{"report_id":"d3f2982a-1f3c-48a8-b2fa-5b11403415e7","version":6,"status":"done","tags":[],"date":"2026-01-22T00:00:04Z","url":{"schema":"http","addr":"porntee.com","fqdn":"porntee.com","domain":"porntee.com","tld":"com"},"ip":{"addr":"172.67.161.178","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"title":"The Nude Bays - Free Leaked Onlyfans, Patreon, Snapchat, Cosplay, Twitch, Nude YouTube Videos \u0026 Photos","dom":{"size":100393,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"38bcefb0091101ce208f8aa215cc2cc6","sha1":"06af417c06ce3d6e7f9b5086066b2a647b20797b","sha256":"779415b2dfb3b398ed52476efd404fb896748eceb5ec3b9f313c565149a72c3c","sha512":"2c939817ae1e346b6733036dc72ce8c90d315b5b0644e440ceb79a377033097f503d481310bea6ea4c66f36ba7ba3244e5338454737564f0f90fece023e9ade0","ssdeep":"768:iFF0+MBJPuOuQ7lgRuPuFupuRKKZQMSLcVXaN7Z8:cC+WDgLKKZQMSLcVXaN7e","tlshash":"caa38c6e3e91114096234b6c53de4e745b38d027541aecbff3f284ab8f86e58a7c911b","dom_hash":"domhash354304df44e8d90d8d9ede1a27b74cfa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"porntee.com","fqdn":"porntee.com","domain":"porntee.com","tld":"com"},"ip":{"addr":"172.67.161.178","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-26T00:00:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":22}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"burglarycirculationintense.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"burglarycirculationintense.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"burglarycirculationintense.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"u3y8v8u4.aucdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2026-01-21T14:08:56.841108Z","alert_count":17,"request_count":17,"received_data":111393,"sent_data":13594,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2026-01-21T11:51:50.651809Z","alert_count":36,"request_count":9,"received_data":18749,"sent_data":7518,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"burglarycirculationintense.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-01-17","domain_rank":0,"first_seen":"2025-09-13T21:54:32.464611Z","last_seen":"2025-12-30T03:27:17.670676Z","alert_count":6,"request_count":2,"received_data":188572,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2026-01-15T09:04:14.180209Z","alert_count":2,"request_count":1,"received_data":377,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":3,"received_data":103166,"sent_data":1649,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fuxtube.org","ip":{"addr":"104.21.25.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-27","domain_rank":0,"first_seen":"2026-01-22T00:00:09.364421Z","last_seen":"2026-01-22T00:00:09.364421Z","alert_count":0,"request_count":1,"received_data":133454,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"siztube.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-17","domain_rank":0,"first_seen":"2026-01-22T00:00:09.377356Z","last_seen":"2026-01-22T00:00:09.377356Z","alert_count":0,"request_count":1,"received_data":133457,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2026-01-21T22:18:52.236505Z","alert_count":4,"request_count":2,"received_data":171912,"sent_data":824,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-01-19T00:34:04.865491Z","alert_count":0,"request_count":2,"received_data":1695,"sent_data":907,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-18T22:20:30.851037Z","alert_count":0,"request_count":1,"received_data":433380,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"u3y8v8u4.aucdn.net","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2022-06-27","domain_rank":57444,"first_seen":"2022-08-08T13:30:47Z","last_seen":"2026-01-21T16:32:10.049705Z","alert_count":3,"request_count":3,"received_data":10454768,"sent_data":1647,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-01-21T11:51:50.559331Z","alert_count":0,"request_count":1,"received_data":6707,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"thenudebays.co","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-18","domain_rank":1008374,"first_seen":"2025-02-26T17:50:08.03352Z","last_seen":"2025-03-28T04:51:50.752069Z","alert_count":0,"request_count":64,"received_data":2926542,"sent_data":31451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"PHP:8.4.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"porntee.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-21","domain_rank":0,"first_seen":"2026-01-22T00:00:09.373498Z","last_seen":"2026-01-22T00:00:09.373499Z","alert_count":0,"request_count":1,"received_data":133449,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s3t3d2y1.afcdn.net","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2022-06-27","domain_rank":0,"first_seen":"2025-11-21T12:51:16.33547Z","last_seen":"2026-01-16T22:48:38.014491Z","alert_count":10,"request_count":10,"received_data":654548,"sent_data":5176,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"63.182.98.28","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-01-21T11:51:50.493017Z","alert_count":0,"request_count":2,"received_data":846,"sent_data":888,"comment":"","tags":null,"fingerprints":null},{"fqdn":"go.xlivrdr.com","ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-22","domain_rank":49821,"first_seen":"2021-07-02T10:51:24Z","last_seen":"2026-01-19T06:56:33.264657Z","alert_count":0,"request_count":2,"received_data":7667,"sent_data":2202,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-01-21T15:34:58.238058Z","alert_count":1,"request_count":1,"received_data":1786,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2026-01-21T22:18:51.784474Z","alert_count":6,"request_count":2,"received_data":1060,"sent_data":1532,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"a.magsrv.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":51490,"first_seen":"2023-08-04T16:18:00Z","last_seen":"2026-01-21T15:47:31.335593Z","alert_count":26,"request_count":13,"received_data":2427230,"sent_data":5382,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"video.sacdnssedge.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2024-01-30","domain_rank":155152,"first_seen":"2024-01-31T13:27:57Z","last_seen":"2026-01-16T16:40:53.445388Z","alert_count":0,"request_count":2,"received_data":1622121,"sent_data":1082,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2026-01-21T11:51:50.959581Z","alert_count":8,"request_count":4,"received_data":88902,"sent_data":1872,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"69db1fc1f0f27d255a922a2bb0d1cdd1","sha1":"12feed8f6f141feb89eae7fc5527d2bc3e34170a","sha256":"3599519f5da7e5f17ca5f92f820b72e9af407299b5d0c61a3b17300673a9c238","sha512":"2cbe4234a55cdbec6aac82717d90c81da55d027082b8f8b8095485d6211e9184f98d9a14df252a42ae2457a38ba9666dd60ea8ffb2096389cd969bba14b4adf6","ssdeep":"","tlshash":"bcc02b8c31025c7801df0741075fb30166413010888008300402b2452411c639391840","size":134,"data":"","first_seen":"2026-01-22T00:00:18.053694Z","last_seen":"2026-01-22T00:00:18.053694Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633881b688e928a7ebd1f73ed85d1666","sha1":"41589cdd5b20d80a628302c371b43122093ce65a","sha256":"4f428961303e77b60f264865b10fe5398d6bde2662021f1edd6bf6f2b60c31ae","sha512":"20a69c9babbfffebf379eee35c194d0bb4dcf591deede69fcc1c2b8fac80049f6e072313acb28168f3377c9ad263237f4905c21b1979d7dcee735387447c0c9c","ssdeep":"","tlshash":"dc9002392043409e402e48606b521a08ee558425d1186556124704b4e0e3c465c014cf","size":54,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-16T02:37:00.423618Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","size":186197,"data":"","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f405ac554e9a5b1d633e3d90bdd1451","sha1":"c0201cbedf5c37f1d72a32b5c17818ac1b71ef38","sha256":"ed8d189ccd9d25242196942d5ae05beca3d2833c712c0ccca5e9a36920e71172","sha512":"7f8c91e7aff4d869be05005bbb3c311bb4adbfcc00651babb8b0302084c11b2086d2f003e1c8eb1d2572aacb9248910688a362bee0fde79fcbb97aac2be15902","ssdeep":"","tlshash":"e3f0f9167b546330c577a7b4328e17a55b31010fd00a912ef5bcc2be0970a56a6d6d7e","size":619,"data":"","first_seen":"2026-01-22T00:00:18.055203Z","last_seen":"2026-01-22T00:00:18.055203Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633881b688e928a7ebd1f73ed85d1666","sha1":"41589cdd5b20d80a628302c371b43122093ce65a","sha256":"4f428961303e77b60f264865b10fe5398d6bde2662021f1edd6bf6f2b60c31ae","sha512":"20a69c9babbfffebf379eee35c194d0bb4dcf591deede69fcc1c2b8fac80049f6e072313acb28168f3377c9ad263237f4905c21b1979d7dcee735387447c0c9c","ssdeep":"","tlshash":"dc9002392043409e402e48606b521a08ee558425d1186556124704b4e0e3c465c014cf","size":54,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-16T02:37:00.423618Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c2078cd671fbaadedbda79e475d1cb8","sha1":"2f5b54198d9bf46966370dbe149aeea5b8f9dde7","sha256":"1ed521b4caea4ffd0ecd7161c4cd7e7dd1d10efc9969addf12151a2f6fbedd51","sha512":"a43ed7d28d7f466a15cc0f17bea5be01faa2411d195abc2b6d5285a0d1b166587226e01ff6568e10e020844d46ad9a866849e3fa35da8a0711fe403001e261cc","ssdeep":"","tlshash":"cfd09758f4a420a824bf2262f835f608baf768993800c1c0c2ef635001d985c002b8ec","size":252,"data":"","first_seen":"2025-09-25T11:15:58.33824Z","last_seen":"2026-06-14T23:31:41.896319Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633881b688e928a7ebd1f73ed85d1666","sha1":"41589cdd5b20d80a628302c371b43122093ce65a","sha256":"4f428961303e77b60f264865b10fe5398d6bde2662021f1edd6bf6f2b60c31ae","sha512":"20a69c9babbfffebf379eee35c194d0bb4dcf591deede69fcc1c2b8fac80049f6e072313acb28168f3377c9ad263237f4905c21b1979d7dcee735387447c0c9c","ssdeep":"","tlshash":"dc9002392043409e402e48606b521a08ee558425d1186556124704b4e0e3c465c014cf","size":54,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-16T02:37:00.423618Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","size":186197,"data":"","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","size":186197,"data":"","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-16T15:52:30.944984Z","times_seen":13446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","size":186197,"data":"","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633881b688e928a7ebd1f73ed85d1666","sha1":"41589cdd5b20d80a628302c371b43122093ce65a","sha256":"4f428961303e77b60f264865b10fe5398d6bde2662021f1edd6bf6f2b60c31ae","sha512":"20a69c9babbfffebf379eee35c194d0bb4dcf591deede69fcc1c2b8fac80049f6e072313acb28168f3377c9ad263237f4905c21b1979d7dcee735387447c0c9c","ssdeep":"","tlshash":"dc9002392043409e402e48606b521a08ee558425d1186556124704b4e0e3c465c014cf","size":54,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-16T02:37:00.423618Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/cache/minify/c71e1.js","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7e7f850a6d4c0457cb96cc94992d7ec","sha1":"f13c4e4d2b2750142ba6c4a3aba5e24692df8ec6","sha256":"1d412e2a6dd2e5a3e057aae9735ae214c38c2d761f8fd662ef08262758472490","sha512":"7a9a5896db42792d651bd060072714cf70860ed7f7345799ebeb2ffa5b2f19022e89f645fab933249f37f0100f8ac296b93b261ab2526bcd1712cec5944ce709","ssdeep":"1536:ivGnY81LLll26LDPxodAl8DiS+NHsSnPPYD2kUO:i+ntfPxoWO","tlshash":"c9332a49b3243d6b14ff22f6a25f87076176489e440ab0b4a475cec99db44e011afffa","size":51798,"data":"","first_seen":"2023-03-14T19:37:05Z","last_seen":"2026-06-16T02:37:00.377415Z","times_seen":408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633881b688e928a7ebd1f73ed85d1666","sha1":"41589cdd5b20d80a628302c371b43122093ce65a","sha256":"4f428961303e77b60f264865b10fe5398d6bde2662021f1edd6bf6f2b60c31ae","sha512":"20a69c9babbfffebf379eee35c194d0bb4dcf591deede69fcc1c2b8fac80049f6e072313acb28168f3377c9ad263237f4905c21b1979d7dcee735387447c0c9c","ssdeep":"","tlshash":"dc9002392043409e402e48606b521a08ee558425d1186556124704b4e0e3c465c014cf","size":54,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-16T02:37:00.423618Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","size":186197,"data":"","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","size":186197,"data":"","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-16T15:52:30.944984Z","times_seen":13446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633881b688e928a7ebd1f73ed85d1666","sha1":"41589cdd5b20d80a628302c371b43122093ce65a","sha256":"4f428961303e77b60f264865b10fe5398d6bde2662021f1edd6bf6f2b60c31ae","sha512":"20a69c9babbfffebf379eee35c194d0bb4dcf591deede69fcc1c2b8fac80049f6e072313acb28168f3377c9ad263237f4905c21b1979d7dcee735387447c0c9c","ssdeep":"","tlshash":"dc9002392043409e402e48606b521a08ee558425d1186556124704b4e0e3c465c014cf","size":54,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-16T02:37:00.423618Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633881b688e928a7ebd1f73ed85d1666","sha1":"41589cdd5b20d80a628302c371b43122093ce65a","sha256":"4f428961303e77b60f264865b10fe5398d6bde2662021f1edd6bf6f2b60c31ae","sha512":"20a69c9babbfffebf379eee35c194d0bb4dcf591deede69fcc1c2b8fac80049f6e072313acb28168f3377c9ad263237f4905c21b1979d7dcee735387447c0c9c","ssdeep":"","tlshash":"dc9002392043409e402e48606b521a08ee558425d1186556124704b4e0e3c465c014cf","size":54,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-16T02:37:00.423618Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","size":186197,"data":"","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burglarycirculationintense.com/2d/86/e1/2d86e1ab7c7d36a9ea9ae4145563cf4f.js","fqdn":"burglarycirculationintense.com","domain":"burglarycirculationintense.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a17548e2d374ff28023e11227eaa531","sha1":"9776abbd1eb31d31367d45dceac31fcdb2b5fd0f","sha256":"0ea671831e741163e9424a027af5214620ff01690aa1c2927210732e77eba966","sha512":"a6a765664ca9ea4aa881fdd971582e682e92727b7d1edf8a0accba07b33a68e4bfeffebb6bca86860be8f7a6b7c509f1ee984118846eef424ad62ad9d53609ee","ssdeep":"1536:x9yUBg8XFOUGoAVTesz3WArOwlNyBv77NzxpQ2jFFwBWjIl:x3B91cjpUhxpJwiIl","tlshash":"cb7309487f82b15b5352a073627fd047f0256f1261ecd498d123e6a86f6c33af636b98","size":78834,"data":"","first_seen":"2026-01-22T00:00:17.980634Z","last_seen":"2026-01-22T00:00:17.980634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/24/18/2c/24182cd4e6f42aedf1491fdd2c696f03.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","size":6454,"data":"","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-16T17:46:19.098564Z","times_seen":272420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/cache/minify/818c0.js","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f87b0555dd4b879bc78b109789de5601","sha1":"52b33d2897658dc25df79edf33fddb7e750aed76","sha256":"fbb5f2ccde427720073f4757673dfc6912f94de36841444083b4da740fef9576","sha512":"3321ab5e20fe9a200328e5e85de90deabe08c0a10be3f398b68756194a2fac0fa85778e7ae3176651e37d2b6f91ea8fabf7e046939e5b7279a0aa08ce5c04432","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKorP7Q0:sHNwcv9VBQpLl88SMBQ47GKorPU+Z","tlshash":"79a308df769ab4224bb730b9507f510bb276099d680d4400f199d8eabc7c94a823bf7d","size":101132,"data":"","first_seen":"2023-11-23T10:06:34Z","last_seen":"2026-06-16T05:11:29.570117Z","times_seen":1452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633881b688e928a7ebd1f73ed85d1666","sha1":"41589cdd5b20d80a628302c371b43122093ce65a","sha256":"4f428961303e77b60f264865b10fe5398d6bde2662021f1edd6bf6f2b60c31ae","sha512":"20a69c9babbfffebf379eee35c194d0bb4dcf591deede69fcc1c2b8fac80049f6e072313acb28168f3377c9ad263237f4905c21b1979d7dcee735387447c0c9c","ssdeep":"","tlshash":"dc9002392043409e402e48606b521a08ee558425d1186556124704b4e0e3c465c014cf","size":54,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-16T02:37:00.423618Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","size":186197,"data":"","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","size":186197,"data":"","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","size":186197,"data":"","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XZPHF8G399","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"543fdc7fdcd58e27ae25c47240f362a6","sha1":"60c0814a66799a211e07b0831036faa053991997","sha256":"0087affb2a260ee872a3032f6cfee1016b425cab6a056e3bf245046331a37fe1","sha512":"8a5ac99c387482a5eba9208b1b498381ceddb28a568a2ae5bd93ef343a5d731f966eb127b3a006572f4dc79fbe3023b8b5e104457ef4c5d6350cd16f9b7cfc29","ssdeep":"6144:7gzXo/RhdBAhJZEXOEsrzRak7K0go3VLXgeRIBDp36ZhhE:C4//dBAhJZEXOEAak7BIBQE","tlshash":"f9941ace73d670269396f478503f018ba57b29a2b45dc89af189cce41d34a9a4237f7c","size":432776,"data":"","first_seen":"2026-01-22T00:00:17.988377Z","last_seen":"2026-01-22T00:00:17.988377Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burglarycirculationintense.com/5f/0d/c5/5f0dc5dc10ce2e73eb7c533865572faf.js","fqdn":"burglarycirculationintense.com","domain":"burglarycirculationintense.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"03f094f09aa915740291fa238031e83f","sha1":"a4f2159a58d9856c3df4af98a07cd0b6a76e0180","sha256":"0d43b58204db07903d23f503c37a606ea522a6dc3ac8a198e581c5491829bd96","sha512":"e68cff435e2d0543a4d4b3f438600c05d77372d4952153aaf128c7911db2e4cda67a594fede4e070a654f12ac739fbec792feadba25a645752055a561e354d3a","ssdeep":"1536:1DdqoPFvkdWY4wWobxg+kH+pNmE+LbMTEhBuvuQwOM4uYh4vgyZatNBYPSQE21g5:DzkdTUwMI42","tlshash":"a7b3e68c7f45f1ac12b6b033323f952ef41a4d9548ace5cce213e4e8a9a8b17d539b54","size":108026,"data":"","first_seen":"2026-01-22T00:00:18.050258Z","last_seen":"2026-01-22T00:00:18.050258Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633881b688e928a7ebd1f73ed85d1666","sha1":"41589cdd5b20d80a628302c371b43122093ce65a","sha256":"4f428961303e77b60f264865b10fe5398d6bde2662021f1edd6bf6f2b60c31ae","sha512":"20a69c9babbfffebf379eee35c194d0bb4dcf591deede69fcc1c2b8fac80049f6e072313acb28168f3377c9ad263237f4905c21b1979d7dcee735387447c0c9c","ssdeep":"","tlshash":"dc9002392043409e402e48606b521a08ee558425d1186556124704b4e0e3c465c014cf","size":54,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-16T02:37:00.423618Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633881b688e928a7ebd1f73ed85d1666","sha1":"41589cdd5b20d80a628302c371b43122093ce65a","sha256":"4f428961303e77b60f264865b10fe5398d6bde2662021f1edd6bf6f2b60c31ae","sha512":"20a69c9babbfffebf379eee35c194d0bb4dcf591deede69fcc1c2b8fac80049f6e072313acb28168f3377c9ad263237f4905c21b1979d7dcee735387447c0c9c","ssdeep":"","tlshash":"dc9002392043409e402e48606b521a08ee558425d1186556124704b4e0e3c465c014cf","size":54,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-16T02:37:00.423618Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","size":186197,"data":"","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","size":186197,"data":"","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-06-16T16:44:00.746642Z","times_seen":19002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633881b688e928a7ebd1f73ed85d1666","sha1":"41589cdd5b20d80a628302c371b43122093ce65a","sha256":"4f428961303e77b60f264865b10fe5398d6bde2662021f1edd6bf6f2b60c31ae","sha512":"20a69c9babbfffebf379eee35c194d0bb4dcf591deede69fcc1c2b8fac80049f6e072313acb28168f3377c9ad263237f4905c21b1979d7dcee735387447c0c9c","ssdeep":"","tlshash":"dc9002392043409e402e48606b521a08ee558425d1186556124704b4e0e3c465c014cf","size":54,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-16T02:37:00.423618Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633881b688e928a7ebd1f73ed85d1666","sha1":"41589cdd5b20d80a628302c371b43122093ce65a","sha256":"4f428961303e77b60f264865b10fe5398d6bde2662021f1edd6bf6f2b60c31ae","sha512":"20a69c9babbfffebf379eee35c194d0bb4dcf591deede69fcc1c2b8fac80049f6e072313acb28168f3377c9ad263237f4905c21b1979d7dcee735387447c0c9c","ssdeep":"","tlshash":"dc9002392043409e402e48606b521a08ee558425d1186556124704b4e0e3c465c014cf","size":54,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-16T02:37:00.423618Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633881b688e928a7ebd1f73ed85d1666","sha1":"41589cdd5b20d80a628302c371b43122093ce65a","sha256":"4f428961303e77b60f264865b10fe5398d6bde2662021f1edd6bf6f2b60c31ae","sha512":"20a69c9babbfffebf379eee35c194d0bb4dcf591deede69fcc1c2b8fac80049f6e072313acb28168f3377c9ad263237f4905c21b1979d7dcee735387447c0c9c","ssdeep":"","tlshash":"dc9002392043409e402e48606b521a08ee558425d1186556124704b4e0e3c465c014cf","size":54,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-16T02:37:00.423618Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","size":186197,"data":"","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e537c6564eb3eafc74d2d0cbe666e7a","sha1":"79514f4b5745ed222016e7a0b67cc068c0b220dd","sha256":"5878e6bc235e0aa0c461931d9dc52ac0d85623e6ee761fc4835ad7fed3963058","sha512":"47c74744b5f06eb8a0eaacbfded8c9085ef3dc98ae154d276f332b6b2a8b8f8e13e3d1568dcfc71f47780cc0271124d614dc67d3b59d5bdcedb3e8a0ac08d6fb","ssdeep":"","tlshash":"51d072764b8b5f6330e2ea80802c9483813c962180984da92788c88882a0504fba981a","size":287,"data":"","first_seen":"2026-01-22T00:00:18.05712Z","last_seen":"2026-01-22T00:00:18.05712Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-06-16T16:44:00.746642Z","times_seen":19002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/cache/minify/71156.js","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"928501d82cc757e837f5ac9580483c6f","sha1":"6d6ca6fe3f881bcd4c9d7991df0f426b2ee99ea0","sha256":"5824cbe2d62374f14fe0094e5c0e68c32e60b0b519e09eb55e791bf4afcb4e63","sha512":"9cdde33d19723b9afda7bd83139393ab3aa8f3c20f1fcd5b7a3b29270ccac82cbb8d81d1a88d8bb1a85cee6fc2ea8659efd67366f870273b5b4b4ce981eea5ff","ssdeep":"768:tNv9YusbFENC39yObZNExmWFzSQJOPGNyxIAu5rfbwhsguWUR:y5W4QixGv","tlshash":"5bc2d9097734326987efb1fbb4af0b1c353b6625a402405cf5399ae61e34c09b197a7e","size":26620,"data":"","first_seen":"2025-09-23T04:55:53.482274Z","last_seen":"2026-06-16T02:37:00.352996Z","times_seen":345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/06/thumb-1-71.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/thumb-1-71.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78128\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:52:03 GMT\r\netag: \"68bfb273-13130\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: public, max-age=16070400\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9D4yLKFlntNMV1%2BzNkrCl1VLgr9%2FpKL7d0t02WWzrLj04W9Vy0JBLGuDbnjEoazkqgfhwsTBTPeDwRTKCC5kNl4bxdiRGK08KcobjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4456c99b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":78128,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"7b1db42e2842b10bce89cc48cf2ee133","sha1":"f2676fa5c5177730be23fd69f7ebefa80ba03f89","sha256":"c17714ba786a1aa6d74f405d8ed9cbc76566cdd9500fb16232d8ac717ac3d547","sha512":"bdc1f7c9563fadb6c42d919e3537d2a7a83b8c18aeab971f8318a7ccc01c378fb736ce6ae54427cd7e419a9687e4c9b6ca765cf7fdb634b557a3257867177e67","ssdeep":"1536:2YHjO+IMdlPNFY53fOpG62AmXRuMHlgwf5+42Zu3FX/ztChO6:dH6vMzNFwAS+fu3FX/8/","tlshash":"f673129ee926bf87475f63f8f88995338b10308191b6835469997733503dcb0eca22bd","first_seen":"2026-01-22T00:00:17.96808Z","last_seen":"2026-03-07T07:28:46.733615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"siztube.com/","fqdn":"siztube.com","domain":"siztube.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-21T23:59:39.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"siztube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 14:09:39 GMT","end":"Sat, 11 Apr 2026 15:08:23 GMT"},"fingerprint":{"sha1":"67:D9:E9:9E:20:56:90:D1:8D:77:98:6B:6E:F1:D1:9C:59:B1:09:5B","sha256":"99:CB:60:BF:7D:6D:99:94:BB:35:4C:A3:F9:95:C6:EE:85:32:C0:E7:F5:27:90:DD:12:26:0F:BE:6A:4E:A9:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: siztube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 21 Jan 2026 23:59:39 GMT\r\ncontent-length: 0\r\nlocation: https://fuxtube.org/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WQqe0pvKK2P%2F1OrfpMsqb8UdgU9Xj6dxjwb%2B7LLmop3t0Sp92wmGjhGS2NPRjs5XtrOYhZ%2Bf%2FwsWiiTiQ1mUaVT2n4Bv2HN5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c1ac4407b0256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132919,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":70,"dns":52,"connect":1,"send":0,"wait":4,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/10/Yololary-2_000007.