fd00605e1471b13cbf1a103bf96d892a93ad3df1e1a69d317","first_seen":"2026-08-07T21:13:28.099201Z","last_seen":"2026-08-07T21:13:28.099201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/common/common.js","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:43.029Z","timestamp":1786137163029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /common/common.js HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=86400\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 07 Aug 2026 21:12:49 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1MOiPRmyb8bMaS1MjF9pM%2Br720cAgmnKo8BociebJEapEav7WZt32wK%2FtjyRZtfOo8LUNQ5A1IWiLaEJmOrXeoQ%2B1NEsmYF1c5J7i7iUwtRQS%2FKF8byGB25Hyr5\"}]}\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Aug 2026 21:12:49 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a27947f4eddf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":1328,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"a9422c9ffd205c971d4398577cea83bf","sha1":"d3ed88e6f7c8240f1a3942a9653c184c338fea97","sha256":"32b385fae1248ceb85f92bea969ec354843b5a72d121c0a4428d6d826b876c9e","sha512":"0c7c2b1d7b81039abad5a51c3b9ed5d31dd1d5c58d85d64eb84c74978561c6b3ed3cc3b5c8e6f6c697df14ecb8212a3429ba5249e46f83626aa3f8e08165bd5c","ssdeep":"","tlshash":"8a21417f6d7105a1c53b50ea2db7aa4c38f020277631c01574cdca495f8dd40842b7dc","first_seen":"2026-07-13T07:21:12.26732Z","last_seen":"2026-08-07T21:13:28.100183Z","times_seen":5,"resource_available":true,"data":null}},"time_used":6945,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6945,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/03fceeb5868c1ba827c4fa6ceab9d29a.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.373Z","timestamp":1786137170373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/03fceeb5868c1ba827c4fa6ceab9d29a.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H84NMHMkmy2U%2FXnkenYdN79wcaHsFitB61F%2Fn5oxZbwGwvfXxKSIp9p5cOTyGC%2B99XGAGnXJ8c%2BO6HwR%2FIbKSEhg0DdQ1kYE7WIVV3O8cqQdyrglmg4jjcFwQM0O\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822dd47783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93689,"size_decoded":94314,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 517x725, components 3","md5":"3eac669f892cea5c61e24c161af539dd","sha1":"92216420c382f497b63a9a582b18da05be0725c8","sha256":"aeaed5acfb43e6e51f7eceec31dd600657e144d747ce751ba6f110a334887889","sha512":"4db90d894c1e0a274fbb26f5eb542cfe0a3e0bec62e7da86dbdf817c2d463121a3b9b4909f0cdb7b5a412c09f72d5c227709077d8802ef8ae1df7e0936c2ab77","ssdeep":"1536:xrJoPxVkCz0orGMl8lwan3fjK/OaQWtdjh9u3mEY7Ltj8ZfuhDLoCoyWrgw:xFOaCz0oiE8CanLK/1QObY3dY7Ltj8Zf","tlshash":"c9930253026234f2396635d52c397f0c81bab12f263545baf5c72bc256fa2c940ebda6","first_seen":"2026-08-07T21:13:28.100832Z","last_seen":"2026-08-07T21:13:28.100832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17117,"receive":322,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126818/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.147Z","timestamp":1786137177147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126818/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 10:11:22 GMT\r\netag: \"1786097499\"\r\nlast-modified: Fri, 07 Aug 2026 10:11:39 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 17056\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17056,"size_decoded":17521,"mime_type":"application/octet-stream","magic":"data","md5":"105928ede880b783ac27b78c842b29b8","sha1":"44582d621c75637b6b31a188166090f6971ebe79","sha256":"928ec6d98423737fe6a701d8e440f72404af0a7ce169c081e58de897c28d1a12","sha512":"1f75eba44e7f55d33e41eabe23f648b3530f1352e0e4ccbfa64546abd68270a8d5f2129344a83878b16903d1a791e6791ec5325f6777c645ab362a584311006f","ssdeep":"384:mHagNtSNCFVuixjThKEtOc8QxIxg3Y2MCpU8gphv0ptOkpawQuyRz63K:s/NtSquixj01xAMcU8gcbJ+66","tlshash":"1672bf2479a24f288be765e511ffc3f4d0117bb0de5a0505cb8a0f2a579a26563f6882","first_seen":"2026-08-07T21:13:28.101879Z","last_seen":"2026-08-07T21:13:28.101879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/assets/css/style.min.css","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:43.028Z","timestamp":1786137163028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /assets/css/style.min.css HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=86400\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Fri, 07 Aug 2026 21:12:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 07 Aug 2026 21:12:49 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCW3UVjvZ0eUbs8MgAInuD3foZ46rGlKr1lHogmhfOIrToQh6%2Fv9d1ke1dzooovyzMLqPMv3sSLQ%2BK4AjDjOn27FMJ9vCVUBDlHbAj2Yj%2FAJCTV5FsnaQ%2BhNGuBA\"}]}\r\ncf-ray: a27947f4edde783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26025,"size_decoded":7017,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (26024)","md5":"5e2a73da75a681a917d6e1f3055f811b","sha1":"ef6e931e8b2a793e125c6f793b8d4780a1271ce0","sha256":"3f69d8107b3b45eb747c35fc387fec899ca27a5cf197287f5c818cd705d3b14b","sha512":"3fa3e042667727ca77a64cf064c3882f7784b49e1d4ba10808bdba44a407e8a7ea152b17af693b30c7032f7031f6839ecd55aa902edd343e1e6392def27ebfd1","ssdeep":"768:ENjt7sMQsA5nAy8khbQj/dP+0lYn/itFR/8:bKjvxR/8","tlshash":"f3c234337388263871ffd1a5d954e69a7234a016d3230f9af9f5b23b835e8831735626","first_seen":"2026-08-07T21:13:28.102864Z","last_seen":"2026-08-07T21:13:28.102864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6945,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/421c76231bc5642b34edd99941eb073a.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:43.071Z","timestamp":1786137163071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/421c76231bc5642b34edd99941eb073a.