{"report_id":"dcf4f38a-7ee4-4bef-a448-2ac5df31c0f3","version":6,"status":"done","tags":[],"date":"2026-01-06T17:34:00Z","url":{"schema":"http","addr":"zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"104.21.25.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.zupimages.net/up/25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"title":"t4ak.jpg (JPEG Image, 3888 × 5184 pixels)","dom":{"size":477,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (476), with no line terminators","md5":"ea43fa0c5434a0030c8390fb11a17d17","sha1":"951d0860f6126ca1c7b77cd07c05fa5268281da1","sha256":"f8de93f712351200637fb61195c39a2a1f9493f15584f2858d5079490e6548d9","sha512":"8f44ff3a51df7ed106d187ef18200d771f466b2432351885d471070758943736e2ea970aed8bfaccf97a503e615fb2f9b3d5ad4f05ea549d1999bf5413c141b6","ssdeep":"","tlshash":"cff05cbf4503b417f22071c2ba4a33c979c16008da786a44b34c02f850e476dd5d5e59","dom_hash":"domhash3b196952ed6768234b7eb261590428d7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"104.21.25.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-10T17:34:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-06T17:33:37Z","timestamp":1767720817,"ip_dst":{"addr":"52.143.137.150","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"France","country_code":"FR"},"ip_src":{"addr":"Client IP","port":33270,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Abused Hosting Domain (azurewebsites .net) in TLS SNI","source":"{\"timestamp\":\"2026-01-06T17:33:37.405162+0000\",\"flow_id\":1072304208563567,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.31\",\"src_port\":33270,\"dest_ip\":\"52.143.137.150\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2063118,\"rev\":1,\"signature\":\"ET INFO Abused Hosting Domain (azurewebsites .net) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2025_06_20\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1102\"],\"mitre_technique_name\":[\"Web_Service\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2025_06_20\"]}},\"tls\":{\"sni\":\"cdnfiles.azurewebsites.net\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":789,\"bytes_toclient\":6769,\"start\":\"2026-01-06T17:33:37.347503+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"zupimages.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"zupimages.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnfiles.azurewebsites.net","ip":{"addr":"52.143.137.150","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"France","country_code":"FR"},"domain_registered":"2012-01-24","domain_rank":0,"first_seen":"2019-09-09T13:26:56Z","last_seen":"2025-11-30T12:42:20.573673Z","alert_count":0,"request_count":1,"received_data":575,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"ads.themoneytizer.com","ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-10-29","domain_rank":428608,"first_seen":"2014-05-26T13:46:02Z","last_seen":"2026-01-01T11:57:21.537411Z","alert_count":0,"request_count":9,"received_data":858234,"sent_data":4146,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"track.kueezrtb.com","ip":{"addr":"104.20.32.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-29","domain_rank":44583,"first_seen":"2022-11-23T10:02:56Z","last_seen":"2026-01-04T02:43:12.825033Z","alert_count":0,"request_count":2,"received_data":412,"sent_data":1326,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"otrack.kueezrtb.com","ip":{"addr":"104.20.32.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-29","domain_rank":52388,"first_seen":"2024-07-25T11:01:24Z","last_seen":"2025-12-30T13:01:21.831988Z","alert_count":0,"request_count":1,"received_data":158,"sent_data":735,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.pbstck.com","ip":{"addr":"104.20.24.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-28","domain_rank":92379,"first_seen":"2020-02-18T11:39:24Z","last_seen":"2026-01-04T15:48:47.917215Z","alert_count":0,"request_count":2,"received_data":136573,"sent_data":916,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.first-id.fr","ip":{"addr":"95.100.107.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"2022-04-28","domain_rank":338589,"first_seen":"2023-07-31T21:07:28Z","last_seen":"2026-01-01T11:57:21.861451Z","alert_count":0,"request_count":2,"received_data":47434,"sent_data":902,"comment":"","tags":null,"fingerprints":null},{"fqdn":"p.cpx.to","ip":{"addr":"34.252.143.228","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"unknown","domain_rank":89668,"first_seen":"2015-01-23T01:00:57Z","last_seen":"2026-01-01T11:57:22.555462Z","alert_count":0,"request_count":1,"received_data":9079,"sent_data":412,"comment":"","tags":null,"fingerprints":null},{"fqdn":"boot.pbstck.com","ip":{"addr":"104.20.24.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-28","domain_rank":77171,"first_seen":"2020-02-20T07:06:07Z","last_seen":"2025-12-31T12:34:22.118514Z","alert_count":0,"request_count":1,"received_data":1827,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api-v4.prod.first-id.fr","ip":{"addr":"23.36.77.72","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2022-04-28","domain_rank":372490,"first_seen":"2024-10-09T13:21:38Z","last_seen":"2026-01-01T11:57:21.691934Z","alert_count":0,"request_count":3,"received_data":2067,"sent_data":1711,"comment":"","tags":null,"fingerprints":null},{"fqdn":"intake.pbstck.com","ip":{"addr":"104.20.24.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-28","domain_rank":72822,"first_seen":"2020-02-18T14:29:30Z","last_seen":"2026-01-02T00:25:42.515924Z","alert_count":0,"request_count":2,"received_data":490,"sent_data":1107,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api-v6.prod.first-id.fr","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-04-28","domain_rank":356239,"first_seen":"2024-05-23T10:31:10Z","last_seen":"2026-01-01T11:57:21.158714Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1158,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api-pv.prod.first-id.fr","ip":{"addr":"23.36.77.138","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2022-04-28","domain_rank":390381,"first_seen":"2024-11-15T09:12:32Z","last_seen":"2026-01-01T08:54:56.117966Z","alert_count":0,"request_count":1,"received_data":466,"sent_data":709,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gtrack.kueezrtb.com","ip":{"addr":"104.20.32.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-29","domain_rank":44745,"first_seen":"2023-07-03T10:25:47Z","last_seen":"2026-01-01T11:39:59.492151Z","alert_count":0,"request_count":2,"received_data":412,"sent_data":1328,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.kueezrtb.com","ip":{"addr":"104.20.32.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-29","domain_rank":54734,"first_seen":"2023-03-30T12:12:59Z","last_seen":"2026-01-05T01:18:04.634113Z","alert_count":0,"request_count":2,"received_data":79747,"sent_data":893,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tag.leadplace.fr","ip":{"addr":"217.182.141.163","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2010-08-20","domain_rank":1502045,"first_seen":"2015-07-08T08:10:21Z","last_seen":"2026-01-03T03:49:53.852663Z","alert_count":0,"request_count":1,"received_data":8864,"sent_data":417,"comment":"","tags":null,"fingerprints":null},{"fqdn":"metrics.biddertmz.com","ip":{"addr":"34.248.22.168","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2023-04-17","domain_rank":454632,"first_seen":"2024-04-19T09:51:20Z","last_seen":"2026-01-02T15:36:22.93861Z","alert_count":0,"request_count":1,"received_data":281,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.12.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"onetag-sys.com","ip":{"addr":"51.89.9.253","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2015-04-05","domain_rank":1047,"first_seen":"2015-04-08T11:30:19Z","last_seen":"2026-01-06T14:03:12.040698Z","alert_count":0,"request_count":1,"received_data":202,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zupimages.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-03-28","domain_rank":32352,"first_seen":"2012-08-24T16:06:23Z","last_seen":"2026-01-05T16:27:53.635452Z","alert_count":2,"request_count":1,"received_data":12861,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"adtrack.adleadevent.com","ip":{"addr":"52.16.49.73","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2010-09-20","domain_rank":419471,"first_seen":"2015-02-02T15:16:49Z","last_seen":"2026-01-03T03:49:53.878338Z","alert_count":0,"request_count":1,"received_data":796,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}]},{"fqdn":"tmzr.themoneytizer.fr","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-10-29","domain_rank":523162,"first_seen":"2024-03-31T13:15:23Z","last_seen":"2026-01-01T11:57:21.754985Z","alert_count":0,"request_count":1,"received_data":573397,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.zupimages.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-03-28","domain_rank":476411,"first_seen":"2012-10-19T21:50:23Z","last_seen":"2026-01-05T16:27:53.515574Z","alert_count":14,"request_count":7,"received_data":5260865,"sent_data":3887,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"The Monetyzer","description":"The Monetyzer is a global advertising platform for publishers.","website":"https://www.themoneytizer.com","common_platform_enumeration":"","icon":"TheMonetyzer.svg","categories":["Advertising"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"boot.pbstck.com/v1/tag/8a9c55c8-cbac-4534-8bce-b8c10c0999ed","fqdn":"boot.pbstck.com","domain":"pbstck.com","tld":"com"},"ip":{"addr":"104.20.24.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5eed18839b15acbe2072d0d448189ab","sha1":"deaf8e04a6263aeb48470a98bb6673f86cf837b5","sha256":"85a4ba2db30412e47c974a0eb263ad6dbd3b9b6582a1b20a8383ab7250ebfa2f","sha512":"e2fc10833c2aff35e018323015de7c90083d9fa16f5a0d9eda767d485fee3d505b8663adbfe29c95c873c783906e10f82873bff01098269ee0facc4bab157c6c","ssdeep":"","tlshash":"0721141e7a442132ce09e898787fc7398cad7539a9828480909d94cc5eafddc0555db7","size":1381,"data":"","first_seen":"2026-01-06T17:34:07.103173Z","last_seen":"2026-01-06T17:34:07.103173Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.cpx.to/p/12773/px.js","fqdn":"p.cpx.to","domain":"cpx.to","tld":"to"},"ip":{"addr":"34.252.143.228","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"72bdd392b49108219a810cec5b70dc1e","sha1":"a2f5d6b6965ef9c2f3a87f26cd34c0f3e914d6e8","sha256":"e6fb821ec7d3461f263f6b1785e538254e97169a37fdc9fbd1c553315ed22088","sha512":"2c48d195635690e2e7e58e4c4ae8714e506fe17a5a41646aeb86b10237e827acf56bd86501aba2bd6d99b78b1e28f70099d6e93195ca059b8bbad4ecc3a1261e","ssdeep":"192:Qy3zucUc8T827pZTbOemItT4b+BSs4ypoe/:l3zucUc8T8GxbOemIh4b+BSs4yF","tlshash":"0902f89eb384f9315be991baa6af7305f2bc4506585d4911d013ae403920bc7e2a3fdb","size":8843,"data":"","first_seen":"2025-12-16T23:41:41.53651Z","last_seen":"2026-05-12T17:26:41.61996Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d2827ed54aae398cf4f87df34001f68","sha1":"bd95ad0f2386766e4c5c78ad42fc572bfe1ba200","sha256":"a1e0c948cf87ae87cbe083868e1831cc03e041671ed7c80de3b618da087585f5","sha512":"249949c81680619d72ac35139d72d44b6af4df03a4d397f1d6efe6348ef82badc4df7d8cb8cb723b62018bdd6f2bb92ed4ef7ffd583f294b3cbf02a04f12f072","ssdeep":"","tlshash":"dae07d0d7b8c70190fb9207b192646ec30aca5781a008c097d4ac4682524be505e8698","size":339,"data":"","first_seen":"2023-03-12T17:33:44Z","last_seen":"2026-04-09T19:22:29.397141Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/gen.js?type=6","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e0579662fcf9cfda826db5676f515a9","sha1":"b0f749d8ef2e0e2a1ffb12ffb6491b990f8f41db","sha256":"3dd4f53067dd0f0bd875bcf7acebfb72e908b5329da8f19ab48fbbe4aa10daa5","sha512":"862c2ea4e78e6956c77b646c3823816e86180150262f2ad7b163bc40522ed1ca81415745748c0d0a4ac7869c567019d58a1583d5eae4f50bcc6382b3e1bd4d07","ssdeep":"96:pi9YlpiA/ncovvSPN4sNFf/Tc5lazXrQFZBQqg+BY8wPMW9SGZwPMpqi1u9JXj:cY2A/nckvSBf/webrQFZPgCY8wH9/Zw7","tlshash":"2791a4072691393b25d2f131dc9f1544713b9363058688695a4c8dc97fac0ba11fdefc","size":4566,"data":"","first_seen":"2024-06-12T00:51:37Z","last_seen":"2026-05-14T02:05:04.468933Z","times_seen":2328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://c1f31f5b-96a5-47f9-af4d-3110714ec6db/lib/shim_messaging_helper.