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/10/Yololary-2_000007.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46442\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:27:41 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bebdad-b56a\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yfzi21KdiHhdPXKvprYJYr2nBHWZxZVF8xMsTQsMXHTh4gJr5pzRuia1OEqvB2Rz%2BROFVIDL9KKU7NFqsFWVlbFkjc0omlG%2B2gmelw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cb8b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":46442,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 480x848, components 3","md5":"c76ff9af82439b852e563a0f7c44998e","sha1":"66a384d3a1de8fc37be2419623a93c1259dbba23","sha256":"ae40aec98b9d0437398e1d0d4e3caef82bc407489ab0738f6cb3e9770b1d5149","sha512":"09a788a30dc6da052c25f7af35b200e8e7bec4b3f5b9fdab77390f1ec67662a1006c4a5948c9df7d78201617c2e68b64a9516bcf41af3dc5862e6958e34b344a","ssdeep":"768:/M2oPqUvxLM9TYAp+2eWF8BfqdmapOfsQeZEdVm6GBY/gL3u2eZ6jnI5KjQK:/LSqUvM8rWeCPpisQeZYm6GL3u2eZ6jb","tlshash":"ee2302331a5b874e3a19ebf6b12fc9826795f77120864c800daf77397951e206dfc189","first_seen":"2026-01-22T00:00:17.969655Z","last_seen":"2026-03-16T03:18:29.587788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QWWrDQAy9Si/gQdts+W5/W0jJAcZju81HHIjT0IAOX427YDpC4vH0pJFEQKED7AgfMO183glqRpfBCTn0os8vezXu+j7OH8PYl/vi6lkDcUDUFDOHoAhevGnNOUFQD0k5o88hWTNmAgMCygpm5FmkIQcApBH06bDXw+ujMclHRSVQi+3nBskwUoJPBGp1yDWMvuDUDz72Qw+JJWOpYQiANNk4Jvo3L3ybgxzFGtIvYdY1OaMw2VT2QFe6LPe5qm6E63aUGlo3odal+Va0kf8hXOPiTuVtudxsnJNRP1V2RDOx49zK5Viux/O8JltOU/FxxMoTMdAwCccJC6WcPdSxlPoFUrm8Gb0BAAA=\u0026cb=e2e_6971686d125380.08008303","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QWWrDQAy9Si/gQdts+W5/W0jJAcZju81HHIjT0IAOX427YDpC4vH0pJFEQKED7AgfMO183glqRpfBCTn0os8vezXu+j7OH8PYl/vi6lkDcUDUFDOHoAhevGnNOUFQD0k5o88hWTNmAgMCygpm5FmkIQcApBH06bDXw+ujMclHRSVQi+3nBskwUoJPBGp1yDWMvuDUDz72Qw+JJWOpYQiANNk4Jvo3L3ybgxzFGtIvYdY1OaMw2VT2QFe6LPe5qm6E63aUGlo3odal+Va0kf8hXOPiTuVtudxsnJNRP1V2RDOx49zK5Viux/O8JltOU/FxxMoTMdAwCccJC6WcPdSxlPoFUrm8Gb0BAAA=\u0026cb=e2e_6971686d125380.08008303 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: __uvt=s%3A32%3A%22d365cea8c77fabcf25d8344556ac963e%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/07/Breckie-Hill-1_000050-e1690083729921.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/Breckie-Hill-1_000050-e1690083729921.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9242\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 10:47:46 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68beb452-241a\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cpJc4HlMNPTLRChisajs4DktPRxCr8qPsYHLBW%2FO0Gg%2FKLG%2BrQ4TdeH4bi8QTYao8xLKQfqPtyjT5U563B6jmQ8VLim%2BGLLVeMs28g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4456ca2b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":9242,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 192x352, components 3","md5":"7b39ef41f9604d241df1139c8a6d8590","sha1":"d3697c9dac0f5df316d58ac19c0d7abfe59ac77d","sha256":"40b1ec98f0f8bb22443b5ebdf2049ab1ea2d186947508398c4318704d3d9f240","sha512":"4562f672c446e272fb2675b6537dfb530c957c52db1881f1424ec429c59b5fa5175e059da4892915b3b7aba5f3489ba2cb004c86988b4a52aea5f3bb1fac5587","ssdeep":"192:OHZJqoYqFrE/uq1QaAg6w20nGZguZ9VP8jnJhFChtylPTAD9G:OrKQrE/xig6w2kuzmjnJhWty9TP","tlshash":"e012cfebaa150ec182bd7c37f2248416a40ad36d1bec53652eb2d61770f4af20657d2c","first_seen":"2026-01-22T00:00:17.970794Z","last_seen":"2026-03-07T07:28:46.805715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/06/Camilla-Araujo_000163-e1688097771440.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/Camilla-Araujo_000163-e1688097771440.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12694\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 10:43:55 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68beb36b-3196\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JdiIJYWWMCsJYTcdZ7NNU8MX6Mw1MN8VY%2BVxOanXJ4jdWbpTF7gJkj8r%2FDXE%2FmQ3e9LGInJie4kcpqwCMLozYt2mnloguwb2C%2FC3yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4457ca4b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12694,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 352x225, components 3","md5":"0e0c6aa2d964d285fb4ab12f14429066","sha1":"0c4ab3746887e870a8d1dca54b28bcd8c3bcade1","sha256":"1722d2844e79f7cc5bf7543cb2472e51c3e863b229a4920c9eae5bba635109cd","sha512":"be713fdc0e8449a46b97db6de34e93d6b037bdfbb2768be1bd9c7e4ec001ab894843928243630885e13405e1449d9fdfffd8d6a5d698a335d6df53a35958c0ef","ssdeep":"384:O3YbKCKeqaJUKnuQq2urSE34EhQPgJONrlGWhr:/bKxYnzq2urSEozoANrxr","tlshash":"cb42b02db2c58545ec2ead6820e87263c221db08ce5f9d9c623ad207bef0beca501c11","first_seen":"2026-01-22T00:00:17.971666Z","last_seen":"2026-03-07T07:28:46.819255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/07/Cruella-Morgan_000016.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/Cruella-Morgan_000016.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26608\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 10:48:10 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68beb46a-67f0\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lepq2q3ZORziW8%2FCkHQWNcPw5tLBIiTytiw13WjtrtgQOfz5EifmMtas6sWq7pMW6i2hfVIc%2BpNPDYdNwr2Et4P%2FnW183Z5iIS7M3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458ccab4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26608,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.35.100\", baseline, precision 8, 404x720, components 3","md5":"0e659c00583f078e280304c8a41ba532","sha1":"3f36ae6ad4540249235974d70b9008a0fb50ea96","sha256":"cfebdb2daf89cec70f0f0aee4de2257d2a6ef734c13e63bd8268cc82f0b93802","sha512":"70ea7b2ca7dc79bdd7a483b3f8b3c2a450da1e831f9f138553e110572c56f80780412adf152a2dce91c8276bd3e0f2195b8179efbbfc8d8484b111c8f93f7c23","ssdeep":"768:c+fQcN3ugqIDth0yPw2BNBJtPf2mRF7Bx8ltl:OsrXttlB3rWkFdOln","tlshash":"c1c2e0cd3664a55edceef3324f26ac6284f399e0152f36590ac3b0d4086a850d887fbc","first_seen":"2026-01-22T00:00:17.972521Z","last_seen":"2026-01-22T00:00:17.972521Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/cache/minify/71156.js","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/cache/minify/71156.js HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: PHP/8.4.15, PleskLin\r\npragma: public\r\nexpires: Thu, 10 Dec 2026 21:37:33 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 10 Sep 2025 09:54:31 GMT\r\netag: \"pub1757498071;gz\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: MISS\r\npriority: u=3,i=?0\r\nage: 3637326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IcG1x6Ohw%2BiPTJfrlKYjsLTE%2B9%2BDgW7k3o1BMrZk7gpJxQd8V4EsHbRX9JwDZZvdWnFVb8PYTPOIYxtAokHuE5ZpM1CfkubVJWXrvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4459cd2b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26620,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2291)","md5":"928501d82cc757e837f5ac9580483c6f","sha1":"6d6ca6fe3f881bcd4c9d7991df0f426b2ee99ea0","sha256":"5824cbe2d62374f14fe0094e5c0e68c32e60b0b519e09eb55e791bf4afcb4e63","sha512":"9cdde33d19723b9afda7bd83139393ab3aa8f3c20f1fcd5b7a3b29270ccac82cbb8d81d1a88d8bb1a85cee6fc2ea8659efd67366f870273b5b4b4ce981eea5ff","ssdeep":"768:tNv9YusbFENC39yObZNExmWFzSQJOPGNyxIAu5rfbwhsguWUR:y5W4QixGv","tlshash":"5bc2d9097734326987efb1fbb4af0b1c353b6625a402405cf5399ae61e34c09b197a7e","first_seen":"2025-09-23T04:55:53.482274Z","last_seen":"2026-06-16T02:37:00.352996Z","times_seen":345,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/12/4_1_000005-e1701571884936.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/4_1_000005-e1701571884936.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17136\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:54:51 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bec40b-42f0\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Wf5KMbfePmKMOK0JN18qeiSDoEkZ0%2BHfJIyqLmXIS5%2BiPSSPXxlSlNK0pk7Qb%2BsHttPbnZvHYvw8OZQytXSfJf3sxfX1PY012olCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c8fb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":17136,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.35.100\", baseline, precision 8, 854x480, components 3","md5":"b396795c01e9938e841af4e48f7ff37a","sha1":"dd9446eb50dcf4025069503b9c9aafe4e22fd6c4","sha256":"ea6113bd3d0442b009ede2f79503186bf3ed4314ede86b2daad8e1102519c16d","sha512":"a76f01bc876786a534041e2f0b613cd96528dd399e44296221a7ec4d6e4c38fdbc80bbc6ac0748519d12f5d5db382475efd5aa5cb1977ef23a9a5b790a958b32","ssdeep":"384:9+/cSnO06brmMkCQC5dTCx/S3QMREVqgu6PChcTecr3:iO06fffj6/S3WVPLr3","tlshash":"6772ce194670332de7417083378fc93c262ba99d7eda9f99bcfa44907040102e8daaf5","first_seen":"2026-01-22T00:00:17.974043Z","last_seen":"2026-03-07T07:28:46.879773Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/07/Cierra-Mistt_000047-e1689889718757.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/Cierra-Mistt_000047-e1689889718757.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25586\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 10:48:01 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68beb461-63f2\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2MDKEoO3btzpkF25Fv7YA43wKBmjnuwUV0HvcF6HZCRlKbWBfS1TEi9hA4QoH5lTIWFpd%2FdqsItjpk43pSn%2FBSksLI4HamGjRliudg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4457caab4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25586,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 1080x606, components 3","md5":"27ebacde9af2f41dc94c8107e6438de5","sha1":"3566a2e3471dc537dfdd7639b1ff7ad304c502f8","sha256":"0a861dbbc26057d44fb91bcb21164a11abb97c9e1c2047aaf361a6a759a9578a","sha512":"83eb03931656634f6c3c05a4ce76c2c2c0201b257af50551fde079ae52f1b18c4caf31d0839941a6c7c40c3a271afa57f85f653914d9337386356e9364de71a4","ssdeep":"768:C2IhvJLhtt2MiApN0zzSJTB5GC17yj2Tl/WNY2SL:CNvJzq1zmJFIC1z9+SL","tlshash":"13b2e1b2f3a85d1ace619c614d482a531107fe260e6067d529d7c8eab3e89c92d0fd39","first_seen":"2026-01-22T00:00:17.97534Z","last_seen":"2026-03-07T07:28:46.888776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://thenudebays.co/wp-content/cache/minify/9083a.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 77160\r\nserver: cloudflare\r\nlast-modified: Wed, 10 Sep 2025 09:54:31 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68c14ad7-12d68\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uoHYPNLQpAEeIV0nApo0pJ4BwXyu887LxJcqBuaNcKAb33ZAGxn1NUCS6jpp7iIsUk5jHhZSxuPZvBVALDxSIPFmReuHx4%2BuuUW8%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac447adbcb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-16T17:46:55.902185Z","times_seen":497041,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QWW5CMQy8Si9A5DUL3+1vK1FxgLyt5QOQeBSB5MPXeUUtakaJHGfGHoeA4gpwRfiEea1lLWgFQ4EgFFDFXt825rnz53j4Gsau3ubQH00ki6LlVDhGQ1BR5/pmQTKFbIopZQBDEoQIOZqAsYGDlEVaFADQEtjLdmPb92dPZE2GRsYAV1JXL/2NwMRjpAxXBGpi5D6OWnHqBk3d0EFmKVj7OERAmtyUk/65hh8ERvfe2sAvVo3OKExuzRfYkq7z7dCbPRDbjLE0qd7HgaXQI+cPGO8tfVA/GBdbYHPY14/5dHFXe081dcC8lPIPEP+qSz3t6nl3PCzPTWOU+hRLqjqNrBW6mGioJXUT+n0S/gbhiwg0zAEAAA==\u0026cb=e2e_6971686d12a4b9.44151552","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QWW5CMQy8Si9A5DUL3+1vK1FxgLyt5QOQeBSB5MPXeUUtakaJHGfGHoeA4gpwRfiEea1lLWgFQ4EgFFDFXt825rnz53j4Gsau3ubQH00ki6LlVDhGQ1BR5/pmQTKFbIopZQBDEoQIOZqAsYGDlEVaFADQEtjLdmPb92dPZE2GRsYAV1JXL/2NwMRjpAxXBGpi5D6OWnHqBk3d0EFmKVj7OERAmtyUk/65hh8ERvfe2sAvVo3OKExuzRfYkq7z7dCbPRDbjLE0qd7HgaXQI+cPGO8tfVA/GBdbYHPY14/5dHFXe081dcC8lPIPEP+qSz3t6nl3PCzPTWOU+hRLqjqNrBW6mGioJXUT+n0S/gbhiwg0zAEAAA==\u0026cb=e2e_6971686d12a4b9.44151552 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: __uvt=s%3A32%3A%22d365cea8c77fabcf25d8344556ac963e%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/ren.gif?sid=H4sIAAAAAAAC_1RSvW8cRRydjU1FwVcEFdKWIMF593ZvfUskLIWPNGADCUpBgWZndu3h5mY2O7N35yuQgyUEBZLpgGrunR03EJH_IDrTWUKwVFfETf4EpEh06M4nBZ40vw-9kea9-f2-ntQX5E3UdP7Rh3ospKQbnVbgv3ZbKK6Hxt--5YdBK7jm3xYqia_5o0WoBm-FUdwKXvdv5KynN9pBGARhEPrviyov9GhjyUKUP6dhKw1acbsVdmKMqv_3pvZgqAc-uCAvQvDmucfFZxBsBtX_9d3c9Kwu33ivX0tqdYUBP_1U9ZQeKvSflkXloVCnq9vQpiHkhyvQ6nTlAHpwvHCATDTkysuPkKnTlUxkg5NLpZlErpDxZzEczJDLGQSdgelDCP4nARjH9g5U_962roZ0_5KlC7Yh60_-hhg2ZP3RVaj-_etSjPybWtZWaGUwKhzEaAaxO0NZn8GOPYjhGZj9CoL_TjaefADVP94xUkNwt3Qvihmo8VAvjvBQFx7q0kOfz_046MYspFFSpJxtBjGNY55nQdptBwFN2SZqdheCH4FVByirA_TEEar6Icyeg-EejG2I9_EBBtydcGnaxt3j0tRZuMrtVY7cVNvdCT3RdjdXBLQ6QsXdsSjvmEMwuzYdF4ZP9SLQzLopzbiblBfkhcWveN_-U6CXz_027yZ5SLNNtsmjhKY5TWkeh3Gnk0SsiAsY4SDMlaXhsWjIjV_-QCkaQvAdMnoGI8_AxPOg9augQwe65zBW9-1ermqeZ3TftJgG1w6lXYfd9ybygrw0_eTW9YfL8Xx--CVydr71OFoCrHIoK4cvxG8Eu_Lug53Sir4Y08W8blpq8zXQxfsPngETDbn6ztvL1Um6r4CVBzDl-db8xwV-gtEEWelBCgKZn5MVQDMH858-e1pPzDfYrTxQewjVdxhUDgPpQOURTL02tWV1vvXXSmsmvWkmK-84k5X8_tKLEXO_086ipNtN8iLhRcSjdsTTTpCnMU2TOI07sKYRd_bUvwEAAP__XNUD4t0DAAA=","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 21:42:11 GMT","end":"Wed, 25 Mar 2026 21:42:10 GMT"},"fingerprint":{"sha1":"DD:BF:7F:13:B7:AA:5E:41:65:09:9E:F1:FE:42:C4:9A:00:0B:F4:E6","sha256":"FE:3B:B4:EE:8B:60:30:E2:9F:CB:E9:E2:06:C0:A4:2E:FF:35:D3:22:85:14:1C:B8:13:CD:72:FB:EA:5C:E9:98"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSvW8cRRydjU1FwVcEFdKWIMF593ZvfUskLIWPNGADCUpBgWZndu3h5mY2O7N35yuQgyUEBZLpgGrunR03EJH_IDrTWUKwVFfETf4EpEh06M4nBZ40vw-9kea9-f2-ntQX5E3UdP7Rh3ospKQbnVbgv3ZbKK6Hxt--5YdBK7jm3xYqia_5o0WoBm-FUdwKXvdv5KynN9pBGARhEPrviyov9GhjyUKUP6dhKw1acbsVdmKMqv_3pvZgqAc-uCAvQvDmucfFZxBsBtX_9d3c9Kwu33ivX0tqdYUBP_1U9ZQeKvSflkXloVCnq9vQpiHkhyvQ6nTlAHpwvHCATDTkysuPkKnTlUxkg5NLpZlErpDxZzEczJDLGQSdgelDCP4nARjH9g5U_962roZ0_5KlC7Yh60_-hhg2ZP3RVaj-_etSjPybWtZWaGUwKhzEaAaxO0NZn8GOPYjhGZj9CoL_TjaefADVP94xUkNwt3Qvihmo8VAvjvBQFx7q0kOfz_046MYspFFSpJxtBjGNY55nQdptBwFN2SZqdheCH4FVByirA_TEEar6Icyeg-EejG2I9_EBBtydcGnaxt3j0tRZuMrtVY7cVNvdCT3RdjdXBLQ6QsXdsSjvmEMwuzYdF4ZP9SLQzLopzbiblBfkhcWveN_-U6CXz_027yZ5SLNNtsmjhKY5TWkeh3Gnk0SsiAsY4SDMlaXhsWjIjV_-QCkaQvAdMnoGI8_AxPOg9augQwe65zBW9-1ermqeZ3TftJgG1w6lXYfd9ybygrw0_eTW9YfL8Xx--CVydr71OFoCrHIoK4cvxG8Eu_Lug53Sir4Y08W8blpq8zXQxfsPngETDbn6ztvL1Um6r4CVBzDl-db8xwV-gtEEWelBCgKZn5MVQDMH858-e1pPzDfYrTxQewjVdxhUDgPpQOURTL02tWV1vvXXSmsmvWkmK-84k5X8_tKLEXO_086ipNtN8iLhRcSjdsTTTpCnMU2TOI07sKYRd_bUvwEAAP__XNUD4t0DAAA= HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25819494=1; slec2d86e1ab7c7d36a9ea9ae4145563cf4f=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4293f43d7997b72444fe2bf474962f00\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/06/thumb-1-75.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/thumb-1-75.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32061\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:52:07 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bfb277-7d3d\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1GRH%2F5%2BdJlmzoGK4eZORJilFp6HSULf7k00gx0iSxqwFhMTVaj7I8u1MMtTwVIBlDqQbt8%2BnJO7q6ID14yqOdM1oytLhG%2BJJH%2B18%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c92b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32061,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x720, components 3","md5":"4e8db3cbcac7b0fc4ca6e22297deb462","sha1":"eda9d85bdbb01f4b85da6496e9624523c2d83aeb","sha256":"aad16470fdf43dcb00d610fc82ba4c78a3ddf5a13f8955232a9c00721d2ad160","sha512":"4743a570831b005a08c65b3a74a7c39fea52ce390db5ab0b7ea294e307bb9e0ff3458a8e6f1d0d7b0495ce8b805afc3efe3d85a72c95283e6b9a76c9fc515cf9","ssdeep":"768:GxMNJszurT3q4v+ryfaVALIe0LvVeJGNfA3:GxMUurTuYgeIe0TcGNY3","tlshash":"49e2f164433d5e6ce31ef325d11ac72105e3c2a622953081bedc8ad3d9b5cb7a5e8b17","first_seen":"2026-01-22T00:00:17.977098Z","last_seen":"2026-03-07T07:28:46.855562Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/01/5-13.png","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/5-13.png HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 136000\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 12:27:38 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68becbba-21340\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JyzGqdwyvF%2BpVP29e93tlDQCkxHwkPZzpRJwq3nd%2FQ9jAjz1OX%2BN1JHPbI1u07FJsZwXQ6yB3qV4UtDVUGfebYPBYgS7cfuXBb82Uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4457ca5b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":136000,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 264 x 480, 8-bit/color RGB, non-interlaced","md5":"6aab5ccf36fbfeaf801c928901ea26e0","sha1":"65303122e43aa8563fb836a0eab6475ad34b72bd","sha256":"bdecf7abf5407f64129949b7ea074ed93e56a748cd521d0b0f609784d41d9f6c","sha512":"7a6a96f5d2adf426af8274aea17a737ac053b5c32792d91d19494526a6ba57c1a33d56dc7e28d3a4f3a69cdf48c0b461e255b49d03f236b5ba2908c938bb5f3e","ssdeep":"3072:Ns2yI7fqIbliuUGdePHlPHw8KIx6N4bLXH3a:NsxEfFbMVGeHlIwx6NaXq","tlshash":"f5d31281ff5c02e8d8915ca47f50f09f51f426eaab76fb3a41a9d4a0f81cda86501f39","first_seen":"2026-01-22T00:00:17.979452Z","last_seen":"2026-03-07T07:28:46.907126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burglarycirculationintense.com/2d/86/e1/2d86e1ab7c7d36a9ea9ae4145563cf4f.js","fqdn":"burglarycirculationintense.com","domain":"burglarycirculationintense.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"burglarycirculationintense.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 21:15:01 GMT","end":"Sun, 12 Apr 2026 21:15:00 GMT"},"fingerprint":{"sha1":"7E:9D:AC:7F:55:79:54:CB:D8:0C:5D:C8:59:42:19:9F:BC:43:C5:E6","sha256":"F9:B5:7D:DF:6E:AE:30:DE:7D:1C:B2:34:BA:9E:7C:7F:E7:4B:E3:8D:57:69:A0:B4:0A:EA:5F:BE:FE:8C:4C:8E"}}},"request":{"raw":"GET /2d/86/e1/2d86e1ab7c7d36a9ea9ae4145563cf4f.js HTTP/1.1\r\nHost: burglarycirculationintense.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 30177\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: burglarycirculationintense.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 49d74680fae5597c8646f67243e3b53e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":78834,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8a17548e2d374ff28023e11227eaa531","sha1":"9776abbd1eb31d31367d45dceac31fcdb2b5fd0f","sha256":"0ea671831e741163e9424a027af5214620ff01690aa1c2927210732e77eba966","sha512":"a6a765664ca9ea4aa881fdd971582e682e92727b7d1edf8a0accba07b33a68e4bfeffebb6bca86860be8f7a6b7c509f1ee984118846eef424ad62ad9d53609ee","ssdeep":"1536:x9yUBg8XFOUGoAVTesz3WArOwlNyBv77NzxpQ2jFFwBWjIl:x3B91cjpUhxpJwiIl","tlshash":"cb7309487f82b15b5352a073627fd047f0256f1261ecd498d123e6a86f6c33af636b98","first_seen":"2026-01-22T00:00:17.980634Z","last_seen":"2026-01-22T00:00:17.980634Z","times_seen":1,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":266,"dns":55,"connect":93,"send":0,"wait":97,"receive":93,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"burglarycirculationintense.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"burglarycirculationintense.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"burglarycirculationintense.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11PSU4DMRD8Ch8Yq1cvOcMVpKA8wLMYLgkSA4hI/XjaM4dEuGWrXK5yVxNQHAAHwgfMBy0HQSsYCgShgCr2/HI0577el8v3vIz1uobpw7IIQ7ScCsdoCCrqWt+cnVbIljIysL8RIZVYxASMDbxIWaSjAACIlsCeTkc7vT46lTUZGoH52Xt3KI6RMvwiUDciT3HRim2cNY3zCJmlYJ3iHAGpeVMX/UvsLkwSySgCg/TmJaknoi3TXkM3MgqTB/QFttF1vV4mszvhNinljrahqP/S973oVog7CIDb1H7fmTWc69v6+eMJz051e8B0c2zcDrSm2MizSYstAzeKVTjRnJqWon9cutRtyQEAAA==\u0026cb=e2e_6971686d126164.90811638","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11PSU4DMRD8Ch8Yq1cvOcMVpKA8wLMYLgkSA4hI/XjaM4dEuGWrXK5yVxNQHAAHwgfMBy0HQSsYCgShgCr2/HI0577el8v3vIz1uobpw7IIQ7ScCsdoCCrqWt+cnVbIljIysL8RIZVYxASMDbxIWaSjAACIlsCeTkc7vT46lTUZGoH52Xt3KI6RMvwiUDciT3HRim2cNY3zCJmlYJ3iHAGpeVMX/UvsLkwSySgCg/TmJaknoi3TXkM3MgqTB/QFttF1vV4mszvhNinljrahqP/S973oVog7CIDb1H7fmTWc69v6+eMJz051e8B0c2zcDrSm2MizSYstAzeKVTjRnJqWon9cutRtyQEAAA==\u0026cb=e2e_6971686d126164.90811638 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: __uvt=s%3A32%3A%22d365cea8c77fabcf25d8344556ac963e%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA12QWW5CMQxFt9IN8OQxA9/lt5WoWEDe1PIBSDyKQPLi66Stihorg5zrm+MQUFgBrgifMK01rwUtY5ehE+pQxV5et+a5y8d0/BynvtyXbjiZcBKOlmLmEAxBRV3rk5OCKSSLHGMEMkRS1JyDCRgbeJCySD11ABzUtWCb3dZ2b8+eSxoN3dIY4Ebuho3BCEzqBSW4IVA1QB7CpAXnftTYjz0kloxlCGMApNnBXPSP3KswRK0USULyByu9K6mxfceqFjIKk4P6AGvpstyPg9mDsHacG4v+NAfN6FHzFwjw2zbWrS3SKMGW7lDel/PVIQ+eqhYdpubnXYv/3rWc9+WyPx3bda2xHGKWeSxhlhDnOAHKGAoqFxmoF/gCz7AarN8BAAA=\u0026cb=e2e_6971686d1f8a93.67137421","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA12QWW5CMQxFt9IN8OQxA9/lt5WoWEDe1PIBSDyKQPLi66Stihorg5zrm+MQUFgBrgifMK01rwUtY5ehE+pQxV5et+a5y8d0/BynvtyXbjiZcBKOlmLmEAxBRV3rk5OCKSSLHGMEMkRS1JyDCRgbeJCySD11ABzUtWCb3dZ2b8+eSxoN3dIY4Ebuho3BCEzqBSW4IVA1QB7CpAXnftTYjz0kloxlCGMApNnBXPSP3KswRK0USULyByu9K6mxfceqFjIKk4P6AGvpstyPg9mDsHacG4v+NAfN6FHzFwjw2zbWrS3SKMGW7lDel/PVIQ+eqhYdpubnXYv/3rWc9+WyPx3bda2xHGKWeSxhlhDnOAHKGAoqFxmoF/gCz7AarN8BAAA=\u0026cb=e2e_6971686d1f8a93.67137421 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: __uvt=s%3A32%3A%22d365cea8c77fabcf25d8344556ac963e%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"porntee.com/","fqdn":"porntee.com","domain":"porntee.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-21T23:59:39.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porntee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 03:37:09 GMT","end":"Fri, 13 Mar 2026 04:34:31 GMT"},"fingerprint":{"sha1":"5C:2E:21:F9:93:6B:67:A6:94:79:37:F1:3D:08:20:73:86:0F:40:FD","sha256":"92:DC:AA:29:76:27:6D:A5:25:26:A4:44:C7:18:2B:40:50:51:7F:2E:5C:6F:58:70:6D:BF:63:C3:3B:CC:16:E6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: porntee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 21 Jan 2026 23:59:39 GMT\r\ncontent-length: 0\r\nlocation: https://siztube.com/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=elf5mprwL3NjCHgJE%2FJkKf6YG4KMn3T1kqTLsoF0wLlR1b3PLyIQG4JPmdQNP2smENy3vcloN6o7WCz%2B520uJ0zNckj155Vg19x3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c1ac43ffc915fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132919,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":34,"dns":16,"connect":1,"send":0,"wait":5,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/02/thumb-1-555.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/thumb-1-555.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15005\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 13:50:39 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bedf2f-3a9d\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVF1akzd6IxKSlZcyH3mgU4Qs7%2BplwnvAAIv7AnJ9YoNk9UU92%2FsM%2FQoCiODU6XM%2By6rRSdstdRFXfpyrLUzQbkdjsjkcxGK1ZP0pA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cbfb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":15005,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x480, components 3","md5":"65622bb5e943ffda25a598a8e2618ec4","sha1":"27d53ce5efc4ffe033e907fb1f64194b6c048707","sha256":"2a1c56d8aa470f52d5a7c2490c2ad46476f1fcb973e9462469f684d1d3d811c9","sha512":"1cdbff795be8225cfc0879724ae6d2c925c1394f179c666d1cd258a72275df1b8a029c7fe4acb9d01f753607efe2dff36a97583cf3efe1272a2195c6ad71a6a3","ssdeep":"384:+uB0G3ZnBcKxC65T/9TD+PUV28cUfjq3VSRRT13glmpcGx:+g0GJneyjTD+Pebrfjq3ViZ3gMjx","tlshash":"9c62c00249985da7d38f9db011e35934b7ed84b522d4fc30b52b8a49ee44df6a34e133","first_seen":"2026-01-22T00:00:17.981514Z","last_seen":"2026-01-22T00:00:17.981514Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/06/thumb-1-70.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/thumb-1-70.