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:12:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6h%2B%2BFJgC57WrwY3Y0DuatCab0%2B7K6A5qojqd9d%2F2iiVSNbobm5TARXfeb7c%2FdRQxETK1BfrFxRtTxVocIoVUesCLaHj1mlHtm7n6vbGxRpWDvhLiIRwobwiUFwlc\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:12:50 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27947f52df0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88048,"size_decoded":88673,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 534x834, components 3","md5":"775793cae952a0f465266f93ae141d98","sha1":"ddc8fa7670c9c1106c93268f81829b5ff5c9ed24","sha256":"88b6be8936492b5d317362e6859504ee48b805c7bec4ed57d039058cfaeac623","sha512":"5ea64570ef25387e807938e9c59c6eac419ecb3acd5f59db5dd2bacc859d3019083a0d053fd1f42c731a35a931c1655e5fe009ea79afe3ba9cc28d4d1f01cc17","ssdeep":"1536:jyzuloeauH8zA6Xb4+pvdw7RrNWE18aZJrDW+UlJiANZAHCTwm7C06Xbi:Gzhmv6LT/w1bCoQryHCTwm7CrLi","tlshash":"6e830293732648f8b4bf8a53c4992ccce0f6c5006c951964e5f4d273f86e9a6168bd83","first_seen":"2026-08-07T21:13:28.103874Z","last_seen":"2026-08-07T21:13:28.103874Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7026,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/e6049bdde510e45ff4b37ffbc487630a.jpg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.369Z","timestamp":1786137170369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/e6049bdde510e45ff4b37ffbc487630a.jpg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mOHIzeN72HgWGCs%2FxZHUku3AK4oJ4d8Pt%2BCneEttSEjufGWDnJLEz950UXsh9puYbNkO5wqQN7z4MBVoUjAMxxhtP8R%2Fhxs9S%2FSDl4BfGXqNBdeLfgbY5HoOUXPx\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822cd41783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25750,"size_decoded":26373,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x377, components 3","md5":"28d52be85e1340a603348d4a93913706","sha1":"f3fbf9854abfd61b3f7086bb773357758f6b7c59","sha256":"13fafd86eec38afc596fb6dbe1437779051930e7cc1154e682f44cb556157f60","sha512":"852af06a3b6b8e4b58c64be98a53043df30e65bd5fabf064ad079fa12df02dd6bff3bf1206494e808d4e17e4ea2b694c2ea882aa9f2a79e6d216aa7f99fc1b8c","ssdeep":"768:xhMX6Cb5dd7V11kSpFdXOyupu7eauAMOGkqSW/:xhw6EFki9mauz/","tlshash":"96c2e291d707d3053f88523d6b62c1e321980e1d72148b71259b93ddb51dffa31b1d69","first_seen":"2024-06-29T02:00:39Z","last_seen":"2026-08-07T21:13:28.104819Z","times_seen":40,"resource_available":false,"data":null}},"time_used":17278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17118,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126809/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:56.945Z","timestamp":1786137176945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126809/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 12:27:55 GMT\r\netag: \"1786105675\"\r\nlast-modified: Fri, 07 Aug 2026 12:27:55 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 18128\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18128,"size_decoded":18593,"mime_type":"application/octet-stream","magic":"data","md5":"6bfb1fe978dc542349527c883e35ced6","sha1":"ca8d29da95bcd40ba7d10bddc99db00e2719fb7e","sha256":"1cc013053ac8f2902a45c2146f9a7b7d5d91ca8a1d18800db0e7528013dad965","sha512":"92ab210fb809f19e61f934516317d1b1ef07801f31ccb20106947278122f2af13d3d44a9a0d2a7c196accbbf57d84318e7fd8cc406280bfd4f5232ece164c2f3","ssdeep":"384:9kEQ3NLbrQUkmU4TxdgLC65SuAaNKrftK2pIeZFkFA:BKNv0tF42C4SBVrA2pIE6K","tlshash":"2682d1f8ea04e32e2bc601ce3eb46c455d12f08a39199930f3d24ad57195c7bf4f662a","first_seen":"2026-08-07T21:13:28.105456Z","last_seen":"2026-08-07T21:13:28.105456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126732/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.006Z","timestamp":1786137177006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126732/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 10:26:11 GMT\r\netag: \"1786098441\"\r\nlast-modified: Fri, 07 Aug 2026 10:27:21 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 15312\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15312,"size_decoded":15777,"mime_type":"application/octet-stream","magic":"data","md5":"a0df03a3c7dc2b88bbe5c40f6f546f48","sha1":"15b9f521d322f093f56e5956f6b8e191a2096a35","sha256":"09b44d748d4c21da4499675854c05dce85d9f26488e5995905df9a71b59d3344","sha512":"d398dca232908094a3cc65d20a6ca5f3cdf9c5968f9cd96288aa686d5a1aac8ef4c94fad75621f5031949ddf9a2f8d85e30bf8693699d9f322388c5bd8a5c988","ssdeep":"384:YpcpZoUWhTHe0F9LVD+Rf4+pBArdtg0n1cOW:YpcHoUW9FdVaRf4kBArdu0nOOW","tlshash":"1f62d07d7d284f8e25ba965017d3da62404e0a02982a0b23fd5d648d25e412cef7b6f2","first_seen":"2026-08-07T21:13:28.106293Z","last_seen":"2026-08-07T21:13:28.106293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126996/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.486Z","timestamp":1786137177486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126996/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 03:26:38 GMT\r\netag: \"1786073238\"\r\nlast-modified: Fri, 07 Aug 2026 03:27:18 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 14592\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14592,"size_decoded":15057,"mime_type":"application/octet-stream","magic":"data","md5":"9dd20338bbc0422245e096f74419786e","sha1":"ecd12f9bfe24f7dfee9a84e008c6037e96f764d5","sha256":"11801fff9e049af4a0845a3bed52c4f78a994001b6ad341a719cc84235ca3b35","sha512":"5e2cc074249e639ae4412b26bbed3b87b273286c23749bf7d9c138703068e3309d5ff90bc74323593fc449ccc1df1c3ea7b3e0587d42bf63d1178cc4a1e72449","ssdeep":"384:RlPa+zlzkdg0KLXdwfS1klvQc3WC9kS3CaDEJY9Z6yi8:r9lz27QklomWCmSnDEJY218","tlshash":"0362cf9bd5fe42e5cbc06143798384dd664e2a62f486cf0654a9bd63c7f0cb1a4003af","first_seen":"2026-08-07T21:13:28.107426Z","last_seen":"2026-08-07T21:13:28.107426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126727/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:56.795Z","timestamp":1786137176795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126727/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 14:08:23 GMT\r\netag: \"1786111850\"\r\nlast-modified: Fri, 07 Aug 2026 14:10:50 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 15440\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15440,"size_decoded":15905,"mime_type":"application/octet-stream","magic":"data","md5":"4b23cf6dd3c98b8a34932313f00c02a8","sha1":"d66de86bea6d9b87036982b612e71663cc465a01","sha256":"dbc8637ffcdd42f8138a902c8c9d01007c365eeef8b549d38f53ce42168fdd9f","sha512":"08a15be4b68a9b2d146906e5d273f4b1faf62e958cbf2fc39f1bf1885c372a0e9b01f38cda630356aacde86862d298c223834ffc884aaaa7eddd0038a877d90b","ssdeep":"384:p9FE59jPhMFNT/zcMLqPVJ1YZ/mI9BlU8bULDU:nQeNfcM2zONt9BlpbUfU","tlshash":"1662c088ee990418bc1aefbc7b36741cc1749accc267b165619e3cdd29117d8cca92bc","first_seen":"2026-08-07T21:13:28.108365Z","last_seen":"2026-08-07T21:13:28.108365Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/5839890bcff07f486b426db360af4d35.