{"report_id":"ddefc841-112a-41f8-8430-0376e065cf5e","version":6,"status":"done","tags":[],"date":"2026-02-04T19:12:23Z","url":{"schema":"http","addr":"the-tukif.cfd/","fqdn":"the-tukif.cfd","domain":"the-tukif.cfd","tld":"cfd"},"ip":{"addr":"192.64.119.216","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mastitales.com/","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"title":"Free XXX Porn Videos Watch Now - Masti Tales","dom":{"size":350,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a7d891b20cb8c4fcdf1aa840fd1b5fef","sha1":"77b4fcd19788a7995f076b1a4d2d226f0cf6898a","sha256":"133e78726ffb513df110d8106dbc8facf73ba9d62d6039217273fedc6f0662a0","sha512":"0ce5c6fb914d6103c286a14aae5dffed677b29b257dc0faea543b4ea45a49455d4a54c3829d03dea2a5d7e04880708918a525515c50111f1a11171a34d516faa","ssdeep":"","tlshash":"0be02b1945a725497829d0b04af0b3481da9800fe743cc48bbae72e09f84801cc575e4","dom_hash":"domhashd03f692d9eac3c2182f61f17fb5ccc1d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"the-tukif.cfd/","fqdn":"the-tukif.cfd","domain":"the-tukif.cfd","tld":"cfd"},"ip":{"addr":"192.64.119.216","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-11T19:12:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":9}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-04T19:12:11Z","timestamp":1770232331,"ip_dst":{"addr":"Client IP","port":59064,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"192.64.119.216","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2026-02-04T19:12:11.651977+0000\",\"flow_id\":300139193404282,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"192.64.119.216\",\"src_port\":80,\"dest_ip\":\"172.18.0.20\",\"dest_port\":59064,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"the-tukif.cfd\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://mastitales.com/\",\"length\":46},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":46,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":568,\"bytes_toclient\":505,\"start\":\"2026-02-04T19:12:01.166778+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-04T19:12:12Z","timestamp":1770232332,"ip_dst":{"addr":"Client IP","port":59076,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"192.64.119.216","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2026-02-04T19:12:12.371758+0000\",\"flow_id\":2177477988420666,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"192.64.119.216\",\"src_port\":80,\"dest_ip\":\"172.18.0.20\",\"dest_port\":59076,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"the-tukif.cfd\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://mastitales.com/\",\"length\":46},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":46,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":688,\"bytes_toclient\":505,\"start\":\"2026-02-04T19:12:01.887866+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"67a120c980.8f17d89ec7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":154722,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2026-01-30T06:02:13.260822Z","alert_count":14,"request_count":14,"received_data":5434,"sent_data":7488,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rtbrenab.net","ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-09-23","domain_rank":17910,"first_seen":"2024-10-01T12:19:47Z","last_seen":"2026-01-19T08:58:34.269097Z","alert_count":0,"request_count":6,"received_data":38441,"sent_data":16934,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.onclckmn.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-12-13","domain_rank":342528,"first_seen":"2023-12-28T01:05:45Z","last_seen":"2026-01-31T05:34:11.950172Z","alert_count":0,"request_count":1,"received_data":150211,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bid.onclcktg.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-11-28","domain_rank":350689,"first_seen":"2024-02-11T04:01:24Z","last_seen":"2026-01-31T05:34:12.932222Z","alert_count":0,"request_count":1,"received_data":1510,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-01T22:20:39.584991Z","alert_count":0,"request_count":1,"received_data":380373,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ad.twinrdengine.com","ip":{"addr":"34.111.67.216","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2023-06-07","domain_rank":79586,"first_seen":"2024-01-20T17:03:24Z","last_seen":"2026-01-30T00:39:16.586756Z","alert_count":0,"request_count":2,"received_data":4879,"sent_data":2150,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"a.adspector.io","ip":{"addr":"213.171.19.202","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2023-06-02","domain_rank":213577,"first_seen":"2024-06-28T02:35:48Z","last_seen":"2026-01-30T06:36:09.129819Z","alert_count":0,"request_count":1,"received_data":568,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"satincrave.com","ip":{"addr":"172.67.133.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-15","domain_rank":0,"first_seen":"2026-01-17T01:35:09.397796Z","last_seen":"2026-01-25T08:34:50.073826Z","alert_count":12,"request_count":3,"received_data":4041,"sent_data":1654,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"the-tukif.cfd","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1391607,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":2,"received_data":207979,"sent_data":880,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cbxyz.com","ip":{"addr":"104.18.43.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-12","domain_rank":225627,"first_seen":"2024-03-12T22:57:11Z","last_seen":"2026-01-31T02:16:20.420052Z","alert_count":0,"request_count":1,"received_data":13677,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"na.nawpush.com","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-12-21","domain_rank":175362,"first_seen":"2020-12-23T08:18:12Z","last_seen":"2026-01-31T01:43:51.450588Z","alert_count":3,"request_count":3,"received_data":4903,"sent_data":1434,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.capndr.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":156902,"first_seen":"2021-08-30T12:51:01Z","last_seen":"2026-01-30T07:19:40.613273Z","alert_count":6,"request_count":6,"received_data":2394,"sent_data":2490,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.cabnnr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":185771,"first_seen":"2021-08-30T12:50:21Z","last_seen":"2026-01-30T03:03:29.968227Z","alert_count":0,"request_count":4,"received_data":87668,"sent_data":1631,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mauc.onclckstr.com","ip":{"addr":"23.88.86.80","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-12-13","domain_rank":722291,"first_seen":"2024-05-28T21:20:29Z","last_seen":"2026-01-24T19:03:00.552836Z","alert_count":0,"request_count":1,"received_data":322,"sent_data":3435,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"btds.zog.link","ip":{"addr":"62.122.168.42","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-01-11","domain_rank":370858,"first_seen":"2019-10-07T21:35:03Z","last_seen":"2026-01-30T06:02:13.855396Z","alert_count":0,"request_count":2,"received_data":6050,"sent_data":1721,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.wpadmngr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-06-02","domain_rank":77954,"first_seen":"2021-06-02T14:43:46Z","last_seen":"2026-01-31T01:43:51.39823Z","alert_count":3,"request_count":3,"received_data":450669,"sent_data":1266,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"67a120c980.8f17d89ec7.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2026-01-05","domain_rank":0,"first_seen":"2026-02-04T01:39:13.199693Z","last_seen":"2026-02-04T01:39:13.199693Z","alert_count":4,"request_count":4,"received_data":155318,"sent_data":2028,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ntvpforever.com","ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-18","domain_rank":18811,"first_seen":"2021-11-19T01:49:18Z","last_seen":"2026-02-04T18:05:38.741901Z","alert_count":0,"request_count":12,"received_data":4188,"sent_data":6198,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"thumb.live.mmcdn.com","ip":{"addr":"104.17.38.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-18","domain_rank":181135,"first_seen":"2024-03-10T14:38:47Z","last_seen":"2026-02-01T03:15:24.937526Z","alert_count":0,"request_count":1,"received_data":436347,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bid.onclckbn.net","ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-09-19","domain_rank":353202,"first_seen":"2024-10-07T05:15:47Z","last_seen":"2026-01-31T06:39:32.811792Z","alert_count":0,"request_count":2,"received_data":17189,"sent_data":5086,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.60ah.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-01-18","domain_rank":285202,"first_seen":"2023-05-16T11:47:54Z","last_seen":"2026-01-30T08:00:46.315796Z","alert_count":0,"request_count":4,"received_data":10259,"sent_data":1932,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bid.onclckstr.com","ip":{"addr":"91.216.220.30","port":443,"asn":3232,"as":"ModernColo LP","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-12-13","domain_rank":445643,"first_seen":"2024-03-15T17:46:34Z","last_seen":"2026-01-30T08:59:34.463826Z","alert_count":0,"request_count":3,"received_data":26106,"sent_data":2194,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"chaturbate.com","ip":{"addr":"104.18.207.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-02-26","domain_rank":1169,"first_seen":"2012-05-22T23:11:36Z","last_seen":"2026-01-30T18:15:41.736603Z","alert_count":0,"request_count":1,"received_data":6097,"sent_data":619,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mastitales.com","ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3773883,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":43,"received_data":1360205,"sent_data":20385,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"bxSlider:4.2.15","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"07fac4b99e.2551910ed4.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2026-01-05","domain_rank":0,"first_seen":"2026-02-04T00:47:27.951837Z","last_seen":"2026-02-04T00:47:27.951837Z","alert_count":0,"request_count":6,"received_data":2070,"sent_data":5034,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"onclckmetrics.com","ip":{"addr":"138.201.237.88","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-12-21","domain_rank":18509,"first_seen":"2023-12-26T11:04:13Z","last_seen":"2026-01-31T05:34:11.884897Z","alert_count":0,"request_count":1,"received_data":322,"sent_data":831,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"drimquop.com","ip":{"addr":"178.63.5.120","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-03-10","domain_rank":17833,"first_seen":"2025-03-25T20:25:54.722464Z","last_seen":"2026-01-31T06:39:33.609146Z","alert_count":0,"request_count":1,"received_data":322,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"preroll.hostave3.net","ip":{"addr":"172.67.145.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-09-05","domain_rank":304993,"first_seen":"2018-02-22T21:32:02Z","last_seen":"2026-01-30T06:48:10.712864Z","alert_count":0,"request_count":3,"received_data":2368,"sent_data":1266,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flepquix.com","ip":{"addr":"178.63.5.120","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-03-10","domain_rank":17067,"first_seen":"2025-03-24T12:50:40.052973Z","last_seen":"2026-01-30T12:22:22.328452Z","alert_count":0,"request_count":6,"received_data":1932,"sent_data":2880,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"senzoriq.com","ip":{"addr":"172.67.218.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-16","domain_rank":0,"first_seen":"2025-12-09T05:31:10.655667Z","last_seen":"2026-01-26T07:36:34.981033Z","alert_count":0,"request_count":1,"received_data":19566,"sent_data":557,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"js.onclckbnr.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-12-13","domain_rank":384217,"first_seen":"2023-12-18T10:32:24Z","last_seen":"2026-01-31T06:39:33.876758Z","alert_count":0,"request_count":1,"received_data":85382,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ads.rdy.to","ip":{"addr":"104.21.27.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-25T09:33:09.66977Z","last_seen":"2026-01-31T06:39:33.411379Z","alert_count":0,"request_count":2,"received_data":2109,"sent_data":1046,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"onclckinp.com","ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-11-28","domain_rank":20672,"first_seen":"2024-01-03T15:28:46Z","last_seen":"2026-01-30T01:21:30.892023Z","alert_count":0,"request_count":2,"received_data":681,"sent_data":1028,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c675495748ef0df6858b93dd9e623c46","sha1":"e1be723e4e25d37282821c50b7e12796d3df5f8d","sha256":"9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271","sha512":"1775ad0e5bc7d3cc9ebdd032b94e440a0872f616f983ff867511984daba748ed52e1de5c67f0e4648947bef65b499b3a6197ff7726cf1f481b7d4253b6711127","ssdeep":"384:nudkTa6bYaGQZKbZi1X5U59g+rzyPSS1SMVu8r2WiWQK7XYANWck6QDhC2k+0CMu:uv9gPSSbs8PwhCK0CMl+ArJwz","tlshash":"e6b2b609b13939be05f632baf25ecb0550f6448d9827f0f4a8b5c94ddad88d4102fbe6","size":24252,"data":"","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-04-19T14:09:38.543476Z","times_seen":3892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc9686f3967ae1d906ff602c496966bb","sha1":"e3442cfdc3a2e2bf5695047f0fa5ef98c746fa7b","sha256":"a65feb9ba129cf081f77467d24f9d3b40020c0817b8125dbe1787ed5663734be","sha512":"707a37434e52910bf1ba8477554c6c853b5db56b664223f3fc5c7c33632d65c0ce97a9887779dd7f089fcb458cc051c38d0357e355714aa46a4d81b18d9de7aa","ssdeep":"","tlshash":"a22161e6c65114380126c26d61bf78cebe27922efa40c448ff7da020bb9c2b7547549d","size":1384,"data":"","first_seen":"2025-06-25T19:13:05.843452Z","last_seen":"2026-04-20T04:33:39.056758Z","times_seen":740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"63116ca3bdfc7ef0c9a09579faa8cb15","sha1":"d89ca9be8c6cead2d2a12f3e9a79edc27de2a6cc","sha256":"f670b2247c591e2af8adc9e0b31c64592554871c81deb0ccc4e7246f1ac4a5e2","sha512":"25de0033af0ccfafee7d4e9c99231c8bfc6004b082a03158be40c3536513493c4d8f7cfab57cf6c1a7e807ff4fe367c327f34bd9934978c352d294159e570a18","ssdeep":"","tlshash":"b7b0126612ce000bdf2212d452263c410f26317798c04c0161915c542c12c351114f6c","size":94,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.05761Z","times_seen":5990,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"be7bfc2a908a684a210d585ed55d30e5","sha1":"c0459f4c57d2e1a980fcac6fac8e47d3a18f237d","sha256":"9e9bd85194604c6912fb8f12147e0bdab67f1932f029c8accfb629bed57945c3","sha512":"2c2f6e1ec8c1e59bb7c57acfc09ffd94c332e1e6f5cae8e481633b1a2294eec0453c88b995ea7ab17b4eabad583de7806c04d05125baf69ff8e3a363a3051dd2","ssdeep":"","tlshash":"4d9002bd9840919455572b9605965844092040612945dd500041a46218660705e0596c","size":45,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.074545Z","times_seen":5985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a0bb2b917a2139d1e28fe43296edbfd9","sha1":"30c72615ba6def457f66cc870475aa91f8a7d626","sha256":"46b547a2290e02d6379c03cb35d2d696000b0a69e950d4a987cab7631f039c05","sha512":"5fc9279c55799c4ed7baafd33331b8fa61ecba4a8e3cdf0a4d281af5955b85b69d9aef0afc730944cc17d7dd54fab79db45c629a947c955f5c19f658d6782585","ssdeep":"","tlshash":"2ca012b333c2840147c3209000172984c02583e200040943802089a7361d035f81692c","size":83,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.050753Z","times_seen":5977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f48f4887afd273629c89c18117c7d6ef","sha1":"b4d7ba70f042062ebce7b56bcb7ab452a944e375","sha256":"72720823e7778fd15730f6cdd8c0271b7a33da888493257fa17304785879bd6b","sha512":"67efd8ae6ee25ba84cef24d492542719792088a4aaa254f3911e57f7a3becb9625d582e9388def60bc662461ff47ca595159635283fdcd5d566130f3c70c132a","ssdeep":"","tlshash":"6fa022f0a3cb2c30b2c320c000a30ccc202888b0200888000082c28b082c0b3a23a02c","size":67,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.802013Z","times_seen":5554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afrdtech.com/v1/script.js?kmnrKey=239040355","fqdn":"afrdtech.com","domain":"afrdtech.