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57795\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:52:02 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bfb272-e1c3\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hRJbEACiYeHVry2SvblKcD1065vraIogJVigiRGIm%2BSDdTpDwb%2F%2F2ISIgHHYX9NZgkCJ3a9tnajWe8U8UNkS1OBsbvpwUEthsRkHFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4456c9ab4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":57795,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"833bae00e7568591e83d68c1ae67b5cb","sha1":"c28fea6b7939b93dd72a836b60023de90ff2f786","sha256":"5b399de25b944d31a979771fea0583a9c7ec0c1d868f471313489cc7b516a4d1","sha512":"907fd211e2e37ead864c6ecf5bebd97a0d27ebffb60874bd14400eee8f413cb48e74e8de17d5cfd3100dfa0b6280fbc41071fada235107b0020f074e2d6e9ef5","ssdeep":"768:2XMkWhDQb6+IXojAvQFYHJtg5oQ4tbgSBuasDOCBDbtpANs9wC36q4e7vr:2ckWh8ZKiFsJMoDshBDbt8sGC/4e7vr","tlshash":"f943d6134c099b93a568c7e4bf034eac2f062b5de99239ff40125ecb3f256664d8d46e","first_seen":"2026-01-22T00:00:17.982232Z","last_seen":"2026-03-07T07:28:46.732722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c84328440be6860b0add1fc5a60\"\r\nexpires: Tue, 20 Jan 2026 17:35:30 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3nwUAAAwBuUwKDAH3EQAAAAwBw7WvAgG3vwAAAA\r\nx-77-nzt-ray: 2a494a15d49921cd91687169fa155729\r\nx-77-cache: HIT\r\nx-77-age: 1439\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39568)","md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:36:36 GMT","end":"Sat, 28 Mar 2026 23:36:35 GMT"},"fingerprint":{"sha1":"0E:EE:1D:ED:80:5A:CA:0C:1E:93:89:94:78:B7:34:91:38:D4:89:51","sha256":"CF:77:1B:FB:04:67:32:02:DF:D9:38:24:27:3D:A5:98:54:0C:4D:BA:C5:1B:62:FD:C1:E1:17:57:6F:63:B3:BF"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c144bf7b91839928977ce83c9188d1dc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-06-16T16:44:00.746642Z","times_seen":19002,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":51,"dns":1,"connect":17,"send":0,"wait":34,"receive":20,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/9543d83d369507849757a700910f06a57a1232fe.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/9543d83d369507849757a700910f06a57a1232fe.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 97939\r\nlast-modified: Tue, 21 Nov 2023 20:33:06 GMT\r\netag: \"655d1402-17e93\"\r\nexpires: Wed, 04 Mar 2026 00:24:22 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3ibeqAQwBuUwKEwH3rmgAAAwBw7WvAgW1AAAAAA\r\nx-77-nzt-ray: 2a494a152eafdfd3936871697f0d800d\r\nx-77-cache: HIT\r\nx-77-age: 27965321\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":97939,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"b299e593d7893e617d46d337bba11ab4","sha1":"9543d83d369507849757a700910f06a57a1232fe","sha256":"ae360167ff0f6f893df3c693ec213eb94ea70d27c5bd2dd5b6d26ba71d6fcac5","sha512":"7b427856e5d085f6d51f9deefcb1006e0a6dfe488f84bc8096dd992d7ad0d2ea429dce43ecb04c9ef2d522958c797aa22fb37eb86998792a03bc1e91d95259b9","ssdeep":"1536:/jLkg0PfrqiCN77Cs5+xBB1sJFzpIm1aPB98fgnibY+IQiKEZW9vY7xmHXHLow/J:foifCpB7e1aJ98fgQIQipci7odXFqLuB","tlshash":"47a312e9ce6b4d4aa7dbe079a5d53f032c897ad1663f8b5b2f801483f3446aab014650","first_seen":"2024-01-21T00:35:41Z","last_seen":"2026-06-14T05:15:29.183682Z","times_seen":553,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/01/17_000009-1.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/17_000009-1.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28352\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 12:06:30 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bec6c6-6ec0\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkCS89fJmaWNm6IBm0EF05IVVQztgEKKbCGKYgoCBz4Zib33mxsu1d5eH5UkzPJJc07vYYTLMFVzdfxwsWCrfszQWPjLPYsDH5V6PQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4457cadb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":28352,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 580x427, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 854x580, components 3","md5":"ca15294e35c98e947b270f461d3b2ee0","sha1":"08a7ed0324119cc0bc62f3a5e102e90ea5133045","sha256":"0bafd96dcf7d62307b3489a770c00aa1b0421f453fa0d1826097f5c3c83ef702","sha512":"53bacd14783f838f175cad51200cfebf2ed3b96242c9ae4a755fe62ac3164c3d28c8e5a221eb5e54d5a6bc3fe4ca0573e6a0846c45fc9efc0a06d7d42541f072","ssdeep":"384:CCGxCfjTLZm3tmLFiNy31ucc4bb2Q1gPEP62zu256kr+M24tlFgYhwK1C0+aRrfz:JGxCfv0dmyyFu8Ou+otlFgMwx0DRc2","tlshash":"6cd295178908df83a52593e9be435ead1f1b2b4ce48276ef41320e8f3e246614cde56d","first_seen":"2026-01-22T00:00:17.984942Z","last_seen":"2026-03-07T07:28:46.802849Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c84328440be6860b0add1fc5a60\"\r\nexpires: Tue, 20 Jan 2026 17:35:30 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3nwUAAAwBuUwKDAH3EQAAAAwBw7WvAgG3vwAAAA\r\nx-77-nzt-ray: 2a494a15d49921cd91687169aa888d29\r\nx-77-cache: HIT\r\nx-77-age: 1439\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39568)","md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.182.98.28","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://thenudebays.co\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=23b7f08b-96d1-4b87-a5c0-36fd4e851f16:1:1; expires=Sat, 19 Jan 2036 23:59:41 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"8bd2f211c81e2091795c6c4051d6a8ed","sha1":"6c0f7fe617ae68e4c65e74109ce95962af3ffcf8","sha256":"9db610a7fb67f792c2cd6e3f76671a3d24ca05bbc9cc166bf3b638a40e665fa2","sha512":"58cb825995103dc6e036d86af349634687f99ced3708474e2fa2d2616e2f5e1c4cba7852854936050db812de7a7f307f29f724b3a9f4531900db90f38b3a4566","ssdeep":"","tlshash":"729004015c051d7c1fc7d34175c4441cc0410150cc44fd001415c3104710f001c55474","first_seen":"2026-01-22T00:00:17.985794Z","last_seen":"2026-01-22T00:00:17.985794Z","times_seen":1,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":199,"dns":15,"connect":24,"send":0,"wait":24,"receive":1,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/24/18/2c/24182cd4e6f42aedf1491fdd2c696f03.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 21:42:11 GMT","end":"Wed, 25 Mar 2026 21:42:10 GMT"},"fingerprint":{"sha1":"DD:BF:7F:13:B7:AA:5E:41:65:09:9E:F1:FE:42:C4:9A:00:0B:F4:E6","sha256":"FE:3B:B4:EE:8B:60:30:E2:9F:CB:E9:E2:06:C0:A4:2E:FF:35:D3:22:85:14:1C:B8:13:CD:72:FB:EA:5C:E9:98"}}},"request":{"raw":"GET /24/18/2c/24182cd4e6f42aedf1491fdd2c696f03.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3403\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4f90aaf167933d7b2d60dba3c7e35c6e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6454), with no line terminators","md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":717,"timings":{"blocked":307,"dns":27,"connect":94,"send":0,"wait":98,"receive":1,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4cd.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4cd.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 277\r\nlast-modified: Fri, 07 Nov 2025 05:22:03 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 26\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":277,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"304f17a447dd859533f5b41c0f2464f0","sha1":"1cfaddc961f5f6ff7981a27dec441d4b65d9d2e2","sha256":"adaeabf73cbaaec23155f6a4e50cbe06fa22e25e62a42b2a62611410809b35cd","sha512":"6feda360e0515f16b507d2836aaa202a0a8eab2ad293144713eede03e8e2c637403154c6f60070e5e38927d2b26922efda61ff5f263d508cf70d2ae9db8e750c","ssdeep":"","tlshash":"c0d02b98603ce7418c44c618457bbc8552da60475e144baab1931c1d75443d73841b75","first_seen":"2023-04-07T03:19:52Z","last_seen":"2026-06-16T08:22:59.172423Z","times_seen":3453,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":32,"dns":3,"connect":11,"send":0,"wait":8,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QS25DIQy8Si+QJ9vYGLJutq2UKgfg/doskkh5aZRIPnwN6icqFmDMjJmBgOIKcEX4hGktec1oGbsMHVOHwvbyujWvXT6m4+c49eW+dMPJOCQOaklziNEQhMWxPgMjmUAyDaoKZIgkKDlHY7Bg4EESmGvWAYSYsinYZre13duz15KooZEFgBsJeF4lGIGx50gJbghU+RiGOEnBuR9F+7GHFDhjGeIYAWl2XQ76J9xZGFWqiMQx+Xt+jO1B+I1VJQbkQK7TB1grl+V+HMwegNVwzJUq396gNXrE/AUC/LjGurWFm0qwpTuU9+V8dZEHL9UWHebWz12zf961nPflsj8d23XlmPaKZVTMcdQ59+MsqUx5pgHyoDOUL90nnkzeAQAA\u0026cb=e2e_6971686d128453.15277223","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QS25DIQy8Si+QJ9vYGLJutq2UKgfg/doskkh5aZRIPnwN6icqFmDMjJmBgOIKcEX4hGktec1oGbsMHVOHwvbyujWvXT6m4+c49eW+dMPJOCQOaklziNEQhMWxPgMjmUAyDaoKZIgkKDlHY7Bg4EESmGvWAYSYsinYZre13duz15KooZEFgBsJeF4lGIGx50gJbghU+RiGOEnBuR9F+7GHFDhjGeIYAWl2XQ76J9xZGFWqiMQx+Xt+jO1B+I1VJQbkQK7TB1grl+V+HMwegNVwzJUq396gNXrE/AUC/LjGurWFm0qwpTuU9+V8dZEHL9UWHebWz12zf961nPflsj8d23XlmPaKZVTMcdQ59+MsqUx5pgHyoDOUL90nnkzeAQAA\u0026cb=e2e_6971686d128453.15277223 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: __uvt=s%3A32%3A%22d365cea8c77fabcf25d8344556ac963e%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/ol_557dded964a5746f63c4f6dc2be0fc9e.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 11:12:15 GMT","end":"Tue, 17 Feb 2026 11:12:14 GMT"},"fingerprint":{"sha1":"8B:3E:32:D0:D6:38:B0:7C:60:91:F6:D3:6F:B6:9F:BA:58:A8:98:50","sha256":"21:E0:91:75:BE:B5:3A:EB:F4:36:B2:EC:7D:AF:21:0D:D2:C9:58:AB:BC:4F:F3:08:0D:0B:C8:CC:44:41:94:DE"}}},"request":{"raw":"GET /video/ol_557dded964a5746f63c4f6dc2be0fc9e.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=2064384-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 21 Jan 2026 23:59:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 47425\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_557dded964a5746f63c4f6dc2be0fc9e.mp4\"\r\netag: \"4fed42333777ff915d7c970db3293c53\"\r\nexpires: Thu, 22 Jan 2026 00:40:51 GMT\r\nlast-modified: Wed, 21 Jan 2026 23:40:51 GMT\r\nx-amz-request-id: 5b5c9231-80a1-43d1-9d92-da070421d49a\r\nx-seaweedfs-expires-s3: true\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nage: 1\r\ncf-cache-status: HIT\r\ncf-ray: 9c1aa8d71b8d5d79-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH3UgQAAAwBuUwKCQH3FAAAAAgBJRPCLgGh\r\nx-77-nzt-ray: 2a494a157574c7d79368716936b8d10c\r\nx-77-cache: HIT\r\nx-77-age: 1106\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 2064384-2111808/2111809\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47425,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"d83010a3a599a33b3d68bbb0edf91bcb","sha1":"b4e344b5170f17fef9626381b1e7da90f150c38c","sha256":"7c939eae71a096057870d7c6bb6dc0346fc68fede3db9d3729a57a95673c9bba","sha512":"d2ffdee438277ded0efb70c7e95682e26968bddaab07e3da320c031c96a59ba7d550a8bd6b926ffe420e26782f284d4cc8db8b71b25bcb3514c2020195334a85","ssdeep":"768:GS6IT4g6FyE3jtd2wXFxfkdoyv+raI6ZrZtNVVFnxWPrsg:GDg6FyE3jt48FxMau+raIKN/VXqj","tlshash":"ad23c3aab7249023cb9907b458e317503375c43497875b8f07a9a37cace33edae614d9","first_seen":"2026-01-22T00:00:17.987515Z","last_seen":"2026-01-22T00:00:17.987515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XZPHF8G399","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"GET /gtag/js?id=G-XZPHF8G399 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\nexpires: Wed, 21 Jan 2026 23:59:40 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143404\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432776,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"543fdc7fdcd58e27ae25c47240f362a6","sha1":"60c0814a66799a211e07b0831036faa053991997","sha256":"0087affb2a260ee872a3032f6cfee1016b425cab6a056e3bf245046331a37fe1","sha512":"8a5ac99c387482a5eba9208b1b498381ceddb28a568a2ae5bd93ef343a5d731f966eb127b3a006572f4dc79fbe3023b8b5e104457ef4c5d6350cd16f9b7cfc29","ssdeep":"6144:7gzXo/RhdBAhJZEXOEsrzRak7K0go3VLXgeRIBDp36ZhhE:C4//dBAhJZEXOEAak7BIBQE","tlshash":"f9941ace73d670269396f478503f018ba57b29a2b45dc89af189cce41d34a9a4237f7c","first_seen":"2026-01-22T00:00:17.988377Z","last_seen":"2026-01-22T00:00:17.988377Z","times_seen":1,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":234,"dns":1,"connect":7,"send":0,"wait":32,"receive":28,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/06/thumb-1-69.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/thumb-1-69.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 67540\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:52:01 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bfb271-107d4\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mh6GLE3UyNeDwRbGHQdi81k0vAJSrv7qyoZlSVX2wziYG6s24zbfpu7nQO%2BrSlY6fBNI47rLUF5O2OpmhVGzsB7oCAOyEuCRU0PipA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4456c9bb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":67540,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"3a57151f4d3b3ebb343083133181fb57","sha1":"6591e9c311ab222b9ee6b0364fb2c59f05bcb0b9","sha256":"2dccfc46c89a98e727d89d38febae8882427e978fe79d5db9fd0bfceb9633d22","sha512":"a2cca1f17fce85a4adcf484104145831205b2563f3440608097932703feb5fcb57eafb53a6af452795260309641ea342f323428c8910cf10d2167e320cfa440d","ssdeep":"1536:2C0zPlxDiUXurU+hoLdIwW98m5ZQ8oN3nZh+qV/i/olyvIarSwW/8CnH1v8r:SzTiUAWWV5ZQDnZh+Qi/CygESwW/82H2","tlshash":"1f631283920641f5f3add19c528378929165637ebd2d32fd2065bfe0de4deb18ec0296","first_seen":"2026-01-22T00:00:17.989224Z","last_seen":"2026-03-07T07:28:46.850163Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/06/thumb-1-66.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/thumb-1-66.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50741\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:51:57 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bfb26d-c635\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W4tuh141kD%2BuPdj0QwwEDSueTZTrXv4D8Ozl0qcLxIjzKGGRjqLNQisiLkac5DjZZRuKEiBYUMlKlM%2B26Kt5jDjgFxX7QQL%2FMFEsqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4456c9fb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":50741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"9873c16ee982601109800a3eb7fccc78","sha1":"2840cde07ecd97889a6c97caa9eabc0ea0a0232e","sha256":"3287d903d3c97626541a4271733bac2fc3e4dffb79200b909f3b54e10081b0ce","sha512":"eb212f4b7f18147300a42cf04ec2ca348469baf0081ed3369fc24f6d48c3d4b3b80fe14d68cd23c42707a11d2176cae85cf2b0ff76e3b4b39c18f7952d39881b","ssdeep":"1536:2r80ECIwufI3nfcq0hcJLufhOwnOa31dg7PkxN:WmwufI3fcq0hSLwIU31dUPkxN","tlshash":"e033f19853af5d0a638ed33df58ea3ec9b5043e971272f3d184219e6503ac3a52543bb","first_seen":"2026-01-22T00:00:17.99Z","last_seen":"2026-03-07T07:28:46.856764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c84328440be6860b0add1fc5a60\"\r\nexpires: Tue, 20 Jan 2026 17:35:30 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3nwUAAAwBuUwKDAH3EQAAAAwBw7WvAgG3vwAAAA\r\nx-77-nzt-ray: 2a494a15d49921cd9168716940036a29\r\nx-77-cache: HIT\r\nx-77-age: 1439\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39568)","md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.182.98.28","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://thenudebays.co\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=cde5d6f0-8a2b-439a-aea8-cb1ddf528f6a:1:1; expires=Sat, 19 Jan 2036 23:59:41 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9cb905360fc84869f41daff836b4a5c8","sha1":"82a4302a39b4756c92d2d81275f5cb948fafa44d","sha256":"70542a859d12ee9ae8fdb22fdcef817c9fc9ac9e8b887b33f47da9fa9518e9a3","sha512":"b6894cdbe7d310798a96f19a91fee59156d1fe8dfc34163937f36d927915aec4c69bcb5e6fe8f244330c74ac6509b812bb5ade36246f2d8b2ce451ffb7f97284","ssdeep":"","tlshash":"9f90044301141404c0c430c03d04734c30511315057117443d5354c304f10d470f4c7c","first_seen":"2026-01-22T00:00:17.990882Z","last_seen":"2026-01-22T00:00:17.990882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":224,"dns":36,"connect":24,"send":0,"wait":24,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:51:40 GMT","end":"Sun, 29 Mar 2026 00:51:39 GMT"},"fingerprint":{"sha1":"F3:CE:FF:C9:F8:70:23:18:40:13:70:96:1A:D1:FD:34:D3:CD:66:FC","sha256":"07:8C:A3:3F:1D:F1:E0:75:3D:26:20:F5:D5:75:64:CE:F7:40:6E:B7:BB:B9:EC:79:33:27:5F:51:2E:B0:12:E7"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fc4f61ef812b3efb522ea499e4911a99\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":82,"dns":5,"connect":18,"send":0,"wait":23,"receive":4,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbs?c=1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:43.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 21:42:11 GMT","end":"Wed, 25 Mar 2026 21:42:10 GMT"},"fingerprint":{"sha1":"DD:BF:7F:13:B7:AA:5E:41:65:09:9E:F1:FE:42:C4:9A:00:0B:F4:E6","sha256":"FE:3B:B4:EE:8B:60:30:E2:9F:CB:E9:E2:06:C0:A4:2E:FF:35:D3:22:85:14:1C:B8:13:CD:72:FB:EA:5C:E9:98"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25819494=1; slec2d86e1ab7c7d36a9ea9ae4145563cf4f=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:43 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c84328440be6860b0add1fc5a60\"\r\nexpires: Tue, 20 Jan 2026 17:35:30 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3nwUAAAwBuUwKDAH3EQAAAAwBw7WvAgG3vwAAAA\r\nx-77-nzt-ray: 2a494a15d49921cd916871693ca6e318\r\nx-77-cache: HIT\r\nx-77-age: 1439\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39568)","md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":6,"dns":20,"connect":6,"send":0,"wait":11,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/12/SweetieFox_000097.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/SweetieFox_000097.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26569\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:56:05 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bec455-67c9\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbXDmRVYo7KIunIOXB04ROGSDksYemyD8lovV0kk585%2BMGXPm9eTrguZE4qIeAK0Ir3Th9A42oJV5JX3ONyLyX8s1cVOktQVaKtqcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c7eb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26569,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.35.100\", baseline, precision 8, 852x480, components 3","md5":"4497c6799dab513a30c8d10d6d92580a","sha1":"76747518febd9a9f2aa274e2cb992f9c72921f0f","sha256":"66c52ca07c71269d0a83fd5eaa485fa7d66212b1b18fcae9ee87307749f4c632","sha512":"2cdd2ddbeaf5b395d356ecf3f44f075ba7b35107006e9b0bd6176e54222c09ac5d6e4168b9b1f7c40627a73140189ad43321db924dd3646554b55f3a27e8f16c","ssdeep":"384:y1Ia4Ec8wyDfmiDQ1J2F+C3J0uXOPYwPk1bWAnNef4FwXpOIw3z0rEzwnjOt6:SIabc8w7iDZz/XoYQk1Qf4FNIAkOI","tlshash":"cfc2e17b7bae545ac98ae1fe870cf6408b98d4c7060da93269be113cf8db2ca5531584","first_seen":"2026-01-22T00:00:17.991854Z","last_seen":"2026-03-07T07:28:46.769729Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c84328440be6860b0add1fc5a60\"\r\nexpires: Tue, 20 Jan 2026 17:35:30 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3nwUAAAwBuUwKDAH3EQAAAAwBw7WvAgG3vwAAAA\r\nx-77-nzt-ray: 2a494a15d49921cd916871692c838029\r\nx-77-cache: HIT\r\nx-77-age: 1439\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39568)","md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QW24CMQy8Si9AZDt2Hny3v61ExQGy2aXlg0ViKQLJh6+TohY1o0SWMxPPhIDCCnBF+IRpLXnNqBldBsfkUFhf3zZqvfPnNH+N01Bui6tHZU4sqClmH4IiCItxbXtGUoGkgjEmAEVihAApKYN6BQOJZ26VA0CNoC/bjW7fn62RJCoqqQe4kpi6z1cCZauRElwRqInR1zBJwd0wShzGAZLnjKWGMQDSzkwZ6Z9r+IHD6PsU+MWqsT2yJ3NmC7S3y3Kbq+oDsUUMuUnlngb6Q4+cP2C4T7ScdnjsrkAXdygfy+lipg7WamrXuaSWn+2nLuW0L+f9ce7XTaMljAXCWIdQ8zQJZvvixCxFsudI8g1NKAjDywEAAA==\u0026cb=e2e_6971686d129282.00255860","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QW24CMQy8Si9AZDt2Hny3v61ExQGy2aXlg0ViKQLJh6+TohY1o0SWMxPPhIDCCnBF+IRpLXnNqBldBsfkUFhf3zZqvfPnNH+N01Bui6tHZU4sqClmH4IiCItxbXtGUoGkgjEmAEVihAApKYN6BQOJZ26VA0CNoC/bjW7fn62RJCoqqQe4kpi6z1cCZauRElwRqInR1zBJwd0wShzGAZLnjKWGMQDSzkwZ6Z9r+IHD6PsU+MWqsT2yJ3NmC7S3y3Kbq+oDsUUMuUnlngb6Q4+cP2C4T7ScdnjsrkAXdygfy+lipg7WamrXuaSWn+2nLuW0L+f9ce7XTaMljAXCWIdQ8zQJZvvixCxFsudI8g1NKAjDywEAAA==\u0026cb=e2e_6971686d129282.00255860 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: __uvt=s%3A32%3A%22d365cea8c77fabcf25d8344556ac963e%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:43.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 20 Jan 2026 23:52:35 GMT\r\nexpires: Wed, 20 Jan 2027 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 86828\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-16T17:50:35.49609Z","times_seen":884618,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":91,"dns":2,"connect":16,"send":0,"wait":15,"receive":19,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u3y8v8u4.aucdn.net/library/802424/f41dc925f8cbf80ec426b80505bc4936a42c64c5.mp4","fqdn":"u3y8v8u4.aucdn.net","domain":"aucdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/802424/f41dc925f8cbf80ec426b80505bc4936a42c64c5.mp4 HTTP/1.1\r\nHost: u3y8v8u4.aucdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 3682490\r\nlast-modified: Wed, 14 Feb 2024 15:25:36 GMT\r\netag: \"65ccdb70-3830ba\"\r\nexpires: Fri, 22 Aug 2025 19:41:54 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH3JqDIAAwBuUwKAQH3MAUAAAwB1GY4EQG3bKmdAA\r\nx-77-nzt-ray: 2a494a152eafdfd39268716921c58820\r\nx-77-cache: HIT\r\nx-77-age: 13148198\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-3682489/3682490\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":3276800,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"2738721e77cfd1ecc40ea78e2183ee30","sha1":"a5c0401eb7150bec2065e3bce68172928ee3559c","sha256":"bea43accd84afcee1bd1bcd33205d4140a3ed9f7b7faaec0080797d626b1eff3","sha512":"cedd36d88ad36d4d648d1e7d21fe8fd7ef4c9d0c4d7bc857fefad583ff7204f31b0d086ba235f8f9a3914747c26270a480ed50b7eb69914e76ae156e1fbf7a6c","ssdeep":"24576:F4am7pRLuf/UjwHiDRDOkWd3YNcIAUQu2PDTi6M01fyECPc71i+xnzzNE:qrFR6f/UjJtDOkWtYaaRWTpD1fJmcZib","tlshash":"992523fb87b0ae6ff23b58f94dede709357184001a25e28bb22a771d94d05a136406e7","first_seen":"2026-01-22T00:00:17.993599Z","last_seen":"2026-05-30T19:51:05.587783Z","times_seen":14,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":368,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"u3y8v8u4.aucdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QW24CMQy8Si/Ays88+G5/W4mKA2w2S8sHi8RSBJIPX2dpq4qMkli2ZzIOAYUV4IrwCdNa81rAMnYZOqEOVez1bWOCdv4cp686lv42d8PRhJNwtBQzh2AIKuq9vlmQTCFZ5BgjkCGSouYczJXZwEHKIi3qADhQtAj2st3Y9v3Zc0mjoZExwJUUPG4WjMDEY6QEVwRqfOQhjNrjrlSNpRZILBn7IdQASDv35U0Pxp2FIWozkSSk5oHv78EfVo3HKExu0xfYku7n2zSY/Wts0J+hYJF4rN6BAL/jYruWQxZ7YHN36D/m08XdHTzVJDqMi56PK/5rl/6078/747SUG8d/d9Sx5jhCKIlxzEOqFUspNYIOlb4Bheb1WtcBAAA=\u0026cb=e2e_6971686cee8510.48989485","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QW24CMQy8Si/Ays88+G5/W4mKA2w2S8sHi8RSBJIPX2dpq4qMkli2ZzIOAYUV4IrwCdNa81rAMnYZOqEOVez1bWOCdv4cp686lv42d8PRhJNwtBQzh2AIKuq9vlmQTCFZ5BgjkCGSouYczJXZwEHKIi3qADhQtAj2st3Y9v3Zc0mjoZExwJUUPG4WjMDEY6QEVwRqfOQhjNrjrlSNpRZILBn7IdQASDv35U0Pxp2FIWozkSSk5oHv78EfVo3HKExu0xfYku7n2zSY/Wts0J+hYJF4rN6BAL/jYruWQxZ7YHN36D/m08XdHTzVJDqMi56PK/5rl/6078/747SUG8d/d9Sx5jhCKIlxzEOqFUspNYIOlb4Bheb1WtcBAAA=\u0026cb=e2e_6971686cee8510.48989485 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: __uvt=s%3A32%3A%22d365cea8c77fabcf25d8344556ac963e%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fstyle.css\u0026l=4682\u0026fd=551","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:43.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 21:42:11 GMT","end":"Wed, 25 Mar 2026 21:42:10 GMT"},"fingerprint":{"sha1":"DD:BF:7F:13:B7:AA:5E:41:65:09:9E:F1:FE:42:C4:9A:00:0B:F4:E6","sha256":"FE:3B:B4:EE:8B:60:30:E2:9F:CB:E9:E2:06:C0:A4:2E:FF:35:D3:22:85:14:1C:B8:13:CD:72:FB:EA:5C:E9:98"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fstyle.css\u0026l=4682\u0026fd=551 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25819494=1; slec2d86e1ab7c7d36a9ea9ae4145563cf4f=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:43 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=555","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:43.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 21:42:11 GMT","end":"Wed, 25 Mar 2026 21:42:10 GMT"},"fingerprint":{"sha1":"DD:BF:7F:13:B7:AA:5E:41:65:09:9E:F1:FE:42:C4:9A:00:0B:F4:E6","sha256":"FE:3B:B4:EE:8B:60:30:E2:9F:CB:E9:E2:06:C0:A4:2E:FF:35:D3:22:85:14:1C:B8:13:CD:72:FB:EA:5C:E9:98"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=555 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25819494=1; slec2d86e1ab7c7d36a9ea9ae4145563cf4f=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:43 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":626,"timings":{"blocked":277,"dns":0,"connect":0,"send":0,"wait":96,"receive":65,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/847ce550794c0faa68305126eb5944e905192309033bd90575dfa8bb79fc9209.