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"865f01cbb34eb505834e826380d7dc2e","sha1":"c239ccc37191f1be78dfaa6bb3f1da5d314fdf9e","sha256":"30ed6392b8de4590bd974a4a797ee0b12b382f2141738115bfd2d692cfa6ec17","sha512":"9e37cd2e9fb9e4e926e2d1e1232c4c4ba3531d89b1d165293708849e0f88df6a40711d87c2b267ced9b6c4a27ac13079b5cb907334e2e297b588318df629b9ee","ssdeep":"","tlshash":"9e31ba1959fa0d1c0063b4a977673403722a90271149fe92bedcc3536f9652bc6f2bc8","size":1684,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-05-20T04:40:46.071108Z","times_seen":175598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/formatrequest_refactor/formatrequest_refactor_desktop.js?siteId=14857\u0026formatId=1\u0026dType=1","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81a051e304fc8e4d6f046f60231194d","sha1":"4ed175ee8063c6d4c1d5f6891824d6e7806003de","sha256":"a823f78416f110853cbb5f65aa407e971599a55d19d3f2a32e99d886385a34c5","sha512":"9c92058fa67e96d0aede85bc7dbe41565b6bd26ec9653c7640d75d3cb49b6b2483d56e77651a488a1bde9df7f7f3a78267e3790d1ec1b678e57744f27265edf3","ssdeep":"6144:mnIxhMArFIA7Qcy2q7gAY1Y/zUR/zUS912BIQfCtN:1rFIArq7gAYr","tlshash":"df54d82dc4b31c116077a5a92bbfa304352651276e848d123fddc2c46fdd82f66e6be8","size":279735,"data":"","first_seen":"2026-01-06T17:34:07.101508Z","last_seen":"2026-01-06T17:34:07.101508Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-20T04:33:39.745087Z","times_seen":108270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/requestform.js?siteId=14857\u0026formatId=6","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6701976458309a95b33f3d9ff34f880b","sha1":"9d5b0038cb02e9b30b5be4335e61ccbc7b6801d7","sha256":"da9072ba9ae9935744f9a6a6e92737fd1087fe3a76ed3c7832b13f67bcb3871b","sha512":"0f5f68149eb1745302ab00f8ab67a6cdbf006f575514202df1f7f2e169ef5630b0451f445e8387b7adfdc00382f1db5289f5d4f1987400f75f313eaba6e15f11","ssdeep":"","tlshash":"f3016d5eac73c014c4133c8b9bffd109a912b6177599cd6ab5cc8dc85f10a644d22b8c","size":775,"data":"","first_seen":"2025-11-03T12:11:26.584105Z","last_seen":"2026-04-17T10:19:27.373796Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/formatrequest_refactor/formatrequest_refactor_desktop.js?siteId=14857\u0026formatId=6\u0026dType=1","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"078fb9a765ec20ae04cd0e91d3a45767","sha1":"2c9d382a08cf913c7d964cdf07afd2e4054b75f1","sha256":"be6fbfff33d7d15719525e05f08543fddc190af59b256eb62ccf2593c32ce7b9","sha512":"708e76d3506dd291335ec435c566db2a5cfe2e77621935c296d6c32d823c7b23bb13c5002a8847787da25e1af1bf67f2211e8b09bd0b760abba1c085e84120f5","ssdeep":"6144:mnIxhMArFIA7Qcy2qEgAY1Y/zUR/zUS912BIQfxZQ:1rFIArqEgAY3","tlshash":"ad54d82dc4b31c116077a5a92bbfa304352651276e848d123fddc2c46fdd82f66e6be8","size":279324,"data":"","first_seen":"2026-01-06T17:34:07.107071Z","last_seen":"2026-01-06T17:34:07.107071Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/fr_FR/sdk.js#xfbml=1\u0026version=v2.5","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b938e0b835c600209bdaae9d8ccda6d7","sha1":"d5ee79d277057e05f002a18381722b5eb75d3883","sha256":"d1b95aeb57c3285042e1e24c00cc56a8560d16daf7ee5cdfd5c75296b21ac91b","sha512":"f519d10ba250add8cdb46a82b3cddc68e01735c6c80b24d4af37aa0ca108340b59a21bd2cc19bcd4753f66ff5a5dc17f6e3500e91be6436fdd90c954a6ed3800","ssdeep":"384:Ps5FfMCDA9SQM/Psw1A9uW1HVMJDXMlS3RpU9JCo4wiLF:kU9SVjoHqXMA3CJCodiLF","tlshash":"1672b51e46f31232456370766b4b72047235d0473a0afe993f9c87542f8aa6e86f27ec","size":16896,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-05-20T04:40:46.063418Z","times_seen":170190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"097cbcb43505e6c9b2d89244a528cf60","sha1":"32a45eb8663c6d1912d7c108aba946f0a5983dde","sha256":"cdd74f9bb92c956df0bdd622d2002c4b084464eccf9521ba4960df75de6c096e","sha512":"27c4b26069bdbc61c7fe4354bf6a3feafdde1b6cecda9c1b801e2e098af5d19c73ecca8045557ad5ab115df1cde8767446b0ef58e31fbe03dcb287c95117162c","ssdeep":"1536:uyy2l3yDEW9AWNB0j21DBuVHuZIblq22Jv:M25oV9AWT79aOCblH2Z","tlshash":"41932baf73d1f53e839650c5c4730118bb362658708590e4fdaecdab2d64a9e5223f3a","size":93593,"data":"","first_seen":"2026-01-06T17:34:07.11513Z","last_seen":"2026-01-06T17:34:07.11513Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmzr.themoneytizer.fr/v10.19.0u2.0.46/73060431b826fdcf1d331d926549ed91/prebid.js","fqdn":"tmzr.themoneytizer.fr","domain":"themoneytizer.fr","tld":"fr"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0670412f9f3eaa2ad1f08ef2f93b443f","sha1":"410545aaea61adf60d648602fafc75370705f2c3","sha256":"3245981890dc3bc27898843b39aa474cbdfc6861701f7ce4c593b0550f4f9065","sha512":"2e8e2ed6f9f5cd57737cfe4e948eafd80da08898afa1388824f87fbb6d61fce183b066000b91be16354d619037dde31084d609472ab14efafa3befb91d8128ae","ssdeep":"6144:uTs+NEG0gNbmiNUkcQfpIZxRzoByEhAQARYpYZvyYha6mAXTmn7mZy8:uNNbHNiin9pI7doByEhLAV72ATSmZy8","tlshash":"04c42a9a7682f0ba53f718e4c07b4215f2396a05340ed450f62a9dd63824eafa163f7d","size":572529,"data":"","first_seen":"2026-01-06T17:34:07.094419Z","last_seen":"2026-01-06T17:34:07.094419Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28632249138805c1ed9f8866531772c6","sha1":"3e04e03d5aedddaa1ce7fca288553a621c3c1ec0","sha256":"bb570ad5ac6ccdae6077422faa2973bff0634b609bfb4fa5541338181a15fb9d","sha512":"9968514b920f363b0b88ece5d83aa7424ef102c7c9d8940e45b2afc09c64b0db4888cd6f0c9968b48c4af44f3792d33f1f437b84593de03c32a0e479252ecfa0","ssdeep":"","tlshash":"74f09e8e357878d55563f2e3f2a34b28a466ae4ce650b972cf7c815c346155104ae2ec","size":515,"data":"","first_seen":"2023-03-07T14:38:24Z","last_seen":"2026-04-17T10:19:27.474824Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"54ff17fb8ce7c4b521cc143d1b912b5a","sha1":"f7e00fb694d7624c4b3104b4aa390a7fe8343dd4","sha256":"6995b3932de4fc03b253e00355f4e642bfaf553bb4619ec8bb1ebb833ae03064","sha512":"223139d2403b166574b40e1e09692fb5659fa815855e2a3e26460a909dd5c9c6d3d0d7e5932b4b4a5456133d361ab7c01b4e98d81b429eb210fa08a1cc30ff5f","ssdeep":"","tlshash":"17a0228a3a8c30b80388a2080c32a32223008008880000c8c0000000380808ee0a3e23","size":63,"data":"","first_seen":"2023-05-06T10:55:55Z","last_seen":"2026-05-19T14:14:31.721896Z","times_seen":799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"54ff17fb8ce7c4b521cc143d1b912b5a","sha1":"f7e00fb694d7624c4b3104b4aa390a7fe8343dd4","sha256":"6995b3932de4fc03b253e00355f4e642bfaf553bb4619ec8bb1ebb833ae03064","sha512":"223139d2403b166574b40e1e09692fb5659fa815855e2a3e26460a909dd5c9c6d3d0d7e5932b4b4a5456133d361ab7c01b4e98d81b429eb210fa08a1cc30ff5f","ssdeep":"","tlshash":"17a0228a3a8c30b80388a2080c32a32223008008880000c8c0000000380808ee0a3e23","size":63,"data":"","first_seen":"2023-05-06T10:55:55Z","last_seen":"2026-05-19T14:14:31.721896Z","times_seen":799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/requestform.js?siteId=14857\u0026formatId=28","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be1c4032eeaa9b0e0e4434c855901b17","sha1":"7ccda5a1da4a8c35020c0677eab42f3557c0e1bd","sha256":"c41e144e731d6b34c1c2eb429d8d799e924202a88336975ebdd934e3e9dba430","sha512":"6cd007753dfd60c57e8af15ceb1abaa86d4031d88f08e13090f73fd7d86f452d30fde7152e0a5fc10f7a5273a56f19dc03db2820f9446e23de81bfe27db094c7","ssdeep":"","tlshash":"5c016d5eac73d02084133c8b9bffd109a912b6176595cc6ab5cc8cc85f10a644d22b8c","size":777,"data":"","first_seen":"2025-11-03T12:11:26.607674Z","last_seen":"2026-04-17T10:19:27.328575Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.first-id.fr/sdk/loader/loader-flex-no-tcf.min.js?id=T656dc5f8NdhGJ","fqdn":"cdn.first-id.fr","domain":"first-id.fr","tld":"fr"},"ip":{"addr":"95.100.107.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"84e003858919db2408e1c2006269d77d","sha1":"a4dc3ded53b06a69f179000558ac1e616f8fc1c8","sha256":"a19eadcb23cf71d642ddd0f67741e535d8dded1d5cdced72ee39dd8d2345a535","sha512":"e07a9af5dda1c41c87ecb58a72c5fe4ab746c4cf3098bb15b31dccf8510e60c16cb61d23a0ae18d1d214aa9be256643b560a49ba104bbf20dface7fb2002523d","ssdeep":"","tlshash":"db5163a21530e5fa0e74e0c2ba37f315f6942836705b74c55b8cca363948b57d52afd1","size":2988,"data":"","first_seen":"2026-01-06T17:34:07.109789Z","last_seen":"2026-01-20T20:51:15.107775Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.kueezrtb.com/js/latest_cls.js?_=1767720817712","fqdn":"static.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"104.20.32.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4736e27b3a26c79cddf914e9da9c415","sha1":"564c70d9be165912126632a07ec6f262de3b6770","sha256":"d59328a845672cbf76751ea2d5da909da3781d1395a04b82e530f988563ebda0","sha512":"055f94cc0e4b3f34c0457aa8e047fb35a68d3743561afb4bfa6e09f2b73b4c706b4cd11fc6dc0b0623d924af84c44d15a505e4fbe0379fc8994141e94b37bd6c","ssdeep":"1536:zZfkA0JbV4RDboJMEPlNk+pkc96fGbRQVBHGaA:JkvORDbREPAgKXGj","tlshash":"57731b8e194a74c29134f6eb6b126178df054d46fec4e0e4fecd3d0cf8a4a6649787a2","size":76838,"data":"","first_seen":"2025-12-18T15:36:14.284898Z","last_seen":"2026-01-25T10:23:35.419802Z","times_seen":252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"54ff17fb8ce7c4b521cc143d1b912b5a","sha1":"f7e00fb694d7624c4b3104b4aa390a7fe8343dd4","sha256":"6995b3932de4fc03b253e00355f4e642bfaf553bb4619ec8bb1ebb833ae03064","sha512":"223139d2403b166574b40e1e09692fb5659fa815855e2a3e26460a909dd5c9c6d3d0d7e5932b4b4a5456133d361ab7c01b4e98d81b429eb210fa08a1cc30ff5f","ssdeep":"","tlshash":"17a0228a3a8c30b80388a2080c32a32223008008880000c8c0000000380808ee0a3e23","size":63,"data":"","first_seen":"2023-05-06T10:55:55Z","last_seen":"2026-05-19T14:14:31.721896Z","times_seen":799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31efa871e70633e8b4be5b4b876c9eca","sha1":"5ebd257c28c229a71c4839903605c984cb03a056","sha256":"3aedc420b835cc2119d3c68d0d7b2aa7fc9f7adb7dabcaf63e7499c1c04dc37c","sha512":"6d49e3255f34d0486ee345b04697d79e1c14978a5e20c97159de00b04372903c5fa0ec111aaee29df732561510902616779ec74c7f5e71d2438398d60bfdbbbf","ssdeep":"","tlshash":"8ae026caff8c69159be9306319535a9c94bd907d68800c6a7c64a86858215d9412962c","size":351,"data":"","first_seen":"2023-03-12T17:33:44Z","last_seen":"2026-04-09T19:22:29.392073Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/requestform.js?siteId=14857\u0026formatId=1","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2faafa91b876a0865529f0ed06282273","sha1":"31588f28d81ace980c08190cda5cbdbda260f4e6","sha256":"b3ee3b90397fb40e9f04ae60e7da7406c6a744f1734f2d10b911cb81e169b755","sha512":"92ddf73c3c335d4a5a8e51327bb7729a31e4448d0d1b01148ffb86e62f761255da5df9ae13fa8d63c93c13ea962072bb10fa3d9770c979d0a9352b14b6ddf39f","ssdeep":"","tlshash":"2c016d5eac73c01084133c8b9bffd109a912b6176595cd6ab5cc8dc85f10a644d22b8c","size":775,"data":"","first_seen":"2025-11-03T12:11:26.599498Z","last_seen":"2026-04-17T10:19:27.25167Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/gen.js?type=1","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e0579662fcf9cfda826db5676f515a9","sha1":"b0f749d8ef2e0e2a1ffb12ffb6491b990f8f41db","sha256":"3dd4f53067dd0f0bd875bcf7acebfb72e908b5329da8f19ab48fbbe4aa10daa5","sha512":"862c2ea4e78e6956c77b646c3823816e86180150262f2ad7b163bc40522ed1ca81415745748c0d0a4ac7869c567019d58a1583d5eae4f50bcc6382b3e1bd4d07","ssdeep":"96:pi9YlpiA/ncovvSPN4sNFf/Tc5lazXrQFZBQqg+BY8wPMW9SGZwPMpqi1u9JXj:cY2A/nckvSBf/webrQFZPgCY8wH9/Zw7","tlshash":"2791a4072691393b25d2f131dc9f1544713b9363058688695a4c8dc97fac0ba11fdefc","size":4566,"data":"","first_seen":"2024-06-12T00:51:37Z","last_seen":"2026-05-14T02:05:04.468933Z","times_seen":2328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-20T04:38:23.381955Z","times_seen":890171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"54ff17fb8ce7c4b521cc143d1b912b5a","sha1":"f7e00fb694d7624c4b3104b4aa390a7fe8343dd4","sha256":"6995b3932de4fc03b253e00355f4e642bfaf553bb4619ec8bb1ebb833ae03064","sha512":"223139d2403b166574b40e1e09692fb5659fa815855e2a3e26460a909dd5c9c6d3d0d7e5932b4b4a5456133d361ab7c01b4e98d81b429eb210fa08a1cc30ff5f","ssdeep":"","tlshash":"17a0228a3a8c30b80388a2080c32a32223008008880000c8c0000000380808ee0a3e23","size":63,"data":"","first_seen":"2023-05-06T10:55:55Z","last_seen":"2026-05-19T14:14:31.721896Z","times_seen":799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/formatrequest_refactor/formatrequest_refactor_desktop.js?siteId=14857\u0026formatId=28\u0026dType=1","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d19ab4fa4f790e91f0dc3515677dee2","sha1":"abb154255679adb8f1bc100ba6389af371f60c07","sha256":"65fd64eebcdd6cad335d7c65142de64fce3f1917ec05d196d5929ac5c39283a7","sha512":"51ca259cfbf34aa21cc68e59a2354ac2a984ed28afedc2e76c4246fbb655cbde67338ff48c3adac91bb759701d69962293a6b37183fca57aa54e2a58698b3cf9","ssdeep":"6144:mnIxhMArFIA7Qcy2q6gAY1Y/zUR/zUS912BIQflLe:1rFIArq6gAYb","tlshash":"1454d72dc4b31c116077a5a92bbfa304352651276e848d123fddc2c46fdd82f66e6be8","size":279739,"data":"","first_seen":"2026-01-06T17:34:07.102406Z","last_seen":"2026-01-06T17:34:07.102406Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f262