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7572a53970094bbe608dfd0599d0e4ef","sha1":"e1addb7d23ef0c6a291f011cae6515fbc531f7d3","sha256":"47c258f3c62f689975f99801f0de93627ba1e6f1b0f4f9643e7b8e07fad32eee","sha512":"050a3d2e49b28a938f03f53ce69e9acf10c68da28b7d2ca44c5be62eb82a22ac7e9dbe705297cdbca38b12517f24e833eba798e6aef8df8526d7a50a7efd8d8a","ssdeep":"768:6YLCnCAt9PEqlSUZOq2Q5qS54vzQsHNk6q5iT1svGOfkiRJRX6BZV/D:6FPp92QEtLc5iRs+OfbJRKBZVb","tlshash":"01332bae7656a42890b7217a403f7605f23e1e6ad50484d0e566ccc03de9f8b6227ffd","size":50675,"data":"","first_seen":"2026-01-20T12:50:51.172557Z","last_seen":"2026-02-07T18:22:28.729247Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-20T07:59:55.970089Z","times_seen":676977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/get/?go=1\u0026data=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","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"785aac7b203cd9d466135f7f38aff36d","sha1":"83c007d889dca3293e5e2ae0bba6b2554f7585ac","sha256":"eb7f910b8e1dd8bca14ffc981396b90a3401edd98fd5eee0364a717a3764f981","sha512":"1aee6f3eab8c6dde313f3991aae410bf1a9dcb7fbe15fef8ce184cc5c83f9b96a06e90f9356f530cd4be8ad031a45f4be5ef4370d59e2ec158f17f679703c615","ssdeep":"192:8BGRbbVGRbbyGRbbLGRbbQ9vLXl5bQ/+stzFC06Yw:BRb4RbNRbORbSvQ/+stA","tlshash":"3842d5087a73587240977019935b351132a4778399c9eda8fabcc326dfb873961ebb4c","size":13113,"data":"","first_seen":"2026-02-04T19:12:33.623455Z","last_seen":"2026-02-04T19:12:33.623455Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3c1bc1dd08f96349c433eb122aead61f","sha1":"604a16c0e2869cb47564301036b786202c8a8787","sha256":"869b75296a55932491e9a9847f1b8746d20031365f68588214df57565331437a","sha512":"33f6be39ce7c03944319279e0496969c0bc05f376f2b9587787d6bf108f043f75336b71a84a8a4dd9f47f2bf84137889bbf93dfef63a07ec2cc8fcc1008016ac","ssdeep":"","tlshash":"33a022a0b0c3b03033a32203802e8cece03000f000e0fee0c000a8302b22030b32c3ac","size":66,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.076189Z","times_seen":5985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.onclckbn.net/get/?go=1\u0026data=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","fqdn":"bid.onclckbn.net","domain":"onclckbn.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"22142731237fc9a63fbbd5e588b753a6","sha1":"3f5c6eafaf36b41b8d0d1d4a55021b4fd450c62d","sha256":"38381c98d13406ab8a1a0e4aca12b33eb2be8d7223f896fd2cd9dbcaf28c639e","sha512":"aa57d106c7d4c8bec77efdef878f850e18d43f0573aec8532ddb42f90a6c7c5103169e3446d14821695e6b564d917ca2e07263a727f82d461d6ec20094089d49","ssdeep":"192:828D+8D/8DE8DQ9vTXl5bQ/+stzFC06Yw:y7oJmvQ/+stA","tlshash":"ce42f84cb83755720493912392ab711e71a81683d584ede8ba7dc313dff477922e9b4c","size":12765,"data":"","first_seen":"2026-02-04T19:12:33.626266Z","last_seen":"2026-02-04T19:12:33.626266Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc9686f3967ae1d906ff602c496966bb","sha1":"e3442cfdc3a2e2bf5695047f0fa5ef98c746fa7b","sha256":"a65feb9ba129cf081f77467d24f9d3b40020c0817b8125dbe1787ed5663734be","sha512":"707a37434e52910bf1ba8477554c6c853b5db56b664223f3fc5c7c33632d65c0ce97a9887779dd7f089fcb458cc051c38d0357e355714aa46a4d81b18d9de7aa","ssdeep":"","tlshash":"a22161e6c65114380126c26d61bf78cebe27922efa40c448ff7da020bb9c2b7547549d","size":1384,"data":"","first_seen":"2025-06-25T19:13:05.843452Z","last_seen":"2026-04-20T04:33:39.056758Z","times_seen":740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"73fec96c215a8949433222a12792a539","sha1":"ec1ec7a7cd760dcda7ac66c75f332f7b86e87501","sha256":"cba1edf1f89e886d65ddaa10fa35c268dba2f4286d6f23a936d7eb8040b8f1e5","sha512":"ef9a2998146a0ad8bf0c773b0b500fef6d0e70e3b22952199d976566814ca7674f39606c902b4641f95ece4f6730eaf7fa708649d3c897a0e91d986969c4f189","ssdeep":"1536:7aftpnDfu3pIDBgJBpqgiZMZLUyzOBOi6mLEIWDDIWA:7g9DfuTPpqSL37m43U","tlshash":"67836c843290b4b541e640afa43f430af33d2d06b40aa458f16dede77b79e896176f39","size":84994,"data":"","first_seen":"2026-01-30T10:33:19.991148Z","last_seen":"2026-02-10T22:56:55.78229Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"9fb507f661392bb18734a143229795e8","sha1":"004279a4f630424371fbe72b6c2c45ac86b59ddd","sha256":"e495c02fb62945e7a859af557a81c73673dde7789fa538536b9b8eb3958cf16f","sha512":"1c209d5ac784cc5f12d74cbc9a195349b1aee933077ec935720bfd1d38d6634b3e49552e96d1290bf351e298e37bf38886c8edf12a13409cd819ce6d271ce4ef","ssdeep":"","tlshash":"51b0127820e520d60d6311c920fb5b98e8a0523010204801c148cc7434f4d61401541c","size":91,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.050104Z","times_seen":5981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a3e1b26ce1ce08bf4ab2f623e5936f78","sha1":"36dc38e63d6d61672791ea9319134504def2ce9c","sha256":"f67d06b9b4c2938c52806c4801d3dc13946c9891a019b97f0608e9ffb4f99abc","sha512":"00913437703bba046f4422e7c21313193ddf026c11f5624362eec110934db74d3bdb96e35b37610b50f02833eee9e3a79054a124537810c52ff72c38dadde86b","ssdeep":"","tlshash":"cca024cf70c47101cc4730d0300f1c0c5454043c150c0cc443c0c5435d330d5c30555c","size":70,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.794133Z","times_seen":5574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90dbdd26b3d1e0cd270dd9b6ac498821","sha1":"6ebeee13eab8e1497dda7cba084beb1467e5314e","sha256":"6b58629e2dd14d0c4cfe0db6414499044ac2489134525d6a69758f759268adfc","sha512":"349fee39fc4016460d7b77297cbf8ad5d45c4f315b6bf67f45f4af6c2d94141737e9d311625e7f7004ba2a13cbea042c2f03e032146a51a69690337d171532d8","ssdeep":"","tlshash":"61c080d815822cf161eb3741171ffa06f05331545ca11d21085563445e21c17d684554","size":172,"data":"","first_seen":"2026-02-04T19:12:33.629284Z","last_seen":"2026-02-04T19:12:33.629284Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d44f2c49d308c6800094d012d0643978","sha1":"c1c480570c5e354c24709198d874bbedec3ca1a8","sha256":"fb1e8e23875745979a723d03c3448af5cbc926826872893d3f0471847afac51c","sha512":"4be3f466241d01b4ceddb845b25741f54d34e43b517e8725daf75bd1abd2dabe71e901cd0c25bb6f1d8ad5abdde577ed1db7d24980c36f32beb9c58778944133","ssdeep":"96:HWJnG+MVvxkh0NhBaJzOHp+G1EbCQiQZAJ1tTBn0yXS+tpTQxA:2o+Mhxf9H9eWQVAhB08TH","tlshash":"18d1f1f6b97b334d979371ea2d161041500098a903adbc98fa64f2d5fcb4cfe192b350","size":6404,"data":"","first_seen":"2026-02-04T19:12:33.630608Z","last_seen":"2026-02-04T19:12:33.630608Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f7b734689cae2d039dae1123333dded","sha1":"e20b71453fccd4fcdca964d4d609111c77f60484","sha256":"996fbfcbf5a7091890788228af5539ec39c018efcc8ea9bad557991859f03572","sha512":"584f0a5e0a073862bae0d847a2a03f4a08fdfeca97e22eea85bef7399292cc408d2d236c297f44a8ea883829f094489f62a6ae6859600c5327e6f285551fa131","ssdeep":"1536:O18MdnC5OPz8YBP9r2RcZAdtK8wBgg0341LloXQTtQyodhm161zKK+AKn7K0ketc:mBFSGAdt6Rydhmo1GqKGPetsz","tlshash":"11e349dcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb9237f7a","size":149835,"data":"","first_seen":"2026-01-16T14:34:54.211339Z","last_seen":"2026-02-17T11:09:06.763188Z","times_seen":683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a0bb2b917a2139d1e28fe43296edbfd9","sha1":"30c72615ba6def457f66cc870475aa91f8a7d626","sha256":"46b547a2290e02d6379c03cb35d2d696000b0a69e950d4a987cab7631f039c05","sha512":"5fc9279c55799c4ed7baafd33331b8fa61ecba4a8e3cdf0a4d281af5955b85b69d9aef0afc730944cc17d7dd54fab79db45c629a947c955f5c19f658d6782585","ssdeep":"","tlshash":"2ca012b333c2840147c3209000172984c02583e200040943802089a7361d035f81692c","size":83,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.050753Z","times_seen":5977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"45e3a46717e58c7d667b3009ba7f3201","sha1":"8e2670f0a7d0edc65217d49b5ce2f7dec0c37cbe","sha256":"e60406ed119af9cd082932dcbd659e7ffa184f9f0e498d02a26b8bd8dd9eec99","sha512":"59ce3e1cec54ec0b44014cc177e9c9d572a6d4b60bc36201f73ab7cff682466c396d17fd6f6be2161dd83a4edee4e63e6553fa2061c2b157448664ac78cf3b98","ssdeep":"","tlshash":"f1a022be32c3200c2b022080003e2cfa0c3202fa080aeee0c280bc300a3c83ca30a0fc","size":72,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.077061Z","times_seen":1387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"9daba20cc0b62ef713a5a7f45045325f","sha1":"cc9083b0d3694a975ce99e281de797d4bf228115","sha256":"df290d8a6019595f4629829ff425382ab36241c211436f20e6e86a1a55bbe91e","sha512":"48dc2041be342c744bf6b781f483f08cf406b69eca6b850bdc37ede116ff5bcb7f328a7d1f2258245c79864bf07349875bda3a02a227ddff1c1031feac0cfa0e","ssdeep":"","tlshash":"67b09279678070e6e817231c2623ab804c3002b13849fe34901c9cc5aad9413020a019","size":116,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.058432Z","times_seen":5989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/iframe-scripts.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89433f6864b61ee5dc3398a327f35069","sha1":"14d840847e8154f6ec2931a9d90126ed5c91fdb9","sha256":"587fc8a495b9e66cfaa0092ac5c3ebe3aeff08fee83fab4be94dc4ae09c982cb","sha512":"96863711edb791ffefa6188b2077dc1db9e270a7e27874140740a0820481ade585e20765f42f6df33afb77e5b1d20db281bfa9541f2be87cf97481de257cbc6a","ssdeep":"","tlshash":"dfe0682821a067bc006f266ef29a5aacf93801a6704a040884b1488d7c3ed76a6f4f24","size":376,"data":"","first_seen":"2025-07-25T01:42:49.250588Z","last_seen":"2026-04-20T04:33:38.795876Z","times_seen":1606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/iframe-scripts.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89433f6864b61ee5dc3398a327f35069","sha1":"14d840847e8154f6ec2931a9d90126ed5c91fdb9","sha256":"587fc8a495b9e66cfaa0092ac5c3ebe3aeff08fee83fab4be94dc4ae09c982cb","sha512":"96863711edb791ffefa6188b2077dc1db9e270a7e27874140740a0820481ade585e20765f42f6df33afb77e5b1d20db281bfa9541f2be87cf97481de257cbc6a","ssdeep":"","tlshash":"dfe0682821a067bc006f266ef29a5aacf93801a6704a040884b1488d7c3ed76a6f4f24","size":376,"data":"","first_seen":"2025-07-25T01:42:49.250588Z","last_seen":"2026-04-20T04:33:38.795876Z","times_seen":1606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"034d21c266d82b1579998cc036512358","sha1":"18502599f21b6fba79982d8801f2525b2fd3b988","sha256":"cfe1df1650cf9e5565b4d99de32961d73acedf09e4445d80ab2552aed9c8bd83","sha512":"dd0d92326aaa84f76da1b3ce77263e5c2bdbd070a479d049dcf317e74552449b4ea07f73ef2346f81de9706ec798de79771392eece35bdde0261bd04b93103a0","ssdeep":"","tlshash":"5ab092a7a1ee90894fab51d910c35481562a97263898868128b099a49e31cb0d63aadc","size":114,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.089079Z","times_seen":5977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a3e1b26ce1ce08bf4ab2f623e5936f78","sha1":"36dc38e63d6d61672791ea9319134504def2ce9c","sha256":"f67d06b9b4c2938c52806c4801d3dc13946c9891a019b97f0608e9ffb4f99abc","sha512":"00913437703bba046f4422e7c21313193ddf026c11f5624362eec110934db74d3bdb96e35b37610b50f02833eee9e3a79054a124537810c52ff72c38dadde86b","ssdeep":"","tlshash":"cca024cf70c47101cc4730d0300f1c0c5454043c150c0cc443c0c5435d330d5c30555c","size":70,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.794133Z","times_seen":5574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d5c96eb52a1711f3a2950348f2d115f9","sha1":"c2477218c9a9fd31c0e09166892f83381f5e0e26","sha256":"a65dc9d6d0e097cf39657dfb89d3deea54548c6b59805088214fe5622e8bec61","sha512":"3f9b89c57906a121dc5933b94b73efe961d28148e1878b50c809df9a24061b30d0406b1c97e852b7676151eacf1b4206b7c2cc9c2094271c0bf089611c1a569f","ssdeep":"","tlshash":"dfb0125867953032530211e240094c585b3e08f1c4e05cd6805ad87817f3c2273583dc","size":102,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.059219Z","times_seen":5976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"45e3a46717e58c7d667b3009ba7f3201","sha1":"8e2670f0a7d0edc65217d49b5ce2f7dec0c37cbe","sha256":"e60406ed119af9cd082932dcbd659e7ffa184f9f0e498d02a26b8bd8dd9eec99","sha512":"59ce3e1cec54ec0b44014cc177e9c9d572a6d4b60bc36201f73ab7cff682466c396d17fd6f6be2161dd83a4edee4e63e6553fa2061c2b157448664ac78cf3b98","ssdeep":"","tlshash":"f1a022be32c3200c2b022080003e2cfa0c3202fa080aeee0c280bc300a3c83ca30a0fc","size":72,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.077061Z","times_seen":1387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd5ea35543390c5fc4e9def651ab721","sha1":"d360aa74dff157fcefda69336ecf420f04940f98","sha256":"9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17","sha512":"d666a51729862abb8d23b0cca5d5ade738c08df2a23fbabb55be95f2a1fbef60255bda850cb36457e70bb2706067f9cee620169c9166f5e9f29a48af470d4fab","ssdeep":"384:lrKvSC3FheMYNzktJlro8aVfPxodAuyalYleh++PFoAS4TSPE9MfA+0UUTK7:gqC36LkJcjPxodAl8DiPE9/+0UKK7","tlshash":"da9294c5bb053d53e9ff12f64157170ba2368eed050e10289839efc629314b1a6efb69","size":20430,"data":"","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-04-20T07:09:09.639119Z","times_seen":4694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/iframe-scripts.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89433f6864b61ee5dc3398a327f35069","sha1":"14d840847e8154f6ec2931a9d90126ed5c91fdb9","sha256":"587fc8a495b9e66cfaa0092ac5c3ebe3aeff08fee83fab4be94dc4ae09c982cb","sha512":"96863711edb791ffefa6188b2077dc1db9e270a7e27874140740a0820481ade585e20765f42f6df33afb77e5b1d20db281bfa9541f2be87cf97481de257cbc6a","ssdeep":"","tlshash":"dfe0682821a067bc006f266ef29a5aacf93801a6704a040884b1488d7c3ed76a6f4f24","size":376,"data":"","first_seen":"2025-07-25T01:42:49.250588Z","last_seen":"2026-04-20T04:33:38.795876Z","times_seen":1606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d5c96eb52a1711f3a2950348f2d115f9","sha1":"c2477218c9a9fd31c0e09166892f83381f5e0e26","sha256":"a65dc9d6d0e097cf39657dfb89d3deea54548c6b59805088214fe5622e8bec61","sha512":"3f9b89c57906a121dc5933b94b73efe961d28148e1878b50c809df9a24061b30d0406b1c97e852b7676151eacf1b4206b7c2cc9c2094271c0bf089611c1a569f","ssdeep":"","tlshash":"dfb0125867953032530211e240094c585b3e08f1c4e05cd6805ad87817f3c2273583dc","size":102,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.059219Z","times_seen":5976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"baa6d30f18ea544c73cd0137a66018a8","sha1":"3784f42cd9573cdb55a633553e82da98352fbefd","sha256":"59d80d13ba6ff1ea36ea83d976e0a5a9f2c25a1a00a453b3d87865dcd33834ff","sha512":"a79613151ff50983e56ac032f05b77afa85ab475a2e371dd5cce69769a36c3edb00aac9532e2a3240383a94b8be670bc9d8047d7f5cda755404d12c3eb47059a","ssdeep":"","tlshash":"4190044f71c03134455751d055173fd40014047134455cc400c0f473fc53434111dcfc","size":42,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.799286Z","times_seen":5569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"38bcc383b6fbba7928656b9040b282e4","sha1":"b2c4afbeba79d71db5df9e73f68b6bec4d2cd6d0","sha256":"07027ba340ef65872b6207efe05665f64bc5338b873ab256fd46a953f79f22df","sha512":"41cb43fc48199e9eba38e9df984023ddf78b9975efdfbb12c99f25cc08ee3ed1bae4c9c2a90020363ccc9d475cf49675ac38f1a3ae8bde344a1977fee373434d","ssdeep":"","tlshash":"6890025765d1a1115a6b72e1403b9d4a041641a194545850604c9c56585bc61134d8bd","size":52,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.073621Z","times_seen":5984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"77e0137ff7dce6dfb14eea376012346b","sha1":"f02368033cc610490fe6860dd889c51f03f06d10","sha256":"281fc98b91e033a11f9100e3f11a801b4bd770801d32004f8dc40b84cedae957","sha512":"3448c6cf9dd1af8cb1fa9484fb2bcbecec0c67fcfd69310856940899c79e385109387f980cf502c5802df7ed49927cd24d7159d8c4468eeed43f0e042fcc6b5d","ssdeep":"","tlshash":"5861859ae77a38dbb2f900f2697e0d47eb614435d6c8d438c9bea3141cb5893c274b46","size":3220,"data":"","first_seen":"2026-02-04T19:12:33.63556Z","last_seen":"2026-02-04T19:12:33.63556Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f7b734689cae2d039dae1123333dded","sha1":"e20b71453fccd4fcdca964d4d609111c77f60484","sha256":"996fbfcbf5a7091890788228af5539ec39c018efcc8ea9bad557991859f03572","sha512":"584f0a5e0a073862bae0d847a2a03f4a08fdfeca97e22eea85bef7399292cc408d2d236c297f44a8ea883829f094489f62a6ae6859600c5327e6f285551fa131","ssdeep":"1536:O18MdnC5OPz8YBP9r2RcZAdtK8wBgg0341LloXQTtQyodhm161zKK+AKn7K0ketc:mBFSGAdt6Rydhmo1GqKGPetsz","tlshash":"11e349dcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb9237f7a","size":149835,"data":"","first_seen":"2026-01-16T14:34:54.211339Z","last_seen":"2026-02-17T11:09:06.763188Z","times_seen":683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"67a120c980.8f17d89ec7.com/df0de2161c5b3c03245f55b7fdf081c6.js","fqdn":"67a120c980.8f17d89ec7.com","domain":"8f17d89ec7.