{"report_id":"dd7745f7-4cc5-4069-9d54-4c405dc70939","version":6,"status":"done","tags":[],"date":"2025-10-12T16:56:23Z","url":{"schema":"http","addr":"fourthcheesy.com/zbu9wt68h?key=f80186edc81cf96ffbf4403252a1acf1","fqdn":"fourthcheesy.com","domain":"fourthcheesy.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":0,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39","fqdn":"aniplaytree.com","domain":"aniplaytree.com","tld":"com"},"title":"Everlusting life"},"submit":{"url":{"schema":"http","addr":"fourthcheesy.com/zbu9wt68h?key=f80186edc81cf96ffbf4403252a1acf1","fqdn":"fourthcheesy.com","domain":"fourthcheesy.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":0,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-16T16:56:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"lust-games.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"fourthcheesy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"www.adx29.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-10-05T22:31:22.752325Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aniplaytree.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-03","domain_rank":0,"first_seen":"2025-10-08T11:12:25.536757Z","last_seen":"2025-10-08T11:12:25.536757Z","alert_count":0,"request_count":7,"received_data":554094,"sent_data":3630,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lust-games.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-17","domain_rank":0,"first_seen":"2025-09-22T17:46:43.230543Z","last_seen":"2025-10-08T11:12:26.065292Z","alert_count":1,"request_count":1,"received_data":1866,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fourthcheesy.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-15","domain_rank":0,"first_seen":"2025-09-16T04:23:34.744544Z","last_seen":"2025-10-09T20:00:41.590419Z","alert_count":3,"request_count":3,"received_data":27242,"sent_data":3776,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.adx29.com","ip":{"addr":"139.59.77.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"India","country_code":"IN"},"domain_registered":"2025-10-04","domain_rank":0,"first_seen":"2025-10-08T11:12:25.553936Z","last_seen":"2025-10-08T11:12:25.553936Z","alert_count":1,"request_count":1,"received_data":19593,"sent_data":902,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fourthcheesy.com/zbu9wt68h?key=f80186edc81cf96ffbf4403252a1acf1","fqdn":"fourthcheesy.com","domain":"fourthcheesy.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d5a9e972c4251976da2da0e1ee62b3e","sha1":"1c3b8ed26ebdbc13b31e08827c76d6fa6b97e312","sha256":"6841e75f48e76ea9083e3b60dcd7448038e2cd876209f85b46e9dbfe681d7fad","sha512":"ddca46363edc2a86c231e206206da4be8ecedadfa0407f6b748ed4c0ab641e6574e68eded242dce7014138c1d42a07fe4a4365746f4b2e26f25607a65e1715ba","ssdeep":"96:b2YfIuzVcmCmPIHIboIgpwgH38MnVeSa+A9SOM7BnZPAP4d:b2YfTzSjkc6ozwgXtn3a39SpVWP4d","tlshash":"3a9141912834b874407d1917e5af73153a334e2bba027060912d5ae83d39e9bb626fdf","size":4485,"data":"","first_seen":"2025-10-12T16:56:24.313254Z","last_seen":"2025-10-12T16:56:24.313254Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39","fqdn":"aniplaytree.com","domain":"aniplaytree.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75e2c5803acf97eee11be5def313c29c","sha1":"d72d520c8c191b075f64fa17d9123b2f7b7ce64c","sha256":"6b4c184620530b0cffa97e2ad2a91ffdd17e3b1b0e174f98765ec036a12dec80","sha512":"959541e24649d8f9be732d4f1c48f5ad987f893e5fb928b059847b9f70a2a1b057160115e7b95a15f68abb1be7ed902518d846672008b0df99f64ffd78a039c0","ssdeep":"","tlshash":"aa116629b0b2a25134fb568c074b255c70be4243301ce8adf44cc3a58f2fd0b48959c9","size":904,"data":"","first_seen":"2025-10-08T11:12:32.705233Z","last_seen":"2025-10-31T12:16:08.551614Z","times_seen":275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39","fqdn":"aniplaytree.com","domain":"aniplaytree.