998af2079f62d1d9a9807ebcfd80","sha1":"7a02e0e968cd37397990d750b5a34cac03658b04","sha256":"6da2186d83fbec89b54257047191332ecdaee7cac0ce105f4e9b5181b3cd7f98","sha512":"7ca2e1da18e00913aabc064b41bc65488d4af2d05e34721f178a56a8cab5d9b9ea968cce56274d0a93ca126002b5f3cafb6e366f58c166b24d34ef28d23fc330","ssdeep":"768:/z0cMztEPzS/gj9Iq2eLvTP3homur6aBg8GXj1yT1lbGpqFIK6a6U7n5NneRtbmZ:/KztErFzlb3MP2hs3h","tlshash":"de131afee2817b3807ece559e17424483f270c75f98180fcb9a8994269b46c611dfb7a","size":42246,"data":"","first_seen":"2026-01-06T17:34:07.121068Z","last_seen":"2026-01-06T17:34:07.121068Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/gen.js?type=28","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e0579662fcf9cfda826db5676f515a9","sha1":"b0f749d8ef2e0e2a1ffb12ffb6491b990f8f41db","sha256":"3dd4f53067dd0f0bd875bcf7acebfb72e908b5329da8f19ab48fbbe4aa10daa5","sha512":"862c2ea4e78e6956c77b646c3823816e86180150262f2ad7b163bc40522ed1ca81415745748c0d0a4ac7869c567019d58a1583d5eae4f50bcc6382b3e1bd4d07","ssdeep":"96:pi9YlpiA/ncovvSPN4sNFf/Tc5lazXrQFZBQqg+BY8wPMW9SGZwPMpqi1u9JXj:cY2A/nckvSBf/webrQFZPgCY8wH9/Zw7","tlshash":"2791a4072691393b25d2f131dc9f1544713b9363058688695a4c8dc97fac0ba11fdefc","size":4566,"data":"","first_seen":"2024-06-12T00:51:37Z","last_seen":"2026-05-14T02:05:04.468933Z","times_seen":2328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tag.leadplace.fr/libJsLP.js","fqdn":"tag.leadplace.fr","domain":"leadplace.fr","tld":"fr"},"ip":{"addr":"217.182.141.163","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3c53ff5f9c5f6ec5d2b2aa29609fabc","sha1":"0de0f2354966fe8d60cbdb3d35a01a060379626c","sha256":"f2eb322022031a451feceb97b33f889cc6d33f134be248ade9748a95febd5c66","sha512":"4cce34482a6c881fe08cfef5e838803248124a51b780abee44f8a6cbd95800c4ca320117efb1910b0b7f72f6a4787982260a2275528cb23f3f75f810d8297da5","ssdeep":"192:L95G+rBhhVzau8Y7VjWzQLKJCskAGnpi/cdxpzN0SleUku:LTfmWyDGp+Q7N0Snh","tlshash":"f602934d68f711754dd232be8baf94017330812337a9ea643c8d96146f94a3d62f6bec","size":8464,"data":"","first_seen":"2025-12-22T09:43:20.576451Z","last_seen":"2026-01-06T17:34:07.104873Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.first-id.fr/sdk/script/flex-no-tcf-1.35.1.min.js","fqdn":"cdn.first-id.fr","domain":"first-id.fr","tld":"fr"},"ip":{"addr":"95.100.107.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0702d872f24405a39472577f3303d6e4","sha1":"bdd705a63ec65a62548b7eb5e8895901ce3c0e3d","sha256":"a4ec6336b1a2da3a91eb0e80d58217db632a3190a958c3a0c68ae036f5befa22","sha512":"aeeee712a4e77dba9bfe727510e0fd2191fef9b45e20e19674fa7faa4b2dee2f181282667244336eb3843743b2d04ec7cd007889bdcee78ec4089962736b7dd1","ssdeep":"768:YmdYFehDZ7lz5Yj+jqHkCbrOVQAAsZ1Lc1Lxk1L+itoUK/LIjZwnXnN4iA9SGTaH:jYFehDdYj+jWOVQI1Lc1Ly1LvtoUK/Hd","tlshash":"ad13970273b9483f0ec554aef836b261f3144eb5394e811d7e9c6aee370d902957ab72","size":43551,"data":"","first_seen":"2026-01-06T17:34:07.093446Z","last_seen":"2026-01-20T20:51:15.122788Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e329122feb6a0dbebd48d20f08f7e73","sha1":"1cb86babcaddec0d9693fef1da9e5131ca20a618","sha256":"11a0fd785071c049cc9b71d6e4012a56adfe4a5d395ebe40992fd34cfe21ba19","sha512":"c62916f517561e635e7d8cc4a4d78bb1a38224872691ff188ff40a85c7fc522ef8a018b0789c5e61d949fe7f90cf96dbe2e223419d362bc00a035be833728080","ssdeep":"","tlshash":"cc81ef0968f7a060962370394bbfb809363090732009de54bdccf740afe98665ab5fdc","size":3998,"data":"","first_seen":"2024-01-14T23:42:33Z","last_seen":"2026-05-20T02:10:45.066731Z","times_seen":336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/sandbox%20eval%20code","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-20T04:38:23.389904Z","times_seen":891841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.kueezrtb.com/latest.js","fqdn":"static.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"104.20.32.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfed549a7a818520144d1b1e2f334d9b","sha1":"a07dd4834d83d381536884ffdb4a7c1b05de1993","sha256":"4eb79c43f4d736b305fdce8077dd70044483b58b779c58c9be3a4ab9ba4079d2","sha512":"5426d779711f4cf8f8caaeca40303aac3319aa379ed380a94997906b7d3705bc05e6c2133544ac8bb59037884dc021e5e5031b8aca96b082c28373e8abd6cb4b","ssdeep":"","tlshash":"50213096b6db5d6e49a421ac983abf21f1bb85143f4d5050c44789006b44e534b3ffee","size":1440,"data":"","first_seen":"2025-05-11T13:48:19.766573Z","last_seen":"2026-05-19T03:55:59.200073Z","times_seen":3103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gtrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=ed9032ff5e4a9211\u0026sid=7029c5013fc2b350\u0026pvi=6119f67270a50a54\u0026h=www.zupimages.net\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=83\u0026uri=%2Fviewer.php\u0026furl=https%3A%2F%2Fwww.zupimages.net%2Fviewer.php%3Fid%3D25%2F45%2Ft4ak.jpg\u0026sr=1280x1024\u0026type=latest:preinit\u0026_=1767720817909","fqdn":"gtrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"104.20.32.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:38.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 10:52:18 GMT","end":"Tue, 24 Feb 2026 11:52:12 GMT"},"fingerprint":{"sha1":"B6:9D:80:75:30:91:31:61:89:22:9A:4B:50:C1:3D:50:C5:DD:79:C2","sha256":"82:81:8F:85:CD:7F:5A:CF:50:A9:9E:92:7A:47:D4:00:E4:A9:6A:8C:8F:0A:17:2E:F9:BB:56:15:6C:46:EC:CC"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=ed9032ff5e4a9211\u0026sid=7029c5013fc2b350\u0026pvi=6119f67270a50a54\u0026h=www.zupimages.net\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=83\u0026uri=%2Fviewer.php\u0026furl=https%3A%2F%2Fwww.zupimages.net%2Fviewer.php%3Fid%3D25%2F45%2Ft4ak.jpg\u0026sr=1280x1024\u0026type=latest:preinit\u0026_=1767720817909 HTTP/1.1\r\nHost: gtrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 06 Jan 2026 17:33:38 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b9cf6284a6a0b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.first-id.fr/sdk/script/flex-no-tcf-1.35.1.min.js","fqdn":"cdn.first-id.fr","domain":"first-id.fr","tld":"fr"},"ip":{"addr":"95.100.107.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:38.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.first-id.fr","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 02:41:54 GMT","end":"Sat, 07 Mar 2026 02:41:53 GMT"},"fingerprint":{"sha1":"A9:E1:C9:05:ED:8E:AD:D1:C5:2A:62:1A:8D:C9:DE:6E:0E:E8:31:97","sha256":"EC:11:29:8C:FC:3D:68:66:38:C0:20:7C:51:9E:EF:4C:A0:0C:AF:EC:DC:01:DE:76:42:0A:A8:2A:12:E7:10:C8"}}},"request":{"raw":"GET /sdk/script/flex-no-tcf-1.35.1.min.js HTTP/1.1\r\nHost: cdn.first-id.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 06 Jan 2026 10:42:42 GMT\r\ncontent-encoding: gzip\r\netag: W/\"0702d872f24405a39472577f3303d6e4\"\r\nvary: accept-encoding\r\ncontent-length: 10464\r\ncache-control: max-age=31511433\r\ndate: Tue, 06 Jan 2026 17:33:38 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1767720817878_1600416397_481014330_18_1105_-_-_-\";dur=1\r\nquic-version: 0x00000001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43551,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (43551), with no line terminators","md5":"0702d872f24405a39472577f3303d6e4","sha1":"bdd705a63ec65a62548b7eb5e8895901ce3c0e3d","sha256":"a4ec6336b1a2da3a91eb0e80d58217db632a3190a958c3a0c68ae036f5befa22","sha512":"aeeee712a4e77dba9bfe727510e0fd2191fef9b45e20e19674fa7faa4b2dee2f181282667244336eb3843743b2d04ec7cd007889bdcee78ec4089962736b7dd1","ssdeep":"768:YmdYFehDZ7lz5Yj+jqHkCbrOVQAAsZ1Lc1Lxk1L+itoUK/LIjZwnXnN4iA9SGTaH:jYFehDdYj+jWOVQI1Lc1Ly1LvtoUK/Hd","tlshash":"ad13970273b9483f0ec554aef836b261f3144eb5394e811d7e9c6aee370d902957ab72","first_seen":"2026-01-06T17:34:07.093446Z","last_seen":"2026-01-20T20:51:15.122788Z","times_seen":19,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmzr.themoneytizer.fr/v10.19.0u2.0.46/73060431b826fdcf1d331d926549ed91/prebid.js","fqdn":"tmzr.themoneytizer.fr","domain":"themoneytizer.fr","tld":"fr"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:38.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"themoneytizer.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 04:04:36 GMT","end":"Mon, 06 Apr 2026 05:03:25 GMT"},"fingerprint":{"sha1":"52:26:14:07:27:A5:DB:35:6A:ED:DD:21:B7:E8:59:4E:B2:5E:1A:97","sha256":"4A:11:C5:BF:75:C0:86:40:73:25:BE:09:18:BB:C7:8F:F5:F7:F3:21:62:28:37:FA:AF:5B:E3:26:C8:06:84:95"}}},"request":{"raw":"GET /v10.19.0u2.0.46/73060431b826fdcf1d331d926549ed91/prebid.js HTTP/1.1\r\nHost: tmzr.themoneytizer.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:38 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: o1SHah92IckkH63U7vFCwBgkQJyk0d79BkxrcRkx5pFDWndBW3CBzzX1m5W0cfv59QeYrY9VhZg=\r\nx-amz-request-id: V0S4PG66HGW5MHB4\r\nlast-modified: Thu, 18 Dec 2025 15:38:50 GMT\r\nvary: accept-encoding\r\nx-amz-server-side-encryption: AES256\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O80OSgsgFs1jzDY9btY6cLy1Y%2BwtJEPdnvwzZZt%2FFhSdBtpg%2BTvnVBE5REF5ddDJ6Pq5w8QOOeoPngtCVC5gp5lAxF2XrQA8uO7xD9Nev0mRo5qR5A%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1648488\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"0670412f9f3eaa2ad1f08ef2f93b443f\"\r\ncontent-encoding: br\r\ncf-ray: 9b9cf6298a2d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":572529,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (58230)","md5":"0670412f9f3eaa2ad1f08ef2f93b443f","sha1":"410545aaea61adf60d648602fafc75370705f2c3","sha256":"3245981890dc3bc27898843b39aa474cbdfc6861701f7ce4c593b0550f4f9065","sha512":"2e8e2ed6f9f5cd57737cfe4e948eafd80da08898afa1388824f87fbb6d61fce183b066000b91be16354d619037dde31084d609472ab14efafa3befb91d8128ae","ssdeep":"6144:uTs+NEG0gNbmiNUkcQfpIZxRzoByEhAQARYpYZvyYha6mAXTmn7mZy8:uNNbHNiin9pI7doByEhLAV72ATSmZy8","tlshash":"04c42a9a7682f0ba53f718e4c07b4215f2396a05340ed450f62a9dd63824eafa163f7d","first_seen":"2026-01-06T17:34:07.094419Z","last_seen":"2026-01-06T17:34:07.094419Z","times_seen":1,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":38,"dns":20,"connect":1,"send":0,"wait":8,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/up/25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-06T17:33:53.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zupimages.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 19:59:27 GMT","end":"Mon, 23 Feb 2026 20:56:41 GMT"},"fingerprint":{"sha1":"06:5A:33:A3:57:11:8C:71:C8:84:C1:99:34:45:74:68:2B:AC:98:20","sha256":"17:88:39:49:8E:5B:A9:21:8E:37:F2:DC:AC:04:0C:D1:C1:8B:1E:A9:29:D2:78:AD:CF:DC:4F:F2:09:C9:3D:81"}}},"request":{"raw":"GET /up/25/45/t4ak.jpg HTTP/1.1\r\nHost: www.zupimages.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg\r\nCookie: PHPSESSID=n4l489cuas1a26lrkdlr37aiio; firstid=c573cbe15015401f9e080146e16f995d; firstid_flex_type=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:53 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncontent-disposition: filename=\"t4ak.jpg\"\r\nstrict-transport-security: max-age=0\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Tue, 06 Jan 2026 17:19:06 GMT\r\npriority: u=1,i=?0\r\nage: 886\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gEFqOuXSiPOj9JrFPWFVx%2B62mnMmox0PtZ80bySM1Te5A4rUhnnls3MlJENPgfLKjnxXXUGIbNOpGXfXIM1O%2BhMpJxR7U8DQKkbqffQMoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9cf686dbb056a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2609378,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 3888x5184, components 3","md5":"ca9870c1295361597f2529765b50d318","sha1":"b061bd6635d40ae1af49095bbcb474e6ae93a47d","sha256":"93377f9e68e9c6b2202dda653c8a991590f7befa5fbd082109688c37eaf3bbeb","sha512":"6d85d94ecb2905b0552fb3dbcd14386499f56f64f2b0f403f257134733149b8389a5a2f748c3b7f120ec3db0d2fc1ff8e0fc5cefd6bc95c44af1e5206521ffe9","ssdeep":"24576:Jtc5fpxV4/wJ65MbXQQCS2vg15Mc01nD8eBLMOuSgchlSj+oywy4MB:PExV4/NMbXQjo15MBtD8eB8Sg6ly+y+","tlshash":"e12533870800524771cfff619ce22672b29bc8ef0b6bb515e28a145cbbdda5c3b76941","first_seen":"2026-01-06T17:34:07.095419Z","last_seen":"2026-01-06T17:34:07.095419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p.cpx.to/p/12773/px.js","fqdn":"p.cpx.to","domain":"cpx.to","tld":"to"},"ip":{"addr":"34.252.143.228","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"p.cpx.to","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 20 Nov 2025 00:00:00 GMT","end":"Sat, 19 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DA:84:FC:95:CD:F7:85:AC:1C:FB:65:96:D4:BA:6B:84:51:D9:D2:99","sha256":"55:3C:5C:34:09:95:11:FF:B5:B4:13:EB:BF:C5:4B:31:72:F9:BD:20:68:64:78:1B:85:35:2F:E7:99:81:19:54"}}},"request":{"raw":"GET /p/12773/px.js HTTP/1.1\r\nHost: p.cpx.