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f7b734689cae2d039dae1123333dded","sha1":"e20b71453fccd4fcdca964d4d609111c77f60484","sha256":"996fbfcbf5a7091890788228af5539ec39c018efcc8ea9bad557991859f03572","sha512":"584f0a5e0a073862bae0d847a2a03f4a08fdfeca97e22eea85bef7399292cc408d2d236c297f44a8ea883829f094489f62a6ae6859600c5327e6f285551fa131","ssdeep":"1536:O18MdnC5OPz8YBP9r2RcZAdtK8wBgg0341LloXQTtQyodhm161zKK+AKn7K0ketc:mBFSGAdt6Rydhmo1GqKGPetsz","tlshash":"11e349dcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb9237f7a","size":149835,"data":"","first_seen":"2026-01-16T14:34:54.211339Z","last_seen":"2026-02-17T11:09:06.763188Z","times_seen":683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.onclckmn.com/static/onclicka.js","fqdn":"js.onclckmn.com","domain":"onclckmn.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"039ee1df33216ec8004c99be324a28d4","sha1":"1052439d334ac0e5d0f4a3ca053b88ae8474b107","sha256":"f8cd3a391501b49f1179cd1266406c043eb532ff936878fa4d26ffa4dca3f12a","sha512":"3bfe40a8b85c8514df53050acb5b6988c44a9f642cb64a807f10d6b6065fe19b8fbae866db15581a02954adb4aa66858cf085f66b5401ce0ae769607cd20ae36","ssdeep":"1536:O18MdnC5OPz8YBP9r2RcZAdtK8wBggJ41LloXQTtQyodhm161zKK+AKn7K0ketsz:mBFSGAdt6Rndhmo1GqKGPetsz","tlshash":"14e349dcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb9237f7a","size":149823,"data":"","first_seen":"2026-01-16T19:00:37.743054Z","last_seen":"2026-02-17T06:56:54.258726Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"9daba20cc0b62ef713a5a7f45045325f","sha1":"cc9083b0d3694a975ce99e281de797d4bf228115","sha256":"df290d8a6019595f4629829ff425382ab36241c211436f20e6e86a1a55bbe91e","sha512":"48dc2041be342c744bf6b781f483f08cf406b69eca6b850bdc37ede116ff5bcb7f328a7d1f2258245c79864bf07349875bda3a02a227ddff1c1031feac0cfa0e","ssdeep":"","tlshash":"67b09279678070e6e817231c2623ab804c3002b13849fe34901c9cc5aad9413020a019","size":116,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.058432Z","times_seen":5989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eca10535dd65f4979e3b3ad3ec8e02c2","sha1":"54c38c3bf24825e407741ef0e316f678a5b580db","sha256":"802bc6725fd37d15aa9d599fa3f921fca0d4c585162c7b23da8ccd6f3ded751d","sha512":"680521331d53bb6b47390979cbb907f78607dc713d99405ea8664d401b8e9e3106bca7111c1142d8abb4a5d71a7957998ada61407432f084648bba32ed8e1d27","ssdeep":"96:wqduIPMiXjA1L1AWeyQqECAvBvRgY31rr/qBvHsMTFsPFxLdY0fdKI:wktP/W1Henqxy1R31/iRHsIFiFPBkI","tlshash":"7c91318aff88217b71b7326a697f61ed373844339a085c22f874d1a03d9446406bafdd","size":4500,"data":"","first_seen":"2023-03-07T01:26:46Z","last_seen":"2026-04-19T14:09:38.45635Z","times_seen":3614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"be7bfc2a908a684a210d585ed55d30e5","sha1":"c0459f4c57d2e1a980fcac6fac8e47d3a18f237d","sha256":"9e9bd85194604c6912fb8f12147e0bdab67f1932f029c8accfb629bed57945c3","sha512":"2c2f6e1ec8c1e59bb7c57acfc09ffd94c332e1e6f5cae8e481633b1a2294eec0453c88b995ea7ab17b4eabad583de7806c04d05125baf69ff8e3a363a3051dd2","ssdeep":"","tlshash":"4d9002bd9840919455572b9605965844092040612945dd500041a46218660705e0596c","size":45,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.074545Z","times_seen":5985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"satincrave.com/a2kontrol.php?id=34324","fqdn":"satincrave.com","domain":"satincrave.com","tld":"com"},"ip":{"addr":"172.67.133.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"acf5dbdcb2bc20708e6cd971cd12a1fe","sha1":"08300f2a74dd4b8edd55ccef11a525175963976a","sha256":"8ac5c1e96c6d92ed994d080cc088a13dce048e04169b12d23a8f558e5a7b9923","sha512":"eb692f2834d797c0a0e942a7b0d24aa6b51d96d8284e4fb200903bd4c20d4b3793f5029bc7d94768d16d6dd5c0b238e374d1b5418a1868cb01417ec13e4e96fe","ssdeep":"","tlshash":"aee0926b6cba20791a2690ba127fa5683156300b54e7c7f83c1cd7825fe463e51496ec","size":389,"data":"","first_seen":"2025-10-11T13:46:03.647596Z","last_seen":"2026-04-20T04:33:39.133718Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dcca58db348f35d6eee39aadb7cd280","sha1":"0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec","sha256":"2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4","sha512":"ee897cdc326f80eb18c74b3c42fe1b97b3b16c0be8f048a763cb33db134fa47dc2eb07bc1ba6cd8feb91385d791aa89a28816fd49217a57763dc54df1ef3693e","ssdeep":"96:IncwFK9HqOq0tioGJULBx7PYuyrr5VrcAeS1h3osyTaZ+1KZZ/p5k1QDSYRV9uR5:M9YH9qfJ2x7PYf5BcVSPfq+DkGDjP9u/","tlshash":"5fc15308b065b43f65777032523f130bb23a606778884494f6b4eae99ebc81e5923f7d","size":5755,"data":"","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-04-19T14:09:38.354009Z","times_seen":3656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"senzoriq.com/out.php?id=newrtb\u0026pos=270\u0026siteid=1456339\u0026subid=363145965\u0026domain=mastitales.com","fqdn":"senzoriq.com","domain":"senzoriq.com","tld":"com"},"ip":{"addr":"172.67.218.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e8492518f4b02dda1ddb46f3bf1ae9d","sha1":"c30494a8aa63ee11f8945c474f68b8acec4541fe","sha256":"bc8654e23c10346eefd55475274cfb96faf01570adeebc279bd9b80f4c1b605e","sha512":"b4b38919756c7644a4c567c60334cc191372322176f17b7521772b46c35d7ff6a1d81f02db775c53c0e597c0c27f6b1e17b4a90ca3167fe9f7508808a5d7308e","ssdeep":"384:cNUzDndK/1wLyi535C5Ojjf1WxidrijiciCibiXYXiUPiRiEvi2mY+Gr0iHi4iTm:cKTd1535C5OP17dOGRr+X/UKYEqdV2jN","tlshash":"af821e8a22fb2035ca73106d1feb55557274940b290eca5a3dad82d42fc4b3546f9ff8","size":18259,"data":"","first_seen":"2026-02-04T19:12:33.638282Z","last_seen":"2026-02-04T19:12:33.638282Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"9fb507f661392bb18734a143229795e8","sha1":"004279a4f630424371fbe72b6c2c45ac86b59ddd","sha256":"e495c02fb62945e7a859af557a81c73673dde7789fa538536b9b8eb3958cf16f","sha512":"1c209d5ac784cc5f12d74cbc9a195349b1aee933077ec935720bfd1d38d6634b3e49552e96d1290bf351e298e37bf38886c8edf12a13409cd819ce6d271ce4ef","ssdeep":"","tlshash":"51b0127820e520d60d6311c920fb5b98e8a0523010204801c148cc7434f4d61401541c","size":91,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.050104Z","times_seen":5981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/get/?go=1\u0026data=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","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f67068fe07aa80fa69e2278c020c8e4","sha1":"b71b0ed051f46993fbc76f118e1713b50b4b0f95","sha256":"700b5c637f303b9b951efa0e3ca4422da9233054292707765b435a273e10c680","sha512":"fb4e53d47ab3dfbce9fbaff6cdd78120c408476d587ae931ab592c28cb1358d03a5de431d365c4749464a040edb1c27b74351fd85afea93470a5cf2b485e5fc1","ssdeep":"192:8RIcPI9BSh9IcPI9BShiIcPI9BShXIcPI9BShQ9v3Xl5bQ/+stzFC06Y0:axI9BSXxI9BSUxI9BS5xI9BSgvQ/+stE","tlshash":"bf62c7047d279462008e7121539fb61a2ee5a78397c5bc58fabcc325dfb473922a7b4c","size":15093,"data":"","first_seen":"2026-02-04T19:12:33.639789Z","last_seen":"2026-02-04T19:12:33.639789Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1062fa6ded0164e25b5b275dfb895363","sha1":"fc336d7708976831ca87a805625ad1e937f72d36","sha256":"c69c01ecbd87b13f25156d07620fc3a3e3ec42b093e63fa99ccea511122faac9","sha512":"b7cd7a7b7f6eddc4ad5f62be3dfa9bbf48a67d0ff73e0501c237938d17e7431e68021dbb8b0f9db57895cba8ab6abf7b9dd9e85568b723ecdb9941cda1098913","ssdeep":"","tlshash":"439002e5a1c27010865251a540aa6985613954605499c94440b09762196b4b0a2e949c","size":53,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.805737Z","times_seen":5558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3c1bc1dd08f96349c433eb122aead61f","sha1":"604a16c0e2869cb47564301036b786202c8a8787","sha256":"869b75296a55932491e9a9847f1b8746d20031365f68588214df57565331437a","sha512":"33f6be39ce7c03944319279e0496969c0bc05f376f2b9587787d6bf108f043f75336b71a84a8a4dd9f47f2bf84137889bbf93dfef63a07ec2cc8fcc1008016ac","ssdeep":"","tlshash":"33a022a0b0c3b03033a32203802e8cece03000f000e0fee0c000a8302b22030b32c3ac","size":66,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.076189Z","times_seen":5985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"75abd4cd8807b312f9f7faeb77ee774b","sha1":"e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7","sha256":"ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034","sha512":"c9f1f752994f1361555680ca5a60339fda152587ccc055db20148c086d82846887dd0801187aa033829b7d5eb9644b9391f493965eee35b4a1592f82cbb36aa4","ssdeep":"","tlshash":"bb01cbb6b30d44b604aa32178d5f61cd297d91e3a829649b8cc909502924c6d23befb8","size":683,"data":"","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-04-20T07:32:23.764828Z","times_seen":10948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-20T08:00:49.176423Z","times_seen":157616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"034d21c266d82b1579998cc036512358","sha1":"18502599f21b6fba79982d8801f2525b2fd3b988","sha256":"cfe1df1650cf9e5565b4d99de32961d73acedf09e4445d80ab2552aed9c8bd83","sha512":"dd0d92326aaa84f76da1b3ce77263e5c2bdbd070a479d049dcf317e74552449b4ea07f73ef2346f81de9706ec798de79771392eece35bdde0261bd04b93103a0","ssdeep":"","tlshash":"5ab092a7a1ee90894fab51d910c35481562a97263898868128b099a49e31cb0d63aadc","size":114,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.089079Z","times_seen":5977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f48f4887afd273629c89c18117c7d6ef","sha1":"b4d7ba70f042062ebce7b56bcb7ab452a944e375","sha256":"72720823e7778fd15730f6cdd8c0271b7a33da888493257fa17304785879bd6b","sha512":"67efd8ae6ee25ba84cef24d492542719792088a4aaa254f3911e57f7a3becb9625d582e9388def60bc662461ff47ca595159635283fdcd5d566130f3c70c132a","ssdeep":"","tlshash":"6fa022f0a3cb2c30b2c320c000a30ccc202888b0200888000082c28b082c0b3a23a02c","size":67,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.802013Z","times_seen":5554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"be5d9ebf54fefc6e38f077cef4bd6caa","sha1":"26a1f34155b4aa54100a69c778dc0b4be5c1a500","sha256":"00e0eac098edfd61cca6fe77139f78b66926ce917eb603a36311c4b64dab6c73","sha512":"1309dc64e26ba7e55efec514e1c4ca8654062c8f69ec54a04e51fd1fe9a398839e4f556ed24989e68383a0ca766bf6fd23288340b2c0212e2c2d4eb30e49f9ad","ssdeep":"","tlshash":"1fa01281e185519c11f321e810855dc070315820304944c04044d0124416c1aa70d028","size":84,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.08833Z","times_seen":5988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"baa6d30f18ea544c73cd0137a66018a8","sha1":"3784f42cd9573cdb55a633553e82da98352fbefd","sha256":"59d80d13ba6ff1ea36ea83d976e0a5a9f2c25a1a00a453b3d87865dcd33834ff","sha512":"a79613151ff50983e56ac032f05b77afa85ab475a2e371dd5cce69769a36c3edb00aac9532e2a3240383a94b8be670bc9d8047d7f5cda755404d12c3eb47059a","ssdeep":"","tlshash":"4190044f71c03134455751d055173fd40014047134455cc400c0f473fc53434111dcfc","size":42,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.799286Z","times_seen":5569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"satincrave.com/kalitecheck.php?id=324","fqdn":"satincrave.com","domain":"satincrave.com","tld":"com"},"ip":{"addr":"172.67.133.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fed615d59218bd603669db03f639581e","sha1":"8301a92f27f806ac822078cc16b8dad795a0aedf","sha256":"14994c24aef49a560978bd6254af42e5bbe469691b11aa0a70c65bbe1051f7b5","sha512":"9208cfdf24d3e297cd820e3b7f43fb84526242c326ede58362c5f1288cb6f452cd11946fa13ab9a19dbc57fb3bab46ea572ba67688918effda24ae7664c75805","ssdeep":"","tlshash":"cf2131a701bb101d4e9b146b13db0133f55ee8073a93eac0770e93252fec61842e7a8e","size":1430,"data":"","first_seen":"2026-01-16T03:09:51.523037Z","last_seen":"2026-04-19T06:57:16.952138Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"960fcd0655ec535371ba62b2f4dc6d52","sha1":"165a8f9dfc2cc679a818b292d7bcd20965dc9c8e","sha256":"e1e15579d2de91dfe6f5e8fec26a44bd3ced2fb71344ac6b32bbe24e514a3c79","sha512":"53b620c4cf923de7c1274041a5b3e76e2c81acc5284b5e5ea70d5c8aef25398286f480abaf2eeedde1f78b2387526abdd0e0619297294fcd0d68f8b2565f84e9","ssdeep":"","tlshash":"28800447d050145555533dd0141f1c44005001711c404c4004c4d4550c71c313507d5c","size":38,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.806721Z","times_seen":5565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"225e21c7e2bf1b5238d7138335602ce3","sha1":"1f018c8954063352ba37ce827019b1cee535337b","sha256":"bff6e99d71258f7cc6e620b22752116e44e86545faa6d5c25d0ef2782d95f7f0","sha512":"33d4dd7fde48bc8824e9a9572f87d3ef8579510c278f0814a0e5b81e5780ed8dab2ecf9fe0068a01af21f56e4c1ef56d113a01ddd2871fa82204841778c741c6","ssdeep":"","tlshash":"4c9004fd50c01004c5571550157f1c4d407401f05ddc4cc1c045f5510cd3070111d5fc","size":42,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.798784Z","times_seen":5553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wpst-main-js-extra","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"19d8cad2357b09d0c7c4635610530a50","sha1":"e6edf224012fa6d1c772fb99fac7488b188264b0","sha256":"1d9e685e174f31ea9bae05103cc2f58fa3cf7f192ec3419c82036c3c27739ff5","sha512":"6f39ec938b7c2de6ade88b5dfd784d424daaf74805fd38ed45892aef941e5deb5013742df5d44e193c0202c5dfb132ceb11241abdd6749495199a763426b960a","ssdeep":"","tlshash":"c6f0c031cb856ff336e2aaf0601d0aa36df5a012d0989d2957cdcc800a51c03b7e890f","size":573,"data":"","first_seen":"2026-02-04T19:12:33.644625Z","last_seen":"2026-02-04T19:12:33.644625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"be5d9ebf54fefc6e38f077cef4bd6caa","sha1":"26a1f34155b4aa54100a69c778dc0b4be5c1a500","sha256":"00e0eac098edfd61cca6fe77139f78b66926ce917eb603a36311c4b64dab6c73","sha512":"1309dc64e26ba7e55efec514e1c4ca8654062c8f69ec54a04e51fd1fe9a398839e4f556ed24989e68383a0ca766bf6fd23288340b2c0212e2c2d4eb30e49f9ad","ssdeep":"","tlshash":"1fa01281e185519c11f321e810855dc070315820304944c04044d0124416c1aa70d028","size":84,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.08833Z","times_seen":5988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"960fcd0655ec535371ba62b2f4dc6d52","sha1":"165a8f9dfc2cc679a818b292d7bcd20965dc9c8e","sha256":"e1e15579d2de91dfe6f5e8fec26a44bd3ced2fb71344ac6b32bbe24e514a3c79","sha512":"53b620c4cf923de7c1274041a5b3e76e2c81acc5284b5e5ea70d5c8aef25398286f480abaf2eeedde1f78b2387526abdd0e0619297294fcd0d68f8b2565f84e9","ssdeep":"","tlshash":"28800447d050145555533dd0141f1c44005001711c404c4004c4d4550c71c313507d5c","size":38,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.806721Z","times_seen":5565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"5c452c885f0211e6f86a8025ffed6801","sha1":"45fc7697f8759fd1fd3fc494e06b4fb164917be1","sha256":"866857ca3216e90ef194ffb8b1ff66d7a1f8147a948c649d81595ac2591aca6c","sha512":"164653be411d0edc3572b2fdf6e898e261d1588dd8b2756f138b277f0340e1e4342534f6157e5738276ae910e0c979cdb309e2de59ac499400dc99f6558e14b8","ssdeep":"","tlshash":"919002a5d042504089db66b0872b1845043010752ec4ed9010c4b5d1585a5a51b454fd","size":54,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.803116Z","times_seen":5564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f7b734689cae2d039dae1123333dded","sha1":"e20b71453fccd4fcdca964d4d609111c77f60484","sha256":"996fbfcbf5a7091890788228af5539ec39c018efcc8ea9bad557991859f03572","sha512":"584f0a5e0a073862bae0d847a2a03f4a08fdfeca97e22eea85bef7399292cc408d2d236c297f44a8ea883829f094489f62a6ae6859600c5327e6f285551fa131","ssdeep":"1536:O18MdnC5OPz8YBP9r2RcZAdtK8wBgg0341LloXQTtQyodhm161zKK+AKn7K0ketc:mBFSGAdt6Rydhmo1GqKGPetsz","tlshash":"11e349dcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb9237f7a","size":149835,"data":"","first_seen":"2026-01-16T14:34:54.211339Z","last_seen":"2026-02-17T11:09:06.763188Z","times_seen":683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"63116ca3bdfc7ef0c9a09579faa8cb15","sha1":"d89ca9be8c6cead2d2a12f3e9a79edc27de2a6cc","sha256":"f670b2247c591e2af8adc9e0b31c64592554871c81deb0ccc4e7246f1ac4a5e2","sha512":"25de0033af0ccfafee7d4e9c99231c8bfc6004b082a03158be40c3536513493c4d8f7cfab57cf6c1a7e807ff4fe367c327f34bd9934978c352d294159e570a18","ssdeep":"","tlshash":"b7b0126612ce000bdf2212d452263c410f26317798c04c0161915c542c12c351114f6c","size":94,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.05761Z","times_seen":5990,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1062fa6ded0164e25b5b275dfb895363","sha1":"fc336d7708976831ca87a805625ad1e937f72d36","sha256":"c69c01ecbd87b13f25156d07620fc3a3e3ec42b093e63fa99ccea511122faac9","sha512":"b7cd7a7b7f6eddc4ad5f62be3dfa9bbf48a67d0ff73e0501c237938d17e7431e68021dbb8b0f9db57895cba8ab6abf7b9dd9e85568b723ecdb9941cda1098913","ssdeep":"","tlshash":"439002e5a1c27010865251a540aa6985613954605499c94440b09762196b4b0a2e949c","size":53,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.805737Z","times_seen":5558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afrdtech.com/v1/script.js?kmnrKey=239040355","fqdn":"afrdtech.com","domain":"afrdtech.