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Jan 2026 02:32:52 GMT","end":"Mon, 06 Apr 2026 02:32:51 GMT"},"fingerprint":{"sha1":"8A:68:C7:51:16:AB:C0:0E:F3:A6:17:12:E1:07:66:95:36:27:86:2F","sha256":"79:02:9B:96:2C:55:77:35:46:DB:5C:3A:D0:CB:0C:13:BA:42:DE:12:27:8F:10:39:52:51:F4:1C:0A:CA:0E:E5"}}},"request":{"raw":"GET /si/847ce550794c0faa68305126eb5944e905192309033bd90575dfa8bb79fc9209.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 6359\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 24 Oct 2024 15:52:28 GMT\r\netag: \"671a6d3c-18d7\"\r\nexpires: Fri, 23 Jan 2026 23:59:42 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6359,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"0beb662b0d17c9deab9b094bb79629ed","sha1":"69c012eccdc927949f609776784652ad85970286","sha256":"4319f2026d966d428de82f23e33521b096eb01ae0b4a9460bbb9f01511258fb7","sha512":"772b901ebec54dc5692a6e2f601a2ddf68415e13147b25c1f6e2ad14824c9f101e8ea01bfb53fe96304ae89134a36ec50d00332587d411189704ce6dbe5444cf","ssdeep":"96:IElbw+iwcIYcYx2D2SgpAjKwq2Ed8LkH7vNCMTjj1i+tgipA2Ba74DRPif154E:9w0S326S7q2zLkH70MHEegMBDd0oE","tlshash":"8bd1af54634643aef676abb37462175332151463db30466070cf6bc08e9cccaaf26ab6","first_seen":"2024-10-25T01:28:34.347246Z","last_seen":"2026-02-08T18:07:09.099811Z","times_seen":982,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":78,"dns":31,"connect":19,"send":0,"wait":20,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/12/Jadeteen_000019.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/Jadeteen_000019.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14276\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:55:28 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bec430-37c4\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uDG%2FIb1Rgt%2BeumVwfa6NKsvZ25ZcW65e8j8XDFcjQlCdR5Dj0oEHoxGoWx37vKkUgygoHQyFusWEt2VDVGiaEQO0d3RR2DBRmPYp7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c82b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":14276,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.35.100\", baseline, precision 8, 272x480, components 3","md5":"e6361e46a3de6fb7aae9c4093332b887","sha1":"ec7363fa490c4b3718a81f301ebc1aa15b59691e","sha256":"cd33c07c585e4927a11722651834a8aa6b959f6c614fc8532a943ddfdc70e0e5","sha512":"a69bb9a3ad71cd95ed19e954d2d9f0563043a5198eac26107b38a834d97ec2d587ecae58b2eea3a5b6f9a93e18afa53035d92532c50b42bf8652232013ed6cd9","ssdeep":"192:uIo4AK3YnDWDupw7FJ7oePtSVVnhHGegQUy+c60byy5EmSFhLnrrogXIIKdy8Ij/:XAbnDWH7IEtohHruyWzhLn/XXIanX/","tlshash":"e852c0003d395b097ca627f41cdd19245748319ebb2c0e793b26b91e3d70da149a4d1e","first_seen":"2026-01-22T00:00:17.995178Z","last_seen":"2026-03-07T07:28:46.834992Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/07/Laradiabla_000021-e1688981637269.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/Laradiabla_000021-e1688981637269.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28434\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 10:49:23 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68beb4b3-6f12\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psHfXqvu7tuARkKR5p7aK3wQqjqZVUh6qyVMJm24u2nA9Jt5qALbJStkhpqaqNjE6J3B1zeKMptUWO752sw7DnkFII7Jj3RnyF7eTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cb1b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":28434,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 720x406, components 3","md5":"623016a31dcee85f20da276d365b2347","sha1":"acc15f68477884333c79e73ad3aa659ffaddb929","sha256":"311791eca2fccb4398e336c7a313b0d7daf624509db1785251514fa5ed943f54","sha512":"a148218f55f884eef815d21202fbe85e149d666bf4e8fe2702d138fec54f7aa0c9c2260b1cdc984101bdb546f0627ce27d97e22fe8ff29887fcbaf1827b0efe0","ssdeep":"768:8zx8UoJKqj0waKDwk+nyeapd7E2b9vOqg2:Y3fKckEwd7F5vb","tlshash":"18d2f14987c095a6a32a7d5dbe10f4f71afbb0e3e42f22211131cd362be0b5f5e94218","first_seen":"2026-01-22T00:00:17.99627Z","last_seen":"2026-03-16T03:18:29.598916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/10/sexy-red_000040.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/10/sexy-red_000040.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33166\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:28:44 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bebdec-818e\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ox8VFHZa5nYlGG2kRwhC2tZzEp5x8Ud84LVSAFF7ZB2SRJkyvQNf4FY4oPPpPdv70peUibOuRWLB0gfumL1fc9D3fKQICJYkbUrC0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cc3b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":33166,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.35.100\", baseline, precision 8, 674x1200, components 3","md5":"6e37b18c91b8d35878940fbc8b580b1e","sha1":"795b857dcda93701093b16c2b43ab822f82ea6b9","sha256":"ed25e711139e6a3a6169bd362980cab539c4436722cad98c0c4066625df81144","sha512":"c916db8cc2b7f3b856af1810dde0e379c852b0cc5f5e8d5ad3e019fcb7c5255d5d2c6141f3043b889525ef3e25b8fd2d5fb4575808d22ea9f17b089810b111ea","ssdeep":"768:LVe3qynvhz5r+7tzwooZEW8sRzWduIriKI6FGghm:LaqynTrMzcdz2riKjFG","tlshash":"ffe2f11776e4f1b4b9d7d0e848143a95f4f8ce6fe8bd8a16548102b610b7008326cbf9","first_seen":"2026-01-22T00:00:17.997144Z","last_seen":"2026-01-22T00:00:17.997144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/cache/minify/c71e1.js","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/cache/minify/c71e1.js HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: PHP/8.4.15, PleskLin\r\npragma: public\r\nexpires: Thu, 10 Dec 2026 21:37:33 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 10 Sep 2025 09:54:31 GMT\r\netag: \"pub1757498071;gz\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: MISS\r\npriority: u=3,i=?0\r\nage: 3637326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdVjaPD%2BAnK0OqwiuSYQ%2B3Xv9z1J%2B1CfLTB6qnErYnYOth9aJCpKSTyanzk1tDOhg33shCO5r3Vez8D2cAJlzfcQQK2qIEYGsRQvDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4459cd0b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":51798,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24063)","md5":"b7e7f850a6d4c0457cb96cc94992d7ec","sha1":"f13c4e4d2b2750142ba6c4a3aba5e24692df8ec6","sha256":"1d412e2a6dd2e5a3e057aae9735ae214c38c2d761f8fd662ef08262758472490","sha512":"7a9a5896db42792d651bd060072714cf70860ed7f7345799ebeb2ffa5b2f19022e89f645fab933249f37f0100f8ac296b93b261ab2526bcd1712cec5944ce709","ssdeep":"1536:ivGnY81LLll26LDPxodAl8DiS+NHsSnPPYD2kUO:i+ntfPxoWO","tlshash":"c9332a49b3243d6b14ff22f6a25f87076176489e440ab0b4a475cec99db44e011afffa","first_seen":"2023-03-14T19:37:05Z","last_seen":"2026-06-16T02:37:00.377415Z","times_seen":408,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:36:36 GMT","end":"Sat, 28 Mar 2026 23:36:35 GMT"},"fingerprint":{"sha1":"0E:EE:1D:ED:80:5A:CA:0C:1E:93:89:94:78:B7:34:91:38:D4:89:51","sha256":"CF:77:1B:FB:04:67:32:02:DF:D9:38:24:27:3D:A5:98:54:0C:4D:BA:C5:1B:62:FD:C1:E1:17:57:6F:63:B3:BF"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 452818c7c44dada783c759cc5a83a23a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-06-16T16:44:00.746642Z","times_seen":19002,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":71,"dns":0,"connect":35,"send":0,"wait":37,"receive":19,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/api/models/vast/?affiliateClickId=orddNHdLHTPHNVS4ASOqqpouqlddLNXNRTW6VzqpbXUzOodTK6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOdNRrXvVnNxptVZptpLbRTdNnrXtXLNPxW6VxutwH230zWWPULpp7ZVTSz0udNW6V0rpXSuldK6V0rprK7paLrrZXOdK6V0rpXSuldK6V0rpXTOldK4sf.fJSIj1D.5znG63AfbfTNZY9QuldZrntRNbnbXRxNvPXdZTNLTLbxrTPVTRQ4PsA-\u0026ax=0\u0026campaignId=165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af\u0026campaignType=smartpop\u0026creativeId=2056950966946db9155d057d128c7bd863011cab629e73419e4ecbe52e177a54\u0026duration=00%3A00%3A30\u0026iterationId=1210672\u0026masterSmartpopId=2683\u0026noc=1\u0026p1=6294594\u0026p2=thenudebays.co\u0026p3=5543950\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=3564\u0026sourceId=5543950\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35211\u0026videoType=ol","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 09:58:03 GMT","end":"Sat, 04 Apr 2026 10:57:56 GMT"},"fingerprint":{"sha1":"95:69:65:16:9E:34:35:2F:34:8D:46:FF:E2:C4:56:4A:A1:A0:46:71","sha256":"23:3F:BB:9E:D5:E5:A7:FE:DF:C5:9C:F6:A8:39:83:A0:E8:67:EC:58:0E:6C:15:85:79:95:48:99:FD:3B:F5:7E"}}},"request":{"raw":"GET /api/models/vast/?affiliateClickId=orddNHdLHTPHNVS4ASOqqpouqlddLNXNRTW6VzqpbXUzOodTK6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOdNRrXvVnNxptVZptpLbRTdNnrXtXLNPxW6VxutwH230zWWPULpp7ZVTSz0udNW6V0rpXSuldK6V0rprK7paLrrZXOdK6V0rpXSuldK6V0rpXTOldK4sf.fJSIj1D.5znG63AfbfTNZY9QuldZrntRNbnbXRxNvPXdZTNLTLbxrTPVTRQ4PsA-\u0026ax=0\u0026campaignId=165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af\u0026campaignType=smartpop\u0026creativeId=2056950966946db9155d057d128c7bd863011cab629e73419e4ecbe52e177a54\u0026duration=00%3A00%3A30\u0026iterationId=1210672\u0026masterSmartpopId=2683\u0026noc=1\u0026p1=6294594\u0026p2=thenudebays.co\u0026p3=5543950\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=3564\u0026sourceId=5543950\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35211\u0026videoType=ol HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: text/xml; charset=utf-8\r\ncf-ray: 9c1ac44dba22a0f0-OSL\r\naccess-control-allow-origin: https://thenudebays.co\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2869,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, Unicode text, UTF-8 text, with very long lines (2863), with no line terminators","md5":"337d6ef8cb975e2684afc91356029f94","sha1":"8ff87983dcc534780048756a5fb325cf860821d3","sha256":"5c44f886490ce66252ee2b60ffad6b0c2068401779170a8718670587f5899662","sha512":"545297616b639f49ddca37d2d74105549027448d594fdf446383f58571eea990d4d165a4cfd5e86b22f63db57d45f534629fcb6138f4298192291bc34bcbb3bc","ssdeep":"","tlshash":"f951fb7ea120ac33324fb929da6c38ec61700b2f55c541dcf49984712c8976a1af36f2","first_seen":"2026-01-22T00:00:17.999085Z","last_seen":"2026-01-22T00:00:17.999085Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fuxtube.org/","fqdn":"fuxtube.org","domain":"fuxtube.org","tld":"org"},"ip":{"addr":"104.21.25.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-21T23:59:39.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fuxtube.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 04:16:22 GMT","end":"Sat, 18 Apr 2026 05:14:54 GMT"},"fingerprint":{"sha1":"98:78:7F:E0:03:16:F7:39:90:B4:A7:AF:0A:11:4A:A0:83:9D:06:3C","sha256":"69:D1:29:81:08:32:5B:E7:A2:C5:AC:51:23:00:91:43:2D:A5:1F:BB:54:94:C7:3D:30:01:52:B6:79:6B:B9:E5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fuxtube.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 21 Jan 2026 23:59:39 GMT\r\ncontent-length: 0\r\nlocation: https://thenudebays.co/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eU5t7Qdz291aVamOBq%2FcDn7hYD8vDVe2K9F77KCxCdugOBD1w77PgPCBXE8TMCxuEVTWEFpeWlUZOlVbvjEDLiOnu%2F%2BwUXFmwjsh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c1ac440e82d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132919,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":55,"dns":39,"connect":1,"send":0,"wait":3,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/12/RU1eVUWp_720p_000103.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/RU1eVUWp_720p_000103.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18598\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:55:46 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bec442-48a6\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bag7E2IWFODT9sIFfj5JXz7TjNjghICs5ZX%2FMkW9aLrmpzivu1IJCJWI3u1e8t16%2FQ5TFIJx3b88ajgG2ov77HXIm3MKztjgGTXdLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c8db4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":18598,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.35.100\", baseline, precision 8, 404x720, components 3","md5":"684e8ecf280f8aa50f69b38d753a3bc5","sha1":"19f9943655032683752afdbd13ba42be67623419","sha256":"4e87ecb6d49d013a7632752fbd3e64c91c0c12c0b58df02019b1260fd7d91c4d","sha512":"1644f18f6d15662b5991bbd82ea451dcdde96c6913796b387d9804530e4ccb7209b48a507af07f0dd5b0fb19ec4bdf3f18ef19947065869f10c2f97345495cd0","ssdeep":"384:31ynfgoXU81l7jfkU0j4d/AQGGf8JhsDyM4yA2/UxY56CInLrl:31cYoP3d0j4d/AQNE3ejRcKICInLrl","tlshash":"9482e07d3769dcf8fbae2495940b0773b4446144ae6f481d14c86cb90ba38be3634ba3","first_seen":"2026-01-22T00:00:17.999986Z","last_seen":"2026-03-07T07:28:46.878256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/02/37_000093.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/37_000093.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22496\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 12:43:23 GMT\r\netag: \"68becf6b-57e0\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: public, max-age=16070400\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RYffbXLXHnKzr8E5m%2BhFVIKbpTuMdXb261B7leTqxUjm7E4ypyh4TZC3JImtd7CUpC26fVqlChNl%2BEEsXicbuWbl0C4%2BZcB2wG%2FKoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4457cabb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":22496,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 384x680, components 3","md5":"9e6ed4744672229ace92822909889aed","sha1":"10df70b6eaa83970424ef6e1b0463a11a93c8a36","sha256":"bc11efe0f08253edc38965d272bca8f9b0b597d628523b833c7cc5480a6eb4d7","sha512":"bd742af10626e38e6e3ced43008faaaaa75396303ecaec70147b5b7bc5273a1930bf1b1c2b60a0e8a4f60d422f7958d3ebbd465b50eab6ceec7f8bc26749ab27","ssdeep":"384:wCf3dWgtwzA/lfjvhRo4O2DS9U9DZL5y+ylnYk5D9pbR+CRTxWX3eIPv+0QhO:/ftbwM/lfjpD3d9D/ylX1zbR7xWXFPvR","tlshash":"1ea2e1cbf75b4161ae93bf931d38fed568aa17932de9a710821f2d862711040f384f52","first_seen":"2026-01-22T00:00:18.001151Z","last_seen":"2026-03-07T07:28:46.862745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c84328440be6860b0add1fc5a60\"\r\nexpires: Tue, 20 Jan 2026 17:35:30 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3nwUAAAwBuUwKDAH3EQAAAAwBw7WvAgG3vwAAAA\r\nx-77-nzt-ray: 2a494a15d49921cd916871698ee7f129\r\nx-77-cache: HIT\r\nx-77-age: 1439\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39568)","md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/smartpop/165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026affiliateClickId=orddNHdLHTPHNVS4ASOqqpouqlddLNXNRTW6VzqpbXUzOodTK6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOdNRrXvVnNxptVZptpLbRTdNnrXtXLNPxW6VxutwH230zWWPULpp7ZVTSz0udNW6V0rpXSuldK6V0rprK7paLrrZXOdK6V0rpXSuldK6V0rpXTOldK4sf.fJSIj1D.5znG63AfbfTNZY9QuldZrntRNbnbXRxNvPXdZTNLTLbxrTPVTRQ4PsA-\u0026sourceId=5543950\u0026p1=6294594\u0026p2=thenudebays.co\u0026p3=5543950\u0026noc=1\u0026ax=0\u0026skipOffset=00:00:05","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 09:58:03 GMT","end":"Sat, 04 Apr 2026 10:57:56 GMT"},"fingerprint":{"sha1":"95:69:65:16:9E:34:35:2F:34:8D:46:FF:E2:C4:56:4A:A1:A0:46:71","sha256":"23:3F:BB:9E:D5:E5:A7:FE:DF:C5:9C:F6:A8:39:83:A0:E8:67:EC:58:0E:6C:15:85:79:95:48:99:FD:3B:F5:7E"}}},"request":{"raw":"GET /smartpop/165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af?userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026affiliateClickId=orddNHdLHTPHNVS4ASOqqpouqlddLNXNRTW6VzqpbXUzOodTK6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOdNRrXvVnNxptVZptpLbRTdNnrXtXLNPxW6VxutwH230zWWPULpp7ZVTSz0udNW6V0rpXSuldK6V0rprK7paLrrZXOdK6V0rpXSuldK6V0rpXTOldK4sf.fJSIj1D.5znG63AfbfTNZY9QuldZrntRNbnbXRxNvPXdZTNLTLbxrTPVTRQ4PsA-\u0026sourceId=5543950\u0026p1=6294594\u0026p2=thenudebays.co\u0026p3=5543950\u0026noc=1\u0026ax=0\u0026skipOffset=00:00:05 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-length: 0\r\nlocation: https://go.xlivrdr.com/api/models/vast/?affiliateClickId=orddNHdLHTPHNVS4ASOqqpouqlddLNXNRTW6VzqpbXUzOodTK6V0rpXT1UU0uomponpndRNTRPTS6V0zpXSuldK6Z0rpXTOdNRrXvVnNxptVZptpLbRTdNnrXtXLNPxW6VxutwH230zWWPULpp7ZVTSz0udNW6V0rpXSuldK6V0rprK7paLrrZXOdK6V0rpXSuldK6V0rpXTOldK4sf.fJSIj1D.5znG63AfbfTNZY9QuldZrntRNbnbXRxNvPXdZTNLTLbxrTPVTRQ4PsA-\u0026ax=0\u0026campaignId=165aea9bcdd7aabac45f72d02f58fd24b8416bc57cfc540b1b4409ac823564af\u0026campaignType=smartpop\u0026creativeId=2056950966946db9155d057d128c7bd863011cab629e73419e4ecbe52e177a54\u0026duration=00%3A00%3A30\u0026iterationId=1210672\u0026masterSmartpopId=2683\u0026noc=1\u0026p1=6294594\u0026p2=thenudebays.co\u0026p3=5543950\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=3564\u0026sourceId=5543950\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=1f2ad638bb163e0f21b19d6cbbcd5805b56eb7b1ef21117b6157eaf2a11915c9\u0026variationId=35211\u0026videoType=ol\r\ncf-ray: 9c1ac44c484da0f0-OSL\r\naccess-control-allow-origin: https://thenudebays.co\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2869,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":63,"dns":46,"connect":1,"send":0,"wait":29,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QQW4DIQz8Sj8QNDaGhZzbayulygNYdrfNIYmUTaNE8uPrpVEblREIDTP2GAbHFWjF9ERpHfJaSDO5DCfsKIi+vm3UuPPnePgaxr7cZlePKpIkkKYu+xiVECSY1rYXYg1IGqjrEqBEnAjIrAL1CgMHL7LcHEDaQV+2G92+PxuRQqekrB64cjB3668MFbtbKVwJvJjJ1ziGQlM/hK4feiQvmUqNQwTxZKFM9C81fuA8ZWpt8IvVIvckni2aLWijy3w7VNUH4TJjzIs13MdBK/So+QPfJc4GtcNTiwWd3b58zKeLpdobtbgdt0o2v9hPXcppV86746G9Lhb1JUCQU4yQWtF5GXuahlgL/JRy/AY+8M0TywEAAA==\u0026cb=e2e_6971686d12b239.54177635","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QQW4DIQz8Sj8QNDaGhZzbayulygNYdrfNIYmUTaNE8uPrpVEblREIDTP2GAbHFWjF9ERpHfJaSDO5DCfsKIi+vm3UuPPnePgaxr7cZlePKpIkkKYu+xiVECSY1rYXYg1IGqjrEqBEnAjIrAL1CgMHL7LcHEDaQV+2G92+PxuRQqekrB64cjB3668MFbtbKVwJvJjJ1ziGQlM/hK4feiQvmUqNQwTxZKFM9C81fuA8ZWpt8IvVIvckni2aLWijy3w7VNUH4TJjzIs13MdBK/So+QPfJc4GtcNTiwWd3b58zKeLpdobtbgdt0o2v9hPXcppV86746G9Lhb1JUCQU4yQWtF5GXuahlgL/JRy/AY+8M0TywEAAA==\u0026cb=e2e_6971686d12b239.54177635 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: __uvt=s%3A32%3A%22d365cea8c77fabcf25d8344556ac963e%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 18:32:18 GMT","end":"Fri, 06 Mar 2026 19:30:50 GMT"},"fingerprint":{"sha1":"9A:CB:17:6D:8B:24:6D:0F:99:B5:FD:4A:00:CB:D3:DE:2B:8E:84:93","sha256":"3B:72:94:40:4C:CD:DE:97:5A:DF:6C:E1:90:81:0D:BF:33:9E:10:3C:16:3A:61:15:FF:65:B0:6B:5D:34:32:21"}}},"request":{"raw":"GET /sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 07 Jun 2022 15:37:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WoeK1eBtr88AatVvHRs5O%2BrcdDI%2Fep4NXxaxql6UQv3OPJTjN5ZvEMvN1c7cOMEN%2FT%2B1X1uCsNSdy7w%2Bl2CGAQM871hGq2sRXU%2BsKWI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c1ac450d9b656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1038,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3069039fb65877459a52e10be8c00f66","sha1":"15fca88fa2ad1344333421bd691cb4345923c214","sha256":"6bd6d71714163cd6c64ee6f1f318b16db90f93e6b09d6ea925a54a1dba92851e","sha512":"ac070d5917627b1a4ccea03d7005f39b36fd3548ceade646c7313dcd370cea680410f8e963445aedadedf4178eceda028030782b547c8ad3d008d11329a935f4","ssdeep":"","tlshash":"64114c252ef8c4b300969090bb357f1fec80e283984f6940b3bc45659f9ade6cd9380b","first_seen":"2023-04-06T22:23:51Z","last_seen":"2026-05-18T08:06:50.933902Z","times_seen":1385,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":105,"dns":41,"connect":6,"send":0,"wait":461,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/in-page_push/os/android/2/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:43 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8500-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1AajyiKjkAfio%2B2vKSLXDa10AEHRHSxhhTUVJUqFu%2B7KK7x9zJEFR%2BrYolrV2sRstiuXGh9hMG71tdTXF3Fz42tMimKAqzD65z7rN6cMRWc%3D\"}]}\r\ncf-ray: 9c1ac45448fc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-06-16T14:58:49.604438Z","times_seen":11983,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":59,"dns":34,"connect":1,"send":0,"wait":486,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/06/thumb-1-67.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/thumb-1-67.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72229\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:51:59 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bfb26f-11a25\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qjk2CcuUkgyI8AQIleWqKv7GORQnMcpvNtOIO6AkPRWhgo7LU0Uw7rj6lyZMGaUoen9BNcjghM5BTmaLaBO757%2F%2F4ZlEdw0Jc50TVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4456c9db4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":72229,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"25a5b38ee7c5ff0d79134a61e8e8e2d6","sha1":"5d1db341234281e09110b97ce0d89f300595414b","sha256":"a979cec77a9de3dca0494154729b446c627ed6a0186eaebbb4bf7319a08f77fb","sha512":"7082316dc4e8544595f2dfa06ef9f01cc13ef3d1de28732631a83d6d2deede48e3e3ed5989503366c44bdd45570c0d15e9f57d50c638f7b74fc8e9dc2ad9a014","ssdeep":"1536:2aCReCegIPWcuBsIxWa6Li3IVhrwoYy4UoTHVYyMBZmTWrJ484uxe4StGIIhQ:XiJeg9cSx3IVhkol4UMHCdmKxKtVIu","tlshash":"8263023bde2b59675a5c308e7bea97e0fa097513a060f88b26b75c9d300853138f1e95","first_seen":"2026-01-22T00:00:18.00322Z","last_seen":"2026-03-07T07:28:46.794326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/02/thumb-1-801.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/thumb-1-801.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 79848\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 13:54:17 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bee009-137e8\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1CRvNAihdIGPUsGc84l85RO2UjleG3SWRVGhDNwwnvw2DHeMpSQM70MVrmMHEAw4YXyqNsYXBFJXPOwfvwng9kpe02Fy5IWlpCVrDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4457ca9b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":79848,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"eb9c2cf7daf4a1a6d72c16793a13daa2","sha1":"de01720571c3550b3f88674f1212f46ec09c80e8","sha256":"ea75136eb6fec46d29c8f8223b1a6940650c50bc424823dade3991f30e2ca64c","sha512":"75527d9aea82bd6a74302e9562f75c8cf40852ab1e999c5eaefd4abc1e5691af007f41b414413ede3709679da6f73a319681b40e3a3f6e242c7d1914b79e68aa","ssdeep":"1536:2EF5NUKUiKGxpyQzN+xSqNL07gR9kYUvNUAJYEm1mZVZKzee109qW2:/F5NjUiKkpy2+xRfPkYUvOAHm1mZVMzx","tlshash":"c473024b74676c3287859fd4e7090823d2b1435ce69477960eebe4cf2629362db7204b","first_seen":"2026-01-22T00:00:18.004076Z","last_seen":"2026-03-07T07:28:46.811051Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/05/thumb-1-4496.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/thumb-1-4496.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17833\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 21:20:19 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bf4893-45a9\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2B1oc1lCx8zgNRGocNk%2BI3bLqVTQWRDB2OKJYn2mEZHstx6LrfztUeZreGbuekTCYlLzxKhOrvmEKLH2csd2tdWXHWlsx81aWuLsng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cc8b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":17833,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x720, components 3","md5":"a647fa32c498ace2d31523b6b7e3a2f0","sha1":"38deb2365592aeee24466855e63e6ccdc16b3033","sha256":"ade1aca1cd14089b0f4b1bae4b77affaf4f62c17e4c4483da945b3f8d8a1d963","sha512":"dfd830137145ac2852f747018767e9a266fbac7d2aea7c77ff652e49d09dc0fadd8ea318c80c02d515631d24ab686ada177c9e8063955a676ebfbc9ad99a1916","ssdeep":"384:GQSSCmgRkffXTMvUuNSXdyFs/L3Y1AFk82owLr16mPr+oW:GymqnA8n/LI1u6cUi/","tlshash":"0a82711789488f839539d7e87f131fac2f5a7a0c95c179ef54670e8b3a70a72189e01d","first_seen":"2026-01-22T00:00:18.005155Z","last_seen":"2026-01-22T00:00:18.005155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/0f1ce12e3d6f65230c6fe4cd38b1427423c2ec5e.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/0f1ce12e3d6f65230c6fe4cd38b1427423c2ec5e.