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce658297ef6e5209e3c0f843bf37635d","sha1":"99eb0010ec073ad114e7501ccddb8594352a7ef1","sha256":"6ceef88f82095a509ab0aebec07c0b3c021c8b703741dbbd854c727b4950ed8c","sha512":"2fee56b68ac1166326c17298efa230f68ed495421a7f2ea84267f52cab091743d9d632adc6334f1f56985e884c29ae739e332db550263b7ce47d64236b0f46ce","ssdeep":"","tlshash":"a1410299606b15309227f0ae264b7684787910077801fd9d375c87c80fd2f9d91ab7de","size":2215,"data":"","first_seen":"2025-06-25T14:09:56.822961Z","last_seen":"2026-02-22T06:55:47.478431Z","times_seen":319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lust-games.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"lust-games.com","domain":"lust-games.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-11T12:56:48.283324Z","times_seen":299489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fourthcheesy.com/zbu9wt68h?key=f80186edc81cf96ffbf4403252a1acf1","date":"2025-10-12T16:56:00.149Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fourthcheesy.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fourthcheesy.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T12:55:49.320816Z","times_seen":13621212,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aniplaytree.com/ScoutCondensed-Bold.woff","fqdn":"aniplaytree.com","domain":"aniplaytree.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39","date":"2025-10-12T16:56:01.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aniplaytree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 09:57:36 GMT","end":"Fri, 02 Jan 2026 10:57:34 GMT"},"fingerprint":{"sha1":"5A:BA:95:29:A5:48:AA:53:C1:F4:BC:D2:A4:85:CE:76:3C:20:E8:7C","sha256":"D5:0D:EE:20:D7:74:D0:E4:90:4E:9C:FD:D5:53:6A:F1:61:14:F6:8B:97:A5:F2:0F:C7:30:EA:39:95:D0:84:19"}}},"request":{"raw":"GET /ScoutCondensed-Bold.woff HTTP/1.1\r\nHost: aniplaytree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Oct 2025 16:56:01 GMT\r\ncontent-type: application/font-woff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FatJrKvTqED%2BguzM0n1tmAhcmYuRlEEoJabXG7q6r1RdXLzLJBHH4nXUNWo5JV7ijXZhoUP6KiUnGKP%2BThraLQL%2FxCdVDAsTyz0FPflQX%2BkpVY4JZq395Ww%3D\"}]}\r\netag: W/\"8d2a244ab4d2c2e8d1e2dd8c275997eb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 98d820d2ff87569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6496,"size_decoded":0,"mime_type":"application/font-woff","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T12:55:49.320816Z","times_seen":13621212,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lust-games.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"lust-games.com","domain":"lust-games.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39","date":"2025-10-12T16:56:01.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lust-games.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 10:18:21 GMT","end":"Tue, 16 Dec 2025 11:18:11 GMT"},"fingerprint":{"sha1":"0D:2F:33:47:8D:0C:A2:48:70:96:57:48:EA:3F:9D:07:80:B1:16:85","sha256":"C2:60:0B:CF:FE:DB:3B:70:C4:8C:8D:E9:22:B9:D5:D8:94:99:E1:33:5B:50:4D:D7:D5:9E:6B:AC:90:0B:83:72"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: lust-games.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aniplaytree.