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7572a53970094bbe608dfd0599d0e4ef","sha1":"e1addb7d23ef0c6a291f011cae6515fbc531f7d3","sha256":"47c258f3c62f689975f99801f0de93627ba1e6f1b0f4f9643e7b8e07fad32eee","sha512":"050a3d2e49b28a938f03f53ce69e9acf10c68da28b7d2ca44c5be62eb82a22ac7e9dbe705297cdbca38b12517f24e833eba798e6aef8df8526d7a50a7efd8d8a","ssdeep":"768:6YLCnCAt9PEqlSUZOq2Q5qS54vzQsHNk6q5iT1svGOfkiRJRX6BZV/D:6FPp92QEtLc5iRs+OfbJRKBZVb","tlshash":"01332bae7656a42890b7217a403f7605f23e1e6ad50484d0e566ccc03de9f8b6227ffd","size":50675,"data":"","first_seen":"2026-01-20T12:50:51.172557Z","last_seen":"2026-02-07T18:22:28.729247Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-QTGQHQT0R0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d11e135e49704af9075cd77de14acf4","sha1":"587939bc715f6f8f5edb3eed297d9b5cb7a728bb","sha256":"1b901db4820f976f57a2925932c0a70cfec0d5a5ddd8c2760d0c694c415ecca9","sha512":"6ae13d5cf289aec28d9b8e03786e09b256c380fffd3f420da58981881df0a18193a62ee7d2f87d3ff3cadec053d01a2aa58253d190904f70c37003719576e3c8","ssdeep":"6144:tVBfoNrq8oaoCsx77/p4SGx3iQA84zYul4mngSHIFr/PXFGY1:Jfo1hoaoCsxX/p4StQA80IFbwo","tlshash":"94841acd73c670269396a478403f118bb57b69a2f44cc899f18adce42d70a9a4237f7d","size":379769,"data":"","first_seen":"2026-02-04T19:12:33.557565Z","last_seen":"2026-02-04T19:12:33.557565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.onclckbnr.com/banner-admanager/build.m.js","fqdn":"js.onclckbnr.com","domain":"onclckbnr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"73fec96c215a8949433222a12792a539","sha1":"ec1ec7a7cd760dcda7ac66c75f332f7b86e87501","sha256":"cba1edf1f89e886d65ddaa10fa35c268dba2f4286d6f23a936d7eb8040b8f1e5","sha512":"ef9a2998146a0ad8bf0c773b0b500fef6d0e70e3b22952199d976566814ca7674f39606c902b4641f95ece4f6730eaf7fa708649d3c897a0e91d986969c4f189","ssdeep":"1536:7aftpnDfu3pIDBgJBpqgiZMZLUyzOBOi6mLEIWDDIWA:7g9DfuTPpqSL37m43U","tlshash":"67836c843290b4b541e640afa43f430af33d2d06b40aa458f16dede77b79e896176f39","size":84994,"data":"","first_seen":"2026-01-30T10:33:19.991148Z","last_seen":"2026-02-10T22:56:55.78229Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d44f2c49d308c6800094d012d0643978","sha1":"c1c480570c5e354c24709198d874bbedec3ca1a8","sha256":"fb1e8e23875745979a723d03c3448af5cbc926826872893d3f0471847afac51c","sha512":"4be3f466241d01b4ceddb845b25741f54d34e43b517e8725daf75bd1abd2dabe71e901cd0c25bb6f1d8ad5abdde577ed1db7d24980c36f32beb9c58778944133","ssdeep":"96:HWJnG+MVvxkh0NhBaJzOHp+G1EbCQiQZAJ1tTBn0yXS+tpTQxA:2o+Mhxf9H9eWQVAhB08TH","tlshash":"18d1f1f6b97b334d979371ea2d161041500098a903adbc98fa64f2d5fcb4cfe192b350","size":6404,"data":"","first_seen":"2026-02-04T19:12:33.630608Z","last_seen":"2026-02-04T19:12:33.630608Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d44f2c49d308c6800094d012d0643978","sha1":"c1c480570c5e354c24709198d874bbedec3ca1a8","sha256":"fb1e8e23875745979a723d03c3448af5cbc926826872893d3f0471847afac51c","sha512":"4be3f466241d01b4ceddb845b25741f54d34e43b517e8725daf75bd1abd2dabe71e901cd0c25bb6f1d8ad5abdde577ed1db7d24980c36f32beb9c58778944133","ssdeep":"96:HWJnG+MVvxkh0NhBaJzOHp+G1EbCQiQZAJ1tTBn0yXS+tpTQxA:2o+Mhxf9H9eWQVAhB08TH","tlshash":"18d1f1f6b97b334d979371ea2d161041500098a903adbc98fa64f2d5fcb4cfe192b350","size":6404,"data":"","first_seen":"2026-02-04T19:12:33.630608Z","last_seen":"2026-02-04T19:12:33.630608Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.9.0.1752143720","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"783fecdc0e20f9cbdee6b57839de44e4","sha1":"0d9062e511793c4ac674742de2de74dd13a85dc9","sha256":"45c5b2ddd2dd6bae51444e5c06a67a069b87457c72e3876bbaefa17dbaf9315f","sha512":"a7d0a8702df2b6d6074ee47e746ad8d46fb851ccecfb9f8925a2d7cebd2073d51591ac4722c3d09184cca52e9ae241820330e3d7db05bd2c9b1d49ed3ce06981","ssdeep":"768:lqZvNO9ADc60/sjbrtXxCiVR3xCoP9nnI33mnDSb4B34BI3fs9a:lqPO9V6pZXc8R5nbGQGa","tlshash":"01037385fb7c254a827a30ee6c6f12cc353d5132a442046fbd39a6e458a0b3d73a7d79","size":39275,"data":"","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-04-18T17:22:45.569556Z","times_seen":2009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d53b967009f4978749d88accd62fe304","sha1":"8307659ee5d8d4e46e827446f0f8ca26a035c79b","sha256":"a840b2aa0a352feaba49d27012f2e891b9ea44c0bd391380899e7cc9e20af065","sha512":"9c308a74cd7028f2bd44c85e98e5170771022bdf277fd796cf83f282f32953a64870887eba2102c69c587c1178f87d930201f4da48977d7a2e92e1d991d7a11e","ssdeep":"","tlshash":"cff0ac65965b01300f6910db1ebf97fc306824325500e4033ec8e915af68faf6d26cc1","size":603,"data":"","first_seen":"2025-06-01T17:18:11.596999Z","last_seen":"2026-04-20T04:33:39.10803Z","times_seen":690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"38bcc383b6fbba7928656b9040b282e4","sha1":"b2c4afbeba79d71db5df9e73f68b6bec4d2cd6d0","sha256":"07027ba340ef65872b6207efe05665f64bc5338b873ab256fd46a953f79f22df","sha512":"41cb43fc48199e9eba38e9df984023ddf78b9975efdfbb12c99f25cc08ee3ed1bae4c9c2a90020363ccc9d475cf49675ac38f1a3ae8bde344a1977fee373434d","ssdeep":"","tlshash":"6890025765d1a1115a6b72e1403b9d4a041641a194545850604c9c56585bc61134d8bd","size":52,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-20T04:33:39.073621Z","times_seen":5984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"225e21c7e2bf1b5238d7138335602ce3","sha1":"1f018c8954063352ba37ce827019b1cee535337b","sha256":"bff6e99d71258f7cc6e620b22752116e44e86545faa6d5c25d0ef2782d95f7f0","sha512":"33d4dd7fde48bc8824e9a9572f87d3ef8579510c278f0814a0e5b81e5780ed8dab2ecf9fe0068a01af21f56e4c1ef56d113a01ddd2871fa82204841778c741c6","ssdeep":"","tlshash":"4c9004fd50c01004c5571550157f1c4d407401f05ddc4cc1c045f5510cd3070111d5fc","size":42,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.798784Z","times_seen":5553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"5c452c885f0211e6f86a8025ffed6801","sha1":"45fc7697f8759fd1fd3fc494e06b4fb164917be1","sha256":"866857ca3216e90ef194ffb8b1ff66d7a1f8147a948c649d81595ac2591aca6c","sha512":"164653be411d0edc3572b2fdf6e898e261d1588dd8b2756f138b277f0340e1e4342534f6157e5738276ae910e0c979cdb309e2de59ac499400dc99f6558e14b8","ssdeep":"","tlshash":"919002a5d042504089db66b0872b1845043010752ec4ed9010c4b5d1585a5a51b454fd","size":54,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.803116Z","times_seen":5564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d53b967009f4978749d88accd62fe304","sha1":"8307659ee5d8d4e46e827446f0f8ca26a035c79b","sha256":"a840b2aa0a352feaba49d27012f2e891b9ea44c0bd391380899e7cc9e20af065","sha512":"9c308a74cd7028f2bd44c85e98e5170771022bdf277fd796cf83f282f32953a64870887eba2102c69c587c1178f87d930201f4da48977d7a2e92e1d991d7a11e","ssdeep":"","tlshash":"cff0ac65965b01300f6910db1ebf97fc306824325500e4033ec8e915af68faf6d26cc1","size":603,"data":"","first_seen":"2025-06-01T17:18:11.596999Z","last_seen":"2026-04-20T04:33:39.10803Z","times_seen":690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-20T07:59:55.976036Z","times_seen":728446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/11/1-1.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/1-1.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 20:41:55 GMT\r\netag: \"5de7-6910e7ac-53f54e;;;\"\r\nlast-modified: Sun, 09 Nov 2025 19:12:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24039\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E4aa6Zu7feYDBWYr85Ol%2BamCUDV1HHo9nb8h%2FZegUDPdQrKiEQOA32inJAJ7eHflgOT%2FoAAwCjmE9T8SNAor1moGSsaHN%2B1nuJ7V9R59\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a348ee776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24039,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 288x216, components 3","md5":"52146f6c7da91390ab2a22eb3997dedc","sha1":"d2bcdcc3fd81041502aadfc391b3894e0d889b8f","sha256":"36c1e7fd49cde717e0a4897de3bc48ff24520c0bf55fc91350cc71d22decffea","sha512":"be688f3926e547bbb58ac79093edccbf5ceb7d3a38b7e19f52074766c1c0ca7616d885e92a221fde24b4179b48cdad0a83a89c14b3f0c4b037ecf30bf6c20b8d","ssdeep":"384:ab88wi/lXXefk8QCRPYLZtB5NPzmRrnUVsYvR01VcXRVD01XxtEAdiZdp:k889eDPx8ZL56UVsq+X7Eokp","tlshash":"d4b2e14ba95ed4f2ba2ff0f2923c4f6dabf9dba12b825ca35ce0371501062f55972405","first_seen":"2026-02-04T19:12:33.499179Z","last_seen":"2026-02-04T19:12:33.499179Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/11/1-4.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/1-4.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 29 Jan 2026 18:08:36 GMT\r\netag: \"2f31-6910e7ac-53f55b;;;\"\r\nlast-modified: Sun, 09 Nov 2025 19:12:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12081\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lrrAAyefDVXsvl5pqQIbtB6rcF0gUrPEtMKDrSKOy3OVB27F95VcXHVGNjdn0xJtilPV0tPrV6MMD%2BFwzJPsR9q%2FLdTrUSUYpbkO9Jow\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a348ee976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12081,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"2250e14ae02e7605b0d18491bc4634e4","sha1":"4aa560f73dc6ccd73987f049e702222c1b2df103","sha256":"575bca545839f1580974d9859b2ccd7846f6731763f12941674a8671879e8633","sha512":"a1d623ff68dc1ce37c5512969fe1a2061d3063092c8eb5047166f3bcadc875ed26df818d18474fa5fb89512ea08ee31292d4de4ec3a49a59af1eb9d78e40e561","ssdeep":"192:3DVw9kGnfd7hJ9UhIkzfajwF8bP1/V8SXmClL2UTgP75cXxmGj7r:z+kGfxH9UH01t/VjhOao07r","tlshash":"fc42c0cb92110ed2721207b782d05e9409cdee463297a6cf72cc64c6c4b6ba44dfb5d7","first_seen":"2026-02-04T19:12:33.502522Z","last_seen":"2026-02-04T19:12:33.502522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/11/1.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/1.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 20:41:58 GMT\r\netag: \"23a4-6910e7ab-53f54a;;;\"\r\nlast-modified: Sun, 09 Nov 2025 19:12:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9124\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gMkHxtjRxSvj5vWMHQSY4iJ3iQhpDvHbPLV8Sqx7K1qwF8aPsDw1dWbc2c4vdlo9MZOfl61pRE4WuPSmJTmI28xWt5s8spnbFjWVS2w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a348eea76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9124,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 288x225, components 3","md5":"b1d8505b72b597dd602be0dc87a0974d","sha1":"c867804a398b2bcab51a58a4a048502f693a1097","sha256":"27d0db48766c76fb7f792763f881f02d6e4860d1001b90bec00bfc007776ce38","sha512":"294fa42fd842ed2404e0a2febba1e685ac79b884ac8d990eb8d32e4755e921fe5e50ba4485061ddea3e950eb89d4be27b13ee7da40d4364a6cadd55baaa42a04","ssdeep":"192:yuYD8hqfldW13TFhHQvO0yTMuOflApaFws5A9okF:yum8hqfldK5yvmT/empth","tlshash":"0a12af422361e5c9f97d7272ce021e10a7f2ca6cc44c63bfd1e8526466be3d9f6885e4","first_seen":"2026-02-04T19:12:33.504927Z","last_seen":"2026-02-04T19:12:33.504927Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"07fac4b99e.2551910ed4.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzcxMDY4NjYyNzA0MDk2NTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQyLjAiLCJ0YWdfaWQiOjM0ODI2OSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjE3LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"07fac4b99e.2551910ed4.com","domain":"2551910ed4.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"07fac4b99e.2551910ed4.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 02:48:09 GMT","end":"Sat, 02 May 2026 02:48:08 GMT"},"fingerprint":{"sha1":"48:01:15:24:8A:5F:E6:1C:DF:7A:2B:66:DF:64:35:66:14:E5:35:E6","sha256":"4E:77:DF:A7:04:28:7F:CD:BF:B3:43:7E:D5:56:3E:2C:BB:08:14:46:73:6A:27:8C:1E:F5:EA:C4:08:72:82:9F"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzcxMDY4NjYyNzA0MDk2NTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQyLjAiLCJ0YWdfaWQiOjM0ODI2OSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjE3LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: 07fac4b99e.2551910ed4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":147,"dns":30,"connect":21,"send":0,"wait":31,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=348265","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"OPTIONS /fp?tag_id=348265 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mastitales.com/\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:04 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://mastitales.com\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flepquix.com/in/dip?event_id=85397797-a086-431d-9a73-c9599acb7221","fqdn":"flepquix.com","domain":"flepquix.com","tld":"com"},"ip":{"addr":"178.63.5.120","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /in/dip?event_id=85397797-a086-431d-9a73-c9599acb7221 HTTP/1.1\r\nHost: flepquix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":74,"dns":2,"connect":26,"send":0,"wait":31,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"senzoriq.com/out.php?id=newrtb\u0026pos=270\u0026siteid=1456339\u0026subid=363145965\u0026domain=mastitales.com","fqdn":"senzoriq.com","domain":"senzoriq.com","tld":"com"},"ip":{"addr":"172.67.218.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:05.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"senzoriq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 20:55:40 GMT","end":"Sun, 08 Mar 2026 21:53:12 GMT"},"fingerprint":{"sha1":"45:70:A0:7A:FD:B6:EF:02:04:DE:57:7C:F4:8C:86:6D:02:21:D2:0D","sha256":"17:38:83:0D:15:D0:08:F3:39:D0:55:8E:1F:AA:0D:F1:90:71:D5:23:73:D7:92:B2:CF:AB:DA:E6:A4:FE:F2:BB"}}},"request":{"raw":"GET /out.php?id=newrtb\u0026pos=270\u0026siteid=1456339\u0026subid=363145965\u0026domain=mastitales.com HTTP/1.1\r\nHost: senzoriq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33, PleskLin\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzEX1%2BZhgr40UKAmoYri1DQRKEinP7LLH27Fx9a88XI%2Bp72smX63yw0%2BEHEHmX0LwWTm5aa4%2Bg%2BOVwSzRGvD3BiiW31gkzufuSs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c8c7a429ec956b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":18615,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"C++ source, Unicode text, UTF-8 text, with very long lines (798)","md5":"f9daac3d433a603b0bcfcaf88638f976","sha1":"a01141649c3dfd71fc29244577eb3dd5c29a848e","sha256":"8b73839b775432c8d29c5dedc7bc74cbc363e4068639d48b473a7ba995c7e149","sha512":"6251dacd1e2a15153fc0dfa5e73308810467e17de9e3e9952be64b6880898997ab8ba124f28bfe4b199285ffd991019fa881d4a007cc9be03a13f13810f48383","ssdeep":"384:GoNUzDndK/1wLyi535C5Ojjf1WxidrijiciCibiXYXiUPiRiEvi2mY+Gr0iHi4it:GoKTd1535C5OP17dOGRr+X/UKYEqdV2M","tlshash":"01821f8a22fb1035c973106d1feb655572b4940b290eca5a3dad82d42fc4b3586f9ff8","first_seen":"2026-02-04T19:12:33.508458Z","last_seen":"2026-02-04T19:12:33.508458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":23,"dns":5,"connect":1,"send":0,"wait":161,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 02:32:13 GMT","end":"Thu, 12 Mar 2026 02:32:12 GMT"},"fingerprint":{"sha1":"5D:9C:D7:15:7D:69:8C:F7:40:12:0E:10:F1:FF:68:59:A6:F6:E2:38","sha256":"7D:0B:09:36:73:70:FE:A2:CB:1A:80:52:3B:1A:C0:0D:64:38:DA:DC:AB:9E:7A:95:F4:55:F2:6A:A4:F0:A8:FE"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Wed, 04 Feb 2026 19:17:03 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/cropped-Msti-Tales-Favicon-192x192.png","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/cropped-Msti-Tales-Favicon-192x192.png HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nCookie: _ga_QTGQHQT0R0=GS2.1.s1770232323$o1$g0$t1770232323$j60$l0$h0; _ga=GA1.1.2120780993.1770232324\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 19:12:04 GMT\r\netag: \"1796-68701a80-3c1882;;;\"\r\nlast-modified: Thu, 10 Jul 2025 19:54:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 