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 3643\r\ncache-control: public, max-age=2419200\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8843,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8843), with no line terminators","md5":"72bdd392b49108219a810cec5b70dc1e","sha1":"a2f5d6b6965ef9c2f3a87f26cd34c0f3e914d6e8","sha256":"e6fb821ec7d3461f263f6b1785e538254e97169a37fdc9fbd1c553315ed22088","sha512":"2c48d195635690e2e7e58e4c4ae8714e506fe17a5a41646aeb86b10237e827acf56bd86501aba2bd6d99b78b1e28f70099d6e93195ca059b8bbad4ecc3a1261e","ssdeep":"192:Qy3zucUc8T827pZTbOemItT4b+BSs4ypoe/:l3zucUc8T8GxbOemIh4b+BSs4yF","tlshash":"0902f89eb384f9315be991baa6af7305f2bc4506585d4911d013ae403920bc7e2a3fdb","first_seen":"2025-12-16T23:41:41.53651Z","last_seen":"2026-05-12T17:26:41.61996Z","times_seen":27,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":177,"dns":27,"connect":33,"send":0,"wait":34,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-06T17:33:35.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zupimages.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 19:59:27 GMT","end":"Mon, 23 Feb 2026 20:56:41 GMT"},"fingerprint":{"sha1":"06:5A:33:A3:57:11:8C:71:C8:84:C1:99:34:45:74:68:2B:AC:98:20","sha256":"17:88:39:49:8E:5B:A9:21:8E:37:F2:DC:AC:04:0C:D1:C1:8B:1E:A9:29:D2:78:AD:CF:DC:4F:F2:09:C9:3D:81"}}},"request":{"raw":"GET /viewer.php?id=25/45/t4ak.jpg HTTP/1.1\r\nHost: www.zupimages.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=n4l489cuas1a26lrkdlr37aiio; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=0\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qfBHL0uXeemgfKgklKMGQecywEVayxLKNNDvLs%2FcLAXHM0AtvCDLzK8LuEyH%2FOq6efYmvqufiWui5sWKeqv7KQJ3KhqiG%2FElatT6n4VOVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b9cf618ea0256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"The Monetyzer","description":"The Monetyzer is a global advertising platform for publishers.","website":"https://www.themoneytizer.com","common_platform_enumeration":"","icon":"TheMonetyzer.svg","categories":["Advertising"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12289,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (352), with CRLF, LF line terminators","md5":"7ebd104cd3fe5327884980d53ab30254","sha1":"d34d220bf7f228a2e36f04eea25a74208b8b0a13","sha256":"ba288330a9f7bff0c3aea8311dab42904016d83f60826966693964bcafb893ef","sha512":"4ae758ed48dd2fc1fcfaa4b4ebada47176032dadd67583ea72d61d53ddcd3cd072200cabe20cf2457219208c3965b6d0c245540ed9531cda6a4980737989955e","ssdeep":"192:Olb3Ju+2G6Ip70sEmSqMv8Qo9/d6AvdO1H1Wtr63:2u1Gzp7EZwx9/d6AvdO1H1or63","tlshash":"8742a5453a4de015923222bba67bb948f62ed6338602c690f5ec6471fff88445762fd8","first_seen":"2026-01-06T17:34:07.097525Z","last_seen":"2026-01-06T17:34:07.097525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1467,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":1448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/up/25/45/t4ak.jpg","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zupimages.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 19:59:27 GMT","end":"Mon, 23 Feb 2026 20:56:41 GMT"},"fingerprint":{"sha1":"06:5A:33:A3:57:11:8C:71:C8:84:C1:99:34:45:74:68:2B:AC:98:20","sha256":"17:88:39:49:8E:5B:A9:21:8E:37:F2:DC:AC:04:0C:D1:C1:8B:1E:A9:29:D2:78:AD:CF:DC:4F:F2:09:C9:3D:81"}}},"request":{"raw":"GET /up/25/45/t4ak.jpg HTTP/1.1\r\nHost: www.zupimages.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg\r\nCookie: PHPSESSID=n4l489cuas1a26lrkdlr37aiio\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncontent-disposition: filename=\"t4ak.jpg\"\r\nstrict-transport-security: max-age=0\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Tue, 06 Jan 2026 17:19:06 GMT\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E0jkTStgP3KlCeNaev%2BtSIJETyljSm62fmDkhVEcRkgnWjK38ylDBX3Axia%2FtggFWNCs8ww%2FljxV43ZXPUP2LXsq2jXLFQy5oPD4eO0poA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9cf6236b9356a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2609378,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 3888x5184, components 3","md5":"ca9870c1295361597f2529765b50d318","sha1":"b061bd6635d40ae1af49095bbcb474e6ae93a47d","sha256":"93377f9e68e9c6b2202dda653c8a991590f7befa5fbd082109688c37eaf3bbeb","sha512":"6d85d94ecb2905b0552fb3dbcd14386499f56f64f2b0f403f257134733149b8389a5a2f748c3b7f120ec3db0d2fc1ff8e0fc5cefd6bc95c44af1e5206521ffe9","ssdeep":"24576:Jtc5fpxV4/wJ65MbXQQCS2vg15Mc01nD8eBLMOuSgchlSj+oywy4MB:PExV4/NMbXQjo15MBtD8eB8Sg6ly+y+","tlshash":"e12533870800524771cfff619ce22672b29bc8ef0b6bb515e28a145cbbdda5c3b76941","first_seen":"2026-01-06T17:34:07.095419Z","last_seen":"2026-01-06T17:34:07.095419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnfiles.azurewebsites.net/imagesplus_view","fqdn":"cdnfiles.azurewebsites.net","domain":"cdnfiles.azurewebsites.net","tld":"azurewebsites.net"},"ip":{"addr":"52.143.137.150","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.azurewebsites.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 25 Dec 2025 14:06:02 GMT","end":"Tue, 23 Jun 2026 14:06:02 GMT"},"fingerprint":{"sha1":"96:8B:A1:FB:E5:61:3E:5F:31:40:17:00:24:11:89:5B:72:7C:00:EB","sha256":"3D:3C:B1:27:0A:39:0B:4B:68:C5:FD:7C:B5:2F:07:40:D6:18:CA:02:B4:02:91:E2:30:B9:B7:8F:C2:A7:DD:9B"}}},"request":{"raw":"GET /imagesplus_view HTTP/1.1\r\nHost: cdnfiles.azurewebsites.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nDate: Tue, 06 Jan 2026 17:33:36 GMT\r\nServer: Microsoft-IIS/10.0\r\nCache-Control: no-store,no-cache\r\nContent-Encoding: gzip\r\nPragma: no-cache\r\nSet-Cookie: ARRAffinity=a3b21b17031c0ba0db188f49c6d441451b32f84c23781339eea4f5d72943711c;Path=/;HttpOnly;Secure;Domain=cdnfiles.azurewebsites.net\nARRAffinitySameSite=a3b21b17031c0ba0db188f49c6d441451b32f84c23781339eea4f5d72943711c;Path=/;HttpOnly;SameSite=None;Secure;Domain=cdnfiles.azurewebsites.net\r\nTransfer-Encoding: chunked\r\nVary: Accept-Encoding\r\nX-Powered-By: ASP.NET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":189,"dns":122,"connect":26,"send":0,"wait":28,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-v4.prod.first-id.fr/masterFirstId?firstid=c573cbe15015401f9e080146e16f995d\u0026t=1","fqdn":"api-v4.prod.first-id.fr","domain":"first-id.fr","tld":"fr"},"ip":{"addr":"23.36.77.72","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:38.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.first-id.fr","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 09:58:09 GMT","end":"Wed, 14 Jan 2026 09:58:08 GMT"},"fingerprint":{"sha1":"D1:58:82:A9:9E:86:B8:99:18:9E:AD:18:5E:92:72:9C:76:9E:78:7D","sha256":"8C:B1:18:60:40:1C:A0:CE:C7:33:1A:94:4B:84:5A:AA:32:EE:D7:3E:BA:68:89:EB:99:76:8E:E7:02:4C:85:5C"}}},"request":{"raw":"GET /masterFirstId?firstid=c573cbe15015401f9e080146e16f995d\u0026t=1 HTTP/1.1\r\nHost: api-v4.prod.first-id.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zupimages.net/\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: thirdid=c6ee5beb04944d498d7cf4331601fd0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\nx-amz-trace-id: Root=1-695d4772-376118695a85f9bd31a65869\r\ncache-control: public, private, max-age=86400\r\nexpires: Wed, 07 Jan 2026 17:33:38 GMT\r\ndate: Tue, 06 Jan 2026 17:33:38 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=33, origin; dur=129, ak_p; desc=\"1767720818418_388255062_1860692375_16213_1088_-_-_-\";dur=1\r\nquic-version: 0x00000001\r\naccess-control-allow-origin: https://www.zupimages.net\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/favicon.ico","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zupimages.net/up/25/45/t4ak.jpg","date":"2026-01-06T17:33:53.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zupimages.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 19:59:27 GMT","end":"Mon, 23 Feb 2026 20:56:41 GMT"},"fingerprint":{"sha1":"06:5A:33:A3:57:11:8C:71:C8:84:C1:99:34:45:74:68:2B:AC:98:20","sha256":"17:88:39:49:8E:5B:A9:21:8E:37:F2:DC:AC:04:0C:D1:C1:8B:1E:A9:29:D2:78:AD:CF:DC:4F:F2:09:C9:3D:81"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.zupimages.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/up/25/45/t4ak.jpg\r\nCookie: PHPSESSID=n4l489cuas1a26lrkdlr37aiio; firstid=c573cbe15015401f9e080146e16f995d; firstid_flex_type=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:53 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Nov 2013 15:20:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"52960dca-10be\"\r\nexpires: Thu, 05 Feb 2026 20:17:37 GMT\r\ncache-control: max-age=7776000\r\nstrict-transport-security: max-age=15768000\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\nage: 4199996\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=noQai6wG4WswaQ0BoM%2FdNINEXkXrVR1SNmi8Ay3Qkrlkr%2B2%2B8EnTatbnsfG5ecnN4KU7OsKcC3N0Npu5Vp4%2FmwIoLi2r%2FpZK7oEPV4R4Cw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9cf68b488356a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"e1afb1725cab5acb074f3b4b7af998cb","sha1":"40fa5b77a9ac6ebcafe3871e1536cab0be349cd6","sha256":"b28c5230d42b439d54106909b7b7cfbcaf34c8b27f66cb7e41e73ae3b1fdc9ca","sha512":"8b289cca321dd62360421c7da978952a6364ca46492a57ef3b201ab426f7aecf42557beaad9a94726312310a471584eae6a2c9b72cb1be7d1329093b109537dc","ssdeep":"48:phaJTXQceb88y6LrbdFTO5od2r/cCXkl/Ylvd7qjYkUJHg8fH2YDoSk4AD7I2aEa:I8y6bTM/r/cRuNk2TvV8SVs7Fra","tlshash":"5991ba82f904d551e6a8cb312db4e8853b2ffd3eec20a1c57558b7a90bbf2c26530843","first_seen":"2023-05-24T05:11:17Z","last_seen":"2026-04-17T10:19:27.263999Z","times_seen":92,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/gen.js?type=6","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.themoneytizer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 15:23:25 GMT","end":"Sun, 22 Mar 2026 16:23:24 GMT"},"fingerprint":{"sha1":"47:49:49:D0:A3:6E:DC:D5:BA:9B:BA:A1:CB:54:56:93:EA:93:E9:2B","sha256":"FD:6C:16:11:91:21:91:59:5E:E0:9E:D8:EF:A5:07:5E:C2:90:06:D8:4A:91:D5:AF:C8:BA:53:E0:3C:52:ED:09"}}},"request":{"raw":"GET /s/gen.js?type=6 HTTP/1.1\r\nHost: ads.themoneytizer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript\r\nx-powered-by: PHP/8.2.17\r\ncache-control: max-age=259200\r\napigw-requestid: WvyBkiRdDoEEJFQ=\r\nlast-modified: Tue, 06 Jan 2026 05:00:06 GMT\r\nvary: accept-encoding\r\nage: 45210\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b9cf624380b56b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4566,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3205)","md5":"6e0579662fcf9cfda826db5676f515a9","sha1":"b0f749d8ef2e0e2a1ffb12ffb6491b990f8f41db","sha256":"3dd4f53067dd0f0bd875bcf7acebfb72e908b5329da8f19ab48fbbe4aa10daa5","sha512":"862c2ea4e78e6956c77b646c3823816e86180150262f2ad7b163bc40522ed1ca81415745748c0d0a4ac7869c567019d58a1583d5eae4f50bcc6382b3e1bd4d07","ssdeep":"96:pi9YlpiA/ncovvSPN4sNFf/Tc5lazXrQFZBQqg+BY8wPMW9SGZwPMpqi1u9JXj:cY2A/nckvSBf/webrQFZPgCY8wH9/Zw7","tlshash":"2791a4072691393b25d2f131dc9f1544713b9363058688695a4c8dc97fac0ba11fdefc","first_seen":"2024-06-12T00:51:37Z","last_seen":"2026-05-14T02:05:04.468933Z","times_seen":2328,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":81,"dns":37,"connect":3,"send":0,"wait":7,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.kueezrtb.com/latest.js","fqdn":"static.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"104.20.32.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 10:52:18 GMT","end":"Tue, 24 Feb 2026 11:52:12 GMT"},"fingerprint":{"sha1":"B6:9D:80:75:30:91:31:61:89:22:9A:4B:50:C1:3D:50:C5:DD:79:C2","sha256":"82:81:8F:85:CD:7F:5A:CF:50:A9:9E:92:7A:47:D4:00:E4:A9:6A:8C:8F:0A:17:2E:F9:BB:56:15:6C:46:EC:CC"}}},"request":{"raw":"GET /latest.js HTTP/1.1\r\nHost: static.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: text/javascript\r\nx-amz-id-2: lD4+JyRL3IKDfiG7HgkZ2vsT/11GKVKpc8IyZx+nv5Thgoa7MKCF8nRtTBJZXeXSOR+ruchQvqI=\r\nx-amz-request-id: 6BCHSMKKXD8115C8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: x-amz-meta-access-control-allow-origin, x-amz-meta-access-control-allow-methods\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, accept-encoding\r\nlast-modified: Tue, 10 Jun 2025 11:52:54 GMT\r\nserver: cloudflare\r\nage: 4028993\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"bfed549a7a818520144d1b1e2f334d9b\"\r\ncontent-encoding: br\r\ncf-ray: 9b9cf6268802b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1440,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (518)","md5":"bfed549a7a818520144d1b1e2f334d9b","sha1":"a07dd4834d83d381536884ffdb4a7c1b05de1993","sha256":"4eb79c43f4d736b305fdce8077dd70044483b58b779c58c9be3a4ab9ba4079d2","sha512":"5426d779711f4cf8f8caaeca40303aac3319aa379ed380a94997906b7d3705bc05e6c2133544ac8bb59037884dc021e5e5031b8aca96b082c28373e8abd6cb4b","ssdeep":"","tlshash":"50213096b6db5d6e49a421ac983abf21f1bb85143f4d5050c44789006b44e534b3ffee","first_seen":"2025-05-11T13:48:19.766573Z","last_seen":"2026-05-19T03:55:59.200073Z","times_seen":3103,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":38,"dns":23,"connect":1,"send":0,"wait":9,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-v4.prod.first-id.fr/firstId?int=1\u0026bs=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%3A%3Aen-US%3A%3A1280%3A%3A1024%3A%3A0%3A%3A48\u0026ver=1.35.1\u0026im=-2\u0026clientId=T656dc5f8NdhGJ","fqdn":"api-v4.prod.first-id.fr","domain":"first-id.fr","tld":"fr"},"ip":{"addr":"23.36.77.72","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:38.