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 23521\r\nlast-modified: Tue, 21 Nov 2023 20:33:06 GMT\r\netag: \"655d1402-5be1\"\r\nexpires: Wed, 04 Mar 2026 00:28:07 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3Ch+rAQwBuUwKAQH3SgAAAAwBJRPCNAG3AgAAAA\r\nx-77-nzt-ray: 2a494a152eafdfd3926871695ffe9937\r\nx-77-cache: HIT\r\nx-77-age: 27991818\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-23520/23521\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":23521,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"97dff82d98efcdfd29ba0df7d2541d0c","sha1":"0f1ce12e3d6f65230c6fe4cd38b1427423c2ec5e","sha256":"a302ee7a39be5036db2da913b0b9eea754862ac2ae82a5777c76dc804ba78927","sha512":"fdffe8133d300e5555fe447dea3ef55a132294e4cedbbcbf2e42e4e2a84e81add03be0e54e74e010cbdcca59c23885774a11d94d5d97ed690fc258edf1e66834","ssdeep":"384:z/ZnOs3ZGXzfnFK9ajBU2txHr3gSdophPdM98e74C1xpCrMSPoWE169dW:z5738DfFK0VUKwSOhP8V4O3CboWE3","tlshash":"81b2df288a48ff77d418c57b749a132a330473aad4909067e253c89f5e682e57d398fd","first_seen":"2024-01-16T21:48:00Z","last_seen":"2026-06-16T14:29:34.281487Z","times_seen":867,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/438437/a56f616b67f61043e17f6fcb0024d59d1cffb556.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/438437/a56f616b67f61043e17f6fcb0024d59d1cffb556.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 102754\r\nlast-modified: Mon, 11 Mar 2024 16:08:45 GMT\r\netag: \"65ef2c8d-19162\"\r\naccept-ch: \r\nexpires: Wed, 12 Mar 2025 15:18:38 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH3tbmfAQwBuUwKAQH3yWAHAAwBisclxAG3T49tAQ\r\nx-77-nzt-ray: 2a494a152eafdfd39268716991c93b38\r\nx-77-cache: HIT\r\nx-77-age: 27244981\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-102753/102754\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":102754,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4fe9ff94cb6edcc55c2b1bb0c911b303","sha1":"a56f616b67f61043e17f6fcb0024d59d1cffb556","sha256":"c8bd608189091fa2db8f0b89a618eae029ff66ef53a813d2e9acbd59ca31d047","sha512":"6704e5a4f609f1f0497ad040ca0a8c6d1672f2701b12d259b27f85ca611fc6e30931eb63307713970e4dfcea70b77d0e6b7002f34b561e1dad8de3fc593747aa","ssdeep":"3072:USkMlh0hzfxUpr8l5sCIE17Q5VdWpnx7GPIWYe2x:UV6Szat8f7AVk5QLU","tlshash":"0aa3124d0ebe7125dc5b0dfa17cea191e824d369e69ab71bc1e6c8d2bd9e000109d6ac","first_seen":"2024-12-05T15:44:22.596739Z","last_seen":"2026-06-02T05:29:35.738605Z","times_seen":141,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/in-page_push/os/android/2/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:43 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vXG7Ue6iMgJl8gMhdyHA5%2BY57P6qeLP1WfkYHKN6HXoDJU3l4Sp%2FBCvuhhCC3iFwxKgbGjDm7G5Ow5pEnhKeIweLzZ3zkqlnuA9%2B2SEfN5E%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"65aa8500-194\"\r\ncontent-encoding: br\r\ncf-ray: 9c1ac454590e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"abc278581baa24320b5dc93b8020a15d","sha1":"c150966236e6e7a96ffab93035d7b27200d0b228","sha256":"e3d07a34118c01ad2fb7a2a12307b6922224e5998bc92022fd280b5efe8b3557","sha512":"14248a8df9d7087e54b1fd9f9d94612cd8cb72c614bf1d25f7b4a261343dd986a151e30262bd008c0e2372823fc1228c1eb1db48c358ba63414645923a98dbc7","ssdeep":"","tlshash":"22e02b38a168527497b7e2a2629f2bdf2630425fd006464eb02c574e0de1fb622d1e97","first_seen":"2023-04-11T12:56:03Z","last_seen":"2026-05-18T08:06:50.988569Z","times_seen":1262,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":57,"dns":21,"connect":4,"send":0,"wait":458,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/12/6-e1701572158674.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/6-e1701572158674.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46814\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:55:00 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bec414-b6de\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqHiXo%2FCidKESbp2iXzTdu9t5FCSeTkzxZ6ybi54HEOFqKYYaGIbqjnqw9j09%2Fl6s%2FFKz75ZHjLxH57PtYpEwf%2F%2FpNAJYYG8fl7JCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c8eb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46814,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 706x708, components 3","md5":"0f0c8d2d882c2105bbc788ac9c02fee9","sha1":"479987e0993bc1c6bb84171053439040af1ea567","sha256":"e8f40c0e2409ba80de621540648df00b1c80a38dda061d346367e3e732f88a8f","sha512":"f36e8b721a93e22b44af695295dd349cd27eee0795bf0cedd117e443950951212bd75f41449856d1156dd93a95a468e3befb766c1ed6ac2ddc7cb4e95b3a9aba","ssdeep":"768:Xqp1N28GSWwDucoCgJl2u5SXz7Yn8ALM8iSJnp/a6jwrNyQlOMhV5tRpSWdArupX:i1N2AnrWMuAD7Y8SNn/a6EsQ0SvbArW/","tlshash":"aa2301b9b1454e3dfd159e90c0b162ea26ec0d843b472e5081f5abcd0b66af1eb252cd","first_seen":"2026-01-22T00:00:18.007604Z","last_seen":"2026-03-07T07:28:46.837813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/02/thumb-1-86.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/thumb-1-86.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38967\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:06:38 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bfa7ce-9837\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13yFqCcMSdoDrLVmbmmRtrRWA3janQe4Vt2SGvKYS4JF0UWenFs5VWtQOaPtOk%2FiLSiqo2GuoULlQDfDUInI%2FHV9D%2Bj2uQhqVrotQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cc2b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":38967,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x720, components 3","md5":"a429e7479e2250122085b1921e14cf6a","sha1":"5eb480900fd329b0ac01c4fa5ddcf0c4cdb22f10","sha256":"6cd8bbea0079da6134d336b5c58d9ac5a43a9613709c80fdb6db10a48d9a94c1","sha512":"764b99a6ad06cdea2451182a2c89fbb4938d0c08830f07f46dc82dd3b65c73c8cf9cb371cb4866ce8322030af83cb02246364f78ae77770c77e6b4bcf01a98d3","ssdeep":"768:Gi0Zk5Uav58aqD6gScUnGRGKAhHELY7y+SDyMUicQnQAd4q0:Gi0ZPeSaw6g7KGUPcreMLQA2l","tlshash":"4703e191782b934657f321f5524165aa78868fb5eeac0d6f3d13cf218808cbea0377b4","first_seen":"2026-01-22T00:00:18.008537Z","last_seen":"2026-01-22T00:00:18.008537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 490\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":490,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://thenudebays.co/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5543412,\"extra_params\":{\"first_request\":true,\"zone_type\":2}},{\"custom_targeting\":{},\"id\":5543412,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:40 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22071737dfd72b46e8f00da5e81738dafe%22%3B; expires=Fri, 21 Jan 2028 23:59:40 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4068,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0d47bd217f3a7c086d2fea562e348b4d","sha1":"0616b8dceb482591125a585c0bcde37a77f8aafc","sha256":"feff0f20b0decd653189b22587e6e6bfa87c3c47e25ec16107cf85f9b3efea1d","sha512":"90957328f3e80813941addd884c47ff49c94d3799157fecb9375e7a098c1cf65d33dac8c3d2d2de575f7b31e884c05fc66573c4b2faaafc915d18149cca6caf7","ssdeep":"","tlshash":"b281097075c0dcf8aeb5c8495fc87ca59d6d348fee95cecf8148d150967822c16877a0","first_seen":"2026-01-22T00:00:18.009489Z","last_seen":"2026-01-22T00:00:18.009489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":42,"dns":1,"connect":22,"send":0,"wait":103,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u3y8v8u4.aucdn.net/library/141372/03604a4ea09757daeebea63714f0f853e82670fe.mp4","fqdn":"u3y8v8u4.aucdn.net","domain":"aucdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/141372/03604a4ea09757daeebea63714f0f853e82670fe.mp4 HTTP/1.1\r\nHost: u3y8v8u4.aucdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 5070335\r\nlast-modified: Tue, 17 Sep 2024 03:21:15 GMT\r\netag: \"66e8f5ab-4d5dff\"\r\nexpires: Fri, 19 Sep 2025 09:19:40 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3CEikAAwBuUwKAQH34o0TAAwBnJIhHwG3osBlAA\r\nx-77-nzt-ray: 2a494a152eafdfd39268716943927c20\r\nx-77-cache: HIT\r\nx-77-age: 10766344\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-5070334/5070335\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":3375104,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"cf28532990d2d2c1be29e664fc10d4d9","sha1":"6de9dfb58af848794b30e26b39081d87f339d2c5","sha256":"64a80c24085208b7735259b1fa5ece6cef174197663ecf2e48fcce99a8678065","sha512":"3fe33da7c1e6dd6b27e534ccea7e05af3186c30eaffac6cb1168a93869efd64c8462ebf94d68437957bdc724293fb97d848ce0f76096e1fc9789f9d6d47e081d","ssdeep":"24576:za18/dlzEEBF+cF0yAcBsDLqOfQvQXm9a7hdNF:m18bvBF+MXAy6WwcQ0a7P","tlshash":"eb2523d0a31a3903d8a96b3d15fa034572a8cf306b93a25bf462e77d0df16d71e069c6","first_seen":"2025-08-02T18:48:07.87723Z","last_seen":"2026-06-16T06:38:41.455248Z","times_seen":114,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"u3y8v8u4.aucdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/12/Sophie.xdt_000006.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/Sophie.xdt_000006.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46791\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:56:01 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bec451-b6c7\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ETuTuNlT3I6oPWWgDgOuICS9l2xnav2qHlhV9dn7JitxH0AmlTDvEFHc%2FLQCCgWRRpVeP2C00VdOhRoV3QjAiS4NqFoOp2JymC0lOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c88b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":46791,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.35.100\", baseline, precision 8, 720x1280, components 3","md5":"047ed4c4b704ba1f36345e914c8334a9","sha1":"6f75c699fa46b3849102f5c3989896e4f3046208","sha256":"ce2c6f281ceb2a9eee0ef5f94298a58c4b815dbfcac1a2f98368d25e580b22b7","sha512":"29c073494aa1208cb34754d07abd396330c181d7c2de6bfd3c40f7000f160d2441b6b8275540b28e6b8f8dddba288ab9c7b783ca210b455ccb82b004ac4a3b42","ssdeep":"768:vxBfhoT/rozSZeye7MgSVbNautwooIYgQykNZH7Rn623UZUX4gVybmtW2S:vPfhSS4haumooGNkNlRnwyP4bmnS","tlshash":"a223e1c7b2541359cde5af79961b2b712f8284ecd620414a1fd0e770cdfe2fa589226c","first_seen":"2026-01-22T00:00:18.010757Z","last_seen":"2026-03-07T07:28:46.730072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/cache/minify/9083a.css","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/cache/minify/9083a.css HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: PHP/8.4.15, PleskLin\r\npragma: public\r\nexpires: Sat, 12 Dec 2026 17:53:23 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 10 Sep 2025 09:54:31 GMT\r\netag: \"pub1757498071;gz\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: MISS\r\npriority: u=2,i=?0\r\nage: 3477976\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hb9bEUMHl2kfOkiUIdGOI0nxAnKCgTfWcZdx5k8s6iiSp7lIwgNFXnHtnjGEjfq%2F0hb9JDzWdy75aLx16D%2F7iAYAyQLtTT4TupuRdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4454c72b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85091,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (31185)","md5":"c47348c93d87771f9a81f8365153ef4f","sha1":"84a673e9971d86ebcb84d64ab68f4736144efc89","sha256":"003f99b59a06d90f0525531d085c6c80cdc48151ee4a5cd11c0333f221e4a471","sha512":"51a3c3fdbb29a9e4494266293979d9a2577ad87e19e387f0de725f7774e64bd8a9ee5a1b65af92f427356213aa3f9a658ba6c6939df9105912c52aeb5a3d8f23","ssdeep":"1536:IwlrniSUf2l7f9vPVC4SulEZ6mqdqPY3OoXygCjcHQ3hSjwPMGInPMGI+:IwFiS22l7p73uG","tlshash":"a9831eb1e54c10d86332c56fffd1b3a821b5f739d5420ddaf05faa1c8ac625502a2fa9","first_seen":"2025-09-23T04:55:53.472577Z","last_seen":"2026-01-22T00:00:18.011656Z","times_seen":39,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/05/thumb-1-3702.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/thumb-1-3702.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31770\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 21:08:20 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bf45c4-7c1a\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wq8FRLd0mGxYgJ8J0QgY5AKyrrS5aK16EvNxpMZftm%2FSY1i6ODKbawMndI6yAUseu06obpiJGgouAL1DDnpTyb5xhRft2PgV949bXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cc7b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":31770,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x720, components 3","md5":"f3a3a3c384b16ab1b22aff23ed251395","sha1":"ac6c2cbb7a91b2f94aa1f45156ff2e0158ee9017","sha256":"f92df1a4064e827b94e766029e8dd54f916ed195635e6f48eadc05d2860cd711","sha512":"e89445020d82a7215bb0d014cef7dc2ac05ca27c29ab1df81710cdaed1f30056801ac23aaebe0f437c5e04ddcd9c989ae7391b9e482240006b9ffbf889c83ba5","ssdeep":"768:Geo3hwQH3rqf2zM0Evs+m9LcIu3gB6bBI:Geo3qQXrqf2vss99Lc33gBaI","tlshash":"9fe217078d188b43e41593e9fe170dac7f5a570ced823afe24625ecb2f506259c8a16f","first_seen":"2026-01-22T00:00:18.012514Z","last_seen":"2026-01-22T00:00:18.012514Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c84328440be6860b0add1fc5a60\"\r\nexpires: Tue, 20 Jan 2026 17:35:30 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3nwUAAAwBuUwKDAH3EQAAAAwBw7WvAgG3vwAAAA\r\nx-77-nzt-ray: 2a494a15d49921cd9168716932a21a2a\r\nx-77-cache: HIT\r\nx-77-age: 1439\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39568)","md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_XZPHF8G399=GS2.1.s1769039980$o1$g0$t1769039980$j60$l0$h0; _ga=GA1.1.2022688431.1769039981\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Dec 2025 10:54:39 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"693016ef-58ea\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHrHP8O9DLJ4h7fRIdFJsVErz1Vp%2BEVn1C7ndK5c96XjnRZ4%2FoIIABb1xv2LpVk%2BTjzUSKVXbiE6ysqAUyWfj%2Fx4DSqmePLZHnMIxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac44b2f27b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-16T17:46:19.098564Z","times_seen":272420,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/11/Aroomi-Kim-2_000147.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/Aroomi-Kim-2_000147.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26872\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:31:05 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bebe79-68f8\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8jatFFEIcMhbjssoldmw%2FGhwZOTmScn7NgSs40YrR8P9aRJ1FKuyDAB4tZS4vwDmCq58M2MCLdwoIhAxLhxJ6WMidOTwzKITekCTcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4457ca6b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":26872,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 674x1200, components 3","md5":"0a219214a92feb1054c682f5a1646e4b","sha1":"8decf41cb3368be1f8e3fb29c750b4c6bbc824ac","sha256":"9877154dca88915164f84b624ecbc304064fe727091f9dc123792876be5d23cf","sha512":"dab8c5e1ef7af01a9d1f5ccc49618b1747bf02f77320791f11829e3c294b148518552d07049bb7b21c0e190168b1d2c3184b2eae660e165ee75e2d933c0d6511","ssdeep":"768:R5wT6Mt+WDEYCAiHI5NpzgjtZJf+K5v5YOnKmloERw5Qw9:R6+MQWDiIeTJ5IO7GQm","tlshash":"f7c2cf0be49d125e887d1ecc0143536f8a8e3fe217b4e8e39e638a40f2779555a9de42","first_seen":"2026-01-22T00:00:18.013884Z","last_seen":"2026-03-07T07:28:46.881583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 402\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":402,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://thenudebays.co/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5543784,\"extra_params\":{\"first_request\":true,\"zone_type\":10}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:40 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22e3aac7a18a5d691c94fcfa6681f29402%22%3B; expires=Fri, 21 Jan 2028 23:59:40 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7498,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5cc35a36cd45ce51b0c37692dcee104a","sha1":"255fdc71fba9f48dd683e701e7e02fa2d4a2b346","sha256":"73079de764c8fe14102222f371f50e285fc2fe8daf49d815b72ce2b01bf63abc","sha512":"1c4dca26790b3af87427a6c02e7ba394bfbccc2b1c6b03f63946cbcfe8d2e50ba56bb2f11b0b823721bcbc5223c20be157265897f0c415cec64e425f6b241d04","ssdeep":"192:ZT/eqaO2Vl3r3CvGHkc3ZNRhxAoSIhUV1OsBMbBvhUoPfQQP:tr0LjRsGbBJU+vP","tlshash":"c3f1c77bfe4404f953a65f90a9e33aeca93c3006e6524d717bc4b916d3c8aa10a63735","first_seen":"2026-01-22T00:00:18.014717Z","last_seen":"2026-01-22T00:00:18.014717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":47,"dns":1,"connect":24,"send":0,"wait":69,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 492\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":492,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://thenudebays.co/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5543924,\"extra_params\":{\"first_request\":true,\"zone_type\":38}},{\"custom_targeting\":{},\"id\":5543760,\"extra_params\":{\"first_request\":true,\"zone_type\":38}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22d365cea8c77fabcf25d8344556ac963e%22%3B; expires=Fri, 21 Jan 2028 23:59:41 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3742,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b9df0a5333041b547255c73c60a06a49","sha1":"0fb06312382b85196e8d3c997ee08ba3b6e947cf","sha256":"4a6fb25dc9948506adc2e257f3a86117a952e1825af74e83dd36a5e8ab6dc055","sha512":"4f4992641831f4661321a8c17902f609837a95131f3c4b2844c205bfb1aa2eb3c28404f61264e0d0465c4592c0416ac91d43550baac86fe4d934b7f9b08b8e40","ssdeep":"","tlshash":"aa714cb97980c8fdfbd473c4bdd938549e33361f9789ce6ba14ce80827391282549269","first_seen":"2026-01-22T00:00:18.015527Z","last_seen":"2026-01-22T00:00:18.015527Z","times_seen":1,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":41,"dns":1,"connect":24,"send":0,"wait":258,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=cde5d6f0-8a2b-439a-aea8-cb1ddf528f6a\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=2d86e1ab7c7d36a9ea9ae4145563cf4f\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=23","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 22:13:33 GMT","end":"Sat, 28 Mar 2026 22:13:32 GMT"},"fingerprint":{"sha1":"A3:08:82:4A:9A:ED:6E:4C:29:FC:10:0D:1D:8F:8B:68:0E:D0:49:72","sha256":"B4:01:36:5D:F9:70:75:BF:F6:56:67:76:BB:CC:A2:D3:BA:69:61:33:56:FC:C7:21:69:6E:04:BE:95:D7:B2:F5"}}},"request":{"raw":"GET /pxf.gif?uuid=cde5d6f0-8a2b-439a-aea8-cb1ddf528f6a\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=2d86e1ab7c7d36a9ea9ae4145563cf4f\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=23 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1abbced096e354b97ccc482d406943bf\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":280,"dns":1,"connect":92,"send":0,"wait":100,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c84328440be6860b0add1fc5a60\"\r\nexpires: Tue, 20 Jan 2026 17:35:30 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3nwUAAAwBuUwKDAH3EQAAAAwBw7WvAgG3vwAAAA\r\nx-77-nzt-ray: 2a494a15d49921cd9168716902a7df29\r\nx-77-cache: HIT\r\nx-77-age: 1439\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39568)","md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/2764.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/2764.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 368\r\nlast-modified: Fri, 07 Nov 2025 05:22:04 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 26\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":368,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0483f2b648dcc986d01385062052ae1c","sha1":"61bd815f1497863265a76d92623042835e5e7fe2","sha256":"09a743ee0c32ca57c9be64b13b29c396310d1dd309cb4d7d3be722e47db95f27","sha512":"359f9bcc2441dc48ffbe69353bb7d4143a2037b0263bd5f0cfb06b14d5f15d9a6e574930e88a84081c61698bf3e2f5333bf9081865183aa7f9202aac078c10ff","ssdeep":"","tlshash":"72e0cadce1754144649287a6fd7974c56d9df0641e745278e0cb871b30c04c47564c31","first_seen":"2023-04-16T02:00:30Z","last_seen":"2026-06-16T17:07:25.192457Z","times_seen":7456,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":31,"dns":3,"connect":11,"send":0,"wait":8,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/438437/a56f616b67f61043e17f6fcb0024d59d1cffb556.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/438437/a56f616b67f61043e17f6fcb0024d59d1cffb556.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 102754\r\nlast-modified: Mon, 11 Mar 2024 16:08:45 GMT\r\netag: \"65ef2c8d-19162\"\r\naccept-ch: \r\nexpires: Wed, 12 Mar 2025 15:18:38 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH3tbmfAQwBuUwKAQH3yWAHAAwBisclxAG3T49tAQ\r\nx-77-nzt-ray: 2a494a152eafdfd392687169c8097837\r\nx-77-cache: HIT\r\nx-77-age: 27244981\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-102753/102754\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":102754,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4fe9ff94cb6edcc55c2b1bb0c911b303","sha1":"a56f616b67f61043e17f6fcb0024d59d1cffb556","sha256":"c8bd608189091fa2db8f0b89a618eae029ff66ef53a813d2e9acbd59ca31d047","sha512":"6704e5a4f609f1f0497ad040ca0a8c6d1672f2701b12d259b27f85ca611fc6e30931eb63307713970e4dfcea70b77d0e6b7002f34b561e1dad8de3fc593747aa","ssdeep":"3072:USkMlh0hzfxUpr8l5sCIE17Q5VdWpnx7GPIWYe2x:UV6Szat8f7AVk5QLU","tlshash":"0aa3124d0ebe7125dc5b0dfa17cea191e824d369e69ab71bc1e6c8d2bd9e000109d6ac","first_seen":"2024-12-05T15:44:22.596739Z","last_seen":"2026-06-02T05:29:35.738605Z","times_seen":141,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/ol_557dded964a5746f63c4f6dc2be0fc9e.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 11:12:15 GMT","end":"Tue, 17 Feb 2026 11:12:14 GMT"},"fingerprint":{"sha1":"8B:3E:32:D0:D6:38:B0:7C:60:91:F6:D3:6F:B6:9F:BA:58:A8:98:50","sha256":"21:E0:91:75:BE:B5:3A:EB:F4:36:B2:EC:7D:AF:21:0D:D2:C9:58:AB:BC:4F:F3:08:0D:0B:C8:CC:44:41:94:DE"}}},"request":{"raw":"GET /video/ol_557dded964a5746f63c4f6dc2be0fc9e.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 21 Jan 2026 23:59:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2111809\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_557dded964a5746f63c4f6dc2be0fc9e.mp4\"\r\netag: \"4fed42333777ff915d7c970db3293c53\"\r\nexpires: Thu, 22 Jan 2026 00:40:51 GMT\r\nlast-modified: Wed, 21 Jan 2026 23:40:51 GMT\r\nx-amz-request-id: 5b5c9231-80a1-43d1-9d92-da070421d49a\r\nx-seaweedfs-expires-s3: true\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nage: 1\r\ncf-cache-status: HIT\r\ncf-ray: 9c1aa8d71b8d5d79-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH3UgQAAAwBuUwKCQH3FAAAAAgBJRPCLgGh\r\nx-77-nzt-ray: 2a494a157574c7d79368716936dd6208\r\nx-77-cache: HIT\r\nx-77-age: 1106\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-2111808/2111809\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"dd16a5fbd9654dc22161bc9fedaa4e41","sha1":"82c1d7e31c055b826196ad37c1bcfcf09cf86053","sha256":"730541aa6c6dc6b5859b2d4bccf6a2bb2d87223e02cff26a7eb5d0da0f9025d6","sha512":"fc1aa6b9b323afdafef527a14abce9dd089a4e57eedb3007fc7ceff2daf0a18de563d4188ee00ffb3fe5221e8665f1dc30a6e66b33a66e141884370300c3ee61","ssdeep":"24576:xaIfVmGwavrgVdwdA4k3pbDS6nkk5+/soVwalg7bn:8GBvkVyGpN5n9o66ub","tlshash":"802533d5cf5ba48ee0948d201548a4ac95b0d77d8684787bfb20526ef3f86ec7d48e23","first_seen":"2026-01-22T00:00:18.016862Z","last_seen":"2026-01-22T00:00:18.016862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":68,"dns":57,"connect":1,"send":0,"wait":1,"receive":61,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/12/Cierra-Mistt_000025.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/Cierra-Mistt_000025.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12101\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:55:16 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bec424-2f45\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9VYqzgPsu1Mztz0MqrBNN51U1MxKEibnUR29WJXjJZakluZOkGrGQofVS5vq7BrVMizO484k7Be3HbFQBbvDAwO%2BKbM5jWOdAgF0cQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c89b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":12101,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.35.100\", baseline, precision 8, 270x480, components 3","md5":"13bb1e092c581800b26996fe5ed09c59","sha1":"ca82596fcc7b8ea285dc308165ba8726869ce304","sha256":"71b07aadec669d5362db50734a149436c926b00b000ac3e62d2240eb1e899c1f","sha512":"eebcddbd47c1af4148720d7a363c60c8a93dd6b799ad0ce4eb3c349d425ef6c0dcdbc6d00957fe18486cfa040cba0631c9a4ba45a7e95eff577f0a25a15d74c9","ssdeep":"192:uL70B74IokfMkT9t0nZkodBXc/S7bv8Er5CPNddbSPmkuoTZhnqF94K8xreyuABs:SIBMvqMkTn0jBsK/vtMHdSm5oTvnqL4g","tlshash":"6242bf07c1700556ebb7da77832cd3b93fa13988f07989cd9c560c26395e9c3a496716","first_seen":"2026-01-22T00:00:18.017908Z","last_seen":"2026-03-07T07:28:46.755291Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/12/erikalustx_000025.