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 16:56:01 GMT\r\ncontent-type: application/javascript\r\nexpires: Sun, 12 Oct 2025 17:44:01 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UwhUbj8kEKdus1Kn0Wy9MJy02cmES0WHm3mov%2BBEXh9NLdpGCbtTZdcywU%2Br%2F%2FeyGTRKLtPN2ZLi9sPERyu7W41ga10A1%2BT00ZTQPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98d820d45cca0b51-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-11T12:56:48.283324Z","times_seen":299489,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":213,"dns":38,"connect":5,"send":0,"wait":4,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"lust-games.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aniplaytree.com/ScoutCondensed-Bold.woff","fqdn":"aniplaytree.com","domain":"aniplaytree.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39","date":"2025-10-12T16:56:01.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aniplaytree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 09:57:36 GMT","end":"Fri, 02 Jan 2026 10:57:34 GMT"},"fingerprint":{"sha1":"5A:BA:95:29:A5:48:AA:53:C1:F4:BC:D2:A4:85:CE:76:3C:20:E8:7C","sha256":"D5:0D:EE:20:D7:74:D0:E4:90:4E:9C:FD:D5:53:6A:F1:61:14:F6:8B:97:A5:F2:0F:C7:30:EA:39:95:D0:84:19"}}},"request":{"raw":"GET /ScoutCondensed-Bold.woff HTTP/1.1\r\nHost: aniplaytree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Oct 2025 16:56:01 GMT\r\ncontent-type: application/font-woff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FatJrKvTqED%2BguzM0n1tmAhcmYuRlEEoJabXG7q6r1RdXLzLJBHH4nXUNWo5JV7ijXZhoUP6KiUnGKP%2BThraLQL%2FxCdVDAsTyz0FPflQX%2BkpVY4JZq395Ww%3D\"}]}\r\netag: W/\"8d2a244ab4d2c2e8d1e2dd8c275997eb\"\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 98d820d3582e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6496,"size_decoded":0,"mime_type":"application/font-woff","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T12:55:49.320816Z","times_seen":13621212,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fourthcheesy.com/favicon.ico","fqdn":"fourthcheesy.com","domain":"fourthcheesy.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fourthcheesy.com/zbu9wt68h?key=f80186edc81cf96ffbf4403252a1acf1","date":"2025-10-12T16:56:00.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fourthcheesy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 21:21:46 GMT","end":"Mon, 08 Dec 2025 21:21:45 GMT"},"fingerprint":{"sha1":"E3:4E:75:08:F2:8B:CB:77:5D:BD:02:A1:E4:72:4C:FF:C3:CE:33:3A","sha256":"D9:E1:CB:27:18:F4:BC:8E:D2:C5:21:00:D6:44:2D:B6:1B:05:26:73:F5:AB:4B:A6:AC:17:7C:87:41:C7:D0:E2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fourthcheesy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fourthcheesy.com/api/users?token=L3pidTl3dDY4aD9rZXk9OWNhNjAxYTlmNDdjNzM1ZGY3NmQ1Y2E0NmZhMjZhNjYmc3VibWV0cmljPTI2NTg3MTYx\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Bpb95QjNHYkbz2rz74qUWiq5pu6Q8h8w5zSY03_LxH0; cjs=t\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T12:55:49.320816Z","times_seen":13621212,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"fourthcheesy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fourthcheesy.com/api/users?token=L3pidTl3dDY4aD9rZXk9ZjgwMTg2ZWRjODFjZjk2ZmZiZjQ0MDMyNTJhMWFjZjEmcHN0PTE3NjAyODgyMTkmcm10Yz10JnNodT1mZjdkOWNkOGQyODc2ZDA2MGI3OWRiZDcyN2ZjNWVkN2ViYjg2NzI2NzJmYTEwODllNGY4ODBhM2M3MTJjOGMwOGM0NDg5YjY5YjljYjlmNDBkNGM4MWE0MWViMDhlMzNhMjk3MDI3MThkYjBkNGZjMzhkMmI2ZjQ2NDYwZGQzYzUwNDE2ZWUyOWYzMzI2ZDk0YWUwOWYwOGNlYWZjOTRkMjQ2YjU3YjJmMDM4ODU4YzFkYTRmYyZwaWk9JmluPSZ1dWlkPQ","fqdn":"fourthcheesy.com","domain":"fourthcheesy.