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.first-id.fr","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 09:58:09 GMT","end":"Wed, 14 Jan 2026 09:58:08 GMT"},"fingerprint":{"sha1":"D1:58:82:A9:9E:86:B8:99:18:9E:AD:18:5E:92:72:9C:76:9E:78:7D","sha256":"8C:B1:18:60:40:1C:A0:CE:C7:33:1A:94:4B:84:5A:AA:32:EE:D7:3E:BA:68:89:EB:99:76:8E:E7:02:4C:85:5C"}}},"request":{"raw":"GET /firstId?int=1\u0026bs=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%3A%3Aen-US%3A%3A1280%3A%3A1024%3A%3A0%3A%3A48\u0026ver=1.35.1\u0026im=-2\u0026clientId=T656dc5f8NdhGJ HTTP/1.1\r\nHost: api-v4.prod.first-id.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zupimages.net/\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/octet-stream\r\ncontent-length: 54\r\nexpires: Tue, 06 Jan 2026 17:33:38 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Tue, 06 Jan 2026 17:33:38 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nset-cookie: thirdid=c6ee5beb04944d498d7cf4331601fd0d; Max-Age=31536000; Secure; HttpOnly; SameSite=None; Path=/; Domain=.first-id.fr\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=23, origin; dur=212, ak_p; desc=\"1767720818150_388255044_2549556348_23525_1183_0_22_21\";dur=1\r\naccess-control-allow-origin: https://www.zupimages.net\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JSON text data","md5":"3c51960317daeffb667df7cf52817d8e","sha1":"4a5cbe8ec383e88f8b893d5ab531e8f66d3e3c93","sha256":"b3a6d7baca534ec2945677148189f7e08143c1638686f6944f3d4ddcc7cdd0b5","sha512":"93a2863da40e3ae504ccd9950020671fd033bb07eefb67ed37f2ef795d0a170ab0d8a3b1c28cc24d9581a060f1c191a7f220eb2d0e9d7d61b0914583eda88f48","ssdeep":"","tlshash":"59900214319541550e1314541cc2191515391152ef8392055566079070e19b8915a417","first_seen":"2026-01-06T17:34:07.100635Z","last_seen":"2026-01-25T23:03:50.188236Z","times_seen":24,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":104,"dns":80,"connect":1,"send":0,"wait":238,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/formatrequest_refactor/formatrequest_refactor_desktop.js?siteId=14857\u0026formatId=1\u0026dType=1","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.themoneytizer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 15:23:25 GMT","end":"Sun, 22 Mar 2026 16:23:24 GMT"},"fingerprint":{"sha1":"47:49:49:D0:A3:6E:DC:D5:BA:9B:BA:A1:CB:54:56:93:EA:93:E9:2B","sha256":"FD:6C:16:11:91:21:91:59:5E:E0:9E:D8:EF:A5:07:5E:C2:90:06:D8:4A:91:D5:AF:C8:BA:53:E0:3C:52:ED:09"}}},"request":{"raw":"GET /s/formatrequest_refactor/formatrequest_refactor_desktop.js?siteId=14857\u0026formatId=1\u0026dType=1 HTTP/1.1\r\nHost: ads.themoneytizer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript\r\nx-powered-by: PHP/8.2.17\r\ncache-control: max-age=259200\r\napigw-requestid: WvyC1j7kjoEEJYQ=\r\nlast-modified: Tue, 06 Jan 2026 05:00:14 GMT\r\nvary: accept-encoding\r\nage: 45202\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b9cf625d96a56b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":279735,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c81a051e304fc8e4d6f046f60231194d","sha1":"4ed175ee8063c6d4c1d5f6891824d6e7806003de","sha256":"a823f78416f110853cbb5f65aa407e971599a55d19d3f2a32e99d886385a34c5","sha512":"9c92058fa67e96d0aede85bc7dbe41565b6bd26ec9653c7640d75d3cb49b6b2483d56e77651a488a1bde9df7f7f3a78267e3790d1ec1b678e57744f27265edf3","ssdeep":"6144:mnIxhMArFIA7Qcy2q7gAY1Y/zUR/zUS912BIQfCtN:1rFIArq7gAYr","tlshash":"df54d82dc4b31c116077a5a92bbfa304352651276e848d123fddc2c46fdd82f66e6be8","first_seen":"2026-01-06T17:34:07.101508Z","last_seen":"2026-01-06T17:34:07.101508Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/formatrequest_refactor/formatrequest_refactor_desktop.js?siteId=14857\u0026formatId=28\u0026dType=1","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.themoneytizer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 15:23:25 GMT","end":"Sun, 22 Mar 2026 16:23:24 GMT"},"fingerprint":{"sha1":"47:49:49:D0:A3:6E:DC:D5:BA:9B:BA:A1:CB:54:56:93:EA:93:E9:2B","sha256":"FD:6C:16:11:91:21:91:59:5E:E0:9E:D8:EF:A5:07:5E:C2:90:06:D8:4A:91:D5:AF:C8:BA:53:E0:3C:52:ED:09"}}},"request":{"raw":"GET /s/formatrequest_refactor/formatrequest_refactor_desktop.js?siteId=14857\u0026formatId=28\u0026dType=1 HTTP/1.1\r\nHost: ads.themoneytizer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript\r\nx-powered-by: PHP/8.2.17\r\ncache-control: max-age=259200\r\napigw-requestid: WvyC1iNuDoEEJew=\r\nlast-modified: Tue, 06 Jan 2026 05:00:14 GMT\r\nvary: accept-encoding\r\nage: 45202\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b9cf625d96e56b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279739,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3d19ab4fa4f790e91f0dc3515677dee2","sha1":"abb154255679adb8f1bc100ba6389af371f60c07","sha256":"65fd64eebcdd6cad335d7c65142de64fce3f1917ec05d196d5929ac5c39283a7","sha512":"51ca259cfbf34aa21cc68e59a2354ac2a984ed28afedc2e76c4246fbb655cbde67338ff48c3adac91bb759701d69962293a6b37183fca57aa54e2a58698b3cf9","ssdeep":"6144:mnIxhMArFIA7Qcy2q6gAY1Y/zUR/zUS912BIQflLe:1rFIArq6gAYb","tlshash":"1454d72dc4b31c116077a5a92bbfa304352651276e848d123fddc2c46fdd82f66e6be8","first_seen":"2026-01-06T17:34:07.102406Z","last_seen":"2026-01-06T17:34:07.102406Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boot.pbstck.com/v1/tag/8a9c55c8-cbac-4534-8bce-b8c10c0999ed","fqdn":"boot.pbstck.com","domain":"pbstck.com","tld":"com"},"ip":{"addr":"104.20.24.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pbstck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 02:59:22 GMT","end":"Sun, 15 Mar 2026 03:59:04 GMT"},"fingerprint":{"sha1":"BF:96:16:2D:FD:E9:7C:4F:32:07:FA:6A:1F:9E:B1:2F:A8:43:A4:FB","sha256":"F8:7B:F9:A1:39:3F:F6:CC:6F:36:86:40:B1:0D:12:12:CE:1E:CD:18:9A:89:ED:BA:75:B0:49:85:E4:3A:56:42"}}},"request":{"raw":"GET /v1/tag/8a9c55c8-cbac-4534-8bce-b8c10c0999ed HTTP/1.1\r\nHost: boot.pbstck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 711\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=1200\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: EXPIRED\r\nlast-modified: Tue, 06 Jan 2026 17:33:37 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9b9cf6269d8cb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1381,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (484)","md5":"a5eed18839b15acbe2072d0d448189ab","sha1":"deaf8e04a6263aeb48470a98bb6673f86cf837b5","sha256":"85a4ba2db30412e47c974a0eb263ad6dbd3b9b6582a1b20a8383ab7250ebfa2f","sha512":"e2fc10833c2aff35e018323015de7c90083d9fa16f5a0d9eda767d485fee3d505b8663adbfe29c95c873c783906e10f82873bff01098269ee0facc4bab157c6c","ssdeep":"","tlshash":"0721141e7a442132ce09e898787fc7398cad7539a9828480909d94cc5eafddc0555db7","first_seen":"2026-01-06T17:34:07.103173Z","last_seen":"2026-01-06T17:34:07.103173Z","times_seen":1,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":41,"dns":33,"connect":1,"send":0,"wait":57,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.kueezrtb.com/dye?_=1767720817711\u0026type=latest:boot\u0026ac=2\u0026acm=g3l\u0026h=www.zupimages.net\u0026uri=%2Fviewer.php\u0026furl=https%3A%2F%2Fwww.zupimages.net%2Fviewer.php%3Fid%3D25%2F45%2Ft4ak.jpg\u0026beacon=1","fqdn":"track.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"104.20.32.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 10:52:18 GMT","end":"Tue, 24 Feb 2026 11:52:12 GMT"},"fingerprint":{"sha1":"B6:9D:80:75:30:91:31:61:89:22:9A:4B:50:C1:3D:50:C5:DD:79:C2","sha256":"82:81:8F:85:CD:7F:5A:CF:50:A9:9E:92:7A:47:D4:00:E4:A9:6A:8C:8F:0A:17:2E:F9:BB:56:15:6C:46:EC:CC"}}},"request":{"raw":"POST /dye?_=1767720817711\u0026type=latest:boot\u0026ac=2\u0026acm=g3l\u0026h=www.zupimages.net\u0026uri=%2Fviewer.php\u0026furl=https%3A%2F%2Fwww.zupimages.net%2Fviewer.php%3Fid%3D25%2F45%2Ft4ak.jpg\u0026beacon=1 HTTP/1.1\r\nHost: track.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.zupimages.net\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b9cf626f9750b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtrack.kueezrtb.com/dye?_=1767720817711\u0026type=latest:boot\u0026ac=2\u0026acm=g3l\u0026h=www.zupimages.net\u0026uri=%2Fviewer.php\u0026furl=https%3A%2F%2Fwww.zupimages.net%2Fviewer.php%3Fid%3D25%2F45%2Ft4ak.jpg\u0026beacon=1","fqdn":"gtrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"104.20.32.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 10:52:18 GMT","end":"Tue, 24 Feb 2026 11:52:12 GMT"},"fingerprint":{"sha1":"B6:9D:80:75:30:91:31:61:89:22:9A:4B:50:C1:3D:50:C5:DD:79:C2","sha256":"82:81:8F:85:CD:7F:5A:CF:50:A9:9E:92:7A:47:D4:00:E4:A9:6A:8C:8F:0A:17:2E:F9:BB:56:15:6C:46:EC:CC"}}},"request":{"raw":"POST /dye?_=1767720817711\u0026type=latest:boot\u0026ac=2\u0026acm=g3l\u0026h=www.zupimages.net\u0026uri=%2Fviewer.php\u0026furl=https%3A%2F%2Fwww.zupimages.net%2Fviewer.php%3Fid%3D25%2F45%2Ft4ak.jpg\u0026beacon=1 HTTP/1.1\r\nHost: gtrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.zupimages.net\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b9cf626d9640b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=ed9032ff5e4a9211\u0026sid=7029c5013fc2b350\u0026pvi=6119f67270a50a54\u0026h=www.zupimages.net\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=83\u0026uri=%2Fviewer.php\u0026furl=https%3A%2F%2Fwww.zupimages.net%2Fviewer.php%3Fid%3D25%2F45%2Ft4ak.jpg\u0026sr=1280x1024\u0026type=latest:preinit\u0026_=1767720817909","fqdn":"otrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"104.20.32.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:38.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 10:52:18 GMT","end":"Tue, 24 Feb 2026 11:52:12 GMT"},"fingerprint":{"sha1":"B6:9D:80:75:30:91:31:61:89:22:9A:4B:50:C1:3D:50:C5:DD:79:C2","sha256":"82:81:8F:85:CD:7F:5A:CF:50:A9:9E:92:7A:47:D4:00:E4:A9:6A:8C:8F:0A:17:2E:F9:BB:56:15:6C:46:EC:CC"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=ed9032ff5e4a9211\u0026sid=7029c5013fc2b350\u0026pvi=6119f67270a50a54\u0026h=www.zupimages.net\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=83\u0026uri=%2Fviewer.php\u0026furl=https%3A%2F%2Fwww.zupimages.net%2Fviewer.php%3Fid%3D25%2F45%2Ft4ak.jpg\u0026sr=1280x1024\u0026type=latest:preinit\u0026_=1767720817909 HTTP/1.1\r\nHost: otrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 06 Jan 2026 17:33:38 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b9cf6287a8e0b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intake.pbstck.com/v1/intake/web-vitals?ttfb=1577.000\u0026tId=8a9c55c8-cbac-4534-8bce-b8c10c0999ed\u0026v=none\u0026s=none\u0026c=1","fqdn":"intake.pbstck.com","domain":"pbstck.com","tld":"com"},"ip":{"addr":"104.20.24.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:38.