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/erikalustx_000025.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29969\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:56:24 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bec468-7511\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TidAG9JaZHNiAD49k1aFiONZy5nktba66BW6FDDAaPLRWfZamiDX5mM7VhIYtV%2FaVTONVRQgKSexJAwn5sGv0m%2BmcFucbL5tNwq11w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c8ab4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":29969,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1280x1281, segment length 16, comment: \"Lavc60.35.100\", baseline, precision 8, 854x480, components 3","md5":"1cfd4defe36c718a2fa8d8d453975985","sha1":"8d1531ca2043939d417c920a31da40df855505a9","sha256":"fe263ee217949a36868ba9508c1ba288125a947480fe93fc751661702d92b964","sha512":"7929f1709e28d91b28c464753d72b0c5a608b0621a37cbe5af7f70f4070f2b8e1e379ae4e598814f128c41cf0045a7b2e95541040221240d9b76ff61818260e5","ssdeep":"768:V4VDlpOQhnluaDT8ODf2k0UfrtH+RrU+wxd:8DlpO8l5TtfWUztH+RXwxd","tlshash":"50d2e076b5b467444645d93c85a2d0de052aad2bbd511f84c0ef88e9e3ecfd0f818a47","first_seen":"2026-01-22T00:00:18.018756Z","last_seen":"2026-03-07T07:28:46.836076Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/05/thumb-1-910.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/thumb-1-910.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27248\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 21:34:37 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bf4bed-6a70\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C37XtIPytqCqnaJ%2B2cUd049jhKwfFF9htMZmWi5slAFkpI1DeXkUAz%2BB7sV%2B1AEvNe0Z9LgWHYqkGHRTkKKKRaLw7hYSJA2yLjMLWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cbcb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27248,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x720, components 3","md5":"0da294d9dca5ca3ecdae4b0de509e29d","sha1":"39053a36dd5dc8ecb22009017a9b0743213bdd2e","sha256":"7d11bfc9a524aa8895b5f4544a469a85e2180f442eb0b3813b4e75f15608fef3","sha512":"80ee76857658cd89e22cbd4495aa3d0067cb12d1fcbba68f43b4011c69e3c2be6dabb275efc4e0abcc453146281913ac684be776ae4351733af9bf226d1bde63","ssdeep":"384:GdFISr8pN8HQY7LKSJqsUdQvCAuGXTe2mC4BmdsDWigpV4srQQ55FqlTbpVGdk3:GgSYpN2nvKzR2CATe2mCMZgX4snFIR3","tlshash":"3ac2e0b13c0dade067579ee1116d5964c117579eb4183b7a0c802fb2c138ef376a4aed","first_seen":"2026-01-22T00:00:18.019531Z","last_seen":"2026-01-22T00:00:18.019531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c84328440be6860b0add1fc5a60\"\r\nexpires: Tue, 20 Jan 2026 17:35:30 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3nwUAAAwBuUwKDAH3EQAAAAwBw7WvAgG3vwAAAA\r\nx-77-nzt-ray: 2a494a15d49921cd916871692c19b729\r\nx-77-cache: HIT\r\nx-77-age: 1439\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39568)","md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c84328440be6860b0add1fc5a60\"\r\nexpires: Tue, 20 Jan 2026 17:35:30 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3nwUAAAwBuUwKDAH3EQAAAAwBw7WvAgG3vwAAAA\r\nx-77-nzt-ray: 2a494a15d49921cd916871690a9fba29\r\nx-77-cache: HIT\r\nx-77-age: 1439\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39568)","md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11Q3U6DMQh9FV9gX4DSlu5abzWZ2QO034/uwi3ZNxeX8PBCNXGxBEroAc4pAaUN4IbwAWUby5ZRCw4FBqYBI+vzy06tdnmfj5/T3OptHcaTchAOWSWXkJIiRI6GNQ8CSSOI5pBzKqKIFDEWEmXQoGBGMTB7NgCgZtCn/U73r49WkJgVlUAt+mZP2XIkgS8E8jYMY5pjxaVNMbepgQQuWMc0JUBajI6B/vG1Lkw5+m7hJL66ZPFVndGPbbwxIAcyenZAe7mut+OoegfsOk2RZV0S+RT3e9CfpV+tQH6hB+4kQdfho76t56tx/LCSDxgIO11XzfZn13o+1MvhdOzv3qQZKaU6B8kBRoG2RMzIy9jmNsepyTch74GJ1QEAAA==\u0026cb=e2e_6971686d1242a7.08884757","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11Q3U6DMQh9FV9gX4DSlu5abzWZ2QO034/uwi3ZNxeX8PBCNXGxBEroAc4pAaUN4IbwAWUby5ZRCw4FBqYBI+vzy06tdnmfj5/T3OptHcaTchAOWSWXkJIiRI6GNQ8CSSOI5pBzKqKIFDEWEmXQoGBGMTB7NgCgZtCn/U73r49WkJgVlUAt+mZP2XIkgS8E8jYMY5pjxaVNMbepgQQuWMc0JUBajI6B/vG1Lkw5+m7hJL66ZPFVndGPbbwxIAcyenZAe7mut+OoegfsOk2RZV0S+RT3e9CfpV+tQH6hB+4kQdfho76t56tx/LCSDxgIO11XzfZn13o+1MvhdOzv3qQZKaU6B8kBRoG2RMzIy9jmNsepyTch74GJ1QEAAA==\u0026cb=e2e_6971686d1242a7.08884757 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: __uvt=s%3A32%3A%22d365cea8c77fabcf25d8344556ac963e%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-21T23:59:39.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/8.4.17, PleskLin\r\nlink: \u003chttps://thenudebays.co/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qR2RyaV521E%2B2Crq6Tzeu46RlpmkJ83L5fHQPnbGyJAaiNOAkSakGjctVcC%2FJM5hxDjRfGAipuOPldFNVWErJSYSMqrHJSYFPoDLg%3D%3D\"}]}\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: BYPASS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c1ac4412cb556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":132919,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (42233)","md5":"85825edcd874f67b2068023485ac5fc6","sha1":"5ee62c368e0a590797d18f5a04003ef3e52af559","sha256":"d70e11fd4cacd993a4fd5b779bbef2d6c2d300ce5acfc1108981fca88ee1573f","sha512":"3eaacfa96bee36e42c005c222e4b7977043fc253153334f41f725798067a5f9a57d2a9f694800cf41fe057410ecee8707a4c3d4beda19b29d853283421443835","ssdeep":"1536:cq+zRCYWhj82SzTxOeDyLig4B0EaGWYddbBwip9eXLZtpQevyboAPZlAamZqG8Pf:yF/61sNG8Pf","tlshash":"e9d3a7f523a90075376b89ed1864778ce495e51ace070ccff3ad22dccee18a6b9e1449","first_seen":"2026-01-22T00:00:18.020427Z","last_seen":"2026-01-22T00:00:18.020427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":40,"dns":20,"connect":1,"send":0,"wait":421,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/05/cropped-favicon-3-32x32.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/cropped-favicon-3-32x32.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_XZPHF8G399=GS2.1.s1769039980$o1$g0$t1769039980$j60$l0$h0; _ga=GA1.1.2022688431.1769039981; __suvt=d8a0bac713e54a38266288f261bb87bc; pp_main_5f0dc5dc10ce2e73eb7c533865572faf=1; sb_main_2d86e1ab7c7d36a9ea9ae4145563cf4f=1; sb_count_2d86e1ab7c7d36a9ea9ae4145563cf4f=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=cde5d6f0-8a2b-439a-aea8-cb1ddf528f6a%3A1%3A1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=kettledroopingcontinuation.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1021\r\nserver: cloudflare\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 09 Sep 2025 04:38:13 GMT\r\netag: \"3fd-63e56df3bbfa0\"\r\nreferrer-policy: no-referrer-when-downgrade\r\npragma: public\r\ncache-control: public, max-age=16070400\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vYzsDoCBs%2BxMATMimb08ZiPS%2F%2BE9XqxC1qiKu2t5iqAuRhQHTqvsvpiD%2Fi8rSTFEFEEgUOXb87AFpTYBWz%2FkIP2H%2BdP%2BseysLAQhmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac451e9b6b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"7d91e1e95828e0e272a55bb67993a4ae","sha1":"2f7cef8944197bf4e363390a8715e4a9220b00b4","sha256":"cc3f958d50648a0e421257a7cf0dda7793262ea79330a72b353748f6fff9ebe4","sha512":"31b2639fba6b7395b71d3099cb9e028a6181c4c7572716329013528f254528dc3da4036bac8d2cea32d2e42c9db552349e52a55a859896237d39e9c982f1931f","ssdeep":"","tlshash":"8411981e232bd1d2d9a11e3408967374a302af928411bf48537acb9e8b690ca2d80dd1","first_seen":"2026-01-22T00:00:18.021517Z","last_seen":"2026-03-16T03:18:29.601052Z","times_seen":4,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/02/36_000020.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/36_000020.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25733\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 12:43:04 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68becf58-6485\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dR6GmiSvgsnJezhZTz%2BIXta0oxU7JteAPjubrbKp5YqSk189a2qCVgru8BSwm6xdOQldRz5D3hfWvgj8UpAIQuibNvbrsnt1OgTBKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4457ca8b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":25733,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 576x1024, components 3","md5":"376e6971abb2beea2701ef9987eb2a6c","sha1":"b0e1b1bf7377c90f8853bd8386d4acb67e9d1047","sha256":"5565e0a07f425159c5155c976301e4fcd762c4f31373d1b50fb860f50f171325","sha512":"4ce6d743f0f7307b12d48f83974e40aebd91f1f6ecff5fe2897cdd5e80420e4c0156b2d64cbef5327111d739e2c0f70a66003e61e8eb73df22ac7f48393b3ffb","ssdeep":"768:/dPtmLauBzScMkabajjalO0jDykrtQsOk0oD6dg:/l6Akabanal5+k+omdg","tlshash":"8cc2e131d0ef47415349a4d5afc7902a6479621e93f8b7957c6392ea8a0c09f37ce3c9","first_seen":"2026-01-22T00:00:18.02237Z","last_seen":"2026-03-07T07:28:46.798922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/10/Hannahowo_000019-e1697984217149.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/10/Hannahowo_000019-e1697984217149.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14961\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:06:28 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68beb8b4-3a71\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rdc1wALawQmkKII5%2FLu7vXCEQsPrVh23q%2FNskJr80G65lDQ40LhmT2i6vfRkw6affO0fnlb7VaSaUFGX1YRufbW%2Fr9F5t2%2FlOpIkWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cb7b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":14961,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 360x333, components 3","md5":"c060e9613092fea3412bc61398b3b9de","sha1":"bf37951fe760a0650a9659bab7822e95101fdf6d","sha256":"a179931fd2c8494657b5296e0380dab005ca6ad5f344ceaf3910f7a5053cdf88","sha512":"1b34f6303af8adab1868df13bb2b1b3281d9f9bc090559d175985520982095c4d2f8943ab2b73f18400a697118b1f773c2f61ddbbe6fee3dbc3ec7de1217060d","ssdeep":"384:OmcfVIpP9lOOYUhtOLc4gSdoatlxifwPM2U1xPj:iVIp1lOOYlR7b62Uz","tlshash":"6962c01eed05b6edde447e32be6742a225fbd18d54091ef91180e869bc8fefca115043","first_seen":"2026-01-22T00:00:18.023239Z","last_seen":"2026-03-16T03:18:29.550383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/page/2/","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /page/2/ HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_XZPHF8G399=GS2.1.s1769039980$o1$g0$t1769039980$j60$l0$h0; _ga=GA1.1.2022688431.1769039981; __suvt=d8a0bac713e54a38266288f261bb87bc; pp_main_5f0dc5dc10ce2e73eb7c533865572faf=1; sb_main_2d86e1ab7c7d36a9ea9ae4145563cf4f=1; sb_count_2d86e1ab7c7d36a9ea9ae4145563cf4f=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=cde5d6f0-8a2b-439a-aea8-cb1ddf528f6a%3A1%3A1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=kettledroopingcontinuation.com\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1RSzW8bRRydbcKJA18VnJD2CBI4u96NY1OJSOWjF0iAFvXAAc3OzDqDxzPbnVnb8QGlREJwQAo34DR-TpoLVPQ_qBxukRAsJx-aS_8EpErckB1LhSfN70NvpHlvfr-vJ9UFeRMVnX_0oRlLpejGZiMKX7stNTdDG-7cCuOoEV0Lb0vdSq-Fo0UoB2_FSdqIXg9vCNYzG80ojqI4isP3ZSlyM9pYspDFz5240YkaabMRb6YYlf_vbRXA0gB8cEFehOT1c4_zzyDZDLr_67vC9pwp3nivXynqTIkBP_1U97QZavSflnkZINenq9swtibkhysw-nTlAGZwvHCATNbkysuPkOnTlUxkg5NLpZmC0Mj4sxgOZhBqBklnYOYQkv9JAMaxswvdv7djyiHdv2Tpgq3J-pO_IYc1WX90Fbp__7qSo_CmUZWTRluMcg85mkF2ZyiqM7hxADk8A3NfQfLfycaTD6D7x7tWGUjul-5lPgO1AarFkQGqPEBVBOjzeZhG7ZTFNGnlHc62opSmKRdZ1Gk3o4h22BYqdheSH4GVByjKA_TkEcrqIeyeh-UBrKtJ8PEBBtyfcGWb1t_jylZZvMrNVU781LjuhJ4Y1xWagJZHKLk_lsUdewjm1qbj3PKpWQSaOT-lGfeT4oK8sPiV4Nt_cvTEPGzydkvENNtiWzxp0Y6gHSrSON3cbCUsT3NY6SHtlaXhsazJjV_-QCFrQvAdMnoGq87A5POg1augQw-65zHW992e0BUXGd23DWbAjUfh1uH2g4m6IC9NP7l1_eFyPJ8ffgnBzrcfJ0uAlR5F6fGF_I2gq-4-2C2c7MsxXczrpqNOrIEu3n_wDJisydV33l6uTqv9ClhxAFucb89_XOAnWEOQFQGUJFDinKwAmnnY__TZ03piv0G3DEDdIXTfY1B6DJQHVUew1drUFeX59l8rrZkKppkqg-NMler7Sy9WzsM8EU0WRe2tVpy0cxEnKWf5Zjvt8BaNkkTA2Vre2dP_BgAA__-gvZM83QMAAA==","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:43.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 21:42:11 GMT","end":"Wed, 25 Mar 2026 21:42:10 GMT"},"fingerprint":{"sha1":"DD:BF:7F:13:B7:AA:5E:41:65:09:9E:F1:FE:42:C4:9A:00:0B:F4:E6","sha256":"FE:3B:B4:EE:8B:60:30:E2:9F:CB:E9:E2:06:C0:A4:2E:FF:35:D3:22:85:14:1C:B8:13:CD:72:FB:EA:5C:E9:98"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSzW8bRRydbcKJA18VnJD2CBI4u96NY1OJSOWjF0iAFvXAAc3OzDqDxzPbnVnb8QGlREJwQAo34DR-TpoLVPQ_qBxukRAsJx-aS_8EpErckB1LhSfN70NvpHlvfr-vJ9UFeRMVnX_0oRlLpejGZiMKX7stNTdDG-7cCuOoEV0Lb0vdSq-Fo0UoB2_FSdqIXg9vCNYzG80ojqI4isP3ZSlyM9pYspDFz5240YkaabMRb6YYlf_vbRXA0gB8cEFehOT1c4_zzyDZDLr_67vC9pwp3nivXynqTIkBP_1U97QZavSflnkZINenq9swtibkhysw-nTlAGZwvHCATNbkysuPkOnTlUxkg5NLpZmC0Mj4sxgOZhBqBklnYOYQkv9JAMaxswvdv7djyiHdv2Tpgq3J-pO_IYc1WX90Fbp__7qSo_CmUZWTRluMcg85mkF2ZyiqM7hxADk8A3NfQfLfycaTD6D7x7tWGUjul-5lPgO1AarFkQGqPEBVBOjzeZhG7ZTFNGnlHc62opSmKRdZ1Gk3o4h22BYqdheSH4GVByjKA_TkEcrqIeyeh-UBrKtJ8PEBBtyfcGWb1t_jylZZvMrNVU781LjuhJ4Y1xWagJZHKLk_lsUdewjm1qbj3PKpWQSaOT-lGfeT4oK8sPiV4Nt_cvTEPGzydkvENNtiWzxp0Y6gHSrSON3cbCUsT3NY6SHtlaXhsazJjV_-QCFrQvAdMnoGq87A5POg1augQw-65zHW992e0BUXGd23DWbAjUfh1uH2g4m6IC9NP7l1_eFyPJ8ffgnBzrcfJ0uAlR5F6fGF_I2gq-4-2C2c7MsxXczrpqNOrIEu3n_wDJisydV33l6uTqv9ClhxAFucb89_XOAnWEOQFQGUJFDinKwAmnnY__TZ03piv0G3DEDdIXTfY1B6DJQHVUew1drUFeX59l8rrZkKppkqg-NMler7Sy9WzsM8EU0WRe2tVpy0cxEnKWf5Zjvt8BaNkkTA2Vre2dP_BgAA__-gvZM83QMAAA== HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25819494=1; slec2d86e1ab7c7d36a9ea9ae4145563cf4f=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:43 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+59d6c2fab6c1641badea5a6188a69242=6259582; expires=Thu, 22 Jan 2026 23:59:43 GMT; path=/; secure; SameSite=None\niprc_l:6259582=1; expires=Thu, 22 Jan 2026 23:59:43 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3a259f4471884d5637fd3fa67dec9045\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/06/thumb-1-76.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/thumb-1-76.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17316\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:52:07 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bfb277-43a4\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9EMWdwNNXScBdrQveH4p6qOZx9yY%2F6vZ%2FpC0a5fBfLaHj6DXCIOUwUxkM3GxFlOHpWMYGtrH1psRZlvl7hQBSaSFo2jZtxZgk5st9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c91b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":17316,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 404x404, components 3","md5":"96a2441e6ff5c1805db7f59f7928351c","sha1":"950639a9de989fe9f8b623d5ee1709415800ea68","sha256":"ac7ef2994cd33732b836175e3da5c5ef53ecb922cd49fb22c09e4e91188ccb88","sha512":"b2e321f2cadeb62384626427656a723617b8c4d31977d25c69b1ce248977119cce327206447bfc39ef65a2770065fa8b8e9cfd3aa6ad23f6e3bac54c429e3d62","ssdeep":"384:+EvCQ15ZbEpgjw3+HCTHC/spdsLFFYqdhnLD7oUcUSQZZ2SU:+Gn5VjjM+izgspm7D+SU","tlshash":"7a72d1154354a02b6ff2f19c1899902fc9392347b385c936ebf60c699660ef87553aa4","first_seen":"2026-01-22T00:00:18.024114Z","last_seen":"2026-03-07T07:28:46.77074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/06/thumb-1-72.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/thumb-1-72.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 137700\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:52:04 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bfb274-219e4\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxAtYiWkK52W1fI7s47iSyrO1MEDSkzNmCzSLU%2FC%2F6LCLKa5WdjlfnjpKnUfZABK6LeFXVdCRrznuyTu0GLdfMBlC%2FUro6%2BfNYHhKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c95b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":137700,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"8d8482db485191956dcb0142e59f2440","sha1":"53e167f710862aafc6e60c958473139c8ffb27b6","sha256":"f17fc3dcb44d1337a841d859ce401f858876b6483950a74d4a2e6fbffa2eb676","sha512":"dd99a39fd2cb2b337bdf4ce3c32668ffd867269e8f3ce488bb5eaa2af2db503a8bb396e5093e2a97d1c2fdc18e4df947b5734c6ea5a8650a2c3948a22ae9f206","ssdeep":"1536:2tONdOLlQQVkDpEZNjiUlTDqhWEgSUFT7e4H/qZF1UUzRuD391g69iRC3AUR668b:pN3QVE4diUJhZSeTqF1XzRei/UqfGnNe","tlshash":"21d312a162a515a097d54ea7be39f157d1bfcfaa0c04e0b96212dff02723ef1e492019","first_seen":"2026-01-22T00:00:18.024906Z","last_seen":"2026-03-07T07:28:46.795282Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/12/bar6ie6_000083.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/bar6ie6_000083.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30558\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:56:22 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bec466-775e\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FX6m9L88CFks5JDlfOucdFIEyIq86lLgNwKBGGoZP9oLn9Lqr490CEUl%2FK1BTNsoAeuKNpZyQ%2B1H%2B3pdjB0uFuix1uA2gp%2F%2FKSFB5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4456ca0b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30558,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.35.100\", baseline, precision 8, 608x1080, components 3","md5":"4ece49ef2c46ce6962a7ed4f7fe37495","sha1":"604e9017f6e640f88369eefa92f062667113a810","sha256":"4d3d6d7aeb7cccfc381613f281412b753f38f5549d5b442c43bd59f653b45496","sha512":"3ac79f06370ea469cfd316c5f630ebf96ffb1823666e996029765222f77281c11ffa5666ba053e9c9e8d9cd2b7ee10b0b1661192a07bf455629e4bbc2cf7e6c6","ssdeep":"768:FR01I9cDk2Ht6lya5nhilLCasW75kslJer+4K6f97B9:KIVgaNhilRvislJeK4Vp","tlshash":"eed2e02381d01b9bcc9055f12b355d58cb66b9c2e587e50adecdacd868895803f28ffa","first_seen":"2026-01-22T00:00:18.025832Z","last_seen":"2026-03-07T07:28:46.73452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/11/Arikytsya-4_000008-e1699796245300.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/Arikytsya-4_000008-e1699796245300.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34416\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:30:53 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bebe6d-8670\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4r%2Bmou%2Fvt%2FqBPXFZufA68ywz6VsNBV4z7KF%2FxNbh6Zm6JQE5TeKYbG%2BWamX9BLL5xmWCINv87wXmxNCGUH7t2WK%2Boy0KBfAXVp%2F4Zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4457ca3b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":34416,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 520x505, components 3","md5":"9e769bba0e99b39a98aea41ec3a3fa6d","sha1":"3435252f9d244442b6a088e030231b7ad92fd453","sha256":"0952cc58e46f3c2b9f82cf5440963e7a739f304c5dbe361e8bf39a729e751162","sha512":"6a74ce9e815afe9c09d6eb3d8a7e3a08742857f295b7acd00a8235a183803dc9328f2af1feeae9c099198852b27760b8bccbd515564a6ed50ee8041d24fa1869","ssdeep":"768:g4YEsrmwlLIN8GnMmwGGJKqn1PVkZ0TldWe+yyVcYNZ67JJ8UYfAvC:/YEs8DMmwj9nVSqdWeMV5ZE8UYV","tlshash":"46f2f1307d5ff842dac54adb9e0855f13505d250208601e19efb86eea091fabeb5de0d","first_seen":"2026-01-22T00:00:18.026687Z","last_seen":"2026-03-07T07:28:46.808922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/10/Sidney-Starr-5_000007.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/10/Sidney-Starr-5_000007.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13967\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:23:24 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bebcac-368f\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r03Ep9KxUWPd6YUrDGDGFtTsE8WSwGXR6D1VzW9KpEnr1Nl1mhVwnKCdrSQ%2FisQ8ke9WKD58DXdQvsW1QNVZ16Lldln3buCEh97UOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cccb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":13967,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 232x436, components 3","md5":"fdb331878f9cb15d65acde1b8fd45a22","sha1":"c486cf85b3383698f26c34e80546e061fe6dc8b8","sha256":"13fd6d669aea904c3800b2f0353dc83d44a67a7d41e2c8904717492335aa6899","sha512":"269eac8314d14542c9d9fe5bc4528925cad010fb65f3bc52ff0d5327c8389995c0996749003f4d7b2197e2226fc7fe43b23bb833b657b90ad6abaa5d54ba0e18","ssdeep":"384:Qf8TU1P6MmPBpVr7HaeoIjjBjvuKn/DarFSHo:qmnJTaeljjBjWE/DaZao","tlshash":"ca52d083f0e45627d7c6b0b66839ac3709b55a037078f967fc1035d9fc7a5a8b045360","first_seen":"2026-01-22T00:00:18.027576Z","last_seen":"2026-01-22T00:00:18.027576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 762\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":762,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://thenudebays.co/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5543950,\"extra_params\":{\"first_request\":true,\"zone_type\":37}},{\"custom_targeting\":{},\"id\":5543950,\"extra_params\":{\"first_request\":true,\"zone_type\":37}},{\"custom_targeting\":{},\"id\":5543950,\"extra_params\":{\"first_request\":true,\"zone_type\":37}},{\"custom_targeting\":{},\"id\":5543950,\"extra_params\":{\"first_request\":true,\"zone_type\":37}},{\"custom_targeting\":{},\"id\":5543950,\"extra_params\":{\"first_request\":true,\"zone_type\":37}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:40 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%2287f485ef9177b9e4aa9f278168efdae4%22%3B; expires=Fri, 21 Jan 2028 23:59:40 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69541,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e9084aebd5cbb40fa2e6a019b79b7dbf","sha1":"c8905bd62737f141ebc87d59465019a935f3bd22","sha256":"6ce2ebc75b3f8069c7531af599e09c53358be06dc0d03a458b5c617bdcb47373","sha512":"7fccc810892f3285e32fdae922e3532d4843b95ffe7a603f1ef032d4c874119867c7d276ffa0a6919c1a9b229df194d7629187f127368022c7e6e58960bd8201","ssdeep":"1536:4ZoJo4ob/o/o0HLo2LoJLoHLoxLo5vw3V/okV/omV/oeiV/ogV/oWVHyP:BqBbQQ0sx6sCpa6k6m6ei6g6WhQ","tlshash":"ec635cb1608fa7bd073090f720456eae67494b6eded0cadbef49c52124b68b45093f27","first_seen":"2026-01-22T00:00:18.028433Z","last_seen":"2026-01-22T00:00:18.028433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":42,"dns":1,"connect":23,"send":0,"wait":90,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/06/thumb-1-68.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/thumb-1-68.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 66400\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:51:59 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bfb26f-10360\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSKgnOnM70pcVNTWptCEyxpN3qpR5APBZ2MrNekX1FrDBEyB86terIU37U5L3tFpXpyWCMl%2BBw6FhW6p4dlfzpv0rwcUnywrzua7hA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4456c9cb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66400,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"796a320f8b78f3b85b5cce7da49a19b6","sha1":"19374ac7c74731fa82e64b9a44d5e43800c589ae","sha256":"61f452b7c244bcbc5ad8df017b6127bf5fcd06433228bb96e7f8a558c954c9e0","sha512":"5648824f17a62b99b2a5bfaec56bc5ead2c58925377d8d212a765c2f152e44eabe8b5835a86c7ba75994f08ab546b9c74adbc7879d2ba5aba1ba3fc1118f1d47","ssdeep":"1536:2pAAaj3Tqe7pmDTH0yiuWcWfRDo2WJvRHrK5lXcfRZg:2AAWTqe7pmDTHvNkk2WvrK5Of/g","tlshash":"4053f10125d03287579c96e6ca907356bce9483a83bd2e75e8503ddcfdca8b47e486b8","first_seen":"2026-01-22T00:00:18.029252Z","last_seen":"2026-03-07T07:28:46.792666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/05/thumb-1-4683.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/thumb-1-4683.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33328\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 21:23:03 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bf4937-8230\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlMRXCgqlX%2BXjWYRFukAU%2FFgtnjlVOdtkwXDWYNL55LUIqfe88gG8%2BhhqGui%2FYO6EmljNKxyc9YSWSZ0u73a16sewoprVZb%2F76S%2B2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458ccbb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33328,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x720, components 3","md5":"4885bc2f6ad63fb3ecc0d0229c4430a9","sha1":"65b6212b006ae42ea1028622b22f05ab7902d39f","sha256":"f5e8850c82bd2be48ee1734f387822006e8224fedaf709ba13266f8753f89830","sha512":"92c71b35502d5be1c932fd1730d4c8d0c59707e98f03c7b5f6276dc1ebb09f423d666643c8a7df6c717bd9893b173f98e919a54412e87e31fddc840069a4a92a","ssdeep":"768:GDjxeoKF24X3RWidjYwxGWJOmo3lb6wiETDxZOHAkT7G:GDjxLmRWidf0FMwitAkT7G","tlshash":"34e2491b5c2a8b81a56895e4be571e9c2e0a2b4df5d235ff10931ecb7c20b321d8d47e","first_seen":"2026-01-22T00:00:18.030053Z","last_seen":"2026-01-22T00:00:18.030053Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/02/33_000001.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/33_000001.