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T16:56:00.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fourthcheesy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 21:21:46 GMT","end":"Mon, 08 Dec 2025 21:21:45 GMT"},"fingerprint":{"sha1":"E3:4E:75:08:F2:8B:CB:77:5D:BD:02:A1:E4:72:4C:FF:C3:CE:33:3A","sha256":"D9:E1:CB:27:18:F4:BC:8E:D2:C5:21:00:D6:44:2D:B6:1B:05:26:73:F5:AB:4B:A6:AC:17:7C:87:41:C7:D0:E2"}}},"request":{"raw":"GET /api/users?token=L3pidTl3dDY4aD9rZXk9ZjgwMTg2ZWRjODFjZjk2ZmZiZjQ0MDMyNTJhMWFjZjEmcHN0PTE3NjAyODgyMTkmcm10Yz10JnNodT1mZjdkOWNkOGQyODc2ZDA2MGI3OWRiZDcyN2ZjNWVkN2ViYjg2NzI2NzJmYTEwODllNGY4ODBhM2M3MTJjOGMwOGM0NDg5YjY5YjljYjlmNDBkNGM4MWE0MWViMDhlMzNhMjk3MDI3MThkYjBkNGZjMzhkMmI2ZjQ2NDYwZGQzYzUwNDE2ZWUyOWYzMzI2ZDk0YWUwOWYwOGNlYWZjOTRkMjQ2YjU3YjJmMDM4ODU4YzFkYTRmYyZwaWk9JmluPSZ1dWlkPQ HTTP/1.1\r\nHost: fourthcheesy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fourthcheesy.com/api/users?token=L3pidTl3dDY4aD9rZXk9OWNhNjAxYTlmNDdjNzM1ZGY3NmQ1Y2E0NmZhMjZhNjYmc3VibWV0cmljPTI2NTg3MTYx\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNjU4NzE2MSwiayI6ImY4MDE4NmVkYzgxY2Y5NmZmYmY0NDAzMjUyYTFhY2YxIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoyMDk2NDkyLCJwaWQiOjYyNzA4MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozOCwiYWlkIjoyOCwicHQiOjQsInBrIjoiemJ1OXd0NjhoIiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6ZmFsc2UsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiIiwiYXIiOltdfX0.Bpb95QjNHYkbz2rz74qUWiq5pu6Q8h8w5zSY03_LxH0; cjs=t\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.19.5\r\nDate: Sun, 12 Oct 2025 16:56:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nLocation: https://www.adx29.com/chlfl2k.php?key=77c7abc02cc18e818916\u0026SUB_ID_SHORT=5a768c6eec51f210b3d1fb74c80faf11\u0026COST_CPA=\u0026PLACEMENT_ID=26587161\u0026CAMPAIGN_ID=1319227\u0026DEVICE_BRAND=Unknown\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026USER_CARRIER=Blix%20Solutions\u0026USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026REMOTE_LANGUAGE=11\u0026BANNER_ID=3532192\r\nSet-Cookie: pdhtkv=true; expires=Mon, 13 Oct 2025 16:56:00 GMT; path=/\nuncs=1; expires=Mon, 13 Oct 2025 16:56:00 GMT; path=/\npdhtkv28=true; expires=Mon, 13 Oct 2025 16:56:00 GMT; path=/\nuncs28=1; expires=Mon, 13 Oct 2025 16:56:00 GMT; path=/\nu_pl26587161=1; expires=Mon, 13 Oct 2025 16:56:00 GMT; path=/\niprc_c+75ce1248e92a7c00c03192b876b61516=1319227; expires=Mon, 13 Oct 2025 16:56:00 GMT; path=/\niprc_c:1319227=1; expires=Mon, 13 Oct 2025 16:56:00 GMT; path=/\niprc_a+a3c53ccae2604cdb0b62c465fd03db18=521830; expires=Sun, 19 Oct 2025 16:56:00 GMT; path=/\niprc_a:521830=1; expires=Sun, 19 Oct 2025 16:56:00 GMT; path=/\r\nHost: fourthcheesy.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e1461c18f857ff5c337b0459038adc3d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19156,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T12:55:49.320816Z","times_seen":13621212,"resource_available":true,"data":null}},"time_used":869,"timings":{"blocked":284,"dns":1,"connect":92,"send":0,"wait":298,"receive":1,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"fourthcheesy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.adx29.com/chlfl2k.php?key=77c7abc02cc18e818916\u0026SUB_ID_SHORT=5a768c6eec51f210b3d1fb74c80faf11\u0026COST_CPA=\u0026PLACEMENT_ID=26587161\u0026CAMPAIGN_ID=1319227\u0026DEVICE_BRAND=Unknown\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026USER_CARRIER=Blix%20Solutions\u0026USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026REMOTE_LANGUAGE=11\u0026BANNER_ID=3532192","fqdn":"www.adx29.com","domain":"adx29.com","tld":"com"},"ip":{"addr":"139.59.77.