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:43.063Z","timestamp":1786137163063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/5839890bcff07f486b426db360af4d35.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:12:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPKFhlyCGV92GkG%2FJSwBDK8D4BflZaX1KWusQW8XOQ4%2Fv2BHGxCiLxWgW%2BsAVyzh0xnzK6jFGGOnl99p9PIA3BG7FO4nz%2F71HVIKM6K3c%2Bx6Z934O2r9OWy3QoM3\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:12:50 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27947f52de4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110824,"size_decoded":111449,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 513x741, components 3","md5":"eca25e43350e0a4a0cf8d14d871366f6","sha1":"c7437b73b8fe30c28746db8cbdf0a4af6cedeef9","sha256":"895638099774534f89e8ae8c3f3e07c84714823ae4da8521a23246f3ac0f2723","sha512":"ff846719ca6f00bd8ab2f0005250490d0b5fffbdae0d08effba38179300b623b08317a67a6989bdc2a81ef17c6432c6de985c7ee1e2837e42381a9d97f431790","ssdeep":"3072:XPsuuAN9vPlC5mOU5BWso79t9dW3Kj3pA5mdxL6:Xu2ZYmf54sy39dWlw6","tlshash":"55b31247f6edd4d4ba2b33798b8c8bf8bffc71a91d990a5371ca1c1b56889014418cda","first_seen":"2026-08-07T21:13:28.109543Z","last_seen":"2026-08-07T21:13:28.109543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6963,"receive":484,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/assets/js/main.min.js","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:43.163Z","timestamp":1786137163163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /assets/js/main.min.js HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=86400\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 07 Aug 2026 21:12:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 07 Aug 2026 21:12:49 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0hkgyexQxRy75YCwUTGgO81KS%2FjBN9W88OEns99PPcZ5sQUs0W7vV0S54%2FSPW%2BZg%2B3OyCLSifJy0MmYoq7uuUXkTTFc%2FfEP1ykQdGy4Y%2Bk8%2FqgKGw%2Fmak4lrV53n\"}]}\r\ncf-ray: a27947f5ce17783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6682,"size_decoded":4018,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3460)","md5":"a078152a6b8dea8ef91cea21703f7955","sha1":"c3e62f0bc34ad79558f29e73d6e2b731fcd25297","sha256":"efef56ace3e9ee0800fa230d1e76db747ec471eeb04a1babce5853d0f8b073f6","sha512":"a55bcf04b96846224dbf7b3360edfa8be0cd276159025e0705c82a3e52d4101f9cf178dba1e4e6ba1a20b006f617316797af450f762ef334c12ab7dba68aa1b0","ssdeep":"192:DWQRg8VhJnTw2Cmy2Fva2a9DwYuxsW6yOxw:DXJnTty2OwYuxyyOxw","tlshash":"4bd1f6f9badd347583e320b5616f2245f2b52a49b8099040d494d0d42dbdd8bc27ffe8","first_seen":"2026-08-07T21:13:28.110532Z","last_seen":"2026-08-07T21:13:28.110532Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6837,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/?aff=seo","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.358Z","timestamp":1786137170358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ye5whwa4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:26:05 GMT","end":"Thu, 29 Oct 2026 09:25:55 GMT"},"fingerprint":{"sha1":"D0:E5:57:A6:6B:CE:08:2F:C1:57:5F:22:CD:B5:D7:39:45:31:C8:9F","sha256":"21:5B:28:A5:E1:49:B3:FD:B4:25:40:23:C7:5F:2B:47:E7:0F:D0:7D:6D:22:B0:AA:76:4E:69:1D:50:4D:DA:21"}}},"request":{"raw":"GET /?aff=seo HTTP/1.1\r\nHost: ys.ye5whwa4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 21:12:50 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\naccess-control-max-age: 86400\r\nlast-modified: Wed, 22 Apr 2026 03:31:13 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S59oHInPBulGzl710C7DBxd%2F%2FoPPHh0n3Chbl5oiay2OXkJZxAtwPiSYUjK5c%2BRooXVkjT%2F8VHAAb8Kokg8gswJQxZeQxZSuQS0pGzqShch57cHZ5yupgzCFN00l6u%2FtZS0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a27948233f6f56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":5885,"size_decoded":2962,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"4ccabccff2efcddb1f1a39b417832672","sha1":"ec2499d8d5ad21094b25b41263cc16dea96d21ba","sha256":"7c056e6e05c9cc9f9b2330dca8d36665f231c4b42adc96aa724f309936ec34a1","sha512":"a38ca1eb6b0d51a3ccea9f57fb1703a82341364aa4978e0d9a4cbe52324c0d49afd63d7c79439b31b52faec9ddcb1facf7769c2241d04c636cc092147a693273","ssdeep":"96:154Ry524u/Yc9aGc7jZLGjFHfMGEWENtu2uCejCSuUyAHxZO+oGq2GpQFHgW8J:12RyoTYcUGcfZLGjFHfMGEWENtu23eun","tlshash":"30c1659a6ae3402fd11392185baff1187138d4438149c898b99c5b1dcf82bd6dde7b78","first_seen":"2026-04-07T13:52:55.941734Z","last_seen":"2026-08-07T21:13:28.11148Z","times_seen":9,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":62,"connect":1,"send":0,"wait":361,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126707/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.341Z","timestamp":1786137177341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126707/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 06:09:04 GMT\r\netag: \"1786083244\"\r\nlast-modified: Fri, 07 Aug 2026 06:14:04 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 16992\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16992,"size_decoded":17457,"mime_type":"application/octet-stream","magic":"data","md5":"79de360a2662a489281feb4910fe8d09","sha1":"11c25d9246fead5599964cc0109b9576c0c5d0ec","sha256":"6af732cdad0b81d319c9bf1c3ae877b0bae2601e2cd00866e5b6d6e961935c23","sha512":"1d18fb2d881faff0bfc4207c07be590a2e8901aa0ae54ee107e170c0885ac4851c9cc0b879001c0e59dc376763b0274f46a03ee47b9b820384f3822175bc3ca6","ssdeep":"384:aXwmBtEBjrhQ6wLmwQaGGOMWEa+0S+3boBNCVuR5F4FGhW3:aXHmMy3aGGOB+WbEKudi13","tlshash":"5f72e173c695ecf9a3470b1a0155660b8aaae2f82d1305377d7ad28b14e127410ff99f","first_seen":"2026-08-07T21:13:28.112483Z","last_seen":"2026-08-07T21:13:28.112483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126778/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.488Z","timestamp":1786137177488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126778/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 