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64823\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 12:42:06 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68becf1e-fd37\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DcsSmmZR2TEC5vmAjgpPsfGl7G4hOKgg7zyWqk3JMJUtEynqd2nyzktDxoW8qjalewDR4bvcSjXHdYslv8IJtsaKEJtFhXfEQJPxZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458ccdb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":64823,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 1920x1080, components 3","md5":"a33e2c0945aaa248922ac2a84a22fecc","sha1":"70e193775ab84fec4590817d93a2b43be781f505","sha256":"7075b1c00eb0ad7dd004647a370c4f91427b75e0c7377aa3261025e8eb54ff3a","sha512":"3e57427b9edef09ae1e369dbd12214b93ef0277960b0d9c3d0c14da44a4ede84b1022333adeb0c5edb472fc1843d7094c2a597a92348fb4e03dd204d580f7b78","ssdeep":"1536:H4jMXwQorelHMgPrWorgh88NiazwG8+r67gs6in0c:YjMXjHMgPrW8gjiazw3+eDn0c","tlshash":"8f53fa079c669a83d46547f8be075dac5a163b4cfca73afb51238fcb39602061d4d13a","first_seen":"2026-01-22T00:00:18.031141Z","last_seen":"2026-01-22T00:00:18.031141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u3y8v8u4.aucdn.net/library/940460/e29ce27a12e900190d765ee458aa9adbaaa45521.mp4","fqdn":"u3y8v8u4.aucdn.net","domain":"aucdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/940460/e29ce27a12e900190d765ee458aa9adbaaa45521.mp4 HTTP/1.1\r\nHost: u3y8v8u4.aucdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 4073663\r\nlast-modified: Wed, 14 May 2025 15:20:31 GMT\r\netag: \"6824b4bf-3e28bf\"\r\nexpires: Thu, 14 May 2026 18:02:00 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3uXRMAQwBuUwKDAH3fhMAAAwBJRPCVwG3ngUAAA\r\nx-77-nzt-ray: 2a494a152eafdfd3926871698ca98220\r\nx-77-cache: HIT\r\nx-77-age: 21787833\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-4073662/4073663\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":3801088,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"845aa97b87b3f6331e2d79a45a7831dc","sha1":"e568c16ca84a59f9e31860a9fd214cd25b52a04d","sha256":"f9b0002bbb198dd42bc213dee81dba8252f9f1499a393c7f137f66a5ebe1e303","sha512":"20e2ac277c3f2132a84505d31a87e3ff0c1d8b2d27372d958d852283c8277f53f6eb094f7afd5599fc7571c612fb578977788f63ba8d9608eb264d0666589994","ssdeep":"24576:NipspZX6OIH3XjyjyYxQuHASOqgrreaDuc6yiphMgEJ:Nis/X6OIDwyY95C5D8y7L","tlshash":"ff2523ab6700308fda29037089e4a756b738d1346b7b869fc7516bb41fd33a4ed0a6d1","first_seen":"2025-10-16T23:48:24.338329Z","last_seen":"2026-01-22T00:00:18.032264Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"u3y8v8u4.aucdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c84328440be6860b0add1fc5a60\"\r\nexpires: Tue, 20 Jan 2026 17:35:30 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3nwUAAAwBuUwKDAH3EQAAAAwBw7WvAgG3vwAAAA\r\nx-77-nzt-ray: 2a494a15d49921cd91687169c3f4f729\r\nx-77-cache: HIT\r\nx-77-age: 1439\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39568)","md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/in-page_push/os/android/2/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:43 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8500-124a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSxjz7zw0aKsGSpDn6FNTgG6%2BfFZ17jCeX9zowIClQ2qQwJfXBxjNrdDf7pE%2FEp4XLz9XwNGWLrR8x75WszPJECIqgwK7KiRqBtZA%2Bsue%2FI%3D\"}]}\r\ncf-ray: 9c1ac454591023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4682,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7ad23d9668c9b8532ded3994515354be","sha1":"9290a13e0f2adc3968a20c600eb1a338b9622051","sha256":"6927de206bba6147969b9a6f208b6dd605d4c11755a310678521f9c6d4d47ffe","sha512":"cc4acd3345a2839b149ea6312477d35063a7bfddb4c6988e5172bfc0cebffd34501906849c091ebcf62fbcb9631fb8c797ec768b91090d027d400b49ac3a1741","ssdeep":"96:2Ci7aTMXYM1Fezms0HhIHhpLiRiVmJxMX5eiVPJUZQoBqj793tnaluqto9eMS:2OMX51F4OHhIHhZJAJxMX5TPJelAJaQm","tlshash":"79a1ed962b771a04b80bd4ab3f6a2707271440039a0fed647fc9624c8fc51a8d6a278f","first_seen":"2024-04-14T09:02:27Z","last_seen":"2026-05-18T08:06:50.975593Z","times_seen":1145,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":64,"dns":32,"connect":4,"send":0,"wait":474,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/06/thumb-1-73.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/thumb-1-73.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 110995\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:52:06 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bfb276-1b193\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8D%2F9s9TZDqD6groNWyZG4GMCSPCEBe037zvYsjCGAlkNxJWhRtoQOTFBiMfjpWX1ZHH5PovzOsk8mLsl4LnJIvg6qv20atL2dGxFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c94b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":110995,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"289fb21a51ed57efc0b474cc586dc555","sha1":"4cd7719256e4f524959861cfd455c8b0d4a1d21c","sha256":"8ea716669d04efeda20704fc9673510d32b0c8416af34058e051fcb34cacb338","sha512":"1cd61843cea7c1b6b259c8d1d3a64fffb007561ed2cf4cfa9458739b6cfad1d30d54328c36695e9d3be4d2509118696ddf9358e81fb1a6ad9482086c01cf75fa","ssdeep":"3072:BCifAH6MCeLxA1WiD7JMU82JrfTK1W88Yt:IifAPU9CU82JHKj8Yt","tlshash":"22b3021fc548b009df92be54d32d8290e781d3602ee65c4e95f268daf398afa943d670","first_seen":"2026-01-22T00:00:18.0337Z","last_seen":"2026-03-07T07:28:46.76123Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/02/thumb-1-2407.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/thumb-1-2407.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6756\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 13:08:31 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bed54f-1a64\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dD2oU46Avzb6hofFDDbstATyb1oHZYmU4HQnkrlMxsixMUV1W6vqtzKp%2BkkCLtmUhAELwynzHJRZZmWN7wGVp6PhTxdnIGWhe8HRlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cbbb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":6756,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x270, components 3","md5":"58cd925d92563694fd8c54a1989c7546","sha1":"b06de8b063506f6e482326f3a772682b93ba6a44","sha256":"03f048cb5debf70095064bd5fc85d13733025211f59aab5ce62b456740aff4a8","sha512":"b3fc607dacad4010e1e10a0048e017b50d13a646b25509f8c3dde6cedd5e2b389d225aecfd7d02498134449bfdc52f529f566baade7e00e2bd3466a1058bbb8c","ssdeep":"96:RhmE6B/2mJrDx2nq3s/GW7YCD26rjJg//rx5jvOa6gWC2XXqhtsAS8g8MxCCw9Ha:Lmf2mEq8NYCD2Z/d5wCeqhXS8F4Cl96","tlshash":"04d18ec5db7671a8abf0c2a7f4065658a306c787764c6fb3365015e06ea0fbc050e64c","first_seen":"2026-01-22T00:00:18.034653Z","last_seen":"2026-01-22T00:00:18.034653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 582\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":582,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://thenudebays.co/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5543828,\"extra_params\":{\"first_request\":true,\"zone_type\":38}},{\"custom_targeting\":{},\"id\":5543692,\"extra_params\":{\"first_request\":true,\"zone_type\":38}},{\"custom_targeting\":{},\"id\":5543692,\"extra_params\":{\"first_request\":true,\"zone_type\":38}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%221b59a2784be9604b15e876e244c24604%22%3B; expires=Fri, 21 Jan 2028 23:59:41 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19932,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9ca16f49437686c102d2756d9c2705e7","sha1":"76d69056cd5402426de0d5006674e468eb4c2bda","sha256":"efb30113945363709d49486422b364b9b2e37d3258c68e076898718962c5f3c0","sha512":"b3160f9b40ad910f8009b2cb27e2385bc21bf0ce85deab68b0cba93dbfe0e019e625b701caf1230456a62194ea6abed7ccf3b3ddf2240ad8306f8e79269cc996","ssdeep":"384:5G0L7n61TOsTMkJ9Mm2TUJFwHbWT8CGNxK9dBKhlbpAMKv03Kkw6P:59LD6Y5xmzFwHDxKrBKhlbLKgKkw6P","tlshash":"7c923bb27788dceb6bd653846d9e389cad69310bc9c5cdb7508dc818e2f81380e67355","first_seen":"2026-01-22T00:00:18.035471Z","last_seen":"2026-01-22T00:00:18.035471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":42,"dns":1,"connect":22,"send":0,"wait":206,"receive":2,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QW04DMQy8Chdo5Ecedv/5BakSB8hmd+GnRWILopIPj5PyqMjI0WQ8jp0QUN4B7gjvUPZJ9xFNMSiESAFTtIfHg7l2fllO7/My1csW2quhahYxKco5G0KKyb0eLJAtgVhh4SKeQ0qiKZJFMDZwUOIYBytg90+HEWgYMGc1AvNDb9spdpDAJwL1GuSWl1RxneZUpnkC4ahYW54zIK3ez03/hoUrAmjxKYx+BMeu2xkjk0/kC2zIdbucmtmNcTyNpLPxCuq39Lg1/UF+GY59C8f6vL19+DhHl76r8JocwiBV89IKE2NbFadVGq8pLv67gohcvwBxxvX+rgEAAA==\u0026cb=e2e_6971686d126de2.38311399","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QW04DMQy8Chdo5Ecedv/5BakSB8hmd+GnRWILopIPj5PyqMjI0WQ8jp0QUN4B7gjvUPZJ9xFNMSiESAFTtIfHg7l2fllO7/My1csW2quhahYxKco5G0KKyb0eLJAtgVhh4SKeQ0qiKZJFMDZwUOIYBytg90+HEWgYMGc1AvNDb9spdpDAJwL1GuSWl1RxneZUpnkC4ahYW54zIK3ez03/hoUrAmjxKYx+BMeu2xkjk0/kC2zIdbucmtmNcTyNpLPxCuq39Lg1/UF+GY59C8f6vL19+DhHl76r8JocwiBV89IKE2NbFadVGq8pLv67gohcvwBxxvX+rgEAAA==\u0026cb=e2e_6971686d126de2.38311399 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: __uvt=s%3A32%3A%22d365cea8c77fabcf25d8344556ac963e%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html\u0026l=1038\u0026fd=572","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 21:42:11 GMT","end":"Wed, 25 Mar 2026 21:42:10 GMT"},"fingerprint":{"sha1":"DD:BF:7F:13:B7:AA:5E:41:65:09:9E:F1:FE:42:C4:9A:00:0B:F4:E6","sha256":"FE:3B:B4:EE:8B:60:30:E2:9F:CB:E9:E2:06:C0:A4:2E:FF:35:D3:22:85:14:1C:B8:13:CD:72:FB:EA:5C:E9:98"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html\u0026l=1038\u0026fd=572 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25819494=1; slec2d86e1ab7c7d36a9ea9ae4145563cf4f=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/12/Yeri-Mua-Naim-Darrechi-2_000019.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/Yeri-Mua-Naim-Darrechi-2_000019.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9643\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:56:09 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bec459-25ab\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KtFIdtg7Nq5twwZGmQtaSfU%2B%2FbaO6F9GTVOlCyb4mcEzdV4CiYGb1yiFAm1JaQjz2%2Foa2438YI07wfyDfiDTsy3KEboFTnAj0WTpPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c85b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":9643,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 242x480, components 3","md5":"a0d7848a274e8b3653cee349ccaa49d1","sha1":"85df56435a1d708b89fa4865596e563207756f27","sha256":"f4f8b313b66fe29f00192bb72f60f4bf105965e011b2ee6e2b7b0d83dfa3fb28","sha512":"f4813f64b6078002383a40ae12c358bff142b116de0dd55c606c7775c1acad2ce239128d82021f251ea6b3fbee3adf650c7bc680ae9c4f2c8178c80ae8555149","ssdeep":"192:3A6fjJMUPQYlU/oJn7jD14vbpLJK+GibYg1rNsoCUqn:w62UzlpJj54vbp5YIr6oCrn","tlshash":"c712bf3a834f8003633fb2f275d91043679326d93400ad3659609a3c1f1f1ee4ba69a8","first_seen":"2026-01-22T00:00:18.036315Z","last_seen":"2026-03-07T07:28:46.840126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/03/thumb-1-709.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/thumb-1-709.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5760\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 19:04:38 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bf28c6-1680\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJTTpnS0ckknCDhpiB1A8rUFpp%2Fp8vUsFiHcl9%2FY0BcUqnS9Ee2Z%2BwNyl2cp8eoJS8VAPmrT6VI%2BUxTERRGGdFnuK5T9ckW%2B2LbgtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cb9b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5760,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 282x282, components 3","md5":"5d60c08b7760642c0b7eede496b01266","sha1":"aa1d0c94cd11460826b395f2973ca74ad1ff2ebd","sha256":"d3d12369b1aeb86e3e5717e794b814a7f0edc835f87e7e2a3c6787f2d5b5df5c","sha512":"553395f0cc79dd6f4aa8d8fdc21b4afc6ccea4b9067e00a266e7d5fe514a6d375dbbe8c251aa1d5e64afd298a899fe2ee8111810a3f6cd5d5951b96d9ff75958","ssdeep":"96:RhJMEUD5FnBMDnAs6juuM2x/Xa2hF3dqnFx15Jt0z/hTguTw3dN5dDjd:LJMz5FnBMTA3uu3F3dYFx17CzJTbktPb","tlshash":"55c18d5ed7558cd60f2a84865fdd2593730a05d2ed222939b8335025c9a3f7c84fe1dc","first_seen":"2026-01-22T00:00:18.037243Z","last_seen":"2026-01-22T00:00:18.037243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/09/Riley-Mae-2_000009-scaled.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/Riley-Mae-2_000009-scaled.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 168188\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 10:57:09 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68beb685-290fc\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sL1eIV%2Blgcj2IBG1wO0LA4Pji7UnLcruITrsHnpU2qQPRwBp8apFnozsqbaZRNF6CdAXCMXrRTmzIVlSkARq5C7oMROnSNj8sOTr%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cbeb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":168188,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 1440x2560, components 3","md5":"167e073d0eb501af43e953bee99a0ca9","sha1":"96e4ec6280fab4cc6eb9112b1d8006e1fb2eff12","sha256":"5b0467484d8ccddbd6901a50a6f8de163b2265a5fd473d51f701d92753d42636","sha512":"e52e53f51d98f39ffb9ce1e5f2231ce9929e1ec5262e8a5385821b257b722b7adb218a94f57380e1f1867d4a734fdaba57b194596e60933d3c3fa9b52abf0cdb","ssdeep":"3072:5Jc5eTlh1Q0o1ykwT+WBkvYYsky+EXA3mYgprShcc9SQJ93T4lvJ:PcETX1Qb1yko+qvYsZ+EwWIhcWT4BJ","tlshash":"53f31229ea3542d1f8490c7125e26f6723c49c6504217c2a7836bfa7fee4dec9c6d13a","first_seen":"2026-01-22T00:00:18.038084Z","last_seen":"2026-01-22T00:00:18.038084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/438437/ea0d89d2149e2385e58a4c824bdf9428a783af1d.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/438437/ea0d89d2149e2385e58a4c824bdf9428a783af1d.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6514\r\nlast-modified: Wed, 02 Nov 2022 12:17:31 GMT\r\netag: \"63625fdb-1972\"\r\nexpires: Wed, 17 Sep 2025 20:52:37 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH31EimAAwBuUwKDAH3QAAAAAwBw7WvBgG3mk57AA\r\nx-77-nzt-ray: 2a494a152eafdfd3926871692d55361a\r\nx-77-cache: HIT\r\nx-77-age: 10897620\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":6514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"487b94a4a8d5daf28b923573eaad94ee","sha1":"ea0d89d2149e2385e58a4c824bdf9428a783af1d","sha256":"451cead2120eb91abe692308b7a65836877167cd04e2b074038359a967232e35","sha512":"ad7fb810b06303b91eb62e11161aae59d6dfdb6b34fc7aa8094656a3c9c6b01f073c1b74dd1b42b4e44642d06cf47394e1b78d2751a90632e0ea6209f1e58a93","ssdeep":"192:a8Pz2ezllV2tl+19LnaCHE5k6I+M8h8XsZM:H2eRlVUlyFKk6I+BM","tlshash":"70d18dcf71e2218bb0b9d60226115bc0c6bb2f161da9a7d50acb8b1ca8f4690b1bd560","first_seen":"2024-12-02T04:40:05.08973Z","last_seen":"2026-04-17T17:31:16.851396Z","times_seen":132,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":45,"dns":33,"connect":1,"send":0,"wait":1,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/3d6d49cf152cb59a50740dd027fe62665410bc14.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/3d6d49cf152cb59a50740dd027fe62665410bc14.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 16674\r\nlast-modified: Tue, 21 Oct 2025 18:19:17 GMT\r\netag: \"68f7cea5-4122\"\r\nexpires: Wed, 21 Oct 2026 20:43:15 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3Fnd5AAwBuUwKEwH35gAAAAwBJRPCNAG3DgAAAA\r\nx-77-nzt-ray: 2a494a152eafdfd39268716928adc82e\r\nx-77-cache: HIT\r\nx-77-age: 7960342\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16674,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"264bdb54ef7c09af9a0fdd720079b46b","sha1":"3d6d49cf152cb59a50740dd027fe62665410bc14","sha256":"457a3fcabac4af327c2fab657f617b9b09a021c2b8b094af3c067125fbe62405","sha512":"4c994b430c023b03f445d1ab1530f4cd13e4aff03bda75ba80e7863f3b4272c1ae9598b6edde74c3cbadb5b9728893e86c997252182865cf13e8e165930a169b","ssdeep":"384:oJnOOs2AMBk1IFRc45JDghKBiQTRnsPJzI3z/hGdkuw:oJOOrbTJDgSiQ5sP+3dGM","tlshash":"9e72b0ff6d164b1a637e172ad6181d3742400cec10bbfce4259721fb9786d3eb1a50a6","first_seen":"2025-10-22T00:34:07.773467Z","last_seen":"2026-02-15T16:32:10.904883Z","times_seen":332,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QW24CMQy8Si9ANHbsJMt3+9tKVBwg+2r5ACSWIpB8+HoXVFVklMiyZ+xxGJxWoBXTC5W1NmuBNRQaBOFAKvb+sTEhO38Ph59+aOttCt3RRIooWclNTMkIKupcv1GITVFMKecCGLEQEkox7xwNDtYoMkcBIMuwt+3Gtp+vniiajYwtAldWVy/zjWHiMXHBlcCzmGKXBq00tr3mtm9RojRUu9QnEI9uyklPrnFHII73MfjDaqZHkshuzQ9sSdfpdujM/hFn6GMRLC2eq3dQegzzFf2JtBiCTWFfv6bTxf3sPTWrA5WllXsS/6RLPe3qeXc8LOVZYwm+n0hNrSaMg4dtzVFSLH2vw9j/AiaUy2HGAQAA\u0026cb=e2e_6971686cee9de8.31242719","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QW24CMQy8Si9ANHbsJMt3+9tKVBwg+2r5ACSWIpB8+HoXVFVklMiyZ+xxGJxWoBXTC5W1NmuBNRQaBOFAKvb+sTEhO38Ph59+aOttCt3RRIooWclNTMkIKupcv1GITVFMKecCGLEQEkox7xwNDtYoMkcBIMuwt+3Gtp+vniiajYwtAldWVy/zjWHiMXHBlcCzmGKXBq00tr3mtm9RojRUu9QnEI9uyklPrnFHII73MfjDaqZHkshuzQ9sSdfpdujM/hFn6GMRLC2eq3dQegzzFf2JtBiCTWFfv6bTxf3sPTWrA5WllXsS/6RLPe3qeXc8LOVZYwm+n0hNrSaMg4dtzVFSLH2vw9j/AiaUy2HGAQAA\u0026cb=e2e_6971686cee9de8.31242719 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: __uvt=s%3A32%3A%22d365cea8c77fabcf25d8344556ac963e%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/438437/a56f616b67f61043e17f6fcb0024d59d1cffb556.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/438437/a56f616b67f61043e17f6fcb0024d59d1cffb556.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 102754\r\nlast-modified: Mon, 11 Mar 2024 16:08:45 GMT\r\netag: \"65ef2c8d-19162\"\r\naccept-ch: \r\nexpires: Wed, 12 Mar 2025 15:18:38 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH3tbmfAQwBuUwKAQH3yWAHAAwBisclxAG3T49tAQ\r\nx-77-nzt-ray: 2a494a152eafdfd3926871694735262f\r\nx-77-cache: HIT\r\nx-77-age: 27244981\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-102753/102754\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":102754,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"4fe9ff94cb6edcc55c2b1bb0c911b303","sha1":"a56f616b67f61043e17f6fcb0024d59d1cffb556","sha256":"c8bd608189091fa2db8f0b89a618eae029ff66ef53a813d2e9acbd59ca31d047","sha512":"6704e5a4f609f1f0497ad040ca0a8c6d1672f2701b12d259b27f85ca611fc6e30931eb63307713970e4dfcea70b77d0e6b7002f34b561e1dad8de3fc593747aa","ssdeep":"3072:USkMlh0hzfxUpr8l5sCIE17Q5VdWpnx7GPIWYe2x:UV6Szat8f7AVk5QLU","tlshash":"0aa3124d0ebe7125dc5b0dfa17cea191e824d369e69ab71bc1e6c8d2bd9e000109d6ac","first_seen":"2024-12-05T15:44:22.596739Z","last_seen":"2026-06-02T05:29:35.738605Z","times_seen":141,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/438437/5f37274584fb54112a295078bed4b1009bbbbb90.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/438437/5f37274584fb54112a295078bed4b1009bbbbb90.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 144004\r\nlast-modified: Mon, 11 Mar 2024 16:08:45 GMT\r\netag: \"65ef2c8d-23284\"\r\nexpires: Thu, 18 Sep 2025 07:34:46 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3+bGlAAwBuUwKCQH3xLMNAAwBw7WvAgG3qu5vAA\r\nx-77-nzt-ray: 2a494a152eafdfd393687169b09e2e0c\r\nx-77-cache: HIT\r\nx-77-age: 10859001\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":144004,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"bcf97b831b9faf8367aa03cbc6a9289e","sha1":"5f37274584fb54112a295078bed4b1009bbbbb90","sha256":"2fea9ff9f6ba096eb92a66e10d01d5e8090890f8362c2bdcb585da2e18a9dc23","sha512":"7add6b53be476a368ebff48f3f07ea8713b19d96919e8b3004bf2e040b2dbf3a2338cf21e179dcd1e539e65fff7523c52e1d1a348d25b04a083d8414a572164a","ssdeep":"3072:w4dkCZINfupmAVu23lIE15mg6aq+Bxy0VZN+K2duJs:wakCIupmAVu23/7PzZNu8Js","tlshash":"c8e312bb3c5fcc1442495e3461cca357867ba845b1f15ae6c68623371b8ace06ee7732","first_seen":"2025-01-06T08:53:53.398043Z","last_seen":"2026-06-02T05:29:35.71763Z","times_seen":74,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/06/thumb-1-74.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/thumb-1-74.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 98385\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:52:06 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bfb276-18051\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5twOXb8rd%2B%2BESfFjfV5dgyhP9SseOgLsVHVEHgB3W26oAE%2FoFYUSxWwsbH7sVBjn12PUcoQUW3G%2BPlk8Va%2F9cAAsxFoipSQHx7FqaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c93b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98385,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"117770f3136fd8e0da19ee46c4c9c544","sha1":"2675ace24c0938262165c55be1330efa3401d27a","sha256":"0888d6d745eca441e98122c5d1aa848344be6733b3f842ae2a698fdb42f15d02","sha512":"a89916f292b7e3da03972b27eafd7fc2b0554dfe02605beb15b78858ff1244ee023893f6191f4119c907762a0c5caedbd2cf86e2211ec8b62b876aec6e272cf1","ssdeep":"1536:20fT3wt+0tL+Xo3hPOmrZbSBksfslo2k8hW/9HLu4A56ttGqIMU2:z7wt+0tL+XAhRrB3sMoJj9y4pttGBh2","tlshash":"6da3127f03c95519a7065e1f3249c93ed441db9ae59ca6e060f2a6afc841fb83fc1871","first_seen":"2026-01-22T00:00:18.040923Z","last_seen":"2026-03-07T07:28:46.731106Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/11/rileymaelewis_000014-e1700098333813.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/rileymaelewis_000014-e1700098333813.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45842\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:53:58 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bec3d6-b312\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G3dsCMGRXdxsYn2kjT1mWvwS6RoPLcExs%2FzlhdWN8fwaPKwi7n4lFz4xywU5PM%2FHUjGlQE%2BE5V0iStDbAhpxJM8U%2BsLZpL%2FdF1jscw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4457cacb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":45842,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 1200x674, components 3","md5":"5cc89e9e211b8a3230e3025b43bd37d0","sha1":"5c444ab05f28efd471141eb47ce8c6f4d1af1c4b","sha256":"b5867eaa3b17ead001d13d3321a817bdf8e1a21429717aeb51f001c5a5bb8413","sha512":"6f59927d7ab176f09b8a2e1296ca54d65de9bfb217b54a52756f4907530ed278fa4a4cbf565abbd9986bb74784ee0dd518c2e0858e5e7a27e90fd1a9a0be2052","ssdeep":"768:tQTktLivJYMc8U67c2j9irgqIWW5jIHTr42gtOQc2Mu9D0PDyBOmM:tEcs7cM3G02gtOQJHOmM","tlshash":"bd23f107bfb1c209d6d88bbc95c3d6c45e934f36f0aa06ce4164966cd6926c83f91b68","first_seen":"2026-01-22T00:00:18.042379Z","last_seen":"2026-03-07T07:28:46.811957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/08/1_000799.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/1_000799.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34550\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 10:51:59 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68beb54f-86f6\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yGdtQYuc6VopzJ%2FsoNJqVRCMsVwJ%2BeXiQ68Z0%2BoKDhVgqbw1b%2FnVdDAj%2ByaRSm%2BbXbrCKP6PaNlY6rhwEOJf%2BaQISnGLzdUssvXBCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cc1b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":34550,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.100\", baseline, precision 8, 1280x720, components 3","md5":"f39b9a6a6243921457efa44f8ba66f8f","sha1":"6e45f835b384868efa3c32ecfa9f439e3be0ec3b","sha256":"235085dd238ce6066f12ddb14532af889da8ab7f365d9ae1d473065f8fcf9357","sha512":"d192f26d130d6259cc6d71e1b85c6e97c22b20cece962474ef06bff1ec6622c41ea1b8493e1994a119b8b8dac5e2870c420d7dcfcb9658eb8e635254c61f7b11","ssdeep":"768:RRPxX4qxt16A4JS6pAjV9EmqbVU6QmnMHGj/iNwAyRoiOcHzU9:RRPxX4WtcA4M8AjVJyVUNmncvuAyCi5Q","tlshash":"50f2e19a87346333ce6bf016dc559a7a05839af8290475008b02cf6eb9b1e3f825ddd4","first_seen":"2026-01-22T00:00:18.043219Z","last_seen":"2026-01-22T00:00:18.043219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c84328440be6860b0add1fc5a60\"\r\nexpires: Tue, 20 Jan 2026 17:35:30 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3nwUAAAwBuUwKDAH3EQAAAAwBw7WvAgG3vwAAAA\r\nx-77-nzt-ray: 2a494a15d49921cd91687169840de128\r\nx-77-cache: HIT\r\nx-77-age: 1439\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39568)","md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/sbar.json?key=2d86e1ab7c7d36a9ea9ae4145563cf4f","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 21:42:11 GMT","end":"Wed, 25 Mar 2026 21:42:10 GMT"},"fingerprint":{"sha1":"DD:BF:7F:13:B7:AA:5E:41:65:09:9E:F1:FE:42:C4:9A:00:0B:F4:E6","sha256":"FE:3B:B4:EE:8B:60:30:E2:9F:CB:E9:E2:06:C0:A4:2E:FF:35:D3:22:85:14:1C:B8:13:CD:72:FB:EA:5C:E9:98"}}},"request":{"raw":"GET /sbar.json?key=2d86e1ab7c7d36a9ea9ae4145563cf4f HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3936\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://thenudebays.co\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: pdhtkv=true; expires=Thu, 22 Jan 2026 23:59:42 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Thu, 22 Jan 2026 23:59:42 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Thu, 22 Jan 2026 23:59:42 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Thu, 22 Jan 2026 23:59:42 GMT; path=/; secure; SameSite=None\nu_pl25819494=1; expires=Thu, 22 Jan 2026 23:59:42 GMT; path=/; secure; SameSite=None\nslec2d86e1ab7c7d36a9ea9ae4145563cf4f=[6259582]; expires=Wed, 21 Jan 2026 23:59:47 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 217\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 39ff89075a011dd752679b2c796b6995\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5358,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"fae5eb8ab34539d55944c138afe75a78","sha1":"25f102788ef9481e2663596074ffac98f16289b7","sha256":"eb0f7d8af7dd32c96c6f5876f5472f3afbcf72c556ec1266872ecf48c429b135","sha512":"d0b7eaa5dd05b24347e25747f10c5cda0f8d5640f8e9fc8684233fa0af8bb5cffeab090383700f43b701f2f8845d689f628e5e4ea2901bfb4c134d8154dc42cf","ssdeep":"96:9z348nQLyRn6wwHiFJrO+KZSuiqghBnqMZ8+NdwkB7tcLsBYDafeNfcLWOs:9z34gvRn6iFJrO+QSFnnqMV3cpDafeN9","tlshash":"ecb18f3f229570c71e424049aadbaee32d2b766fd4e4d14c452b53ed6d1db020f0c21c","first_seen":"2026-01-22T00:00:18.044051Z","last_seen":"2026-01-22T00:00:18.044051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/437080dc4aabae1f7511560c159c11389da0454d.