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T16:56:00.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.adx29.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 09:58:05 GMT","end":"Fri, 02 Jan 2026 09:58:04 GMT"},"fingerprint":{"sha1":"60:75:06:56:1C:C4:A5:74:53:B0:51:78:6C:F4:CA:08:9D:6F:EB:32","sha256":"DA:FF:30:A1:79:E1:C6:CE:0B:DC:40:22:78:10:0E:8C:2B:82:E1:0A:D6:85:1E:93:A6:FF:82:42:21:29:EB:E7"}}},"request":{"raw":"GET /chlfl2k.php?key=77c7abc02cc18e818916\u0026SUB_ID_SHORT=5a768c6eec51f210b3d1fb74c80faf11\u0026COST_CPA=\u0026PLACEMENT_ID=26587161\u0026CAMPAIGN_ID=1319227\u0026DEVICE_BRAND=Unknown\u0026BROWSER_NAME=Firefox\u0026USER_OS=Windows\u0026USER_CARRIER=Blix%20Solutions\u0026USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026REMOTE_LANGUAGE=11\u0026BANNER_ID=3532192 HTTP/1.1\r\nHost: www.adx29.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fourthcheesy.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Sun, 12 Oct 2025 16:56:01 GMT\r\nlocation: https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39\r\nset-cookie: uclick=yr7Zx1lfPNk107H1YWCYvlVW9TfaTHiPbmM9QLwFBe5udVkXNt0j7vUY63jFOm5R20FJuec=; Max-Age=31536000; SameSite=Lax\nbcid=d3ltr8cufias73d31oa0; Max-Age=31536000; SameSite=Lax\r\nvia: 1.1 Caddy\r\nx-request-id: 5e6a36b0-0d52-4957-aa11-b9c17f0423d2\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":null,"data":{"size":19156,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T12:55:49.320816Z","times_seen":13621212,"resource_available":true,"data":null}},"time_used":929,"timings":{"blocked":379,"dns":27,"connect":169,"send":0,"wait":171,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"www.adx29.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aniplaytree.com/logo.webp","fqdn":"aniplaytree.com","domain":"aniplaytree.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39","date":"2025-10-12T16:56:01.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aniplaytree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 09:57:36 GMT","end":"Fri, 02 Jan 2026 10:57:34 GMT"},"fingerprint":{"sha1":"5A:BA:95:29:A5:48:AA:53:C1:F4:BC:D2:A4:85:CE:76:3C:20:E8:7C","sha256":"D5:0D:EE:20:D7:74:D0:E4:90:4E:9C:FD:D5:53:6A:F1:61:14:F6:8B:97:A5:F2:0F:C7:30:EA:39:95:D0:84:19"}}},"request":{"raw":"GET /logo.webp HTTP/1.1\r\nHost: aniplaytree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Oct 2025 16:56:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12006\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7c144d6897847f0692650778b02c3309\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWljnRgdOqKo0BIiLfDxkJtCeApXjGzqGPqnAtQUN3xIb7FZLo8qL4KvuVcj7iyxa9qfx0SZKK%2FJtUupzspmbFLB31XCyn5J7mv6erQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 98d820d2ff8d569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"19fce64510863e9c4c3938ffca727031","sha1":"3ee70cdc238dd90506af3725324587a990e9e2ee","sha256":"d5d62f87a16fc91b790a95501bef6c08716402e3721813fd3cb951668a6b4c6a","sha512":"156bce397734dd11cb14a7f76b713d546abcf19935c05cb59532a4a9d568bf3faf8ebd3ffd7a969d1e0143d7209803a5ae38ce116021a54ac05d6afb275195aa","ssdeep":"192:fzJVoTfzuKiTrzkrnEugLCzndCpsC0EiNcFQuNljNnK4i/8KfZwTv1xPlT:fzJVfKSrzkANLCWPi/WjoZqTXd","tlshash":"8142c0d499125337fb23bfb9016daebeb703f1748ab7a0190f9e302025781620639c54","first_seen":"2025-06-25T14:09:56.814545Z","last_seen":"2026-02-22T06:55:47.459815Z","times_seen":334,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fourthcheesy.com/zbu9wt68h?key=f80186edc81cf96ffbf4403252a1acf1","fqdn":"fourthcheesy.com","domain":"fourthcheesy.