03:21:07 GMT\r\netag: \"1786072904\"\r\nlast-modified: Fri, 07 Aug 2026 03:21:44 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 12944\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12944,"size_decoded":13409,"mime_type":"application/octet-stream","magic":"data","md5":"6b132e1ed63104bd10a2a3ddc971e889","sha1":"522a14d8a94746311ae0d53abe63cab1a6a468ad","sha256":"a50e2438bf52f594fae5d99f01201e2f3f89265b4e2ad2783f537ee8523e071a","sha512":"b9753db987c54b761353e1e0c3890590304a09c8f33e3b081cc893f599294279c68894cd47fc6511b6d059bb33c56862fd077e7d5ddc000cbb8206f18a77ada7","ssdeep":"384:MDZcyL1IhVXZ+mCNE+3+4Bky/mm1AIpfmWywij4Aq4YV:fM1sJ+1ASZ1AI5+CASV","tlshash":"cf42cf67b475d79742d54a2ea739329672d8c0513bc23b13f54b843c5e8abec46a80b2","first_seen":"2026-08-07T21:13:28.113332Z","last_seen":"2026-08-07T21:13:28.113332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/dd6f9c7d32499b820e685eed80731033.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:43.072Z","timestamp":1786137163072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/dd6f9c7d32499b820e685eed80731033.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:12:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8uEmp4KM%2FAiSs2YyRs3E2g95pNY8l2dyt2%2Bc7n8da1P8yhIhMUMbhTtWCTDCMPdnAlOSzccGsqYv3e2XBOgR6kiUAru9t06%2BMg12cCEPQnIXOLbaNOsFU5fK65j\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:12:50 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27947f52df4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64053,"size_decoded":64674,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 503x677, components 3","md5":"67205af9084624920ce147fff64dbbed","sha1":"b35daf261f62cda6e72d68ad5f97134c5abc7863","sha256":"1d6005acbd2ad40ab01d562927c62fbf204ba54769633176016b35190048e884","sha512":"1fd68ec322868d84da09b79220c1c50f5c35009033ee9e3249768641196a7bf4e77f25194a83c62a8b28390ac879710cba728b9dbdc74c0a2ce8cfd8f4bae98e","ssdeep":"1536:sWO29f2+0iYjsimdB5pcaqsL3w1NCtaaJ:y2N2Lsi2DpvFTlaaJ","tlshash":"df530242c56dc7d6b9b294f132a1d61c23eb43ed2802ba54a4c84b885d39879dcec778","first_seen":"2026-08-07T21:13:28.114263Z","last_seen":"2026-08-07T21:13:28.114263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7919,"receive":335,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/58d8f48d580b8facd466c4fa9725fa29.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.382Z","timestamp":1786137170382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/58d8f48d580b8facd466c4fa9725fa29.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZzbolcvfBV2ibl0paGevhFiPQBg7%2Flcok6XSA0BgGlh7N0tiQhaJ5l2meG0cj4M6zfR8Ha%2Btn1V009LeaOPxfOW88hJiYRulYTd0mI6tpyPyVB2vHGB4Tf0R5S%2F\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822dd4f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71387,"size_decoded":72008,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 519x734, components 3","md5":"f2ca68eea321ac943f9c3d4092d03d8e","sha1":"8e5ccfdc61a242a845c53d0bc7839cc874fe1379","sha256":"cc6130ea51aae681579efe8f0c5d70a44f73c01d9b4dbd17c23c4e3ab78aa640","sha512":"eeb1e6f14a49aad2819773fe3bda0e8742625411bf71cf4ec82cd70ea0efa6f5bc27e0a2d06d66db6a9d1909a5b85a99d1e2022c52d383b5f96ac1764d3af99d","ssdeep":"1536:GYM8BusWKaYBPBTfJS8ytYVn1eO4KOLV/vYAvFhjR2B2z:7csWKawJS8yOn1APgCFGBW","tlshash":"336302e10370b4e076304f26e8ec1f1a695a5333d650f9f156093a8697a4eeb5ef2338","first_seen":"2026-08-07T21:13:28.115412Z","last_seen":"2026-08-07T21:13:28.115412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17162,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/flutter_bootstrap.js","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:50.873Z","timestamp":1786137170873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ye5whwa4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:26:05 GMT","end":"Thu, 29 Oct 2026 09:25:55 GMT"},"fingerprint":{"sha1":"D0:E5:57:A6:6B:CE:08:2F:C1:57:5F:22:CD:B5:D7:39:45:31:C8:9F","sha256":"21:5B:28:A5:E1:49:B3:FD:B4:25:40:23:C7:5F:2B:47:E7:0F:D0:7D:6D:22:B0:AA:76:4E:69:1D:50:4D:DA:21"}}},"request":{"raw":"GET /flutter_bootstrap.js HTTP/1.1\r\nHost: ys.ye5whwa4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/?aff=seo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 21:12:51 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 22 Apr 2026 03:31:13 GMT\r\netag: \"2134-6500429e18240-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4rRgB%2BPic724wmB6Cwj2ySquqk2NyLNbZZcGQX2TYh7ZpiYe5X58D4%2BVsAZZZvtfU0uRf9fjCaeUtjiVyf6NGIltyDCYvjRG%2BMpU8BO9Qg7fJKgiFu2648WIuDAkAr%2F7HUw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-ray: a2794825fdf8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8500,"size_decoded":4286,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4313), with CRLF, LF line terminators","md5":"819731220b7322961e7565edfb5ba4d0","sha1":"4bcdffd9a71a191bdd021f8342587b1785b3f32d","sha256":"58ceeb60bd6edf03fe8e92a1af6b9c7711aa5ae65480c4b8b08a4292c0d50305","sha512":"9309e73626a8d9789865888aced3c533166468b9f425173efc64c429bad9e496a7879c50e040a70f5294c457265f6e037ea897cf2f155c042d29ef77ede8440a","ssdeep":"96:/p4/4uKRtrGWiau5ZbRtVU1EvWj8RoJJXcvQbRuAaqSifC21PeUM60srOMHYj/m3:/nvXubRtWEm8RoJKvCuAa9iA+HYC2Js","tlshash":"d402c4f21eb3e5391755f940ec3f13a2e28e126b188dd009b2dc5a6d658bc05a8b6f71","first_seen":"2026-04-01T23:25:25.340339Z","last_seen":"2026-08-07T21:13:28.116482Z","times_seen":10,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/assets/FontManifest.json","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:53.506Z","timestamp":1786137173506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ye5whwa4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:26:05 