6038\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=llVLuxvj97SgLltC2v32rSmV8RC92W%2BqNahQZx6QYpkFNEWUGicDEM%2Bntc747%2FT60tZ7ZYiOWmzi4f0NhkWztilkB1hp1i8EFBswq0%2FJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a38ef9676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"ca9b4f4b97192b127c9a6f50986507a6","sha1":"09b75fb00a0958cf0124007f5a8fcb3f78aeeb81","sha256":"c2898831f37a7898b2e8d526b5dd63efba7195f1a7c5765ae8915ad45a8688a6","sha512":"375dc67fe4fc54f0cb8e85f21a4fede94e710f79b81557b8472ed9d2c7c890ae80f8de89034c52d117ec28b41857c5b0a1343d2ffaab68b33937c68d29f2abdd","ssdeep":"96:eSSrNnyy7gyji8y95W0z4as00HK3ux0m3IL83EjnMxKLvPAJFlAWr3QOBSj6vJ0D:eXLgyjZy95W44as04vx883O/LX6FnACk","tlshash":"aec19fc556097c98bb1380352f391e79eadb8c1f4e62b1f20d6077b0923c6379005d8e","first_seen":"2026-02-04T19:12:33.510422Z","last_seen":"2026-02-04T19:12:33.510422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/banner/in/show/?mid=464715720821592917\u0026pid=0\u0026site=1456340\u0026sc=\u0026usage_type=DCH\u0026subid=2033437665\u0026sid=0\u0026cid=19905\u0026price=0\u0026is_cpm=0\u0026cpm=0.0001\u0026ecpm=0.0001\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=0\u0026ver=6.91.1\u0026ver_c=\u0026refdom=mastitales.com\u0026hostname=auc-banner-hz-26\u0026site_id=0\u0026spot_id=1456340\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026ip=\u0026testab=0\u0026px_id=1456340\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=default\u0026min_cpm=0\u0026placement_type_id=269\u0026verify_hash=07d730ce80b17810e9853163b41af2d4c87e26933a714ec82e2df8e8d514c64c\u0026score=1\u0026kubik_score=0\u0026kaminari_bot_ip=1\u0026tag_ab=d\u0026v2=0\u0026ttl=0\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D1456340%26source%3D2033437665%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D1456340%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DFree%252CXXX%252CPorn%252CVideos%252CWatch%252CNow%252CMasti%252CTales%252CMast%252CTales%252Coffers%252Cexclusive%252CXXX%252CPorn%252CVideos%252Cand%252Cfree%252Cporn%252CMovies%252CInstantly%252Cwatch%252Cover%252C10%252Cmillion%252Chardcore%252Csex%252Cmovies%252Con%252Cpremium%252Cporntube%252Cfrom%252Cprofessionals%252Cand%252Camateurs%21%2C%26spot_id%3D1456340%26p%3Dhttps%253A%252F%252Fmastitales.com%252F%26katds_labels%3D%26btype%3D4%26score%3D1%26bf%3D0%26dr%3Dmastitales.com\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1456340\u0026original_bid_usd=0.0001\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.0002516513061914115\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=\u0026auction_time=1770232325\u0026account_id=2060\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1770232325\u0026double_click_filter=false\u0026w=300\u0026h=250\u0026skin_id=8\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=Adult,amateur\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.15799663602217287\u0026container=Skin%20300x250%20Banner\u0026mediation_ecpm=0\u0026mediation_type=\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=117793\u0026advanced_pub_id=0\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0\u0026ip_mismatch=91.90.42.154\u0026ua_mismatch=Mozilla%252F5.0%2520%2528Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0%2529%2520Gecko%252F20100101%2520Firefox%252F134.0\u0026geo_mismatch=NO\u0026isp_mismatch=LQ==\u0026mismatch_filters=ttl_mismatch","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImQiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IkZyZWUlMkNYWFglMkNQb3JuJTJDVmlkZW9zJTJDV2F0Y2glMkNOb3clMkNNYXN0aSUyQ1RhbGVzJTJDTWFzdCUyQ1RhbGVzJTJDb2ZmZXJzJTJDZXhjbHVzaXZlJTJDWFhYJTJDUG9ybiUyQ1ZpZGVvcyUyQ2FuZCUyQ2ZyZWUlMkNwb3JuJTJDTW92aWVzJTJDSW5zdGFudGx5JTJDd2F0Y2glMkNvdmVyJTJDMTAlMkNtaWxsaW9uJTJDaGFyZGNvcmUlMkNzZXglMkNtb3ZpZXMlMkNvbiUyQ3ByZW1pdW0lMkNwb3JudHViZSUyQ2Zyb20lMkNwcm9mZXNzaW9uYWxzJTJDYW5kJTJDYW1hdGV1cnMhLCIsImxhYmVscyI6IiIsImFsbG93ZWRfbGFiZWxzIjoiIiwidGl0bGUiOiIiLCJzdWJpZCI6IjIwMzM0Mzc2NjUiLCJyZWZyZXNoIjoxLCJ1dG0xIjoiIiwidXRtMiI6IiIsInV0bTQiOiIiLCJzcG90X2lkIjoxNDU2MzQwLCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjowLCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTgsImJ0eXBlIjo0LCJ2MiI6MCwicmNoYW5nZSI6ZmFsc2UsInBvcyI6MCwiZXZlbnRfaWQiOiI4NTM5Nzc5Ny1hMDg2LTQzMWQtOWE3My1jOTU5OWFjYjcyMjEiLCJhcHByb3ZlZF9tYWluc3RyZWFtIjowLCJ3bCI6MSwidGVzdGFiIjowLCJ2ZXIiOiI2LjkxLjEifSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfSwibWV0cmljcyI6eyJ0b3BpY3MiOltdfX1dLCJzaXRlIjp7ImlkIjoiMTQ1NjM0MCIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9tYXN0aXRhbGVzLmNvbS8iLCJjdGlkIjoxfSwiZGV2aWNlIjp7InciOjEyODAsImgiOjEwMjR9LCJmcF9wYXJhbXMiOnsicGx1Z2lucyI6WyJQREYgVmlld2VyIiwiQ2hyb21lIFBERiBWaWV3ZXIiLCJDaHJvbWl1bSBQREYgVmlld2VyIiwiTWljcm9zb2Z0IEVkZ2UgUERGIFZpZXdlciIsIldlYktpdCBidWlsdC1pbiBQREYiXSwibGFuZ3VhZ2VzIjpbImVuLVVTIiwiZW4iXSwiZm9udHMiOlsiQml0c3RyZWFtIFZlcmEgU2FucyBNb25vIiwiQ2VudHVyeSJdLCJmb250UHJlZmVyZW5jZXMiOnsiZGVmYXVsdCI6MTczLjExNjY2ODcwMTE3MTg4LCJhcHBsZSI6MTczLjExNjY2ODcwMTE3MTg4LCJzZXJpZiI6MTczLjExNjY2ODcwMTE3MTg4LCJzYW5zIjoxNjIuMDE2NjYyNTk3NjU2MjUsIm1vbm8iOjEyMi42ODMzMzQzNTA1ODU5NCwibWluIjoxMC44MDAwMDMwNTE3NTc4MTIsInN5c3RlbSI6MTYyLjAxNjY2MjU5NzY1NjI1fSwicGxhdGZvcm0iOiJXaW4zMiIsImNvbG9yRGVwdGgiOjI0LCJkZXZpY2VNZW1vcnkiOjAsImhhcmR3YXJlQ29uY3VycmVuY3kiOjQ4LCJpbmRleGVkREIiOnRydWUsInNlc3Npb25TdG9yYWdlIjp0cnVlLCJsb2NhbFN0b3JhZ2UiOnRydWUsImNvb2tpZXNFbmFibGVkIjp0cnVlLCJjb2xvckdhbXV0Ijoic3JnYiJ9LCJ1c2VyIjp7ImlkIjoiNTlhZjk2Mjg4N2YzMzdkNzI5OWIxNDJmYTYzMzc2ODQiLCJmcCI6bnVsbCwiZnBfc3RyIjoiIiwidWFfZGF0YSI6bnVsbCwiaXNfd2VidmlldyI6ZmFsc2UsInNvY2lhbF9uZXR3b3JrIjoiIn0sImV4dCI6eyJkdCI6MTc3MDIzMjMyNDgwOH19","date":"2026-02-04T19:12:05.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /banner/in/show/?mid=464715720821592917\u0026pid=0\u0026site=1456340\u0026sc=\u0026usage_type=DCH\u0026subid=2033437665\u0026sid=0\u0026cid=19905\u0026price=0\u0026is_cpm=0\u0026cpm=0.0001\u0026ecpm=0.0001\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=0\u0026ver=6.91.1\u0026ver_c=\u0026refdom=mastitales.com\u0026hostname=auc-banner-hz-26\u0026site_id=0\u0026spot_id=1456340\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026ip=\u0026testab=0\u0026px_id=1456340\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=default\u0026min_cpm=0\u0026placement_type_id=269\u0026verify_hash=07d730ce80b17810e9853163b41af2d4c87e26933a714ec82e2df8e8d514c64c\u0026score=1\u0026kubik_score=0\u0026kaminari_bot_ip=1\u0026tag_ab=d\u0026v2=0\u0026ttl=0\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D1456340%26source%3D2033437665%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D1456340%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DFree%252CXXX%252CPorn%252CVideos%252CWatch%252CNow%252CMasti%252CTales%252CMast%252CTales%252Coffers%252Cexclusive%252CXXX%252CPorn%252CVideos%252Cand%252Cfree%252Cporn%252CMovies%252CInstantly%252Cwatch%252Cover%252C10%252Cmillion%252Chardcore%252Csex%252Cmovies%252Con%252Cpremium%252Cporntube%252Cfrom%252Cprofessionals%252Cand%252Camateurs%21%2C%26spot_id%3D1456340%26p%3Dhttps%253A%252F%252Fmastitales.com%252F%26katds_labels%3D%26btype%3D4%26score%3D1%26bf%3D0%26dr%3Dmastitales.com\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1456340\u0026original_bid_usd=0.0001\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.0002516513061914115\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=\u0026auction_time=1770232325\u0026account_id=2060\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1770232325\u0026double_click_filter=false\u0026w=300\u0026h=250\u0026skin_id=8\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=Adult,amateur\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.15799663602217287\u0026container=Skin%20300x250%20Banner\u0026mediation_ecpm=0\u0026mediation_type=\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=117793\u0026advanced_pub_id=0\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0\u0026ip_mismatch=91.90.42.154\u0026ua_mismatch=Mozilla%252F5.0%2520%2528Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0%2529%2520Gecko%252F20100101%2520Firefox%252F134.0\u0026geo_mismatch=NO\u0026isp_mismatch=LQ==\u0026mismatch_filters=ttl_mismatch HTTP/1.1\r\nHost: rtbrenab.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: https://preroll.hostave3.net/notifications/zeropixel.png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.rdy.to/ytb/index.html","fqdn":"ads.rdy.to","domain":"rdy.to","tld":"to"},"ip":{"addr":"104.21.27.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:06.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdy.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 17:59:26 GMT","end":"Wed, 18 Mar 2026 18:57:54 GMT"},"fingerprint":{"sha1":"F9:90:B8:24:82:95:31:65:EA:6E:2C:92:A8:AF:1E:DD:F2:D7:5B:76","sha256":"C4:C0:07:47:B4:79:92:15:E7:29:42:A9:34:72:28:C8:BB:1E:55:1F:B2:8C:40:28:61:B2:FB:36:40:C3:B7:83"}}},"request":{"raw":"GET /ytb/index.html HTTP/1.1\r\nHost: ads.rdy.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.60ah.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cBIV2m5vVkppUPSCC%2BJvikFZGdxV1vlrFJGaz4iIp9ApbforCyY35dX7xcMYiRcW%2BB%2FfD16qP8qTQBmpxIvKOLsb%2F0lPLH5pv%2FU%3D\"}]}\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 16 Jan 2026 11:52:55 GMT\r\nx-request-id: 9f8845a5dba67b1ef92c7af489409452\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c8c7a47ce4875ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":390,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"802f55f07257336db94a4e4725433346","sha1":"4ff2c5d4ab2875f750eb9066a0ff3b76257b7bbe","sha256":"8ccd2c6d833d348559e54692f0e15a0125e3ea661fcc7c88a16016727316121b","sha512":"4f55f2bf5e0c3add26bcaab3f932d5145fa3bcb0bb9206318df970d35a69a2646899de230ee81a1dfc26edbf3a9b23fcd470e91e206c7b5a7685b37eed3a38e9","ssdeep":"","tlshash":"19e0cd6545473d4d6435e1b04ee1a3aced67418fa743490476ed72733fb1504cca3ad4","first_seen":"2026-01-17T00:49:56.297374Z","last_seen":"2026-04-13T00:22:26.726045Z","times_seen":137,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":22,"dns":4,"connect":1,"send":0,"wait":47,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.onclckmn.com/static/onclicka.js","fqdn":"js.onclckmn.com","domain":"onclckmn.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://satincrave.com/portstandart.php?id=3","date":"2026-02-04T19:12:07.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.onclckmn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 02:33:47 GMT","end":"Mon, 16 Mar 2026 02:33:46 GMT"},"fingerprint":{"sha1":"D5:DE:9C:E8:78:2B:C4:B8:02:51:22:18:96:12:3B:D8:09:AA:40:E2","sha256":"9C:0E:E8:D1:C2:FD:66:78:B3:06:19:0F:A9:0B:19:CA:40:C0:F3:87:FF:45:B6:19:A7:9E:34:71:10:61:65:1D"}}},"request":{"raw":"GET /static/onclicka.js HTTP/1.1\r\nHost: js.onclckmn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://satincrave.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 16 Jan 2026 12:21:20 GMT\r\netag: W/\"696a2d40-2493f\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 04 Feb 2026 19:17:07 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149823,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"039ee1df33216ec8004c99be324a28d4","sha1":"1052439d334ac0e5d0f4a3ca053b88ae8474b107","sha256":"f8cd3a391501b49f1179cd1266406c043eb532ff936878fa4d26ffa4dca3f12a","sha512":"3bfe40a8b85c8514df53050acb5b6988c44a9f642cb64a807f10d6b6065fe19b8fbae866db15581a02954adb4aa66858cf085f66b5401ce0ae769607cd20ae36","ssdeep":"1536:O18MdnC5OPz8YBP9r2RcZAdtK8wBggJ41LloXQTtQyodhm161zKK+AKn7K0ketsz:mBFSGAdt6Rndhmo1GqKGPetsz","tlshash":"14e349dcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb9237f7a","first_seen":"2026-01-16T19:00:37.743054Z","last_seen":"2026-02-17T06:56:54.258726Z","times_seen":199,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":65,"dns":14,"connect":21,"send":0,"wait":42,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.onclcktg.com/tags/413831?version_name=a\u0026domain=satincrave.com","fqdn":"bid.onclcktg.com","domain":"onclcktg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://satincrave.com/portstandart.php?id=3","date":"2026-02-04T19:12:07.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid.onclcktg.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 02:34:29 GMT","end":"Fri, 01 May 2026 02:34:28 GMT"},"fingerprint":{"sha1":"07:8E:1F:F8:40:8F:24:8E:12:70:AA:FC:9E:90:61:7D:6D:E6:B8:DE","sha256":"FE:E0:A7:4D:40:A5:7F:18:49:45:AE:37:0F:12:82:A4:7C:8D:94:6D:09:C7:36:EF:DC:4A:63:80:B6:99:95:DC"}}},"request":{"raw":"GET /tags/413831?version_name=a\u0026domain=satincrave.com HTTP/1.1\r\nHost: bid.onclcktg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://satincrave.com/\r\nOrigin: https://satincrave.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:07 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: EXPIRED\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1267,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"097338dfb8c373afe76a12cd6006b20d","sha1":"5217193e1e6069e7d7b532e7d9d237f95075f50b","sha256":"71db1500af4f156cac1321d20b501893df09b51e49329cec08c0625890a3437a","sha512":"4631a53a81e1c7d9bbb08e1523606cde80ecf5d51dfec83a312c13783d00a3a81fbab340fad6c63378b8634f5454e8438aaa5f32fc007572ed1b7af7e5310c06","ssdeep":"","tlshash":"7321216c8f5884ff41d11ac6d248760a0606351bf1d8b14af9ac4ebd238f2e91b6725f","first_seen":"2026-01-16T07:16:22.088806Z","last_seen":"2026-04-05T04:30:43.808973Z","times_seen":11,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":75,"dns":26,"connect":19,"send":0,"wait":34,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/b_as_n.css?v4","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bid.onclckbn.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:08.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.60ah.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Jan 2026 02:32:17 GMT","end":"Sat, 11 Apr 2026 02:32:16 GMT"},"fingerprint":{"sha1":"D5:46:C2:4A:64:F2:FC:7F:84:CB:60:8E:6B:90:6E:22:F9:FF:1F:A0","sha256":"F3:7A:4B:6B:3B:3D:36:5F:65:2B:DD:3E:68:4A:BD:AF:F7:84:77:97:39:08:E4:D5:4F:3A:88:81:78:E2:F9:E1"}}},"request":{"raw":"GET /b/b_as_n.css?v4 HTTP/1.1\r\nHost: cdn.60ah.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bid.onclckbn.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:08 GMT\r\ncontent-type: text/css\r\nserver: nginx/1.20.1\r\nlast-modified: Tue, 04 Mar 2025 13:12:58 GMT\r\netag: W/\"67c6fc5a-6d6\"\r\ncache-control: max-age=172800\r\nx-request-id: afc474e974460d801cb443d59b4334c6\r\ncontent-encoding: gzip\r\nexpires: Fri, 06 Feb 2026 19:12:08 GMT\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4710815dcdb221d8c5193cc0fa3d7d99","sha1":"3e44ee99da6a9b8d4d50d12b3fdb450fb5f20e8b","sha256":"f492ad6b8d8f9b56191233c65e6464b17ca2d2e585a03bfffa00a24bbc8be8fe","sha512":"f3172565b50840be7a37c2dc5d9da6862398fe8a50b07389377320c30743a8db9e10cc9e5dc7d19637b61e67daa17fc296b0f4d9124be37deeac23140653f558","ssdeep":"","tlshash":"813162a49a65a105d037e7f82751071962aed010e303091ebff07229a2dfdad7a25ffc","first_seen":"2025-04-07T07:53:53.259552Z","last_seen":"2026-04-20T04:33:38.84149Z","times_seen":1724,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:02.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"2ab-686f9768-3c5b47;br\"\r\nlast-modified: Thu, 10 Jul 2025 10:35:20 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 329\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Feb 2026 19:12:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WcDe1D3Pj0mz8jffRBsVjh0zXdAhfd0W%2B%2ByTv3%2FruohyKsPTYjpGLWFvL%2FcG0E7VeF8lQGKB9MER9vHlAk0oPbuplc525106xBn45syy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a312e5176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":683,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"75abd4cd8807b312f9f7faeb77ee774b","sha1":"e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7","sha256":"ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034","sha512":"c9f1f752994f1361555680ca5a60339fda152587ccc055db20148c086d82846887dd0801187aa033829b7d5eb9644b9391f493965eee35b4a1592f82cbb36aa4","ssdeep":"","tlshash":"bb01cbb6b30d44b604aa32178d5f61cd297d91e3a829649b8cc909502924c6d23befb8","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-04-20T07:32:23.764828Z","times_seen":10948,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/1-171.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/1-171.