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T16:55:59.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fourthcheesy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 21:21:46 GMT","end":"Mon, 08 Dec 2025 21:21:45 GMT"},"fingerprint":{"sha1":"E3:4E:75:08:F2:8B:CB:77:5D:BD:02:A1:E4:72:4C:FF:C3:CE:33:3A","sha256":"D9:E1:CB:27:18:F4:BC:8E:D2:C5:21:00:D6:44:2D:B6:1B:05:26:73:F5:AB:4B:A6:AC:17:7C:87:41:C7:D0:E2"}}},"request":{"raw":"GET /zbu9wt68h?key=f80186edc81cf96ffbf4403252a1acf1 HTTP/1.1\r\nHost: fourthcheesy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Sun, 12 Oct 2025 16:55:59 GMT\r\nContent-Type: text/html\r\nContent-Length: 2227\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nVary: Accept-Encoding\r\nSet-Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Bpb95QjNHYkbz2rz74qUWiq5pu6Q8h8w5zSY03_LxH0; expires=Sun, 12 Oct 2025 16:56:59 GMT; path=/\r\nHost: fourthcheesy.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 90312843ec32483d0aae97320914ed8c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4631,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4630)","md5":"3a2adcb606f8e091fba28610e99494f3","sha1":"8b2809c2e1c3bf242a9a56e79411947a11545324","sha256":"0ce0946f01628d85cf36c17ebbac0d8d0744ef66ef2b84a8049257e7e92e71d9","sha512":"4b2813bc1f6e3fc87efce124bc74d62b1f9348ab6935e6702971c807e61115b7a3230c4e743fe989db01c3a26af2127d8db36c3a1944b39303bdd0c57ada3bcd","ssdeep":"96:z922YfIuzVcmCmPIHIboIgpwgH38MnVeSa+A9SOM7BnZPAP4m:Q2YfTzSjkc6ozwgXtn3a39SpVWP4m","tlshash":"8ba150913830b87440791917e5af73193a324e1bba027060916d5af83d39e9ba626fdf","first_seen":"2025-10-12T16:56:24.295519Z","last_seen":"2025-10-12T16:56:24.295519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":316,"dns":27,"connect":92,"send":0,"wait":99,"receive":1,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"fourthcheesy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39","fqdn":"aniplaytree.com","domain":"aniplaytree.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T16:56:01.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aniplaytree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 09:57:36 GMT","end":"Fri, 02 Jan 2026 10:57:34 GMT"},"fingerprint":{"sha1":"5A:BA:95:29:A5:48:AA:53:C1:F4:BC:D2:A4:85:CE:76:3C:20:E8:7C","sha256":"D5:0D:EE:20:D7:74:D0:E4:90:4E:9C:FD:D5:53:6A:F1:61:14:F6:8B:97:A5:F2:0F:C7:30:EA:39:95:D0:84:19"}}},"request":{"raw":"GET /land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39 HTTP/1.1\r\nHost: aniplaytree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fourthcheesy.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 16:56:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003ccontent_block_bg.webp\u003e; rel=\"preload\"; as=image, \u003cpaginator_active.svg\u003e; rel=\"preload\"; as=image, \u003cpaginator_inactive.svg\u003e; rel=\"preload\"; as=image, \u003cbutton_next.webp\u003e; rel=\"preload\"; as=image, \u003cbutton_next_ru.webp\u003e; rel=\"preload\"; as=image, \u003cbutton_redirect.svg\u003e; rel=\"preload\"; as=image, \u003cbutton_redirect_ru.svg\u003e; rel=\"preload\"; as=image, \u003csection_bg_1.webp\u003e; rel=\"preload\"; as=image, \u003c1_1.webp\u003e; rel=\"preload\"; as=image, \u003c1_1_selected.webp\u003e; rel=\"preload\"; as=image, \u003c1_2.webp\u003e; rel=\"preload