GMT","end":"Thu, 29 Oct 2026 09:25:55 GMT"},"fingerprint":{"sha1":"D0:E5:57:A6:6B:CE:08:2F:C1:57:5F:22:CD:B5:D7:39:45:31:C8:9F","sha256":"21:5B:28:A5:E1:49:B3:FD:B4:25:40:23:C7:5F:2B:47:E7:0F:D0:7D:6D:22:B0:AA:76:4E:69:1D:50:4D:DA:21"}}},"request":{"raw":"GET /assets/FontManifest.json HTTP/1.1\r\nHost: ys.ye5whwa4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ys.ye5whwa4.icu/?aff=seo\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 21:12:53 GMT\r\ncontent-type: application/json\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 22 Apr 2026 03:32:03 GMT\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"52-650042cdc72c0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WG3%2Fm286%2BrrF4RdraPR9AJMWqpT%2F4KNIIpJU7ehz0ARPkg72KCVaLR2oQFWrSBwKG0k4W66vTTIdVDwNY8kHRV4n%2F0EjlbEDT7s6i51YopmxPngtBP%2FOb5bQ%2BRJIaxS%2Bit4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\ncf-ray: a279483668a5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82,"size_decoded":905,"mime_type":"application/json","magic":"JSON text data","md5":"7b2a36307916a9721811788013e65289","sha1":"f83d716c83a8a1cdf2a5c7b5fa387e9a62f2d49d","sha256":"28b1eb2b3d2e1ad60b8c8b0f9100b1ccbf492f7fa97f5bebb51ea97e73926e7d","sha512":"0659dbdc8042768ce6e75c5e36fef1f93fde820dced5e2cf07f0949e59b25f87c01607f97c1926a792dbda28ebd7e4334ad942dfef3782e5ceb61de893f8df67","ssdeep":"","tlshash":"41a0120f005405d540cd9045f0957051e040284b000bc4cad164064493e2130033c307","first_seen":"2023-07-08T16:13:09Z","last_seen":"2026-08-07T21:50:19.11856Z","times_seen":1021,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126967/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.160Z","timestamp":1786137177160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126967/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 09:39:22 GMT\r\netag: \"1786095753\"\r\nlast-modified: Fri, 07 Aug 2026 09:42:33 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 9504\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9504,"size_decoded":9968,"mime_type":"application/octet-stream","magic":"data","md5":"9214c88bc3efff73dc7d86729995fdc8","sha1":"d0778fabc760a7461efbc4ed7f013a13f92f86f0","sha256":"ce253fc297d296f7ff19ee02bb9e65dfd15bace94e194c0108624565ce6ef4b6","sha512":"d9038ef8a104ac1360c6e1b41bb85ee6ad9dd68c31c88c258f4c262e1415e014b256098ad7d2cdf266a57483028fbf56ac6b7e3678c959108bb3a2bca7f0e1b0","ssdeep":"192:63ruxkd5Dxe/P1sG1wZ5LBEaquwoa2WCTDMJ2XYkMVHoSwFvK:64kdJM/P1XOlEaUozDuFxVjw8","tlshash":"a012af300c6e7077b1ad071053ad70a6b16bee6768a68cef5341f60cc86b6978f42d5e","first_seen":"2026-08-07T21:13:28.117574Z","last_seen":"2026-08-07T21:13:28.117574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/127000/127039/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.218Z","timestamp":1786137177218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/127000/127039/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 08:55:38 GMT\r\netag: \"1786092938\"\r\nlast-modified: Fri, 07 Aug 2026 08:55:38 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 12592\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12592,"size_decoded":13057,"mime_type":"application/octet-stream","magic":"data","md5":"abaa811984d3a48493587135e964d13b","sha1":"fef5d57756c261988225a783a8c9a45602ae6316","sha256":"4664a938899b36b4c3ffcac6d44c519e050cf1d8171d98c2cf533a81157ea26a","sha512":"92931619f2ec6d476de2459b301108b121b0412cf93347c62b97f8b9a440de70dcbd0dbbc20070473c35cc85b116fe7724f2339d852bc04c142c1d939467c2eb","ssdeep":"384:vhNOeiBx3KdPVF4PpxUZSwH3iqSOHwKgvWJG:2lxadPVYU8wXLrgvWJG","tlshash":"9042c0aa93d6445d74d5c2ed0aeebb44cc2d20c10c3827f725a903e2b5d5eec195df1a","first_seen":"2026-08-07T21:13:28.118687Z","last_seen":"2026-08-07T21:13:28.118687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node92.aizhantj.com:21233/tjjs/?k=pe22xwv6ojp","fqdn":"node92.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.357Z","timestamp":1786137170357,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tjjs/?k=pe22xwv6ojp HTTP/1.1\r\nHost: node92.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T23:24:31.532418Z","times_seen":17769129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/f680b34138e9267e7d519c7d77182d9d.png","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.368Z","timestamp":1786137170368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/f680b34138e9267e7d519c7d77182d9d.png HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/png\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlKJQU7XXWljSeYId7gFw3MLjdwFTMPZcMH6VA4T1dyLDrCrRj993hbF9ISLR3YQGsgu5d%2B3iwDj1DNtm001iKLYA%2FfiD27%2BKjfDT5xa0g51Iu3Zxs16tw4XqGkj\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822cd40783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":845419,"size_decoded":846039,"mime_type":"image/png","magic":"PNG image data, 517 x 708, 8-bit/color RGB, interlaced","md5":"38baeb84e6cd20ff315f85a7d410c0b3","sha1":"9db1760d0d8f26fa5e62511b7ebccd984186dc7a","sha256":"034996166db79fc7f23d4cbe4422242e148f2eb5ff7926cef673e8fc44b12afb","sha512":"6ca511dabfe476f1df6463a1a26cdd93b9e7dd1641e7ba0f09abbd6cd316545071b61ffea87bfdbd7509e7da5b700618754ab1053c74644b05de9e23a6ddc59e","ssdeep":"24576:cpg5Le/bAGdQaODenpIsd5bxWJSNlL4fDa5LSvZ:cpg5LeRape55bwClL4fDa5LAZ","tlshash":"4705235659c70a83ae7c3127bd0cec3536282da0355a7270c29e46eed7ffb692736214","first_seen":"2026-08-07T21:13:28.120149Z","last_seen":"2026-08-07T21:13:28.120149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17228,"receive":1040,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/639efbf594c5d97b9b74d80ac650c868.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.380Z","timestamp":1786137170380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/639efbf594c5d97b9b74d80ac650c868.