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pbstck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 02:59:22 GMT","end":"Sun, 15 Mar 2026 03:59:04 GMT"},"fingerprint":{"sha1":"BF:96:16:2D:FD:E9:7C:4F:32:07:FA:6A:1F:9E:B1:2F:A8:43:A4:FB","sha256":"F8:7B:F9:A1:39:3F:F6:CC:6F:36:86:40:B1:0D:12:12:CE:1E:CD:18:9A:89:ED:BA:75:B0:49:85:E4:3A:56:42"}}},"request":{"raw":"POST /v1/intake/web-vitals?ttfb=1577.000\u0026tId=8a9c55c8-cbac-4534-8bce-b8c10c0999ed\u0026v=none\u0026s=none\u0026c=1 HTTP/1.1\r\nHost: intake.pbstck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 446\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":446,"data":"[{\"tagId\":\"8a9c55c8-cbac-4534-8bce-b8c10c0999ed\",\"scopeId\":\"dd8810a6-2df6-48d7-a782-399ee88c1ff1\",\"device\":\"desktop\",\"browserName\":\"Firefox\",\"browserVersion\":\"134\",\"osName\":\"Windows\",\"osVersion\":\"10\",\"pbstckVersion\":\"a657a01\",\"customFields\":{\"pageId\":\"ead67b86-2b6e-4c8f-b1df-86767de5968a\",\"pageCount\":\"1\",\"userSessionId\":null,\"sessionTracking\":\"false\"},\"href\":\"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg\",\"name\":\"TTFB\",\"value\":1577}]"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 06 Jan 2026 17:33:38 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: 9b9cf62a4f64b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":57,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/requestform.js?siteId=14857\u0026formatId=6","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.themoneytizer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 15:23:25 GMT","end":"Sun, 22 Mar 2026 16:23:24 GMT"},"fingerprint":{"sha1":"47:49:49:D0:A3:6E:DC:D5:BA:9B:BA:A1:CB:54:56:93:EA:93:E9:2B","sha256":"FD:6C:16:11:91:21:91:59:5E:E0:9E:D8:EF:A5:07:5E:C2:90:06:D8:4A:91:D5:AF:C8:BA:53:E0:3C:52:ED:09"}}},"request":{"raw":"GET /s/requestform.js?siteId=14857\u0026formatId=6 HTTP/1.1\r\nHost: ads.themoneytizer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript\r\nx-powered-by: PHP/8.2.17\r\ncache-control: max-age=259200\r\napigw-requestid: WvyBhhUWDoEEJUQ=\r\nlast-modified: Tue, 06 Jan 2026 05:00:06 GMT\r\nvary: accept-encoding\r\nage: 45210\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b9cf624481956b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":775,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6701976458309a95b33f3d9ff34f880b","sha1":"9d5b0038cb02e9b30b5be4335e61ccbc7b6801d7","sha256":"da9072ba9ae9935744f9a6a6e92737fd1087fe3a76ed3c7832b13f67bcb3871b","sha512":"0f5f68149eb1745302ab00f8ab67a6cdbf006f575514202df1f7f2e169ef5630b0451f445e8387b7adfdc00382f1db5289f5d4f1987400f75f313eaba6e15f11","ssdeep":"","tlshash":"f3016d5eac73c014c4133c8b9bffd109a912b6177599cd6ab5cc8dc85f10a644d22b8c","first_seen":"2025-11-03T12:11:26.584105Z","last_seen":"2026-04-17T10:19:27.373796Z","times_seen":8,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":88,"dns":37,"connect":1,"send":0,"wait":6,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tag.leadplace.fr/libJsLP.js","fqdn":"tag.leadplace.fr","domain":"leadplace.fr","tld":"fr"},"ip":{"addr":"217.182.141.163","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.leadplace.fr","organization":""},"issuer":{"commonName":"GandiCert","organization":"Gandi SAS"},"validity":{"start":"Sat, 11 Oct 2025 00:00:00 GMT","end":"Sat, 12 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:9A:79:91:EA:CF:38:26:63:CD:C6:29:68:8F:AF:D5:32:B6:55:FD","sha256":"B5:87:DC:F5:30:49:30:B8:E4:D7:2F:4F:94:7E:92:0B:18:4C:27:C8:CC:21:77:E2:39:AA:24:94:FB:9C:C0:B4"}}},"request":{"raw":"GET /libJsLP.js HTTP/1.1\r\nHost: tag.leadplace.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Thu, 25 Dec 2025 23:41:21 GMT\r\nETag: W/\"2110-19b57e36d5c\"\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 8464\r\nDate: Tue, 06 Jan 2026 17:33:37 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8464,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c3c53ff5f9c5f6ec5d2b2aa29609fabc","sha1":"0de0f2354966fe8d60cbdb3d35a01a060379626c","sha256":"f2eb322022031a451feceb97b33f889cc6d33f134be248ade9748a95febd5c66","sha512":"4cce34482a6c881fe08cfef5e838803248124a51b780abee44f8a6cbd95800c4ca320117efb1910b0b7f72f6a4787982260a2275528cb23f3f75f810d8297da5","ssdeep":"192:L95G+rBhhVzau8Y7VjWzQLKJCskAGnpi/cdxpzN0SleUku:LTfmWyDGp+Q7N0Snh","tlshash":"f602934d68f711754dd232be8baf94017330812337a9ea643c8d96146f94a3d62f6bec","first_seen":"2025-12-22T09:43:20.576451Z","last_seen":"2026-01-06T17:34:07.104873Z","times_seen":8,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":79,"dns":13,"connect":21,"send":0,"wait":35,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pbstck.com/collector-0d1c456.js","fqdn":"cdn.pbstck.com","domain":"pbstck.com","tld":"com"},"ip":{"addr":"104.20.24.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pbstck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 02:59:22 GMT","end":"Sun, 15 Mar 2026 03:59:04 GMT"},"fingerprint":{"sha1":"BF:96:16:2D:FD:E9:7C:4F:32:07:FA:6A:1F:9E:B1:2F:A8:43:A4:FB","sha256":"F8:7B:F9:A1:39:3F:F6:CC:6F:36:86:40:B1:0D:12:12:CE:1E:CD:18:9A:89:ED:BA:75:B0:49:85:E4:3A:56:42"}}},"request":{"raw":"GET /collector-0d1c456.js HTTP/1.1\r\nHost: cdn.pbstck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: UQ61nPLDdVnzZ8A/n61jqrkDkT9YLzjjYbfu/19jUfwwpdJcOBXZ3BhGED0u8zwMMJ/sNtOCtGpcS+46eJeM0DUqmXCq7i3T0TdWdjp+GB0=\r\nx-amz-request-id: Z0BWK6JH3W4K7AA9\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, accept-encoding\r\ncache-control: public,max-age=31536000,immutable\r\nlast-modified: Thu, 10 Jul 2025 15:46:00 GMT\r\nserver: cloudflare\r\nage: 14334462\r\ncf-cache-status: HIT\r\netag: W/\"dad3dacaefbe9799ed32e51772007f28\"\r\ncontent-encoding: br\r\ncf-ray: 9b9cf627ab928deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93190,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dad3dacaefbe9799ed32e51772007f28","sha1":"edadd7e772ce411302621773152f83f0cae30caa","sha256":"13f652b4efc778bafaad87b5e1ff713586a03c8dd9e4a5172c7374cf04649fea","sha512":"6a8adcdf90151770e2502a3f070e0251252434ab7e6bb55fc058ce337e50c31e0d9ae11018ef0bf47e0353d52096c1d813068fd0857abbc1051cccc7158204e1","ssdeep":"1536:cyy2l3yDEW9AWNB0j21DBuVHuZIblq22Jh:i25oV9AWT79aOCblH23","tlshash":"f3932baf73d1f53e839650c5c4730118bb362658708590e4fdaecdab2d64a9e5223f3a","first_seen":"2025-07-10T19:22:08.361167Z","last_seen":"2026-02-09T10:11:41.890429Z","times_seen":391,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":53,"dns":33,"connect":1,"send":0,"wait":6,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-v6.prod.first-id.fr/firstId?int=1\u0026bs=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%3A%3Aen-US%3A%3A1280%3A%3A1024%3A%3A0%3A%3A48\u0026ver=1.35.1\u0026im=-2\u0026clientId=T656dc5f8NdhGJ","fqdn":"api-v6.prod.first-id.fr","domain":"first-id.fr","tld":"fr"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:38.049Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /firstId?int=1\u0026bs=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%3A%3Aen-US%3A%3A1280%3A%3A1024%3A%3A0%3A%3A48\u0026ver=1.35.1\u0026im=-2\u0026clientId=T656dc5f8NdhGJ HTTP/1.1\r\nHost: api-v6.prod.first-id.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zupimages.net/\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metrics.biddertmz.com/metric?s=14857\u0026f=28\u0026fi=0","fqdn":"metrics.biddertmz.com","domain":"biddertmz.com","tld":"com"},"ip":{"addr":"34.248.22.168","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:38.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"metrics.biddertmz.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Nov 2025 08:46:17 GMT","end":"Thu, 12 Feb 2026 08:46:16 GMT"},"fingerprint":{"sha1":"76:A2:AE:24:12:D2:00:0F:E8:9F:F6:73:30:B9:6B:68:FA:91:88:12","sha256":"6A:A2:50:EE:36:6C:5B:59:36:68:1E:07:35:A3:43:40:C2:0B:A2:67:D7:15:AF:83:F3:3F:16:D1:E3:65:06:36"}}},"request":{"raw":"GET /metric?s=14857\u0026f=28\u0026fi=0 HTTP/1.1\r\nHost: metrics.biddertmz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zupimages.net/\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.12.2\r\nDate: Tue, 06 Jan 2026 17:33:38 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Accept\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.12.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":120,"dns":13,"connect":32,"send":0,"wait":32,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-v6.prod.first-id.fr/info","fqdn":"api-v6.prod.first-id.fr","domain":"first-id.fr","tld":"fr"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:39.635Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /info HTTP/1.1\r\nHost: api-v6.prod.first-id.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zupimages.net/\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: thirdid=c6ee5beb04944d498d7cf4331601fd0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetag-sys.com/usync/?pubId=7b2ec27f127242e\u0026cb=1767720817621","fqdn":"onetag-sys.com","domain":"onetag-sys.com","tld":"com"},"ip":{"addr":"51.89.9.253","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.onetag-sys.com","organization":"Onetag Limited"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Dec 2025 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3E:F4:97:81:73:53:77:91:BA:10:EE:B9:2D:24:F3:66:AC:24:0E:98","sha256":"57:56:D5:46:7E:7E:20:7D:22:13:24:1A:84:D9:75:A3:74:E1:39:28:FE:6B:A6:81:DE:D2:E8:DB:C5:48:9A:83"}}},"request":{"raw":"GET /usync/?pubId=7b2ec27f127242e\u0026cb=1767720817621 HTTP/1.1\r\nHost: onetag-sys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: no-store\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\nstrict-transport-security: max-age=15552000\r\nalt-svc: h3=\":443\"; ma=900, h3-29=\":443\"; ma=900\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":169,"dns":28,"connect":34,"send":0,"wait":34,"receive":1,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zupimages.net/viewer.php?id=25/45/t4ak.jpg","fqdn":"zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-06T17:33:35.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zupimages.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 19:59:27 GMT","end":"Mon, 23 Feb 2026 20:56:41 GMT"},"fingerprint":{"sha1":"06:5A:33:A3:57:11:8C:71:C8:84:C1:99:34:45:74:68:2B:AC:98:20","sha256":"17:88:39:49:8E:5B:A9:21:8E:37:F2:DC:AC:04:0C:D1:C1:8B:1E:A9:29:D2:78:AD:CF:DC:4F:F2:09:C9:3D:81"}}},"request":{"raw":"GET /viewer.php?id=25/45/t4ak.jpg HTTP/1.1\r\nHost: zupimages.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 06 Jan 2026 17:33:35 GMT\r\ncontent-length: 0\r\nlocation: https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YRxwmAYcz3Ihn%2ByGoBoL%2B1ftfrP0bgpcBhGk%2BEegq1vIcqu1khXuvhG20mAIn3xzCDYnzplPczmFVrfZcZOal7KUWi8qjz5Tvaizx8w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b9cf61889a8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12289,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":21,"dns":0,"connect":1,"send":0,"wait":4,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"zupimages.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"zupimages.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/requestform.js?siteId=14857\u0026formatId=1","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.themoneytizer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 15:23:25 GMT","end":"Sun, 22 Mar 2026 16:23:24 GMT"},"fingerprint":{"sha1":"47:49:49:D0:A3:6E:DC:D5:BA:9B:BA:A1:CB:54:56:93:EA:93:E9:2B","sha256":"FD:6C:16:11:91:21:91:59:5E:E0:9E:D8:EF:A5:07:5E:C2:90:06:D8:4A:91:D5:AF:C8:BA:53:E0:3C:52:ED:09"}}},"request":{"raw":"GET /s/requestform.js?siteId=14857\u0026formatId=1 HTTP/1.1\r\nHost: ads.themoneytizer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript\r\nx-powered-by: PHP/8.2.17\r\ncache-control: max-age=259200\r\napigw-requestid: WvyBhgItjoEENng=\r\nlast-modified: Tue, 06 Jan 2026 05:00:06 GMT\r\nvary: accept-encoding\r\nage: 45210\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b9cf624481f56b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":775,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"2faafa91b876a0865529f0ed06282273","sha1":"31588f28d81ace980c08190cda5cbdbda260f4e6","sha256":"b3ee3b90397fb40e9f04ae60e7da7406c6a744f1734f2d10b911cb81e169b755","sha512":"92ddf73c3c335d4a5a8e51327bb7729a31e4448d0d1b01148ffb86e62f761255da5df9ae13fa8d63c93c13ea962072bb10fa3d9770c979d0a9352b14b6ddf39f","ssdeep":"","tlshash":"2c016d5eac73c01084133c8b9bffd109a912b6176595cd6ab5cc8dc85f10a644d22b8c","first_seen":"2025-11-03T12:11:26.599498Z","last_seen":"2026-04-17T10:19:27.25167Z","times_seen":8,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":86,"dns":34,"connect":3,"send":0,"wait":6,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/favicon.ico","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zupimages.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 19:59:27 GMT","end":"Mon, 23 Feb 2026 20:56:41 GMT"},"fingerprint":{"sha1":"06:5A:33:A3:57:11:8C:71:C8:84:C1:99:34:45:74:68:2B:AC:98:20","sha256":"17:88:39:49:8E:5B:A9:21:8E:37:F2:DC:AC:04:0C:D1:C1:8B:1E:A9:29:D2:78:AD:CF:DC:4F:F2:09:C9:3D:81"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.zupimages.