\"; as=image, \u003c1_2_selected.webp\u003e; rel=\"preload\"; as=image, \u003c1_3.webp\u003e; rel=\"preload\"; as=image, \u003c1_3_selected.webp\u003e; rel=\"preload\"; as=image, \u003c2_1.webp\u003e; rel=\"preload\"; as=image, \u003c2_1_selected.webp\u003e; rel=\"preload\"; as=image, \u003c2_2.webp\u003e; rel=\"preload\"; as=image, \u003c2_2_selected.webp\u003e; rel=\"preload\"; as=image, \u003c2_3.webp\u003e; rel=\"preload\"; as=image, \u003c2_3_selected.webp\u003e; rel=\"preload\"; as=image, \u003csection_bg_3.webp\u003e; rel=\"preload\"; as=image, \u003c3_1.webp\u003e; rel=\"preload\"; as=image, \u003c3_1_selected.webp\u003e; rel=\"preload\"; as=image, \u003c3_2.webp\u003e; rel=\"preload\"; as=image, \u003c3_2_selected.webp\u003e; rel=\"preload\"; as=image, \u003c3_3.webp\u003e; rel=\"preload\"; as=image, \u003c3_3_selected.webp\u003e; rel=\"preload\"; as=image, \u003csection_bg_5.webp\u003e; rel=\"preload\"; as=image\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hZKYyVKjUJRWeoM8xxRS3Xy6mPEAyYNPj6ur4%2F3bgBzZsWUaYEaLqGFo1QfakMh%2FFXgjb5eTyc55rqixBuNjkxHWidjrIIOa1CRx%2FcY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 98d820d1a8980b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19156,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"97efd419212fd461b50c4be9439bf1a9","sha1":"04f2c6c477d35fad7aebd30266ad3de1767a334e","sha256":"a76737c86ec8a24e7ae77b17fec28fec52580cd9a504f7a811ac6b4d5077c299","sha512":"342622e92ebd12931f8d110d7bc6cc56eeb6e8f2b03a01e296c8cb4307c30866f79832e301a47e2b44df510f5d1af6ced92bd43fd1d2c0de875a199d4d2d8917","ssdeep":"192:3AQl/WjSxMqSxQSxaY3/qESxnWSR7zTSx5SxxLSn0oSHiRSxrMT1Q1Yio4ku0jdy:3AQlvzbH8hrGmiqiIJbQ","tlshash":"4b82952675462505913382e65fc326a8f7fdc003850669e879dca68a8ff7f50c1d3b9b","first_seen":"2025-10-08T11:12:32.674691Z","last_seen":"2025-10-31T12:16:08.55035Z","times_seen":275,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":205,"dns":35,"connect":1,"send":0,"wait":7,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aniplaytree.com/ScoutCondensed-Light.woff","fqdn":"aniplaytree.com","domain":"aniplaytree.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39","date":"2025-10-12T16:56:01.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aniplaytree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 09:57:36 GMT","end":"Fri, 02 Jan 2026 10:57:34 GMT"},"fingerprint":{"sha1":"5A:BA:95:29:A5:48:AA:53:C1:F4:BC:D2:A4:85:CE:76:3C:20:E8:7C","sha256":"D5:0D:EE:20:D7:74:D0:E4:90:4E:9C:FD:D5:53:6A:F1:61:14:F6:8B:97:A5:F2:0F:C7:30:EA:39:95:D0:84:19"}}},"request":{"raw":"GET /ScoutCondensed-Light.woff HTTP/1.1\r\nHost: aniplaytree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Oct 2025 16:56:01 GMT\r\ncontent-type: application/font-woff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ea21rOhylZdKJjZe5yaFoh3MW3Wd%2Bye90Zs6xqh2o%2BrDDH2YgEsd8fs2hQwOKm3Hn%2B0s0L9pmnQI4AI%2FjivzxOlEb5qq3IVpHZtIRa4%3D\"}]}\r\netag: W/\"377efb1bbbebfa4d01d4c30f4ecc043b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 98d820d2ff86569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6496,"size_decoded":0,"mime_type":"application/font-woff","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T12:55:49.320816Z","times_seen":13621212,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aniplaytree.com/poster.webp","fqdn":"aniplaytree.com","domain":"aniplaytree.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39","date":"2025-10-12T16:56:01.