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KamQYjHHjH88wIT2gzX4N4Z504yzhoy7wEKJLqr3Sps9Ekbjg7U7jg9kKcWbH7IDLQehefBvMC3uR%2FRCMxSlfZtJY7hniEaQbdQhTNItLb5Cl7VX23HDnLZT4TpZ\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822dd4d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73914,"size_decoded":74531,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 445x632, components 3","md5":"57f812e3954f2adc34f23d8566b1f0fe","sha1":"352f63f09fb16b0987e37babf372e25bbe805d8c","sha256":"74b90b0329615410e46fc83c350819f18e7450f0af36bd098a48dd092fc9879a","sha512":"ae22fcc17bca578d3dfc064d3d4e77a57def40966e23fa519e35d3f3c136bc0021cc0223a8ee9217a7a353e763b7380689906fb7b9de267895af4cad526edcbc","ssdeep":"1536:K3aktOBgICrFVzYBncVfZmSGVzqsaIFvreY8JzrauaeIvf3m:K3fOBrCzycVgJNaIFvrq12uPIvfm","tlshash":"cb730241164266d9bc9649810d861b2431f4e8bce48721cd4e91cfbfd378cbe879fe66","first_seen":"2026-08-07T21:13:28.121309Z","last_seen":"2026-08-07T21:13:28.121309Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17138,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126662/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:55.961Z","timestamp":1786137175961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126662/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 15:47:48 GMT\r\netag: \"1786117668\"\r\nlast-modified: Fri, 07 Aug 2026 15:47:48 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 16448\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16448,"size_decoded":16913,"mime_type":"application/octet-stream","magic":"data","md5":"2a563a6597d1857b25dab3b348b28819","sha1":"0d59c83178c217f41e9fab4ff41ccd56e885570d","sha256":"177498cd8fb27a298a042ef626c08ffd584fa94e24224cc1232c1cf9e9d5ff83","sha512":"d26089dccb8268aa7d2c5af12e462b4cbb7b29cbb5ccec273a1d9f97befad93022816e231d0a303d871ae57f143e9ff1cc60dbcdd04775837a7283f5702b50a7","ssdeep":"384:3BiKbHiA23fx+cB4Asf9OOWu7gUqQ7NTqnRmvr:3AKbI5+DAsFGu7gUquyRmj","tlshash":"4472c0623610f74280828c8afbe1d898daf23d11dc12eae5d5d1d18f395cb61326e9e3","first_seen":"2026-08-07T21:13:28.122446Z","last_seen":"2026-08-07T21:13:28.122446Z","times_seen":1,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":-1,"dns":91,"connect":179,"send":0,"wait":481,"receive":46,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/127000/127038/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:57.223Z","timestamp":1786137177223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/127000/127038/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 08:45:11 GMT\r\netag: \"1786092314\"\r\nlast-modified: Fri, 07 Aug 2026 08:45:14 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 19712\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19712,"size_decoded":20177,"mime_type":"application/octet-stream","magic":"data","md5":"b4ec1d357f4f5248c55056cca4946ecc","sha1":"0f4b3a9a08123c3b9da01d4df23fb9bd8c17a9bd","sha256":"20a6339ba690801bd740855fab897f035b544e2ad8712ee1db2d57236c5c6f6c","sha512":"95a0438bc055294bb03ab4cbaac3da34e1ec6ca922d365f013bb57381944564085e5051cd4db1cb7650fac3c53cb400956c6332d18abc8c24f6280c091c2e349","ssdeep":"384:NYuC6qODW0eOGEGkLDy9B1kDoR02U2ITLHzUdJVsai:N/D/NeqtYKoR0llnI4ai","tlshash":"5992e1e2a5c936136dd86e6ab31009d1500f052f6617a956299d5c03fbb133c927a3bf","first_seen":"2026-08-07T21:13:28.123316Z","last_seen":"2026-08-07T21:13:28.123316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/936c900c9e48bfd3998f0211f14950ff.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.372Z","timestamp":1786137170372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/936c900c9e48bfd3998f0211f14950ff.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVip8EyZKS%2BpHgx2KqDONA%2F2rk062%2BgNAaxJXlcsyzZLik%2Bu9qvt2inylwsAAFUa43RBN3ESaSsPjWxBeo6RS1%2FT%2BTvHr2l15vUKwJ3s7swmP5awClfufCbTF9X9\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822cd45783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56399,"size_decoded":57026,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 500x684, components 3","md5":"b8a7047f107daab81fe81d2ff606b14a","sha1":"4956a79cdf1f9dc4373e776fae55ebefb0cc1436","sha256":"21e21337ff1278b862c5f9aa3b01e0ebe5efffe9b691fb4c052304602d947ff0","sha512":"4faaa86ec30aea10cb19a21186ea0c226ded3a773a88ad4c28748abed884d65d496d665956cf45ddbf650f44530f0459d17e87cd9259928bed05fb516e71a388","ssdeep":"1536:bvTsHRyH9XOrgH+lzuEVkFRnEDKgmcMQgOfs87:zTsxeigelzxVWEDKgL3gZ8","tlshash":"ce43f127b64d01c3b5adc252c2da5e5490ca8e4607fea32715d6222fff7c26e51e24ce","first_seen":"2026-08-07T21:13:28.124317Z","last_seen":"2026-08-07T21:13:28.124317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17158,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ys.ye5whwa4.icu/assets/images/logo.png","fqdn":"ys.ye5whwa4.icu","domain":"ye5whwa4.icu","tld":"icu"},"ip":{"addr":"104.21.45.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:55.256Z","timestamp":1786137175256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ye5whwa4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:26:05 GMT","end":"Thu, 29 Oct 2026 09:25:55 GMT"},"fingerprint":{"sha1":"D0:E5:57:A6:6B:CE:08:2F:C1:57:5F:22:CD:B5:D7:39:45:31:C8:9F","sha256":"21:5B:28:A5:E1:49:B3:FD:B4:25:40:23:C7:5F:2B:47:E7:0F:D0:7D:6D:22:B0:AA:76:4E:69:1D:50:4D:DA:21"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: ys.ye5whwa4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ys.ye5whwa4.icu/?aff=seo\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 21:12:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 09:30:12 GMT\r\netag: \"3b04-64e1243ac3100\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tdJ8IpuF5tJ3M39Ne50XZPIPfejEtPMHlfRpPCmK53DiX4KIuRRuypJu8d5tLvE%2BBI4oHqhOS3PNqlDVtvmxZ3LvKstJVwnhqbJRp0YQkjdy1chwUjwXijlcGNoYkGruOb4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncf-ray: a27948415ab2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15108,"size_decoded":15967,"mime_type":"image/png","magic":"PNG image data, 332 x 102, 8-bit/color RGBA, non-interlaced","md5":"a187b717eeba8ba8f96af66fb74c93dd","sha1":"fd640cdac77d502c2b356c1a9aab3387e7e8395e","sha256":"00590c34dfe04ff1b925d763e4aee956aea37996bf2186281788f05a46702b0f","sha512":"5e9845ad14c79e02c732ccfc709e335401a2f4366e0cc7eaa1d5ae17b1a71d7c602143c692d978d17cac96d1ebdd9ce2404fc952b857213e91dc6a2d47f0a353","ssdeep":"384:ryf3DTsRuremwkh+QtHQ//8iHk1x7bpkG++y7go:iWur6NQdQ//8iEj7bqG++Kx","tlshash":"df62cf8ca5004c7042e71b4174dae276ff5efad01659cb7be2748ba2d98eb32190b531","first_seen":"2026-04-01T23:25:25.348542Z","last_seen":"2026-08-07T21:13:28.125533Z","times_seen":10,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic-c.pigspic.org/contents/videos_screenshots/126000/126636/320x180/1.jpg.aes","fqdn":"pic-c.pigspic.org","domain":"pigspic.org","tld":"org"},"ip":{"addr":"38.145.220.52","port":443,"asn":18978,"as":"ENZUINC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ys.ye5whwa4.icu/?aff=seo","date":"2026-08-07T21:12:55.955Z","timestamp":1786137175955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-c.pigspic.