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/437080dc4aabae1f7511560c159c11389da0454d.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 35001\r\nlast-modified: Tue, 21 Oct 2025 18:19:17 GMT\r\netag: \"68f7cea5-88b9\"\r\nexpires: Wed, 21 Oct 2026 20:43:32 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3pdd4AAwBuUwKAQH3M6AAAAwBJRPCLgG3IgAAAA\r\nx-77-nzt-ray: 2a494a152eafdfd393687169aae45c0d\r\nx-77-cache: HIT\r\nx-77-age: 7919525\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":35001,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"44645e48a0a1cffe8ca724d077a7fa5e","sha1":"437080dc4aabae1f7511560c159c11389da0454d","sha256":"ed657f32f3084fcf1131c4685088da565ff1a0e95b838bf8c16b76dc8c6b1ff0","sha512":"f6f9e46ef76e7422a1ecd9294bf60f033816b3da1f9868f7a8a5e78cf7cce7b5482171c57fd6ba5fd7f038be18a6a94f2b309b02e6f8fc780fd9036c953394d5","ssdeep":"768:vSzBxpINwHdJ7ecafSnS7Ves0yNSPB+22yf8NQfGDjKlIA7k4:KzBxpuw9yaNsbaftoKG34I43","tlshash":"d7f2e1e2fa6162eee9031ab18d4f67c6876688291c9db8183951c9fb36e0104ddd3f53","first_seen":"2025-11-15T18:26:14.476843Z","last_seen":"2026-06-15T17:02:40.157491Z","times_seen":570,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/05/cropped-favicon-3-192x192.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/cropped-favicon-3-192x192.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_XZPHF8G399=GS2.1.s1769039980$o1$g0$t1769039980$j60$l0$h0; _ga=GA1.1.2022688431.1769039981; __suvt=d8a0bac713e54a38266288f261bb87bc; pp_main_5f0dc5dc10ce2e73eb7c533865572faf=1; sb_main_2d86e1ab7c7d36a9ea9ae4145563cf4f=1; sb_count_2d86e1ab7c7d36a9ea9ae4145563cf4f=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=cde5d6f0-8a2b-439a-aea8-cb1ddf528f6a%3A1%3A1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=kettledroopingcontinuation.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10434\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:38:13 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bfaf35-28c2\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6RdmgLXdRCBMcdi2xMCPEf5mwHVrcGdmmgHQmbVQmSjEXfySGL8N5y7AH0ydFChrxKAC4OBOEiN%2FXa31B%2Fd0Jp%2FNQcnRS1SvmnwXHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac451e9b4b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":10434,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"334d9d9ef17a3089d7d226b43ceeaf80","sha1":"f609cbe560748c5e7047b1ad9672a69304b91506","sha256":"75297eb89d8f94ca7272f0b7615e3272fed3663e5146719ea3087a3058c0af4c","sha512":"2126f04b3a5417e7f8cbe3792a90754cbfe0c6551b0727b97e06d4d5191a304199067b293374651b3018449120752e6dc8d0abaf58adc8e7ceb6be0cfada9702","ssdeep":"192:Mfmq4q7pDct4F5y4zG9ePLjWvQJ6nR2yZRNhc29864SXE9vjAiZ7:Qmq4KdSDZQPL6vQqR2yZr86zE9TN","tlshash":"b622b0a79b784b0adab52d3c2a757fe44723a9e4004fc5d95778ec58c12e5cd0c55c21","first_seen":"2026-01-22T00:00:18.045404Z","last_seen":"2026-03-16T03:18:29.5235Z","times_seen":4,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:07 GMT","end":"Tue, 03 Mar 2026 17:10:06 GMT"},"fingerprint":{"sha1":"82:59:95:33:5E:76:7F:3E:5B:45:F4:CA:83:29:7C:B2:19:B0:A5:C0","sha256":"A1:28:19:D2:C4:EA:69:3E:6D:8D:7A:20:FC:3E:A6:13:BA:59:C5:9C:DE:7D:D1:25:3D:35:68:98:FC:47:82:9D"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 21 Jan 2026 23:59:42 GMT\r\ndate: Wed, 21 Jan 2026 23:59:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1f04e9e49d52374a409de4887e47180d","sha1":"8fee2f920567a574448d1aa6565c95951b68f9b5","sha256":"10cf0680b9dc5b310d265479bcebc5b380474bf2e8da9361cf8be458d183994e","sha512":"5fde8f721343e9c6254229e791ed64d6b47f28fad7690f7c83fa8c29e3112d0974f65ae0c63f09acd3e026dcb56c4de3fe0ffe37c464eb326b0495aa6c03b31c","ssdeep":"384:pKf5KgKPKrKyUK/qY4+K4KYKpKfMK1KWK6KyhK/qY4XKNKtK4KfdKkKDK3KyQK/9:pCJmwBUiRDfMTcfFBhiEymdmtC0BQiVb","tlshash":"df7210a1041750009b834ce223cebf35fe1f52117152d0b5abfdab6b9dcbc66526939d","first_seen":"2025-11-19T00:20:32.486705Z","last_seen":"2026-05-28T13:25:58.724835Z","times_seen":6027,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":54,"dns":1,"connect":7,"send":0,"wait":22,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2023/12/LenaThePlug_000158.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/LenaThePlug_000158.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38058\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 11:55:33 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bec435-94aa\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qb5leZ9Xp0rSPLYarjZQX%2F2HWo5NTDllxkHC1guda3wskrU%2BwJKb8DkHRxQht76x07pOvy6fCefi%2FDQw461WNe5ALxxI5jnDr0WOyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c79b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":38058,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.35.100\", baseline, precision 8, 720x1280, components 3","md5":"76f02ee12e8a5e168eff710ad604d997","sha1":"145949754cb8c6a6c2d88c5b2f9a1c36d38929c8","sha256":"762ce743a0700ea17a15232499ec53936a12b26c5c79a614a52bf61929ab9140","sha512":"862a7541a514a1922a780fa79557759ddb8bd95effb084c67a2209ada1bddc991827791d1741eeb3b4fe478837b2de1e0ed38c7a28fdb44b06efc6b499fdefab","ssdeep":"768:Iv73Glpog5sfQm+0zCN3iuCeinqysUS+LXdRWflRoe0wmlCC:I7GlVufQACFbCeIqwCbS5QC","tlshash":"5303f140f69cd4f9e281407aceda404e4d23dff7a0d93668f847dd1297cbd541a28a4a","first_seen":"2026-01-22T00:00:18.046835Z","last_seen":"2026-03-07T07:28:46.754436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QS04DMQy9ChfoyP8kXcMWpKIeIDPTgS7aSp1SUcmHx5kiQMRyHL3Yz88mIFsBrggfMK+1rAW8YFegE+pQxZ9fNi7ol/fd8WPc9fU2d8PJhbNw8pwKmzmCikZuOKccEbInTslKdkRS1ELZg5kdwkhZpL06APQE/rTd+Pb1MYCsyTH4PO7W2QlcGkIZPhGolSEPttOKUz9q6sceMkvBOthogDSFnEj6pzeq0JK23lkst9ZiGpm0KLrbqhUyClPIiwO+wHW+HQf3nzS1e1imoUbQ3P8Q/Zp9jwnUAi59F33gc3eob/P5GvIOATWCDm1R2gaWWNe1nvf1sj8dl/9WFGulPgmPY9FpxxPVySQzDlxhJNP8BRI2+SfQAQAA\u0026cb=e2e_6971686ce5f255.01662780","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QS04DMQy9ChfoyP8kXcMWpKIeIDPTgS7aSp1SUcmHx5kiQMRyHL3Yz88mIFsBrggfMK+1rAW8YFegE+pQxZ9fNi7ol/fd8WPc9fU2d8PJhbNw8pwKmzmCikZuOKccEbInTslKdkRS1ELZg5kdwkhZpL06APQE/rTd+Pb1MYCsyTH4PO7W2QlcGkIZPhGolSEPttOKUz9q6sceMkvBOthogDSFnEj6pzeq0JK23lkst9ZiGpm0KLrbqhUyClPIiwO+wHW+HQf3nzS1e1imoUbQ3P8Q/Zp9jwnUAi59F33gc3eob/P5GvIOATWCDm1R2gaWWNe1nvf1sj8dl/9WFGulPgmPY9FpxxPVySQzDlxhJNP8BRI2+SfQAQAA\u0026cb=e2e_6971686ce5f255.01662780 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: __uvt=s%3A32%3A%22d365cea8c77fabcf25d8344556ac963e%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 23:59:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://thenudebays.co\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/in-page_push/os/android/2/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 22:26:15 GMT","end":"Wed, 25 Mar 2026 23:23:44 GMT"},"fingerprint":{"sha1":"05:E7:A3:19:D2:55:91:F8:B7:45:48:72:0B:86:C7:0C:2C:CA:27:03","sha256":"14:76:91:36:84:B6:CF:C4:0A:BA:6F:14:80:F9:C7:77:48:3B:08:A3:C8:48:DC:0F:F6:CE:86:72:BB:CC:0B:06"}}},"request":{"raw":"GET /sb/ssp/in-page_push/os/android/2/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 2005\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65aa8500-7d5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 483578\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FM6KHsVFjdHucMGVmttRlomFDuNdnOwt8HDL9uCGeV6whdXzjmzHYGOILclGUgIaGMGO4xgU1bveQAp%2B5gLDMnQy%2B2qoZ%2F1AE2YQZuDWy4M%3D\"}]}\r\ncf-ray: 9c1ac454996723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced","md5":"2cecae5111d5ff932a996679215ad573","sha1":"f4c63abb5dc373aba5bc144c3831d98516cc7cc9","sha256":"31f6aad6a88eca32f245dc6d0e030ef422f306b4f8479855b30e59b6dc134ebc","sha512":"f1a62cb77df45c07d203b3e4a31964e8267371a6bac6fe45be07cd178c5e1e1815ab4a3586626b616355d653365707eca6d2a2d950614227f017b854f5c1e072","ssdeep":"","tlshash":"ed41b407fba09d106a9df9827de822532b3b17809ac2b542fddd485398f00fa8b5d1c2","first_seen":"2023-04-11T12:56:03Z","last_seen":"2026-05-18T08:06:51.015018Z","times_seen":1561,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2025/06/thumb-1-77.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/thumb-1-77.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78371\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 04:52:09 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bfb279-13223\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yy%2F80WnmHkHOk2RASbxBRpW4Tv8P8YJgL%2FeTRzbnBVU7l7kRXzWqPiRuWbLXDeRV12q87F2zV8b90ouf7i1Cu9ukn%2BWZh3pqNFVfzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4455c90b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":78371,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"12ab2831eb39047930b2192572b4c07e","sha1":"57452b9b5566819bce2be7d23ba7076d41b652f8","sha256":"d8143c6d2b5abfd81073c72a94389c768f4d7c74800e19049a65235259a1dfdf","sha512":"85177625eeb8cb8333c90da6deac4aad8ac316b6cd8517a7b6b56b9bda57de9c8449ed6d0fb6c9159813578c500461a2ff736a82f48dca8dde044523aaaa891e","ssdeep":"1536:2CKb2tHCIoIS5UO+xgptQ7fCLvHg3kVceshhPfVs00nvP5xU4/SUVeSt:fx+Eo+EveesfnO00nvRxUIK8","tlshash":"7373026f2542f3f5c69f51d60ac719c927226d0df8b23673a00a4a3baf14e4ec8ce954","first_seen":"2026-01-22T00:00:18.048071Z","last_seen":"2026-03-07T07:28:46.897241Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:43.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 20 Jan 2026 23:52:35 GMT\r\nexpires: Wed, 20 Jan 2027 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 86828\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-16T17:50:35.49609Z","times_seen":884618,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:43.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thenudebays.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 20 Jan 2026 23:53:40 GMT\r\nexpires: Wed, 20 Jan 2027 23:53:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 86763\r\nlast-modified: Tue, 18 Nov 2025 19:00:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-06-16T15:46:17.859917Z","times_seen":58817,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":125,"dns":1,"connect":29,"send":0,"wait":15,"receive":4,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/02/thumb-1-324.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/thumb-1-324.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28552\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 13:20:31 GMT\r\netag: \"68bed81f-6f88\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: public, max-age=16070400\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OJZl9vuyxu5nDGrA8DSrPCEUHdvJLexLGObb9zWEecGUd8g%2F28N5k%2BuPuPbL6f5%2BLv50nsYu4xLCIosMW%2BJMiP%2F55rhKQZntcdjXxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4458cb3b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":28552,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x480, components 3","md5":"ba816e003a8b0d4600ca57f452ff0f60","sha1":"3e03ab2662395d0ce381cd070be0d577903c893f","sha256":"fd2eee86a56ac2f4150a64b11dba207181c6e498c87ce4363cb75a9fdcc4044d","sha512":"46a843e6b82819e6bc33fefb2202e53adc3cd1b8228c4b88103fcc3a026f567bd069ba4383dfe51a947c0b869e3c8026f3112206574e858bbd5922d50a148425","ssdeep":"768:+4QYl4uQWOsu0osykLKvt1CwyfIvdfuuZZ:+c6ouH5Aot8AZ3","tlshash":"e0d2e1fdd9571d90fbf785aa5058df1434851acbf8e67ab8904c6c78e05ed704c6028c","first_seen":"2026-01-22T00:00:18.049468Z","last_seen":"2026-03-16T03:18:29.631518Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burglarycirculationintense.com/5f/0d/c5/5f0dc5dc10ce2e73eb7c533865572faf.js","fqdn":"burglarycirculationintense.com","domain":"burglarycirculationintense.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"burglarycirculationintense.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 21:15:01 GMT","end":"Sun, 12 Apr 2026 21:15:00 GMT"},"fingerprint":{"sha1":"7E:9D:AC:7F:55:79:54:CB:D8:0C:5D:C8:59:42:19:9F:BC:43:C5:E6","sha256":"F9:B5:7D:DF:6E:AE:30:DE:7D:1C:B2:34:BA:9E:7C:7F:E7:4B:E3:8D:57:69:A0:B4:0A:EA:5F:BE:FE:8C:4C:8E"}}},"request":{"raw":"GET /5f/0d/c5/5f0dc5dc10ce2e73eb7c533865572faf.js HTTP/1.1\r\nHost: burglarycirculationintense.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:40 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38511\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 6\r\nHost: burglarycirculationintense.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d96a858f693b50c75010a66afe8a0497\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108026,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"03f094f09aa915740291fa238031e83f","sha1":"a4f2159a58d9856c3df4af98a07cd0b6a76e0180","sha256":"0d43b58204db07903d23f503c37a606ea522a6dc3ac8a198e581c5491829bd96","sha512":"e68cff435e2d0543a4d4b3f438600c05d77372d4952153aaf128c7911db2e4cda67a594fede4e070a654f12ac739fbec792feadba25a645752055a561e354d3a","ssdeep":"1536:1DdqoPFvkdWY4wWobxg+kH+pNmE+LbMTEhBuvuQwOM4uYh4vgyZatNBYPSQE21g5:DzkdTUwMI42","tlshash":"a7b3e68c7f45f1ac12b6b033323f952ef41a4d9548ace5cce213e4e8a9a8b17d539b54","first_seen":"2026-01-22T00:00:18.050258Z","last_seen":"2026-01-22T00:00:18.050258Z","times_seen":1,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":263,"dns":54,"connect":91,"send":0,"wait":103,"receive":91,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"burglarycirculationintense.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"burglarycirculationintense.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"burglarycirculationintense.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=cde5d6f0-8a2b-439a-aea8-cb1ddf528f6a\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=5f0dc5dc10ce2e73eb7c533865572faf\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=23","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:42.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 22:13:33 GMT","end":"Sat, 28 Mar 2026 22:13:32 GMT"},"fingerprint":{"sha1":"A3:08:82:4A:9A:ED:6E:4C:29:FC:10:0D:1D:8F:8B:68:0E:D0:49:72","sha256":"B4:01:36:5D:F9:70:75:BF:F6:56:67:76:BB:CC:A2:D3:BA:69:61:33:56:FC:C7:21:69:6E:04:BE:95:D7:B2:F5"}}},"request":{"raw":"GET /pxf.gif?uuid=cde5d6f0-8a2b-439a-aea8-cb1ddf528f6a\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=5f0dc5dc10ce2e73eb7c533865572faf\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=23 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0eb38e908fa9ee4601d74d906796a71d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":278,"dns":1,"connect":91,"send":0,"wait":99,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/cache/minify/818c0.js","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/cache/minify/818c0.js HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: PHP/8.4.15, PleskLin\r\npragma: public\r\nexpires: Thu, 10 Dec 2026 21:37:30 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 09 Sep 2025 05:03:27 GMT\r\netag: \"pub1757394207;gz\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-status: MISS\r\npriority: u=2,i=?0\r\nage: 3637329\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWgm9djbSSKIVztMU6kqdsX7dxiVpwD1QLWUUnyxieSBHGZGB3HcRZJabo9wHoPJH1FCaET7pBqfSbMFILejTUUfrJMCfcs2%2BRAgSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4454c73b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":101132,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"f87b0555dd4b879bc78b109789de5601","sha1":"52b33d2897658dc25df79edf33fddb7e750aed76","sha256":"fbb5f2ccde427720073f4757673dfc6912f94de36841444083b4da740fef9576","sha512":"3321ab5e20fe9a200328e5e85de90deabe08c0a10be3f398b68756194a2fac0fa85778e7ae3176651e37d2b6f91ea8fabf7e046939e5b7279a0aa08ce5c04432","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKorP7Q0:sHNwcv9VBQpLl88SMBQ47GKorPU+Z","tlshash":"79a308df769ab4224bb730b9507f510bb276099d680d4400f199d8eabc7c94a823bf7d","first_seen":"2023-11-23T10:06:34Z","last_seen":"2026-06-16T05:11:29.570117Z","times_seen":1452,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/02/thumb-1-3040.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/thumb-1-3040.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68512\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Sep 2025 13:17:25 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bed765-10ba0\"\r\nx-cache-status: BYPASS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fq%2B6jVZJenx1ZjZgkL%2B5uXm4Gw9TgyJvkE8%2FM7qpZbI0hbVX8sOiot2Zy9GN51XtHWRT3uWuuX5VqPZFk8l%2FIeVWUNRWfefm65EIpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4457cafb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":68512,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"4f727136147326ecc3462ff28219dec9","sha1":"6800ce8cf397c6fc372b718a4942f0092ddb1ed9","sha256":"b367bc547458156de8b39682945dacd6901516407a3f82d24f31f888b71d10d8","sha512":"cfa05cb5bb98a47abe4fba1ecc6ed54b2a5711a3339b031832331d69f4e9e8f1f20029d14d699784558698af9be732441ba66d59738085ec422742e240ca1ae1","ssdeep":"1536:2e9TnFAyR8NQbuIlE6kAmD/vI6uw7SFJ8FrcAk3ZRgsUa/rN0A:RVx8NQbZlBkAmDXXh+FJ8xMybWrCA","tlshash":"10630236afb4749743e7a0261d6e87de10d2de481c0e69febc6021c47620d35e966cbc","first_seen":"2026-01-22T00:00:18.05161Z","last_seen":"2026-01-22T00:00:18.05161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenudebays.co/wp-content/uploads/2024/06/thumb-1-51.jpg","fqdn":"thenudebays.co","domain":"thenudebays.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenudebays.co","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Wed, 10 Dec 2025 23:59:46 GMT","end":"Wed, 11 Mar 2026 00:07:32 GMT"},"fingerprint":{"sha1":"B9:5D:FD:50:09:B9:5F:52:C0:98:DD:13:AF:A3:95:45:3C:4B:D4:31","sha256":"EC:AD:FA:C4:AF:59:94:3A:0E:DD:16:DE:1E:D1:9A:FC:DE:EF:A0:95:91:57:88:2E:17:B7:37:35:3C:AD:13:59"}}},"request":{"raw":"GET /wp-content/uploads/2024/06/thumb-1-51.jpg HTTP/1.1\r\nHost: thenudebays.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thenudebays.co/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 59542\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 02:26:54 GMT\r\ncache-control: public, max-age=16070400\r\netag: \"68bf906e-e896\"\r\nx-cache-status: MISS\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDSJ%2Fe%2FdorVvHEffadHRGhXB3R6qtrkGmQAFmVkhQk5OSUm2zAzeFa0zdJzJImlfhD13Bm5qAhMN0uoLaCkfmKOHD%2FmeCsiNm0ffzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ac4459ccfb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":59542,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x720, components 3","md5":"3341de4b3681a7212b8a1a4897b18568","sha1":"4b20a3cfb03379a03c38e0c439679d60232adc98","sha256":"78e7847fabcc448f3b17bb6d6065ce2cecbfeabbcc0bb38214bdf162a6977ca1","sha512":"b60831597a7409a0f9485c9cf434ba8c7dbf9b35066fc15e5db1cfa21f25923301358509b1845fefb09f534e3f982c2e2a7f66e418d89b9c0eb587ff4bcc9eef","ssdeep":"1536:G2FIBtc4msDYXZksMhgxRa9CLfVrB8ZOZZxC:ITWsDYXZhx09KfVrB0OZ+","tlshash":"d04302df8e1a224425c2664084ff86254ca076d840f627726d1c965ce3fadf98bdbd8f","first_seen":"2026-01-22T00:00:18.052424Z","last_seen":"2026-01-22T00:00:18.052424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:40.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 23:59:40 GMT\r\ncontent-type: application/javascript\r\netag: W/\"c84328440be6860b0add1fc5a60\"\r\nexpires: Tue, 20 Jan 2026 17:35:30 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3nwUAAAwBuUwKDAH3EQAAAAwBw7WvAgG3vwAAAA\r\nx-77-nzt-ray: 2a494a15d49921cd916871693ca01729\r\nx-77-cache: HIT\r\nx-77-age: 1439\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":186197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39568)","md5":"d3a9b34b25eb1e982e02044163016d18","sha1":"c84328440be6860b0add1fc5a60eeb31e4c2042e","sha256":"eaafa1521582512f92012aee5d12df250c20a47e41537e37c2b315ac5145dede","sha512":"5dcb564db3a7b8d488d620b2a7110b0f66d6f5735c067986e3d846af6fdd142a7e1adb2a4cea9237d128cf72d712573105cdf2332ed4c002cbc734239751dddd","ssdeep":"3072:BHDTqZ+28VOk2DG2cUMaElwnRehI1fsBHiswLslYznqCXMtpo:lm+28VOk262lElwnRrfs4sM2po","tlshash":"b4045d983792307441d3a12daaff53093371506ab80f4884bb4dd99427adeea51a3ffd","first_seen":"2026-01-15T17:26:41.960717Z","last_seen":"2026-01-28T08:44:30.844243Z","times_seen":580,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/a700b844aabf582247772e22615cd88098d65897.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:41.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/a700b844aabf582247772e22615cd88098d65897.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 21 Jan 2026 23:59:41 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 16872\r\nlast-modified: Tue, 21 Oct 2025 18:19:17 GMT\r\netag: \"68f7cea5-41e8\"\r\nexpires: Wed, 21 Oct 2026 20:43:54 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3DHd5AAwBuUwKCQH31wAAAAgBw7WvBgGB\r\nx-77-nzt-ray: 2a494a152eafdfd392687169da318337\r\nx-77-cache: HIT\r\nx-77-age: 7960332\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-16871/16872\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16872,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"3a30ef41039217abc73dba6322d4c60e","sha1":"a700b844aabf582247772e22615cd88098d65897","sha256":"6c5efb64c8488c8a92528eadf6f4da232e17eed12a92e2c5288048f584bcbe9b","sha512":"9f41e2c7be3cf5e9490cafbf5c8014e2d849708de05d1de07aa44d795679368b3e57feb73b056547adead14373f205188ab2e2faa804324dd33854a2fab26db8","ssdeep":"384:yM5uSnXST6j7oh6hBd16oYZvWsDpGhcaIuSt0s4T0i7:3BAuSqd1ByesD4cVuSCsk","tlshash":"af72e157834c90a2c9599671367833bfd31b738ba2f61797430cc075ac274b58b8342d","first_seen":"2025-10-22T07:49:28.529399Z","last_seen":"2026-06-16T15:46:14.000433Z","times_seen":686,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fjs%2Fscript.js\u0026l=404\u0026fd=530","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thenudebays.co/","date":"2026-01-21T23:59:43.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 21:42:11 GMT","end":"Wed, 25 Mar 2026 21:42:10 GMT"},"fingerprint":{"sha1":"DD:BF:7F:13:B7:AA:5E:41:65:09:9E:F1:FE:42:C4:9A:00:0B:F4:E6","sha256":"FE:3B:B4:EE:8B:60:30:E2:9F:CB:E9:E2:06:C0:A4:2E:FF:35:D3:22:85:14:1C:B8:13:CD:72:FB:EA:5C:E9:98"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fjs%2Fscript.js\u0026l=404\u0026fd=530 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thenudebays.co/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl25819494=1; slec2d86e1ab7c7d36a9ea9ae4145563cf4f=[6259582]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Wed, 21 Jan 2026 23:59:43 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-21","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}