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 16:59:08 GMT\r\netag: \"3268-6887120d-3b8944;;;\"\r\nlast-modified: Mon, 28 Jul 2025 06:00:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12904\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=czkLRLKSPpRe0knLUoNyY5Ch%2BTSXjAXWlM6OvO%2FHdl9ljc%2Bdi0d1o7HvGFByRCquH1x7lSfXKuiSGigVISZa%2F4HRwP52JgLqs9OIub6x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a349eeb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12904,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 240x180, components 3","md5":"0701ca55432110867a3eeec0bea83126","sha1":"8290ddf99449f2095161d1046230e702a3678e99","sha256":"9cdfa53709e1e374c3cc37335f457198fe51e1ee52af122fb425b84a91565ca2","sha512":"e8bbf278b9751896397720f289644c389f2d456e786c6f1872646b5ed6b1f4b304b6335a7159e51ab45d65270e3a4c1f295ed76d4040d14a486329097717e25e","ssdeep":"384:8kKj4d0XUhY/cDUIljmxN5LZjCdn3vQh5bYJMOkBv5eC:nKHp/lI4dpChYh5bYJM5","tlshash":"9d42bfc04b8abbd0f53c56f80ca6cf44c0e5aea6a6dfd78fb9d308045d5684e2e71821","first_seen":"2026-02-04T19:12:33.519305Z","last_seen":"2026-02-04T19:12:33.519305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/1-19.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/1-19.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 15:44:28 GMT\r\netag: \"38fc-68701102-3b370a;;;\"\r\nlast-modified: Thu, 10 Jul 2025 19:14:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14588\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2F0Mn1aBW%2B3%2Bp4DJWB2C2%2Bv%2BzY9ah49v4bqQLEFn9WBlNd0TOP%2Be3CZS16Ebwwr5qMARWRoAPlXLPqOy2dIIcleheflIA9ZV5Hp1h0J6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a34aef376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14588,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 240x180, components 3","md5":"90403da11666be5403f9a6829f7f89b7","sha1":"52e79f68cbe91fc2804f7347cb3c85409b6a40a9","sha256":"83760f2bc968d09b7dca884fa6a3b322569733ea8b202220dad9798da808d211","sha512":"da86a09c21a199e1d8b85dc9f7e6b3c8cdec6b93494408e656b59b1933f47b5abd1d76d68614dae6e5b3e8ccec2928b09e5949c3af730d230d79297b3eb91d6c","ssdeep":"384:HnNbjUCEvGY0j+r8hyWRTE/3n/hrbJVxdDUIu/:HnGpvf4+ayWFQprbzAIm","tlshash":"d262c0992f0909c2ffb1767817878f5a43c28c5b0e65d2fbb1d18694a5413e12cf326e","first_seen":"2026-02-04T19:12:33.520634Z","last_seen":"2026-02-04T19:12:33.520634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=348265","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"OPTIONS /fp?tag_id=348265 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mastitales.com/\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:05 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://mastitales.com\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:05.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.60ah.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Jan 2026 02:32:17 GMT","end":"Sat, 11 Apr 2026 02:32:16 GMT"},"fingerprint":{"sha1":"D5:46:C2:4A:64:F2:FC:7F:84:CB:60:8E:6B:90:6E:22:F9:FF:1F:A0","sha256":"F3:7A:4B:6B:3B:3D:36:5F:65:2B:DD:3E:68:4A:BD:AF:F7:84:77:97:39:08:E4:D5:4F:3A:88:81:78:E2:F9:E1"}}},"request":{"raw":"GET /b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340 HTTP/1.1\r\nHost: cdn.60ah.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: nginx/1.20.1\r\nlast-modified: Mon, 23 Jun 2025 15:49:26 GMT\r\netag: W/\"a2e-6383f28086d80\"\r\nx-request-id: fab82c46460089be875605d96416a14d\r\ncontent-encoding: gzip\r\nexpires: Fri, 06 Feb 2026 19:12:05 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2606,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (425)","md5":"28d590ec50222650e11913780176ae6f","sha1":"e1ede82b9406894cf75e62e5611969dd0d4e8010","sha256":"45130bde21b34abbccf398d7b4f8b9beabcc679f0d0cf9079883dcc34d84246b","sha512":"e0b71f741fbdda624e1fef6420f26316714671e37cb3ec775abc1a3531adf2d4c9a3250c0496d1c91c8c130224f8adf555f2c10795721e585e5dade74fcbeabf","ssdeep":"","tlshash":"5f5172e2c59204300616809e19ffb1cc7926213baa41c401ffddf121af9c7ab48768dc","first_seen":"2025-06-25T19:13:05.814782Z","last_seen":"2026-04-20T04:33:38.81002Z","times_seen":724,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.onclckbn.net/banner/in/show/?mid=1211851684791969012\u0026pid=0\u0026site=6106550\u0026sc=\u0026usage_type=DCH\u0026subid=2089872083\u0026sid=0\u0026cid=19905\u0026price=0\u0026is_cpm=0\u0026cpm=0.0001\u0026ecpm=0.0001\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=0\u0026ver=6.91.1\u0026ver_c=\u0026refdom=satincrave.com\u0026hostname=auc-banner-hz-7\u0026site_id=0\u0026spot_id=6106550\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026ip=\u0026testab=0\u0026px_id=6106550\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=default\u0026min_cpm=0\u0026placement_type_id=269\u0026verify_hash=405be13a47f2d795e05ca41a0fe89c679f4732431eee319432f0230bba317489\u0026score=100\u0026kubik_score=100\u0026kaminari_bot_ip=1\u0026tag_ab=a\u0026v2=0\u0026ttl=0\u0026space_id=0\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=12927083224335317117\u0026icon=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D6106550%26source%3D2089872083%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D6106550%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3D%2C%26spot_id%3D6106550%26p%3Dhttps%253A%252F%252Fsatincrave.com%252Fkalitecheck.php%253Fid%253D324%26katds_labels%3D%26btype%3D2%26score%3D100%26bf%3D0%26dr%3Dsatincrave.com\u0026pr=satincrave.com\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=6106550\u0026original_bid_usd=0.0001\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.000046315288014926754\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=\u0026auction_time=1770232328\u0026account_id=2060\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1770232328\u0026double_click_filter=false\u0026w=300\u0026h=250\u0026skin_id=8\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.0004727995801616763\u0026container=Skin%20300x250%20Banner\u0026mediation_ecpm=0\u0026mediation_type=\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=162465\u0026advanced_pub_id=0\u0026lv_id=0\u0026entry_source=inner\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0\u0026ip_mismatch=91.90.42.154\u0026ua_mismatch=Mozilla%252F5.0%2520%2528Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0%2529%2520Gecko%252F20100101%2520Firefox%252F134.0\u0026geo_mismatch=NO\u0026isp_mismatch=LQ==\u0026mismatch_filters=ttl_mismatch","fqdn":"bid.onclckbn.net","domain":"onclckbn.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bid.onclckbn.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:08.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /banner/in/show/?mid=1211851684791969012\u0026pid=0\u0026site=6106550\u0026sc=\u0026usage_type=DCH\u0026subid=2089872083\u0026sid=0\u0026cid=19905\u0026price=0\u0026is_cpm=0\u0026cpm=0.0001\u0026ecpm=0.0001\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=0\u0026ver=6.91.1\u0026ver_c=\u0026refdom=satincrave.com\u0026hostname=auc-banner-hz-7\u0026site_id=0\u0026spot_id=6106550\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026ip=\u0026testab=0\u0026px_id=6106550\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=default\u0026min_cpm=0\u0026placement_type_id=269\u0026verify_hash=405be13a47f2d795e05ca41a0fe89c679f4732431eee319432f0230bba317489\u0026score=100\u0026kubik_score=100\u0026kaminari_bot_ip=1\u0026tag_ab=a\u0026v2=0\u0026ttl=0\u0026space_id=0\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=12927083224335317117\u0026icon=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D6106550%26source%3D2089872083%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D6106550%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3D%2C%26spot_id%3D6106550%26p%3Dhttps%253A%252F%252Fsatincrave.com%252Fkalitecheck.php%253Fid%253D324%26katds_labels%3D%26btype%3D2%26score%3D100%26bf%3D0%26dr%3Dsatincrave.com\u0026pr=satincrave.com\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=6106550\u0026original_bid_usd=0.0001\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.000046315288014926754\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=\u0026auction_time=1770232328\u0026account_id=2060\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1770232328\u0026double_click_filter=false\u0026w=300\u0026h=250\u0026skin_id=8\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.0004727995801616763\u0026container=Skin%20300x250%20Banner\u0026mediation_ecpm=0\u0026mediation_type=\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=162465\u0026advanced_pub_id=0\u0026lv_id=0\u0026entry_source=inner\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0\u0026ip_mismatch=91.90.42.154\u0026ua_mismatch=Mozilla%252F5.0%2520%2528Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0%2529%2520Gecko%252F20100101%2520Firefox%252F134.0\u0026geo_mismatch=NO\u0026isp_mismatch=LQ==\u0026mismatch_filters=ttl_mismatch HTTP/1.1\r\nHost: bid.onclckbn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:08 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: https://preroll.hostave3.net/notifications/zeropixel.png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:02.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 05:32:34 GMT","end":"Tue, 31 Mar 2026 05:32:33 GMT"},"fingerprint":{"sha1":"50:AC:07:EC:79:B5:32:ED:7F:C5:56:C7:D3:5B:2F:F0:0D:A1:DB:81","sha256":"04:83:11:68:E8:6D:EA:03:69:80:2F:F0:AF:3E:A6:1D:46:55:C1:87:6E:C7:D9:C1:48:93:67:CF:0E:20:0B:BA"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 16 Jan 2026 12:21:20 GMT\r\netag: W/\"696a2d40-2494b\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 04 Feb 2026 19:17:02 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149835,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9f7b734689cae2d039dae1123333dded","sha1":"e20b71453fccd4fcdca964d4d609111c77f60484","sha256":"996fbfcbf5a7091890788228af5539ec39c018efcc8ea9bad557991859f03572","sha512":"584f0a5e0a073862bae0d847a2a03f4a08fdfeca97e22eea85bef7399292cc408d2d236c297f44a8ea883829f094489f62a6ae6859600c5327e6f285551fa131","ssdeep":"1536:O18MdnC5OPz8YBP9r2RcZAdtK8wBgg0341LloXQTtQyodhm161zKK+AKn7K0ketc:mBFSGAdt6Rydhmo1GqKGPetsz","tlshash":"11e349dcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb9237f7a","first_seen":"2026-01-16T14:34:54.211339Z","last_seen":"2026-02-17T11:09:06.763188Z","times_seen":683,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":60,"dns":25,"connect":21,"send":0,"wait":41,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flepquix.com/in/dip?event_id=85397797-a086-431d-9a73-c9599acb7221","fqdn":"flepquix.com","domain":"flepquix.com","tld":"com"},"ip":{"addr":"178.63.5.120","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /in/dip?event_id=85397797-a086-431d-9a73-c9599acb7221 HTTP/1.1\r\nHost: flepquix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":71,"dns":1,"connect":26,"send":0,"wait":30,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preroll.hostave3.net/notifications/zeropixel.png","fqdn":"preroll.hostave3.net","domain":"hostave3.net","tld":"net"},"ip":{"addr":"172.67.145.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImQiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5NSwic3BhY2VpZCI6MTQ5NSwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IkZyZWUlMkNYWFglMkNQb3JuJTJDVmlkZW9zJTJDV2F0Y2glMkNOb3clMkNNYXN0aSUyQ1RhbGVzJTJDTWFzdCUyQ1RhbGVzJTJDb2ZmZXJzJTJDZXhjbHVzaXZlJTJDWFhYJTJDUG9ybiUyQ1ZpZGVvcyUyQ2FuZCUyQ2ZyZWUlMkNwb3JuJTJDTW92aWVzJTJDSW5zdGFudGx5JTJDd2F0Y2glMkNvdmVyJTJDMTAlMkNtaWxsaW9uJTJDaGFyZGNvcmUlMkNzZXglMkNtb3ZpZXMlMkNvbiUyQ3ByZW1pdW0lMkNwb3JudHViZSUyQ2Zyb20lMkNwcm9mZXNzaW9uYWxzJTJDYW5kJTJDYW1hdGV1cnMhLCIsImxhYmVscyI6IiIsImFsbG93ZWRfbGFiZWxzIjoiIiwidGl0bGUiOiIiLCJzdWJpZCI6IjM2MzE0NTk2NSIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjE0NTYzMzksIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjI3MCwic3RyYXRhZ2VtIjoiIiwiZ3lyIjowLCJhY2NlbCI6MCwic3NwIjozNzU4LCJidHlwZSI6MCwidjIiOjAsInJjaGFuZ2UiOmZhbHNlLCJwb3MiOjAsImV2ZW50X2lkIjoiODUzOTc3OTctYTA4Ni00MzFkLTlhNzMtYzk1OTlhY2I3MjIxIiwiYXBwcm92ZWRfbWFpbnN0cmVhbSI6MCwid2wiOjEsInRlc3RhYiI6MCwidmVyIjoiNi45MS4xIn0sImJhbm5lciI6eyJ3IjozMDAsImgiOjEwMH0sIm1ldHJpY3MiOnsidG9waWNzIjpbXX19XSwic2l0ZSI6eyJpZCI6IjE0NTYzMzkiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vbWFzdGl0YWxlcy5jb20vIiwiY3RpZCI6MX0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwiZnBfcGFyYW1zIjp7InBsdWdpbnMiOlsiUERGIFZpZXdlciIsIkNocm9tZSBQREYgVmlld2VyIiwiQ2hyb21pdW0gUERGIFZpZXdlciIsIk1pY3Jvc29mdCBFZGdlIFBERiBWaWV3ZXIiLCJXZWJLaXQgYnVpbHQtaW4gUERGIl0sImxhbmd1YWdlcyI6WyJlbi1VUyIsImVuIl0sImZvbnRzIjpbIkJpdHN0cmVhbSBWZXJhIFNhbnMgTW9ubyIsIkNlbnR1cnkiXSwiZm9udFByZWZlcmVuY2VzIjp7ImRlZmF1bHQiOjE3My4xMTY2Njg3MDExNzE4OCwiYXBwbGUiOjE3My4xMTY2Njg3MDExNzE4OCwic2VyaWYiOjE3My4xMTY2Njg3MDExNzE4OCwic2FucyI6MTYyLjAxNjY2MjU5NzY1NjI1LCJtb25vIjoxMjIuNjgzMzM0MzUwNTg1OTQsIm1pbiI6MTAuODAwMDAzMDUxNzU3ODEyLCJzeXN0ZW0iOjE2Mi4wMTY2NjI1OTc2NTYyNX0sInBsYXRmb3JtIjoiV2luMzIiLCJjb2xvckRlcHRoIjoyNCwiZGV2aWNlTWVtb3J5IjowLCJoYXJkd2FyZUNvbmN1cnJlbmN5Ijo0OCwiaW5kZXhlZERCIjp0cnVlLCJzZXNzaW9uU3RvcmFnZSI6dHJ1ZSwibG9jYWxTdG9yYWdlIjp0cnVlLCJjb29raWVzRW5hYmxlZCI6dHJ1ZSwiY29sb3JHYW11dCI6InNyZ2IifSwidXNlciI6eyJpZCI6IjU5YWY5NjI4ODdmMzM3ZDcyOTliMTQyZmE2MzM3Njg0IiwiZnAiOm51bGwsImZwX3N0ciI6IiIsInVhX2RhdGEiOm51bGwsImlzX3dlYnZpZXciOmZhbHNlLCJzb2NpYWxfbmV0d29yayI6IiJ9LCJleHQiOnsiZHQiOjE3NzAyMzIzMjQ4MDF9fQ==","date":"2026-02-04T19:12:05.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hostave3.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 17:15:23 GMT","end":"Mon, 16 Mar 2026 18:13:55 GMT"},"fingerprint":{"sha1":"41:3C:1E:E0:08:D1:6C:38:21:47:B8:14:0C:25:76:36:FD:34:24:1A","sha256":"0E:AA:90:56:57:3E:C1:BB:8F:02:C9:62:A7:53:D7:BC:00:93:1C:74:16:9B:35:37:E5:FB:00:A7:58:81:44:BE"}}},"request":{"raw":"GET /notifications/zeropixel.png HTTP/1.1\r\nHost: preroll.hostave3.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 42\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Sep 2018 08:40:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1LeXyPABcKaPZr35qSHOp9%2FDnyB4ZCBCA%2BEcFHUM2M8fc9H2MillR5vjCJeSWKtTYQpSCyLPh1UEeLjVe2USiZWJyr2mYOZ52slwO5TuZXPDFyK\"}]}\r\netag: \"5b977f94-2a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1867024\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9c8c7a42b8ee35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-20T07:59:54.415044Z","times_seen":808784,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":33,"dns":5,"connect":1,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preroll.hostave3.net/notifications/zeropixel.png","fqdn":"preroll.hostave3.net","domain":"hostave3.net","tld":"net"},"ip":{"addr":"172.67.145.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bid.onclckbn.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:08.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hostave3.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 17:15:23 GMT","end":"Mon, 16 Mar 2026 18:13:55 GMT"},"fingerprint":{"sha1":"41:3C:1E:E0:08:D1:6C:38:21:47:B8:14:0C:25:76:36:FD:34:24:1A","sha256":"0E:AA:90:56:57:3E:C1:BB:8F:02:C9:62:A7:53:D7:BC:00:93:1C:74:16:9B:35:37:E5:FB:00:A7:58:81:44:BE"}}},"request":{"raw":"GET /notifications/zeropixel.png HTTP/1.1\r\nHost: preroll.hostave3.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Feb 2026 19:12:08 GMT\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 11 Sep 2018 08:40:52 GMT\r\ncontent-length: 42\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5b977f94-2a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1867027\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=73Rp87qEIabhf007jgGPK%2BkXaIDDPWWJUel1PPibRELCNGUP%2BQ8yqL7Q5kAvVIk%2FD%2FwN5bjnBc4uDdxX4Uwq8VcD0xQApDd1py4XcydmRPw1VQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9c8c7a56289bb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-20T07:59:54.415044Z","times_seen":808784,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/1-169.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/1-169.