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 15:33:54 GMT","end":"Mon, 07 Sep 2026 15:33:53 GMT"},"fingerprint":{"sha1":"FF:7F:29:BC:CF:57:7E:0F:B1:61:62:00:7B:BB:6C:9F:16:23:77:81","sha256":"EF:42:76:D4:AF:15:57:A6:3A:D3:FC:03:AF:76:C1:B0:77:48:10:F1:44:60:DB:B8:B7:44:85:B1:13:4E:4A:39"}}},"request":{"raw":"GET /contents/videos_screenshots/126000/126636/320x180/1.jpg.aes HTTP/1.1\r\nHost: pic-c.pigspic.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ys.ye5whwa4.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ys.ye5whwa4.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, DELETE, HEAD, OPTIONS, PATCH\r\naccess-control-allow-origin: https://ys.ye5whwa4.icu\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 18:50:00 GMT\r\netag: \"1786129554\"\r\nlast-modified: Fri, 07 Aug 2026 19:05:54 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 16960\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16960,"size_decoded":17425,"mime_type":"application/octet-stream","magic":"data","md5":"b3bc024eb01729d70fca5b62615bb471","sha1":"54264a96367bd2e2cb56d1bed0dde8b4d305d45a","sha256":"ecbc2a8f8044d7153e5439bfb186b1e73cb1a77cf1b3000cf1d37348e6875573","sha512":"ba99ea391283552e684c297df90dfce2ccd961c64e6ad7820911e4cd70df18d4e7f6c288b6f0e64e3a4127b96d950fd32356ddcf91c721e5d2539f7c2748f507","ssdeep":"384:08XKHaWLgO6b2BWq8Wsj+trfDa8EaXrtsJXRf:08XpWX58otfDa7abmXf","tlshash":"8672e1de4ada0389c50348fad54969208e4c7cfc2a3e0d1fa869edde143940eff54a25","first_seen":"2026-08-07T21:13:28.126194Z","last_seen":"2026-08-07T21:13:28.126194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":96,"connect":166,"send":0,"wait":329,"receive":72,"ssl":172},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-07","alert":"Phishing Block","trigger":"pic-c.pigspic.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/29ba6a74ad72d6d999d35aebe121f84c.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:43.062Z","timestamp":1786137163062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/29ba6a74ad72d6d999d35aebe121f84c.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:12:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pm%2FEZyj31yzJ32Oi8w7KFGgFDEeA7foE%2FlAgzPnieagnz9idpqDmjCIfXcQWoueqNDjK9LGRwO%2Bu9%2BQG%2B2u1qXUXGHnZqa7okzfCwlLz3gUahQwrWoReo9rZY8Lq\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:12:50 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27947f51de2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130899,"size_decoded":131524,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 531x731, components 3","md5":"04720b344d22584db1e38dcecd06e026","sha1":"a4c3a60ac53cd4075cc12e3824241ccfaab4e679","sha256":"8689dcfbe959e8a32e581d5ed8ca4f6197a45356ebdc55482b676af28141e52d","sha512":"779f07db550bfd0dd4bdaac150e17ae6cbec4f9c4c210b46e6fa42d2e5b550e672104f0f16a0991407063732586456a261ec1fcdc726e3bedceecfd109391a89","ssdeep":"3072:Il4L4Vewvp6i7dDIM72MNE8IgEumot5Ds4fSo:+4lwh6itvEsmot5Dsw","tlshash":"54d3137de5de128e7aae3747e578174b686a2d0840ecc7c47a97eed0d785a007c5c223","first_seen":"2026-08-07T21:13:28.127192Z","last_seen":"2026-08-07T21:13:28.127192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6968,"receive":1436,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/242a69a404915a36830b2fcfc5c02e14.jpg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:43.061Z","timestamp":1786137163061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/242a69a404915a36830b2fcfc5c02e14.jpg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:12:49 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SItxRfoawi0meu0YqDpznT%2BM1yBUOJNVGXAHp5HpfgyS1j1cTuIt43j5nO%2Fudh7Re8fET6Ez2alb43idn%2FourDOxrJVNT3yq44G3lW8e0BzRKIhJrvXPhfxtwEEO\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:12:49 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27947f51de1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21808,"size_decoded":22429,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x366, components 3","md5":"fde9c6b9f5b820a5c39b43375746e361","sha1":"92b013084ca19b085cfaa826fed4e27ca235cd79","sha256":"ff227c8138d206b080f00b0de09966226d222e34c9396d9662642a4760547497","sha512":"8694e31a9aeb87d2120ea846c7ba41cf741a832ca0058db7e8c6a1e6d331067bd032343978487f7208f0382557432397aa7801e8c798bef294b9328f7e44ac95","ssdeep":"384:6QQfboGf0fuJUBsaU1BkOwirjFoUc+Sw9OE4JwWfX8S5rKiyh:6QQfMUmqUBvU3oir+gib5m9h","tlshash":"e6a2d03c96242b3a4b768210536177a574b916817463f3baeaf741ecd072e780b98adc","first_seen":"2024-08-29T17:49:42.812103Z","last_seen":"2026-08-07T21:13:28.128139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6943,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/ae484168ea46efc99e2d705caf1fad0f.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:43.066Z","timestamp":1786137163066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/ae484168ea46efc99e2d705caf1fad0f.