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg\r\nCookie: PHPSESSID=n4l489cuas1a26lrkdlr37aiio\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Nov 2013 15:20:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"52960dca-10be\"\r\nexpires: Thu, 05 Feb 2026 20:17:37 GMT\r\ncache-control: max-age=7776000\r\nstrict-transport-security: max-age=15768000\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\nage: 4199980\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bw1xTCdgRAdBsbGHId2ykonaa4qvbAwnFV2Bn4K37FZ2767NW37ieVheRf%2BJ4Ok0eiD3RUoK9juvltlgwbGmx7ozk4BGlsVUnL%2FXUfOqXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9cf6258d7a56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"e1afb1725cab5acb074f3b4b7af998cb","sha1":"40fa5b77a9ac6ebcafe3871e1536cab0be349cd6","sha256":"b28c5230d42b439d54106909b7b7cfbcaf34c8b27f66cb7e41e73ae3b1fdc9ca","sha512":"8b289cca321dd62360421c7da978952a6364ca46492a57ef3b201ab426f7aecf42557beaad9a94726312310a471584eae6a2c9b72cb1be7d1329093b109537dc","ssdeep":"48:phaJTXQceb88y6LrbdFTO5od2r/cCXkl/Ylvd7qjYkUJHg8fH2YDoSk4AD7I2aEa:I8y6bTM/r/cRuNk2TvV8SVs7Fra","tlshash":"5991ba82f904d551e6a8cb312db4e8853b2ffd3eec20a1c57558b7a90bbf2c26530843","first_seen":"2023-05-24T05:11:17Z","last_seen":"2026-04-17T10:19:27.263999Z","times_seen":92,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/formatrequest_refactor/formatrequest_refactor_desktop.js?siteId=14857\u0026formatId=6\u0026dType=1","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.themoneytizer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 15:23:25 GMT","end":"Sun, 22 Mar 2026 16:23:24 GMT"},"fingerprint":{"sha1":"47:49:49:D0:A3:6E:DC:D5:BA:9B:BA:A1:CB:54:56:93:EA:93:E9:2B","sha256":"FD:6C:16:11:91:21:91:59:5E:E0:9E:D8:EF:A5:07:5E:C2:90:06:D8:4A:91:D5:AF:C8:BA:53:E0:3C:52:ED:09"}}},"request":{"raw":"GET /s/formatrequest_refactor/formatrequest_refactor_desktop.js?siteId=14857\u0026formatId=6\u0026dType=1 HTTP/1.1\r\nHost: ads.themoneytizer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript\r\nx-powered-by: PHP/8.2.17\r\ncache-control: max-age=259200\r\napigw-requestid: WvyC1gppjoEEJMw=\r\nlast-modified: Tue, 06 Jan 2026 05:00:14 GMT\r\nvary: accept-encoding\r\nage: 45202\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b9cf625d97056b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279324,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"078fb9a765ec20ae04cd0e91d3a45767","sha1":"2c9d382a08cf913c7d964cdf07afd2e4054b75f1","sha256":"be6fbfff33d7d15719525e05f08543fddc190af59b256eb62ccf2593c32ce7b9","sha512":"708e76d3506dd291335ec435c566db2a5cfe2e77621935c296d6c32d823c7b23bb13c5002a8847787da25e1af1bf67f2211e8b09bd0b760abba1c085e84120f5","ssdeep":"6144:mnIxhMArFIA7Qcy2qEgAY1Y/zUR/zUS912BIQfxZQ:1rFIArqEgAY3","tlshash":"ad54d82dc4b31c116077a5a92bbfa304352651276e848d123fddc2c46fdd82f66e6be8","first_seen":"2026-01-06T17:34:07.107071Z","last_seen":"2026-01-06T17:34:07.107071Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.kueezrtb.com/js/latest_cls.js?_=1767720817712","fqdn":"static.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"104.20.32.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 10:52:18 GMT","end":"Tue, 24 Feb 2026 11:52:12 GMT"},"fingerprint":{"sha1":"B6:9D:80:75:30:91:31:61:89:22:9A:4B:50:C1:3D:50:C5:DD:79:C2","sha256":"82:81:8F:85:CD:7F:5A:CF:50:A9:9E:92:7A:47:D4:00:E4:A9:6A:8C:8F:0A:17:2E:F9:BB:56:15:6C:46:EC:CC"}}},"request":{"raw":"GET /js/latest_cls.js?_=1767720817712 HTTP/1.1\r\nHost: static.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: text/javascript\r\nx-amz-id-2: iz+CV+XGFzbnc0jzJAcZsvH9TQ4f8/dE0dTNcZjyl44cP3+Xf6JnX/6UwGGuyRdVgFFzOXddWn9DMNF2wTFYTyl/sWBZRQQO\r\nx-amz-request-id: TD58J7N0G8DQT2Q3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: x-amz-meta-access-control-allow-origin, x-amz-meta-access-control-allow-methods\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, accept-encoding\r\nlast-modified: Thu, 18 Dec 2025 13:43:18 GMT\r\nserver: cloudflare\r\nage: 1515685\r\ncf-cache-status: HIT\r\netag: W/\"c4736e27b3a26c79cddf914e9da9c415\"\r\ncontent-encoding: br\r\ncf-ray: 9b9cf626d9610b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76838,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c4736e27b3a26c79cddf914e9da9c415","sha1":"564c70d9be165912126632a07ec6f262de3b6770","sha256":"d59328a845672cbf76751ea2d5da909da3781d1395a04b82e530f988563ebda0","sha512":"055f94cc0e4b3f34c0457aa8e047fb35a68d3743561afb4bfa6e09f2b73b4c706b4cd11fc6dc0b0623d924af84c44d15a505e4fbe0379fc8994141e94b37bd6c","ssdeep":"1536:zZfkA0JbV4RDboJMEPlNk+pkc96fGbRQVBHGaA:JkvORDbREPAgKXGj","tlshash":"57731b8e194a74c29134f6eb6b126178df054d46fec4e0e4fecd3d0cf8a4a6649787a2","first_seen":"2025-12-18T15:36:14.284898Z","last_seen":"2026-01-25T10:23:35.419802Z","times_seen":252,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":12,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/images/logo_viewer.png","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zupimages.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 19:59:27 GMT","end":"Mon, 23 Feb 2026 20:56:41 GMT"},"fingerprint":{"sha1":"06:5A:33:A3:57:11:8C:71:C8:84:C1:99:34:45:74:68:2B:AC:98:20","sha256":"17:88:39:49:8E:5B:A9:21:8E:37:F2:DC:AC:04:0C:D1:C1:8B:1E:A9:29:D2:78:AD:CF:DC:4F:F2:09:C9:3D:81"}}},"request":{"raw":"GET /images/logo_viewer.png HTTP/1.1\r\nHost: www.zupimages.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg\r\nCookie: PHPSESSID=n4l489cuas1a26lrkdlr37aiio\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3531\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Jan 2018 21:34:23 GMT\r\netag: \"5a6e41df-dcb\"\r\nexpires: Thu, 05 Feb 2026 20:17:43 GMT\r\ncache-control: max-age=7776000\r\nstrict-transport-security: max-age=15768000\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 3934575\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6Hni%2Fb89Yim4p7GP%2FL8va8a11Sad5TA886se5GvC3pKCHKnVBfPfB6MLguh6iGe2glDi9NnycnbVfySl9FjLxk87Y3lTkFR%2BkeXqw2wyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9cf6237ba256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 40, 8-bit colormap, non-interlaced","md5":"917e16570633d68a47da8868bbcc4259","sha1":"af12fe9a91ec6decf1d6aedfe9408e856247a7b8","sha256":"f846b446b3e3a53ea0e1556e055a79878b901f457b3560db4e5a8a83de8be23f","sha512":"2fdf551f6e40919f7dc9e24965b66564a457c0d7f8ecfcb4cb598442a4082ccadcfdb80e1313458a640bdfb9f9af3260c8019cf3b261a78868027f4615728274","ssdeep":"","tlshash":"15712da47d8c5121cead443fe643b354fd5e9c5bf1e444076c4376af20ba33690e5888","first_seen":"2023-05-24T05:11:17Z","last_seen":"2026-04-09T19:22:29.368622Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zupimages.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.zupimages.net","domain":"zupimages.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zupimages.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 19:59:27 GMT","end":"Mon, 23 Feb 2026 20:56:41 GMT"},"fingerprint":{"sha1":"06:5A:33:A3:57:11:8C:71:C8:84:C1:99:34:45:74:68:2B:AC:98:20","sha256":"17:88:39:49:8E:5B:A9:21:8E:37:F2:DC:AC:04:0C:D1:C1:8B:1E:A9:29:D2:78:AD:CF:DC:4F:F2:09:C9:3D:81"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: www.zupimages.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg\r\nCookie: PHPSESSID=n4l489cuas1a26lrkdlr37aiio\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript\r\nexpires: Tue, 06 Jan 2026 18:21:37 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTuBJtJEp9GDH12df30iQdY3sjLV1Kq7fQEIOy9uSM%2Fq%2BWVFNd%2ByHcRxsBb36Kyu0415A13HZ0ViC9WCCED3XkVVff%2BMCMYpiR0Pyoso6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b9cf6237ba056a8-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-20T04:33:39.745087Z","times_seen":108270,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-06","alert":"Sinkholed","trigger":"www.zupimages.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.first-id.fr/sdk/loader/loader-flex-no-tcf.min.js?id=T656dc5f8NdhGJ","fqdn":"cdn.first-id.fr","domain":"first-id.fr","tld":"fr"},"ip":{"addr":"95.100.107.188","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.first-id.fr","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 02:41:54 GMT","end":"Sat, 07 Mar 2026 02:41:53 GMT"},"fingerprint":{"sha1":"A9:E1:C9:05:ED:8E:AD:D1:C5:2A:62:1A:8D:C9:DE:6E:0E:E8:31:97","sha256":"EC:11:29:8C:FC:3D:68:66:38:C0:20:7C:51:9E:EF:4C:A0:0C:AF:EC:DC:01:DE:76:42:0A:A8:2A:12:E7:10:C8"}}},"request":{"raw":"GET /sdk/loader/loader-flex-no-tcf.min.js?id=T656dc5f8NdhGJ HTTP/1.1\r\nHost: cdn.first-id.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 06 Jan 2026 10:42:52 GMT\r\ncontent-encoding: gzip\r\netag: W/\"84e003858919db2408e1c2006269d77d\"\r\nvary: accept-encoding\r\ncontent-length: 1344\r\ncache-control: max-age=635\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1767720817767_1600416444_636103836_177_1410_8_57_21\";dur=1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2988,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2988), with no line terminators","md5":"84e003858919db2408e1c2006269d77d","sha1":"a4dc3ded53b06a69f179000558ac1e616f8fc1c8","sha256":"a19eadcb23cf71d642ddd0f67741e535d8dded1d5cdced72ee39dd8d2345a535","sha512":"e07a9af5dda1c41c87ecb58a72c5fe4ab746c4cf3098bb15b31dccf8510e60c16cb61d23a0ae18d1d214aa9be256643b560a49ba104bbf20dface7fb2002523d","ssdeep":"","tlshash":"db5163a21530e5fa0e74e0c2ba37f315f6942836705b74c55b8cca363948b57d52afd1","first_seen":"2026-01-06T17:34:07.109789Z","last_seen":"2026-01-20T20:51:15.107775Z","times_seen":19,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":99,"connect":9,"send":0,"wait":61,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pbstck.com/user-sessions-a657a01.js","fqdn":"cdn.pbstck.com","domain":"pbstck.com","tld":"com"},"ip":{"addr":"104.20.24.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pbstck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 02:59:22 GMT","end":"Sun, 15 Mar 2026 03:59:04 GMT"},"fingerprint":{"sha1":"BF:96:16:2D:FD:E9:7C:4F:32:07:FA:6A:1F:9E:B1:2F:A8:43:A4:FB","sha256":"F8:7B:F9:A1:39:3F:F6:CC:6F:36:86:40:B1:0D:12:12:CE:1E:CD:18:9A:89:ED:BA:75:B0:49:85:E4:3A:56:42"}}},"request":{"raw":"GET /user-sessions-a657a01.js HTTP/1.1\r\nHost: cdn.pbstck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: FY5/DtVWINBDmszMjevj2SrsDJ6l/46MRv2T66Qgg1qsYExmcWJ/10pV2sIsDSmoP6BE+FAbLto=\r\nx-amz-request-id: S6T7R4HT9CW5VR2C\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, accept-encoding\r\ncache-control: public,max-age=31536000,immutable\r\nlast-modified: Thu, 04 Sep 2025 08:32:21 GMT\r\nserver: cloudflare\r\nage: 8862985\r\ncf-cache-status: HIT\r\netag: W/\"ef9bdd20cbcdcafce0b16fad6fdb6f0b\"\r\ncontent-encoding: br\r\ncf-ray: 9b9cf627ab828deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41936,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41935)","md5":"ef9bdd20cbcdcafce0b16fad6fdb6f0b","sha1":"e10e531ebc0f8e590cb6b6c813ecf856d086ba51","sha256":"9f36cf2f2f296e8aef6ba5decf21309f7f9868abad93f92181fad368fbefe1a1","sha512":"26e04f39f55441bbd6389333fcd12cdb2353c11f1cf4d1b738b90040c34170c886cda9c38fdadf5963ea9a61a6c3d47962c898c7854b0b21cc9324a3f8833ddd","ssdeep":"768:pz0cMztEPzS/gj9Iq2eLvTP3homur6aBg8GXj1yT1lbGpqFIK6a6U7n5NneRtbmK:pKztErFzlb3MP2hs3i","tlshash":"021319fee2817b3807e8e559e17420483f270c75f98190fcb9a8994269b46c611dfb7a","first_seen":"2025-09-04T11:53:13.162966Z","last_seen":"2026-05-19T14:06:52.160245Z","times_seen":876,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":51,"dns":31,"connect":1,"send":0,"wait":6,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intake.pbstck.com/v1/intake/web-vitals?fcp=1798.000\u0026tId=8a9c55c8-cbac-4534-8bce-b8c10c0999ed\u0026v=none\u0026s=none\u0026c=1","fqdn":"intake.pbstck.com","domain":"pbstck.com","tld":"com"},"ip":{"addr":"104.20.24.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:38.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pbstck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 02:59:22 GMT","end":"Sun, 15 Mar 2026 03:59:04 GMT"},"fingerprint":{"sha1":"BF:96:16:2D:FD:E9:7C:4F:32:07:FA:6A:1F:9E:B1:2F:A8:43:A4:FB","sha256":"F8:7B:F9:A1:39:3F:F6:CC:6F:36:86:40:B1:0D:12:12:CE:1E:CD:18:9A:89:ED:BA:75:B0:49:85:E4:3A:56:42"}}},"request":{"raw":"POST /v1/intake/web-vitals?fcp=1798.000\u0026tId=8a9c55c8-cbac-4534-8bce-b8c10c0999ed\u0026v=none\u0026s=none\u0026c=1 HTTP/1.1\r\nHost: intake.pbstck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 445\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":445,"data":"[{\"tagId\":\"8a9c55c8-cbac-4534-8bce-b8c10c0999ed\",\"scopeId\":\"dd8810a6-2df6-48d7-a782-399ee88c1ff1\",\"device\":\"desktop\",\"browserName\":\"Firefox\",\"browserVersion\":\"134\",\"osName\":\"Windows\",\"osVersion\":\"10\",\"pbstckVersion\":\"a657a01\",\"customFields\":{\"pageId\":\"ead67b86-2b6e-4c8f-b1df-86767de5968a\",\"pageCount\":\"1\",\"userSessionId\":null,\"sessionTracking\":\"false\"},\"href\":\"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg\",\"name\":\"FCP\",\"value\":1798}]"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 06 Jan 2026 17:33:38 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: 9b9cf62a4f65b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-v4.prod.first-id.fr/info","fqdn":"api-v4.prod.first-id.fr","domain":"first-id.fr","tld":"fr"},"ip":{"addr":"23.36.77.72","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:39.