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 06 Jan 2026 20:32:53 GMT\r\netag: \"3362-6887120b-3b88ee;;;\"\r\nlast-modified: Mon, 28 Jul 2025 06:00:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13154\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4HvCxGIcD2gVzE4n2DmVtjoWxBt9zZmLGVP7yi4CQHQME5LHrVUAvG5sGAji8gYyJF95uoB7Mup1qoCHf3CVdtPw3zlyKjAjcl5l5b0C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a349eed76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13154,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 240x180, components 3","md5":"fc5d30daa40e4801206ca88e72f314d9","sha1":"dbb6c9498b2c182cc1db01524723ecd5428e9a9a","sha256":"192c9f9e6d735e24b3bd444c67a613b0e736e8c789ca96943688db077ca8569e","sha512":"93f0316b8b68f1226b8d9cb078343787682050d8831c03c3602e3e9fe5c8efd29b6650461461b7d09e76cdac3f87010a0b3994318152ebf98d6921b75d218bc8","ssdeep":"192:OjAnOgtzNsmu5CfUDpcAl9eMxiC+k/uZL6DaO93YiGbYWfHZH8jt+owMksqnFq1N:5OgJNsmulus9zZrgRuAbYg8bkjSdu+","tlshash":"e542d095abd3edeefab25a73d277fecc1bd84d44f2104a67e7c644a498238d5024202d","first_seen":"2026-02-04T19:12:33.547436Z","last_seen":"2026-02-04T19:12:33.547436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/banner/in/show/?mid=5824619568969960442\u0026pid=0\u0026site=1456339\u0026sc=\u0026usage_type=DCH\u0026subid=363145965\u0026sid=0\u0026cid=22170\u0026price=0\u0026is_cpm=1\u0026cpm=0.0007\u0026ecpm=0.0007\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=0\u0026ver=6.91.1\u0026ver_c=\u0026refdom=mastitales.com\u0026hostname=auc-banner-hz-21\u0026site_id=0\u0026spot_id=1456339\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026ip=\u0026testab=0\u0026px_id=1456339\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=banner-ext\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026min_cpm=0.0001\u0026placement_type_id=270\u0026verify_hash=bf499521f1f250d7f400c0e5b63b9acdba6f89fb1a77ccbe09e35d6b8eb15d2e\u0026score=1\u0026kubik_score=0\u0026kaminari_bot_ip=1\u0026tag_ab=d\u0026v2=0\u0026ttl=0\u0026space_id=1495\u0026banner_width=300\u0026banner_height=100\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=%2F%2Fsenzoriq.com%2Fout.php%3Fid%3Dnewrtb%26pos%3D270%26siteid%3D1456339%26subid%3D363145965%26domain%3Dmastitales.com\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1456339\u0026original_bid_usd=0.0007\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.00021630695536116698\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=53604833\u0026auction_time=1770232325\u0026account_id=3373\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1770232325\u0026double_click_filter=false\u0026w=300\u0026h=100\u0026skin_id=11\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=Adult,amateur\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.10993844198466991\u0026container=Skin%20300x100%20Banner\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=117793\u0026advanced_pub_id=117793\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0\u0026ip_mismatch=91.90.42.154\u0026ua_mismatch=Mozilla%252F5.0%2520%2528Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0%2529%2520Gecko%252F20100101%2520Firefox%252F134.0\u0026geo_mismatch=NO\u0026isp_mismatch=LQ==\u0026mismatch_filters=ttl_mismatch","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:05.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /banner/in/show/?mid=5824619568969960442\u0026pid=0\u0026site=1456339\u0026sc=\u0026usage_type=DCH\u0026subid=363145965\u0026sid=0\u0026cid=22170\u0026price=0\u0026is_cpm=1\u0026cpm=0.0007\u0026ecpm=0.0007\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=0\u0026ver=6.91.1\u0026ver_c=\u0026refdom=mastitales.com\u0026hostname=auc-banner-hz-21\u0026site_id=0\u0026spot_id=1456339\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026ip=\u0026testab=0\u0026px_id=1456339\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=banner-ext\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026min_cpm=0.0001\u0026placement_type_id=270\u0026verify_hash=bf499521f1f250d7f400c0e5b63b9acdba6f89fb1a77ccbe09e35d6b8eb15d2e\u0026score=1\u0026kubik_score=0\u0026kaminari_bot_ip=1\u0026tag_ab=d\u0026v2=0\u0026ttl=0\u0026space_id=1495\u0026banner_width=300\u0026banner_height=100\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=%2F%2Fsenzoriq.com%2Fout.php%3Fid%3Dnewrtb%26pos%3D270%26siteid%3D1456339%26subid%3D363145965%26domain%3Dmastitales.com\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1456339\u0026original_bid_usd=0.0007\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.00021630695536116698\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=53604833\u0026auction_time=1770232325\u0026account_id=3373\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1770232325\u0026double_click_filter=false\u0026w=300\u0026h=100\u0026skin_id=11\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=Adult,amateur\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.10993844198466991\u0026container=Skin%20300x100%20Banner\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=117793\u0026advanced_pub_id=117793\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0\u0026ip_mismatch=91.90.42.154\u0026ua_mismatch=Mozilla%252F5.0%2520%2528Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A134.0%2529%2520Gecko%252F20100101%2520Firefox%252F134.0\u0026geo_mismatch=NO\u0026isp_mismatch=LQ==\u0026mismatch_filters=ttl_mismatch HTTP/1.1\r\nHost: rtbrenab.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: https://preroll.hostave3.net/notifications/zeropixel.png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"satincrave.com/kalitecheck.php?id=324","fqdn":"satincrave.com","domain":"satincrave.com","tld":"com"},"ip":{"addr":"172.67.133.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://satincrave.com/a2kontrol.php?id=34324","date":"2026-02-04T19:12:07.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"satincrave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 20:07:21 GMT","end":"Wed, 15 Apr 2026 21:05:58 GMT"},"fingerprint":{"sha1":"E8:58:FE:69:52:57:10:9B:A4:D6:F8:68:5E:39:BA:48:A2:FF:00:AA","sha256":"B1:07:29:7C:B8:0F:9A:70:B9:C3:DD:4E:55:F5:22:41:ED:4F:9D:75:CA:C2:20:E3:84:E1:AB:7D:9E:CB:3B:A2"}}},"request":{"raw":"GET /kalitecheck.php?id=324 HTTP/1.1\r\nHost: satincrave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://satincrave.com/a2kontrol.php?id=34324\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33, PleskLin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G94eo%2B9eIvx1v8sSYf1xJuRmbPsPSq%2Fv7dZtTIWv%2B7JANGGAby%2B8Nj4V%2FDa%2Bb%2BOczo2bFff98edrdOqYS8Bbr12Hz5jVcNBJc3i1hrRc\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c8c7a4dcbdc1ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1537,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4c8aaba6cec149c849d8183b09d7746b","sha1":"4f49f7aa8bdf99ad57a913b13ca9c856e2cddb24","sha256":"72d395d17175de3863f0cc95684543650009f3b3bba1b419e4522c9589287711","sha512":"c654e1db2d7844eaacfbf6953fcd341211c52746e78f5c946edccf1858547e4d94fb78d207c33206a5f138f2ddfae2341565b0510f44d6fe4690d31127a08ecd","ssdeep":"","tlshash":"053132a305bb101d4a5b146a13db0123b58ee80b3a93eac0764e93252fec61911e7a8e","first_seen":"2026-01-16T03:09:51.43227Z","last_seen":"2026-03-22T13:45:08.800097Z","times_seen":182,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.onclckbnr.com/banner-admanager/build.m.js","fqdn":"js.onclckbnr.com","domain":"onclckbnr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://satincrave.com/portstandart.php?id=3","date":"2026-02-04T19:12:07.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.onclckbnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 02:32:05 GMT","end":"Sat, 07 Mar 2026 02:32:04 GMT"},"fingerprint":{"sha1":"F1:8C:CF:4F:67:FF:10:45:D6:D4:C5:E8:2F:34:E9:99:E7:5B:81:2B","sha256":"6C:79:20:23:C9:15:EE:B7:C4:8D:2B:E9:8E:EE:47:CE:AC:D0:F9:F0:BE:61:F8:DA:D8:EE:DF:95:DC:CC:5A:9D"}}},"request":{"raw":"GET /banner-admanager/build.m.js HTTP/1.1\r\nHost: js.onclckbnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://satincrave.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 30 Jan 2026 09:38:08 GMT\r\netag: W/\"697c7c00-14c02\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 04 Feb 2026 19:17:08 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: DS8137\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84994,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"73fec96c215a8949433222a12792a539","sha1":"ec1ec7a7cd760dcda7ac66c75f332f7b86e87501","sha256":"cba1edf1f89e886d65ddaa10fa35c268dba2f4286d6f23a936d7eb8040b8f1e5","sha512":"ef9a2998146a0ad8bf0c773b0b500fef6d0e70e3b22952199d976566814ca7674f39606c902b4641f95ece4f6730eaf7fa708649d3c897a0e91d986969c4f189","ssdeep":"1536:7aftpnDfu3pIDBgJBpqgiZMZLUyzOBOi6mLEIWDDIWA:7g9DfuTPpqSL37m43U","tlshash":"67836c843290b4b541e640afa43f430af33d2d06b40aa458f16dede77b79e896176f39","first_seen":"2026-01-30T10:33:19.991148Z","last_seen":"2026-02-10T22:56:55.78229Z","times_seen":65,"resource_available":true,"data":null}},"time_used":697,"timings":{"blocked":243,"dns":27,"connect":104,"send":0,"wait":211,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.rdy.to/ytb/index.html","fqdn":"ads.rdy.to","domain":"rdy.to","tld":"to"},"ip":{"addr":"104.21.27.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bid.onclckbn.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:09.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdy.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 17:59:26 GMT","end":"Wed, 18 Mar 2026 18:57:54 GMT"},"fingerprint":{"sha1":"F9:90:B8:24:82:95:31:65:EA:6E:2C:92:A8:AF:1E:DD:F2:D7:5B:76","sha256":"C4:C0:07:47:B4:79:92:15:E7:29:42:A9:34:72:28:C8:BB:1E:55:1F:B2:8C:40:28:61:B2:FB:36:40:C3:B7:83"}}},"request":{"raw":"GET /ytb/index.html HTTP/1.1\r\nHost: ads.rdy.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.60ah.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Feb 2026 19:12:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 16 Jan 2026 11:52:55 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6EigOs3EwDbCMhQ3Jp44POGXRWUJMFqWbyM4n7UxpbbH%2FzQPTNEqx2s%2BxiMTIckNTT5Lny%2BwX6GbttHr2i0YwrjHnL0d9X2Jjk%3D\"}]}\r\nx-request-id: 8a1005b9c7f410b718cd0f22299aad47\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a587a9a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":390,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"802f55f07257336db94a4e4725433346","sha1":"4ff2c5d4ab2875f750eb9066a0ff3b76257b7bbe","sha256":"8ccd2c6d833d348559e54692f0e15a0125e3ea661fcc7c88a16016727316121b","sha512":"4f55f2bf5e0c3add26bcaab3f932d5145fa3bcb0bb9206318df970d35a69a2646899de230ee81a1dfc26edbf3a9b23fcd470e91e206c7b5a7685b37eed3a38e9","ssdeep":"","tlshash":"19e0cd6545473d4d6435e1b04ee1a3aced67418fa743490476ed72733fb1504cca3ad4","first_seen":"2026-01-17T00:49:56.297374Z","last_seen":"2026-04-13T00:22:26.726045Z","times_seen":137,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/11/1-7.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/1-7.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 16 Nov 2025 19:13:35 GMT\r\netag: \"657b-6910e7b1-53f5a1;;;\"\r\nlast-modified: Sun, 09 Nov 2025 19:12:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25979\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Az9MGlhdhofPVuupYIJ%2BvazKOC3PH3nPyeXAgZn9uckaje0sujK95ERYmASTkMmO%2Fbtq4j5vZpScnrfMpROibBYUt8TZjDX19J7cAsEj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a348ee476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25979,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 288x216, components 3","md5":"3383fcfce347c22e72ce31a873eda1c3","sha1":"75852ddf2a8f5eb0accb6bd01acbcc8e5dc7d668","sha256":"1e315930add0038948d9d5c86042a4c8203735beaa7a4d4e6ccf86cd331b0855","sha512":"938bb1811003ed9c16e670cf9827a14426767ae8ecf56e5e8461888358fdd3aba6321960d3b4c5d3dfbe9585601e9303b24915d586f1f507b7b12c586f1d3031","ssdeep":"384:5PbB9h/2Ll37IBpH1ox3cDLTSRjhE7L4zo4y1o8vHHY1PpeBL3SeptZAKJkHpBTH:5PxA+NrD2j67f/cxiL3S4tVJqH","tlshash":"2dc2e059f3109cf67b94417c3caf1d08afec1590b407046bbeaa86d5b845ac1f3b56a8","first_seen":"2026-02-04T19:12:33.550375Z","last_seen":"2026-02-04T19:12:33.550375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=348269","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"OPTIONS /fp?tag_id=348269 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mastitales.com/\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:04 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://mastitales.com\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":84,"dns":1,"connect":24,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=348269","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"OPTIONS /fp?tag_id=348269 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mastitales.com/\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:05 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://mastitales.com\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onclckmetrics.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMDk2Njc3NzM3OTE0Njg1NDAwIiwidGltZXpvbmUiOjAsInZlciI6IjIuNDIuMCIsInRhZ19pZCI6NDEzODMxLCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuMiwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ==","fqdn":"onclckmetrics.com","domain":"onclckmetrics.com","tld":"com"},"ip":{"addr":"138.201.237.88","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://satincrave.com/portstandart.php?id=3","date":"2026-02-04T19:12:07.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMDk2Njc3NzM3OTE0Njg1NDAwIiwidGltZXpvbmUiOjAsInZlciI6IjIuNDIuMCIsInRhZ19pZCI6NDEzODMxLCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuMiwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ== HTTP/1.1\r\nHost: onclckmetrics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://satincrave.com/\r\nOrigin: https://satincrave.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.2\r\ndate: Wed, 04 Feb 2026 19:12:07 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":84,"dns":4,"connect":26,"send":0,"wait":25,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/11/1-3.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/1-3.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 11:50:25 GMT\r\netag: \"3818-6910e7ac-53f555;;;\"\r\nlast-modified: Sun, 09 Nov 2025 19:12:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14360\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5WZ%2B1yKRveduudRYLK2qW5Bp18oBuFKMY9OgTXDoY%2B2ltYNg%2B02vn1VUgRM3vkBZgR7WRT%2F4qnYmMcuuKWyqfEBzZgk83aRBIsLlx1G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a348ee876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14360,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"d31409b732f81b74fb6c696e5271a16a","sha1":"a947a4bbccd69124d2cfa1b94b26ae566b64ba9f","sha256":"a2635d5e5f4334c369a032aaedcb3446c4c4c574c6b75fe2dcc8d2ed2d7269ec","sha512":"8e8a3d7b744f0e77f9657f00910a08bab73eba070d89a08f709ca56553c468b596ba60e9c38cdde00c1b877c5dc6b2b492e22155571200e74899699684059e49","ssdeep":"192:Hp7w+7jUhCXpqhSBrx1K8k2vS2oBGLz9LWtmuJXmy+mJXFOZxqNXjlxQpFr:Jl7jUoZmyxQ2RNpQnJUaLiFr","tlshash":"c952be43c780c1eaf1473972450cce684ee6a145dda4eaa7b2f228fd489e95685ff306","first_seen":"2026-02-04T19:12:33.551462Z","last_seen":"2026-02-04T19:12:33.551462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/1-170.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/1-170.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 19:45:27 GMT\r\netag: \"3ba8-6887120c-3b892d;;;\"\r\nlast-modified: Mon, 28 Jul 2025 06:00:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15272\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t4Zc%2BL0reWErLePX9x%2FBt%2FPC7YNpmuvOjZ4p%2Fpb2jOXLxB63FPCYs7CEsxQ4gXSJ9WOiCqdLYPXtKj5n8Y1PVh4jEPtrI3o2W1hXLYpF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a349eec76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15272,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 240x180, components 3","md5":"a4fed0d5c3fe29f7cb31b97c88cf6113","sha1":"2a6a770db7b343e7a5d5d9c635ac122418eafccc","sha256":"6c2260c56770e0b52812f341b2c192d7d91956a7e7907617a580f8a2113fb07c","sha512":"d5f2da33c990088b59e269ee19fcb3b6255ec7b52b93de3ed53a2f6b7d322e818d4830addb5c40bd35c83b2b00c9555bd6f76c4d7ad0d2ac71f1d1172b38f3e1","ssdeep":"384:+VSvAJ2285n12+TA3FoIWE6DEMgg9IbVsmRKBSRuPU:+7J2XOFoIWVv9IKMKBSWU","tlshash":"ad62c026f77727caf23d18b2c6c61c720be6bf11251239c598f66e0b0b9741209ec5a4","first_seen":"2026-02-04T19:12:33.55252Z","last_seen":"2026-02-04T19:12:33.55252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/iframe-scripts.