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aniplaytree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 09:57:36 GMT","end":"Fri, 02 Jan 2026 10:57:34 GMT"},"fingerprint":{"sha1":"5A:BA:95:29:A5:48:AA:53:C1:F4:BC:D2:A4:85:CE:76:3C:20:E8:7C","sha256":"D5:0D:EE:20:D7:74:D0:E4:90:4E:9C:FD:D5:53:6A:F1:61:14:F6:8B:97:A5:F2:0F:C7:30:EA:39:95:D0:84:19"}}},"request":{"raw":"GET /poster.webp HTTP/1.1\r\nHost: aniplaytree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 12 Oct 2025 16:56:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 107274\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"135d6a4eaac1df1d79670d50c6b7171a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BGsVVyoxbsB38rlXqNKTzsAoiJvxpdVItTrdvOoSA1VrvLN7Ab4%2Fsemkv5D7%2BoAmXkck6QX7cJ0fYk9yQPFfEv%2Foe6duOwr9qbwY%2Bc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 98d820d2ff8b569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107274,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"59a5504901c291334f66d11c2bf00ac2","sha1":"02fd789fcdd9e0709c70a027064d9381ec86fe5f","sha256":"55acf5ba81987067cbfadb64e0f55df35de161d4f6c4d2a70720d836e1769fcc","sha512":"e07bdfc0d7cf10b194efa7ae7f33fd21240cf8c29ac514b68e7d2cc7ed46a61a12a283bea5cb283d81c717f80d33163a1697f4d9c11fd46073c7ef65bf13d73c","ssdeep":"3072:sBAv2oxB6yIYsDEgsed629MdeY/uXMNNle86uE5YvZG7+V:sKv2onI/DtfEzuqe81Eg6+V","tlshash":"d0a3128fc9d5d145c23a6470e5bbf0e5ea34966bf1e2ca73654d0c330a5faeda136600","first_seen":"2025-06-25T14:09:56.802944Z","last_seen":"2026-02-22T06:55:47.458561Z","times_seen":333,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aniplaytree.com/video.mp4","fqdn":"aniplaytree.com","domain":"aniplaytree.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39","date":"2025-10-12T16:56:01.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aniplaytree.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 09:57:36 GMT","end":"Fri, 02 Jan 2026 10:57:34 GMT"},"fingerprint":{"sha1":"5A:BA:95:29:A5:48:AA:53:C1:F4:BC:D2:A4:85:CE:76:3C:20:E8:7C","sha256":"D5:0D:EE:20:D7:74:D0:E4:90:4E:9C:FD:D5:53:6A:F1:61:14:F6:8B:97:A5:F2:0F:C7:30:EA:39:95:D0:84:19"}}},"request":{"raw":"GET /video.mp4 HTTP/1.1\r\nHost: aniplaytree.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://aniplaytree.com/land0077?cli=d3ltr8cufias73d31oa0\u0026sub1=39\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sun, 12 Oct 2025 16:56:01 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 8034545\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7b1e2bfe3a6ee511972e90efbf64c3c0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o1igYNZkfgeOP6kPKXcX%2BmN%2FwkWqQ97Pbw8IHM4CKa6L4yi8BbeSgHMLSFpe6VWSSmjOkAJ8dTa43ypTEgsGZF00D29RH9aizerSRDA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncontent-range: bytes 0-8034544/8034545\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 98d820d36841569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389376,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"3fff830a7bb07207471a2d577e37ada9","sha1":"607e515e42345f68e27120a8b24c4ed326edc59c","sha256":"4ee5478b615e0b7d2b655763f7b8acff216bb6f3fcf81ae91826b276830ce334","sha512":"9c00fbbda6545c768945853128ea0e935849f1accb6e0033ab9e6a32350f75af4cc268cbc77ba8de0d970baa43922e8273018ee9ea46b675d80fae28c47f4edf","ssdeep":"6144:DJvRJaGJaebJQ6JVTJXAJZ5Jk9Jp9JWxJQhJs6JuRJMHJtpJOdJrRJJGJaQbJQ6l:wrsmxJ7o7ueDV0KJhv","tlshash":"60844856ad710d66fa9ef6bce066dbc4c19363aae4c6ebc370cd65140b389840a0f47d","first_seen":"2025-10-12T16:56:24.309051Z","last_seen":"2025-10-12T16:56:24.309051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}