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.first-id.fr","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 09:58:09 GMT","end":"Wed, 14 Jan 2026 09:58:08 GMT"},"fingerprint":{"sha1":"D1:58:82:A9:9E:86:B8:99:18:9E:AD:18:5E:92:72:9C:76:9E:78:7D","sha256":"8C:B1:18:60:40:1C:A0:CE:C7:33:1A:94:4B:84:5A:AA:32:EE:D7:3E:BA:68:89:EB:99:76:8E:E7:02:4C:85:5C"}}},"request":{"raw":"GET /info HTTP/1.1\r\nHost: api-v4.prod.first-id.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zupimages.net/\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: thirdid=c6ee5beb04944d498d7cf4331601fd0d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\ncontent-length: 2\r\nexpires: Tue, 06 Jan 2026 17:33:39 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Tue, 06 Jan 2026 17:33:39 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1767720819630_388255062_1860694058_12_1168_-_-_-\";dur=1\r\nquic-version: 0x00000001\r\nx-fid-tid: c6ee5beb04944d498d7cf4331601fd0d\r\nx-fid-cus: \r\nx-fid-cua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-fid-cal: en-US,en;q=0.5\r\nx-fid-cip: 91.90.42.154\r\naccess-control-allow-origin: https://www.zupimages.net\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\naccess-control-expose-headers: X-Fid-CIP, X-Fid-CAL, X-FID-CUA, X-Fid-CUS, X-Fid-TID\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"c1a5298f939e87e8f962a5edfc206918","sha1":"94dd9e08c129c785f7f256e82fbe0a30e6d1ae40","sha256":"3639efcd08abb273b1619e82e78c29a7df02c1051b1820e99fc395dcaa3326b8","sha512":"45ca55ccaa72b98b86c697fdf73fd364d4815a586f76cd326f1785bb816ff7f1f88b46fb8448b19356ee788eb7d300b9392709a289428070b5810d9b5c2d440d","ssdeep":"","tlshash":"c71000000000000000000000000c000000030000000000000000000000000000000000","first_seen":"2023-03-08T00:18:27Z","last_seen":"2026-05-18T05:18:11.767989Z","times_seen":1806,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adtrack.adleadevent.com/mailNotification.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7","fqdn":"adtrack.adleadevent.com","domain":"adleadevent.com","tld":"com"},"ip":{"addr":"52.16.49.73","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adleadevent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Thu, 28 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:4C:0A:F0:10:E8:73:AA:58:DC:0F:25:94:AA:AA:8D:D7:57:90:80","sha256":"D5:BA:5A:0D:A9:AC:74:7C:C1:17:14:5E:D4:4C:D9:10:D7:13:CB:01:FE:5C:AF:CD:A4:77:CD:5A:3D:A3:C6:76"}}},"request":{"raw":"GET /mailNotification.php?st=a96081b6-db78-48c4-9f82-b93e316fb1f7 HTTP/1.1\r\nHost: adtrack.adleadevent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, no-cache=\"set-cookie\"\r\nContent-Encoding: gzip\r\nContent-Type: application/x-javascript\r\nDate: Tue, 06 Jan 2026 17:33:37 GMT\r\nExpires: Sat, 26 Jul 1997 05:00:00 GMT\r\nLast-Modified: Tue, 06 Jan 2026 17:33:37 GMT\r\nPragma: no-cache\r\nServer: Apache\r\nSet-Cookie: AWSELB=9FC54D150466C174912E5199B1F8E822A79961F459747D218DA8067809F8238A086EE8BF67D63A2A90D1DB19587375008B81DF393E46C0AEB40A8EC769662133B964A72527;PATH=/\nAWSELBCORS=9FC54D150466C174912E5199B1F8E822A79961F459747D218DA8067809F8238A086EE8BF67D63A2A90D1DB19587375008B81DF393E46C0AEB40A8EC769662133B964A72527;PATH=/;SECURE;SAMESITE=None\r\nVary: Accept-Encoding\r\nContent-Length: 20\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":266,"dns":34,"connect":34,"send":0,"wait":34,"receive":0,"ssl":202},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=ed9032ff5e4a9211\u0026sid=7029c5013fc2b350\u0026pvi=6119f67270a50a54\u0026h=www.zupimages.net\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=83\u0026uri=%2Fviewer.php\u0026furl=https%3A%2F%2Fwww.zupimages.net%2Fviewer.php%3Fid%3D25%2F45%2Ft4ak.jpg\u0026sr=1280x1024\u0026type=latest:preinit\u0026_=1767720817909","fqdn":"track.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"104.20.32.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 10:52:18 GMT","end":"Tue, 24 Feb 2026 11:52:12 GMT"},"fingerprint":{"sha1":"B6:9D:80:75:30:91:31:61:89:22:9A:4B:50:C1:3D:50:C5:DD:79:C2","sha256":"82:81:8F:85:CD:7F:5A:CF:50:A9:9E:92:7A:47:D4:00:E4:A9:6A:8C:8F:0A:17:2E:F9:BB:56:15:6C:46:EC:CC"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=ed9032ff5e4a9211\u0026sid=7029c5013fc2b350\u0026pvi=6119f67270a50a54\u0026h=www.zupimages.net\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=83\u0026uri=%2Fviewer.php\u0026furl=https%3A%2F%2Fwww.zupimages.net%2Fviewer.php%3Fid%3D25%2F45%2Ft4ak.jpg\u0026sr=1280x1024\u0026type=latest:preinit\u0026_=1767720817909 HTTP/1.1\r\nHost: track.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 06 Jan 2026 17:33:38 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b9cf6284a680b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T04:38:10.725155Z","times_seen":15467974,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-pv.prod.first-id.fr/pv?p=https%3A%2F%2Fwww.zupimages.net%2Fviewer.php%3Fid%3D25%2F45%2Ft4ak.jpg\u0026fid=c573cbe15015401f9e080146e16f995d\u0026fidt=1\u0026fidclientId=T656dc5f8NdhGJ\u0026screenWidth=1280\u0026screenHeight=1024\u0026im=-2\u0026ver=1.35.1\u0026tcstr=\u0026ipv4=91.90.42.154\u0026thirdId=c6ee5beb04944d498d7cf4331601fd0d","fqdn":"api-pv.prod.first-id.fr","domain":"first-id.fr","tld":"fr"},"ip":{"addr":"23.36.77.138","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:41.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.first-id.fr","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 09:58:09 GMT","end":"Wed, 14 Jan 2026 09:58:08 GMT"},"fingerprint":{"sha1":"D1:58:82:A9:9E:86:B8:99:18:9E:AD:18:5E:92:72:9C:76:9E:78:7D","sha256":"8C:B1:18:60:40:1C:A0:CE:C7:33:1A:94:4B:84:5A:AA:32:EE:D7:3E:BA:68:89:EB:99:76:8E:E7:02:4C:85:5C"}}},"request":{"raw":"GET /pv?p=https%3A%2F%2Fwww.zupimages.net%2Fviewer.php%3Fid%3D25%2F45%2Ft4ak.jpg\u0026fid=c573cbe15015401f9e080146e16f995d\u0026fidt=1\u0026fidclientId=T656dc5f8NdhGJ\u0026screenWidth=1280\u0026screenHeight=1024\u0026im=-2\u0026ver=1.35.1\u0026tcstr=\u0026ipv4=91.90.42.154\u0026thirdId=c6ee5beb04944d498d7cf4331601fd0d HTTP/1.1\r\nHost: api-pv.prod.first-id.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zupimages.net/\r\nOrigin: https://www.zupimages.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 2\r\nexpires: Tue, 06 Jan 2026 17:33:41 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Tue, 06 Jan 2026 17:33:41 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1767720821705_388255070_2378679230_25_964_0_22_21\";dur=1\r\naccess-control-allow-origin: https://www.zupimages.net\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"c1a5298f939e87e8f962a5edfc206918","sha1":"94dd9e08c129c785f7f256e82fbe0a30e6d1ae40","sha256":"3639efcd08abb273b1619e82e78c29a7df02c1051b1820e99fc395dcaa3326b8","sha512":"45ca55ccaa72b98b86c697fdf73fd364d4815a586f76cd326f1785bb816ff7f1f88b46fb8448b19356ee788eb7d300b9392709a289428070b5810d9b5c2d440d","ssdeep":"","tlshash":"c71000000000000000000000000c000000030000000000000000000000000000000000","first_seen":"2023-03-08T00:18:27Z","last_seen":"2026-05-18T05:18:11.767989Z","times_seen":1806,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":80,"dns":54,"connect":1,"send":0,"wait":2,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/requestform.js?siteId=14857\u0026formatId=28","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.themoneytizer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 15:23:25 GMT","end":"Sun, 22 Mar 2026 16:23:24 GMT"},"fingerprint":{"sha1":"47:49:49:D0:A3:6E:DC:D5:BA:9B:BA:A1:CB:54:56:93:EA:93:E9:2B","sha256":"FD:6C:16:11:91:21:91:59:5E:E0:9E:D8:EF:A5:07:5E:C2:90:06:D8:4A:91:D5:AF:C8:BA:53:E0:3C:52:ED:09"}}},"request":{"raw":"GET /s/requestform.js?siteId=14857\u0026formatId=28 HTTP/1.1\r\nHost: ads.themoneytizer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript\r\nx-powered-by: PHP/8.2.17\r\ncache-control: max-age=259200\r\napigw-requestid: WvyBgiY2DoEEMrw=\r\nlast-modified: Tue, 06 Jan 2026 05:00:06 GMT\r\nvary: accept-encoding\r\nage: 45211\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b9cf624380c56b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":777,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"be1c4032eeaa9b0e0e4434c855901b17","sha1":"7ccda5a1da4a8c35020c0677eab42f3557c0e1bd","sha256":"c41e144e731d6b34c1c2eb429d8d799e924202a88336975ebdd934e3e9dba430","sha512":"6cd007753dfd60c57e8af15ceb1abaa86d4031d88f08e13090f73fd7d86f452d30fde7152e0a5fc10f7a5273a56f19dc03db2820f9446e23de81bfe27db094c7","ssdeep":"","tlshash":"5c016d5eac73d02084133c8b9bffd109a912b6176595cc6ab5cc8cc85f10a644d22b8c","first_seen":"2025-11-03T12:11:26.607674Z","last_seen":"2026-04-17T10:19:27.328575Z","times_seen":8,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":80,"dns":36,"connect":3,"send":0,"wait":8,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/gen.js?type=28","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.themoneytizer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 15:23:25 GMT","end":"Sun, 22 Mar 2026 16:23:24 GMT"},"fingerprint":{"sha1":"47:49:49:D0:A3:6E:DC:D5:BA:9B:BA:A1:CB:54:56:93:EA:93:E9:2B","sha256":"FD:6C:16:11:91:21:91:59:5E:E0:9E:D8:EF:A5:07:5E:C2:90:06:D8:4A:91:D5:AF:C8:BA:53:E0:3C:52:ED:09"}}},"request":{"raw":"GET /s/gen.js?type=28 HTTP/1.1\r\nHost: ads.themoneytizer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript\r\nx-powered-by: PHP/8.2.17\r\ncache-control: max-age=259200\r\napigw-requestid: WvyBkjscDoEEMyA=\r\nlast-modified: Tue, 06 Jan 2026 05:00:07 GMT\r\nvary: accept-encoding\r\nage: 45210\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b9cf624380e56b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4566,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3205)","md5":"6e0579662fcf9cfda826db5676f515a9","sha1":"b0f749d8ef2e0e2a1ffb12ffb6491b990f8f41db","sha256":"3dd4f53067dd0f0bd875bcf7acebfb72e908b5329da8f19ab48fbbe4aa10daa5","sha512":"862c2ea4e78e6956c77b646c3823816e86180150262f2ad7b163bc40522ed1ca81415745748c0d0a4ac7869c567019d58a1583d5eae4f50bcc6382b3e1bd4d07","ssdeep":"96:pi9YlpiA/ncovvSPN4sNFf/Tc5lazXrQFZBQqg+BY8wPMW9SGZwPMpqi1u9JXj:cY2A/nckvSBf/webrQFZPgCY8wH9/Zw7","tlshash":"2791a4072691393b25d2f131dc9f1544713b9363058688695a4c8dc97fac0ba11fdefc","first_seen":"2024-06-12T00:51:37Z","last_seen":"2026-05-14T02:05:04.468933Z","times_seen":2328,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":80,"dns":35,"connect":3,"send":0,"wait":7,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.themoneytizer.com/s/gen.js?type=1","fqdn":"ads.themoneytizer.com","domain":"themoneytizer.com","tld":"com"},"ip":{"addr":"104.20.19.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zupimages.net/viewer.php?id=25/45/t4ak.jpg","date":"2026-01-06T17:33:37.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.themoneytizer.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 15:23:25 GMT","end":"Sun, 22 Mar 2026 16:23:24 GMT"},"fingerprint":{"sha1":"47:49:49:D0:A3:6E:DC:D5:BA:9B:BA:A1:CB:54:56:93:EA:93:E9:2B","sha256":"FD:6C:16:11:91:21:91:59:5E:E0:9E:D8:EF:A5:07:5E:C2:90:06:D8:4A:91:D5:AF:C8:BA:53:E0:3C:52:ED:09"}}},"request":{"raw":"GET /s/gen.js?type=1 HTTP/1.1\r\nHost: ads.themoneytizer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zupimages.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 17:33:37 GMT\r\ncontent-type: application/javascript\r\nx-powered-by: PHP/8.2.17\r\ncache-control: max-age=259200\r\napigw-requestid: WvyBqhnbDoEEP9Q=\r\nlast-modified: Tue, 06 Jan 2026 05:00:07 GMT\r\nvary: accept-encoding\r\nage: 45210\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b9cf624280256b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4566,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3205)","md5":"6e0579662fcf9cfda826db5676f515a9","sha1":"b0f749d8ef2e0e2a1ffb12ffb6491b990f8f41db","sha256":"3dd4f53067dd0f0bd875bcf7acebfb72e908b5329da8f19ab48fbbe4aa10daa5","sha512":"862c2ea4e78e6956c77b646c3823816e86180150262f2ad7b163bc40522ed1ca81415745748c0d0a4ac7869c567019d58a1583d5eae4f50bcc6382b3e1bd4d07","ssdeep":"96:pi9YlpiA/ncovvSPN4sNFf/Tc5lazXrQFZBQqg+BY8wPMW9SGZwPMpqi1u9JXj:cY2A/nckvSBf/webrQFZPgCY8wH9/Zw7","tlshash":"2791a4072691393b25d2f131dc9f1544713b9363058688695a4c8dc97fac0ba11fdefc","first_seen":"2024-06-12T00:51:37Z","last_seen":"2026-05-14T02:05:04.468933Z","times_seen":2328,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":33,"connect":3,"send":0,"wait":7,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}