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:12:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i17w8xOnqcgYs45VdfrxlPegtc%2Bz5nK40Xrsnp0D9xg27CIfeuvmdnt03p2jSkC5vDNRpVDeEe%2BtmT6IyPLvLvXTIr3sY9A6EeWid1rQxpasveSjMtz0LZM59XwX\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:12:50 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27947f52de6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129811,"size_decoded":130430,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 485x712, components 3","md5":"d752c99f5f3730a908480a6fe70b41f8","sha1":"b7334a9a32e69ba97c3cfe51ffb5d5167baed6de","sha256":"a6ae77837e3cff79dfc51d3a9dddf31fad878591719eeaef141e7f184bef404e","sha512":"651ce1dc6c238c3c646db47531c953c54adf531ddd88f54654b1c03074cd519bbc0e12c9882f0795ef43d76b4605fd21a61587f498fe7c47f686f3555e543a79","ssdeep":"3072:n0tyQTtPEUeiAZY5LhJoddQY7sUHqrahToG2:0tyQZPNeiAZY5L/o/soqWhTk","tlshash":"65c3124675086a56773d5834622a8d2080c49e079ae5dcb74bf63929f38c836dce2dff","first_seen":"2026-08-07T21:13:28.129134Z","last_seen":"2026-08-07T21:13:28.129134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7015,"receive":483,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/0e3f4a489e73b2280b04330b50b8fea3.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.371Z","timestamp":1786137170371,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/0e3f4a489e73b2280b04330b50b8fea3.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T23:24:31.532418Z","times_seen":17769129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/8cfa49bfb3f0092e67d7711816f6163c.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.377Z","timestamp":1786137170377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/8cfa49bfb3f0092e67d7711816f6163c.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgzbVZph4aIJlz7om1G4gRZcQ%2FOkRmcSx%2FcqZx7wm%2FqerHuQpTB7eBVPpluj7SZ2Y%2FFlXCEgpOEo%2BU1Zswz%2FvCF%2FNc2Ecjg3nVH1iNz9u1Iv%2FsHVa%2FVDTwhYZeNI\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822dd4a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236171,"size_decoded":236804,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 598x851, components 3","md5":"16575d0108825d33249383419f15c973","sha1":"7c6eef5f75a97526915affcff743539ea0da2966","sha256":"bc0adb325bd74c9054271c8c42c29207ea5e5b2689936447501967088c30bc73","sha512":"f58ecfc313e86a2be208e903a67c5d979076bc291f2d37e314ffb21a27e8db444e58521696f07fa065848efb74588975f07c82ca0277fed68b55047fdc4e30de","ssdeep":"3072:Oat4Y2XHYMmrrae6Fu1DekezEz65cYwccZAZl9qZ7zmSwEbqJ6Qp4Vl0r5jC1cl7:RDJMKrt6wotjPqSNoyIWVjC1xE","tlshash":"183423bc4959180373b9c2d8e1bc5adffe18f42e64c9a768a716021727ea4ec154c3ed","first_seen":"2026-08-07T21:13:28.130005Z","last_seen":"2026-08-07T21:13:28.130005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17195,"receive":641,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/1f6d1a3c85584809f584dd9ea23a01b7.jpeg","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.386Z","timestamp":1786137170386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/1f6d1a3c85584809f584dd9ea23a01b7.jpeg HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/jpeg\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0pduBavw9SLJd0U1xzjN579C9DRk0fzHHIRiTwuxliDY3y%2FdHvCHaGXaxK21vj3GiSs3yjHiuru0FT46bgvULOcRIaPbMR5qkLiJGyxN8l5HNEQO1fMeznM9HNf%2B\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822ed52783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78562,"size_decoded":79181,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 563x742, components 3","md5":"3149485e0297cff2eeba570a66d1bd8b","sha1":"62a63dda2ef811bdf222541c7c2407d714d22789","sha256":"3e52c4844fb16feab51570c50ce3f5d44d580da871d3e6294062d533b6392a2c","sha512":"c7c5e72be302059e27873a48e00a3cf16da71bc88f6ea6a3ea76a5da4e7ce11a2f6486b593a70b338b312fb500fc80215f5b545dbdd1a21f2836d24abe2ce7ac","ssdeep":"1536:K9cGD0VDFKqdQKsUsLFXA0aoeRkTs9UMqr7pdW1eJEgJ0GPRMfgr9TCfdN:K91DcKWQxVLNA03UzWMAlLjJcgpTCf7","tlshash":"fb73027042e9e57abc399b324c57463fa6f5fcf688f0db12f6a2964a1f0534150368b1","first_seen":"2026-08-07T21:13:28.130929Z","last_seen":"2026-08-07T21:13:28.130929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17186,"receive":310,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stggas.com/images/287ed38f17d2bb1ed5773b928ca58dc3.png","fqdn":"stggas.com","domain":"stggas.com","tld":"com"},"ip":{"addr":"172.67.133.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stggas.com/","date":"2026-08-07T21:12:50.388Z","timestamp":1786137170388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stggas.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 07:33:29 GMT","end":"Thu, 24 Sep 2026 07:33:28 GMT"},"fingerprint":{"sha1":"A8:D7:BB:09:FB:B1:2F:82:1E:8F:D2:97:06:DD:64:C0:7D:52:85:C4","sha256":"E5:E8:73:E6:90:D4:62:6D:77:1A:BB:12:EE:AA:2F:D0:F0:5A:BE:15:C9:EC:B9:A0:AA:1F:B5:1E:A4:C1:D6:45"}}},"request":{"raw":"GET /images/287ed38f17d2bb1ed5773b928ca58dc3.png HTTP/1.1\r\nHost: stggas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stggas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\ncontent-type: image/png\r\ndate: Fri, 07 Aug 2026 21:13:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BW2qBJNwxEoYYyftba%2B3pbyEYJ7w82eDXq4RJmD5OsySxF2wr2wr%2B6M20GRwAEphLr7goqGsTuNMRpGD0WG8sBc5eT6jkeVb%2FBqsVY8OG5fbFjgyTCwLZa%2FGYpjh\"}]}\r\nlast-modified: Fri, 07 Aug 2026 21:13:07 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2794822ed54783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":733689,"size_decoded":734311,"mime_type":"image/png","magic":"PNG image data, 532 x 749, 8-bit/color RGB, interlaced","md5":"9169bd321039dd13f931078892ff76da","sha1":"c64ec6b03315b57e6585b3a517209186cfa3edb0","sha256":"d08700db8d95e6b61181da5874cb7d91fd775de53f231a2ab66d79baf305d0c5","sha512":"b770c2cc863b79925cf7f39b9b772184a72653cc7749c66e6daebf308cdaad95a13df8231cbf4e2938ca7abf2a760fc63a10ce79cb065f20d97b88afacc98cfc","ssdeep":"12288:2x3mTOIuh+rReIpur/+GSojNLUu80Iof4WSTWaXLje0J4S9YC4egJOkqXGOV:2x8OIuWvpurN1+u8EPSy+je03z3mOkqh","tlshash":"1cf423cfd7cba8c14927243ab801bc5774cb4434e9729ae50427967f116ef338ea9e90","first_seen":"2026-08-07T21:13:28.131908Z","last_seen":"2026-08-07T21:13:28.131908Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17255,"receive":818,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"stggas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