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bid.onclckbn.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:08.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.cabnnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 04:32:05 GMT","end":"Tue, 10 Mar 2026 04:32:04 GMT"},"fingerprint":{"sha1":"FB:8C:65:CE:0B:5E:7F:2E:C6:58:EB:3B:D2:6E:8E:7A:B7:B7:51:EF","sha256":"FB:93:6B:07:DC:2C:B3:38:60:36:C5:FC:E7:C7:DE:74:5A:F6:0E:4E:92:A5:72:F1:03:9F:FE:61:7A:ED:04:96"}}},"request":{"raw":"GET /banner-admanager/iframe-scripts.js HTTP/1.1\r\nHost: js.cabnnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 30 Jan 2026 09:38:08 GMT\r\netag: W/\"697c7c00-178\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 04 Feb 2026 19:17:08 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (376), with no line terminators","md5":"89433f6864b61ee5dc3398a327f35069","sha1":"14d840847e8154f6ec2931a9d90126ed5c91fdb9","sha256":"587fc8a495b9e66cfaa0092ac5c3ebe3aeff08fee83fab4be94dc4ae09c982cb","sha512":"96863711edb791ffefa6188b2077dc1db9e270a7e27874140740a0820481ade585e20765f42f6df33afb77e5b1d20db281bfa9541f2be87cf97481de257cbc6a","ssdeep":"","tlshash":"dfe0682821a067bc006f266ef29a5aacf93801a6704a040884b1488d7c3ed76a6f4f24","first_seen":"2025-07-25T01:42:49.250588Z","last_seen":"2026-04-20T04:33:38.795876Z","times_seen":1606,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:02.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"15601-686f95f1-3c2431;br\"\r\nlast-modified: Thu, 10 Jul 2025 10:29:05 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29597\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Feb 2026 19:12:02 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Djhxw9oiBDXeGl5rOg2TYeIj0HAiemTx%2FXE%2B3XaXIhs%2FMfBQG7A3qpF8VKPt3mHXwtvszm86bna9fXOsP4UYpGv5nNjxnjHNK2Np1TQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a311e4876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-20T07:59:55.976036Z","times_seen":728446,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 05:32:34 GMT","end":"Tue, 31 Mar 2026 05:32:33 GMT"},"fingerprint":{"sha1":"50:AC:07:EC:79:B5:32:ED:7F:C5:56:C7:D3:5B:2F:F0:0D:A1:DB:81","sha256":"04:83:11:68:E8:6D:EA:03:69:80:2F:F0:AF:3E:A6:1D:46:55:C1:87:6E:C7:D9:C1:48:93:67:CF:0E:20:0B:BA"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 16 Jan 2026 12:21:20 GMT\r\netag: W/\"696a2d40-2494b\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 04 Feb 2026 19:17:03 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149835,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9f7b734689cae2d039dae1123333dded","sha1":"e20b71453fccd4fcdca964d4d609111c77f60484","sha256":"996fbfcbf5a7091890788228af5539ec39c018efcc8ea9bad557991859f03572","sha512":"584f0a5e0a073862bae0d847a2a03f4a08fdfeca97e22eea85bef7399292cc408d2d236c297f44a8ea883829f094489f62a6ae6859600c5327e6f285551fa131","ssdeep":"1536:O18MdnC5OPz8YBP9r2RcZAdtK8wBgg0341LloXQTtQyodhm161zKK+AKn7K0ketc:mBFSGAdt6Rydhmo1GqKGPetsz","tlshash":"11e349dcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb9237f7a","first_seen":"2026-01-16T14:34:54.211339Z","last_seen":"2026-02-17T11:09:06.763188Z","times_seen":683,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/11/1-6.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/1-6.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 03 Feb 2026 14:26:22 GMT\r\netag: \"8574-6910e7b1-53f59e;;;\"\r\nlast-modified: Sun, 09 Nov 2025 19:12:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34164\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xcq4j1HNfZLEDQwgTNLlKZC1yEGN%2Btev2C50UG%2BCZrsJuh9MF87DgWEa6Y7E%2B8mOkTxSOOHk8l2gYi5k9aeQVEaP8N4PkBU7a0vlEEL7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a348ee176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34164,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 288x216, components 3","md5":"540b3e9c2da4f1be5653dcfe41f22479","sha1":"b5cb6bc74cfbb2d7bc130332ba72d45e6c39f838","sha256":"2f144f416589bd32dbbf7436f57038fe24012a477205c546197cd6a9881fa193","sha512":"5e025c5dba510016ca4066015f6198e3bca4c8d04fde09e89ff3abd3a72e8b64e1493aa4e35da7d481e12f8c111fccf9c1398b3c5373d6958688d8dbdde2fa6e","ssdeep":"768:Uvn8PNXEeeVqSXsPPZUcfWLGn41TuJLZ+VDUNEx+:V59eVqAsPxUNGn41TuSVDUOx+","tlshash":"48e2e16037a726cdb874aa37ce985f05f2d088023278c6d19ede0af14d58351ea97e92","first_seen":"2026-02-04T19:12:33.554859Z","last_seen":"2026-02-04T19:12:33.554859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flepquix.com/in/dip?event_id=85397797-a086-431d-9a73-c9599acb7221","fqdn":"flepquix.com","domain":"flepquix.com","tld":"com"},"ip":{"addr":"178.63.5.120","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /in/dip?event_id=85397797-a086-431d-9a73-c9599acb7221 HTTP/1.1\r\nHost: flepquix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":1,"connect":38,"send":0,"wait":31,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/banner/in/view/?mid=464715720821592917\u0026pid=0\u0026site=1456340\u0026sc=\u0026usage_type=DCH\u0026subid=2033437665\u0026sid=0\u0026cid=19905\u0026price=0\u0026is_cpm=0\u0026cpm=0.0001\u0026ecpm=0.0001\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=0\u0026ver=6.91.1\u0026ver_c=\u0026refdom=mastitales.com\u0026hostname=auc-banner-hz-26\u0026site_id=0\u0026spot_id=1456340\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026ip=\u0026testab=0\u0026px_id=1456340\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=default\u0026min_cpm=0\u0026placement_type_id=269\u0026verify_hash=07d730ce80b17810e9853163b41af2d4c87e26933a714ec82e2df8e8d514c64c\u0026score=1\u0026kubik_score=0\u0026kaminari_bot_ip=1\u0026tag_ab=d\u0026v2=0\u0026ttl=0\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D1456340%26source%3D2033437665%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D1456340%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DFree%252CXXX%252CPorn%252CVideos%252CWatch%252CNow%252CMasti%252CTales%252CMast%252CTales%252Coffers%252Cexclusive%252CXXX%252CPorn%252CVideos%252Cand%252Cfree%252Cporn%252CMovies%252CInstantly%252Cwatch%252Cover%252C10%252Cmillion%252Chardcore%252Csex%252Cmovies%252Con%252Cpremium%252Cporntube%252Cfrom%252Cprofessionals%252Cand%252Camateurs%21%2C%26spot_id%3D1456340%26p%3Dhttps%253A%252F%252Fmastitales.com%252F%26katds_labels%3D%26btype%3D4%26score%3D1%26bf%3D0%26dr%3Dmastitales.com\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1456340\u0026original_bid_usd=0.0001\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.0002516513061914115\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=\u0026auction_time=1770232325\u0026account_id=2060\u0026url=\u0026stime=1770232325\u0026double_click_filter=false\u0026w=300\u0026h=250\u0026skin_id=8\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=Adult,amateur\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.15799663602217287\u0026container=Skin%20300x250%20Banner\u0026mediation_ecpm=0\u0026mediation_type=\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=117793\u0026advanced_pub_id=0\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /banner/in/view/?mid=464715720821592917\u0026pid=0\u0026site=1456340\u0026sc=\u0026usage_type=DCH\u0026subid=2033437665\u0026sid=0\u0026cid=19905\u0026price=0\u0026is_cpm=0\u0026cpm=0.0001\u0026ecpm=0.0001\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=0\u0026ver=6.91.1\u0026ver_c=\u0026refdom=mastitales.com\u0026hostname=auc-banner-hz-26\u0026site_id=0\u0026spot_id=1456340\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026ip=\u0026testab=0\u0026px_id=1456340\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=default\u0026min_cpm=0\u0026placement_type_id=269\u0026verify_hash=07d730ce80b17810e9853163b41af2d4c87e26933a714ec82e2df8e8d514c64c\u0026score=1\u0026kubik_score=0\u0026kaminari_bot_ip=1\u0026tag_ab=d\u0026v2=0\u0026ttl=0\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D1456340%26source%3D2033437665%26idzone%3D0%26w%3D300%26h%3D250%26mo%3D%26ve%3D%26site_id%3D1456340%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3DFree%252CXXX%252CPorn%252CVideos%252CWatch%252CNow%252CMasti%252CTales%252CMast%252CTales%252Coffers%252Cexclusive%252CXXX%252CPorn%252CVideos%252Cand%252Cfree%252Cporn%252CMovies%252CInstantly%252Cwatch%252Cover%252C10%252Cmillion%252Chardcore%252Csex%252Cmovies%252Con%252Cpremium%252Cporntube%252Cfrom%252Cprofessionals%252Cand%252Camateurs%21%2C%26spot_id%3D1456340%26p%3Dhttps%253A%252F%252Fmastitales.com%252F%26katds_labels%3D%26btype%3D4%26score%3D1%26bf%3D0%26dr%3Dmastitales.com\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1456340\u0026original_bid_usd=0.0001\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.0002516513061914115\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=\u0026auction_time=1770232325\u0026account_id=2060\u0026url=\u0026stime=1770232325\u0026double_click_filter=false\u0026w=300\u0026h=250\u0026skin_id=8\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=Adult,amateur\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.15799663602217287\u0026container=Skin%20300x250%20Banner\u0026mediation_ecpm=0\u0026mediation_type=\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=117793\u0026advanced_pub_id=0\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0 HTTP/1.1\r\nHost: rtbrenab.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"the-tukif.cfd/","fqdn":"the-tukif.cfd","domain":"the-tukif.cfd","tld":"cfd"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T19:11:58.181Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: the-tukif.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-04T19:12:11Z","timestamp":1770232331,"ip_dst":{"addr":"172.18.0.20","port":59064,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"192.64.119.216","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2026-02-04T19:12:11.651977+0000\",\"flow_id\":300139193404282,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"192.64.119.216\",\"src_port\":80,\"dest_ip\":\"172.18.0.20\",\"dest_port\":59064,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"the-tukif.cfd\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://mastitales.com/\",\"length\":46},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":46,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":568,\"bytes_toclient\":505,\"start\":\"2026-02-04T19:12:01.166778+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-04T19:12:12Z","timestamp":1770232332,"ip_dst":{"addr":"172.18.0.20","port":59076,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"192.64.119.216","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2026-02-04T19:12:12.371758+0000\",\"flow_id\":2177477988420666,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"192.64.119.216\",\"src_port\":80,\"dest_ip\":\"172.18.0.20\",\"dest_port\":59076,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"the-tukif.cfd\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://mastitales.com/\",\"length\":46},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":46,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":688,\"bytes_toclient\":505,\"start\":\"2026-02-04T19:12:01.887866+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/b_as_n.css?v4","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:05.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.60ah.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Jan 2026 02:32:17 GMT","end":"Sat, 11 Apr 2026 02:32:16 GMT"},"fingerprint":{"sha1":"D5:46:C2:4A:64:F2:FC:7F:84:CB:60:8E:6B:90:6E:22:F9:FF:1F:A0","sha256":"F3:7A:4B:6B:3B:3D:36:5F:65:2B:DD:3E:68:4A:BD:AF:F7:84:77:97:39:08:E4:D5:4F:3A:88:81:78:E2:F9:E1"}}},"request":{"raw":"GET /b/b_as_n.css?v4 HTTP/1.1\r\nHost: cdn.60ah.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: text/css\r\nserver: nginx/1.20.1\r\nlast-modified: Tue, 04 Mar 2025 13:12:58 GMT\r\netag: W/\"67c6fc5a-6d6\"\r\ncache-control: max-age=172800\r\nx-request-id: afc474e974460d801cb443d59b4334c6\r\ncontent-encoding: gzip\r\nexpires: Fri, 06 Feb 2026 19:12:05 GMT\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4710815dcdb221d8c5193cc0fa3d7d99","sha1":"3e44ee99da6a9b8d4d50d12b3fdb450fb5f20e8b","sha256":"f492ad6b8d8f9b56191233c65e6464b17ca2d2e585a03bfffa00a24bbc8be8fe","sha512":"f3172565b50840be7a37c2dc5d9da6862398fe8a50b07389377320c30743a8db9e10cc9e5dc7d19637b61e67daa17fc296b0f4d9124be37deeac23140653f558","ssdeep":"","tlshash":"813162a49a65a105d037e7f82751071962aed010e303091ebff07229a2dfdad7a25ffc","first_seen":"2025-04-07T07:53:53.259552Z","last_seen":"2026-04-20T04:33:38.84149Z","times_seen":1724,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":109,"dns":59,"connect":24,"send":0,"wait":19,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.onclckstr.com/report?katds_ep=OANTl4aKLMpwFhtI-B93cr4L1PknvcU2UT2EjI-HR4Y6csCXdKJUVGm22ChaP_Yv-KghmZzo8f386RlO3dbu4n2K92ra5L27NidBu8oT1rdAUGWk7R1HBIHtsPSLEZK9pK0IPY_b2Gvftx65SDnao_EYYZ0B_ciLtbFhHo8aiLvk-rlwpbbH7IZ2n-yzCv15gA-7Z2p6ORuP6llHH0KEGzNd998oWFvXo7Eujf7JijiAsrhPSsoGmLGyCY7CuWSXCl7nGzuBMTl8jWS5ww3yV-VXgJh9k3deaPztGJ5PJ6-ygP7y4iLeVQ1gusPPoOX-JVc3xn5dclxHQ3SHKqYEqCa5RFHy26NXPzn_lkmvOo_ML_hXqED9a6Il7F61mhT4QxIr9eIWpcBfoLkFgXvDyyCXZ4Cy1PoWHQ6BE0liVKu4zQvji37L-uuzDmvnyFcnb0B-xsgJB7jT8BO0I41LM5TmyDWJ5ILGoCcgYQHecmRRR-zwR8QBfVwBeVIFzSI1Bsy6BH20","fqdn":"bid.onclckstr.com","domain":"onclckstr.com","tld":"com"},"ip":{"addr":"91.216.220.30","port":443,"asn":3232,"as":"ModernColo LP","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://senzoriq.com/out.php?id=newrtb\u0026pos=270\u0026siteid=1456339\u0026subid=363145965\u0026domain=mastitales.com","date":"2026-02-04T19:12:06.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bid.onclckstr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 19:13:14 GMT","end":"Sun, 05 Apr 2026 19:13:13 GMT"},"fingerprint":{"sha1":"95:47:0C:4C:3E:8E:2C:F8:ED:DA:1A:F2:80:88:B9:54:8F:50:77:C1","sha256":"5B:8B:83:50:5D:47:8D:78:DA:8A:8C:0E:77:69:32:8E:31:B3:47:FE:CC:21:4F:14:98:E2:AB:9E:29:0B:31:D7"}}},"request":{"raw":"GET /report?katds_ep=OANTl4aKLMpwFhtI-B93cr4L1PknvcU2UT2EjI-HR4Y6csCXdKJUVGm22ChaP_Yv-KghmZzo8f386RlO3dbu4n2K92ra5L27NidBu8oT1rdAUGWk7R1HBIHtsPSLEZK9pK0IPY_b2Gvftx65SDnao_EYYZ0B_ciLtbFhHo8aiLvk-rlwpbbH7IZ2n-yzCv15gA-7Z2p6ORuP6llHH0KEGzNd998oWFvXo7Eujf7JijiAsrhPSsoGmLGyCY7CuWSXCl7nGzuBMTl8jWS5ww3yV-VXgJh9k3deaPztGJ5PJ6-ygP7y4iLeVQ1gusPPoOX-JVc3xn5dclxHQ3SHKqYEqCa5RFHy26NXPzn_lkmvOo_ML_hXqED9a6Il7F61mhT4QxIr9eIWpcBfoLkFgXvDyyCXZ4Cy1PoWHQ6BE0liVKu4zQvji37L-uuzDmvnyFcnb0B-xsgJB7jT8BO0I41LM5TmyDWJ5ILGoCcgYQHecmRRR-zwR8QBfVwBeVIFzSI1Bsy6BH20 HTTP/1.1\r\nHost: bid.onclckstr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://senzoriq.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Wed, 04 Feb 2026 19:12:06 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":122,"dns":1,"connect":23,"send":0,"wait":23,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.onclckbn.net/get/?go=1\u0026data=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","fqdn":"bid.onclckbn.net","domain":"onclckbn.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://satincrave.com/portstandart.php?id=3","date":"2026-02-04T19:12:08.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /get/?go=1\u0026data=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 HTTP/1.1\r\nHost: bid.onclckbn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:08 GMT\r\ncontent-type: text/html\r\ncontent-length: 3194\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16382,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2328)","md5":"684fe157ee9ea232cbdfc877453243bc","sha1":"d91ca77fbe8bfd84c41089ea67483c70c9afc0a7","sha256":"654263fedf463fbe4d9d75225acf9ab26309d5cd86ec2c58438af04c703c72da","sha512":"0675d695cd414938621468ae5bbb3019cde17463771c1fe05f0a436853e0acc5472c0f0566d11bd8ab84733724c94909176fc9a65b71c2f2b91dbc697f59dd23","ssdeep":"192:Z4Et7mqcfDIGcU28D+8D/8DE8DQ9vTXl5bQ/+stzFC06YI:ZH7mnfEGp7oJmvQ/+st4","tlshash":"0b720a4dbc3b58720452912292afb11e71981743d584dce4babec323dff87b92299b5c","first_seen":"2026-02-04T19:12:33.556195Z","last_seen":"2026-02-04T19:12:33.556195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-QTGQHQT0R0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:02.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"D1:4E:DB:C9:1C:90:74:26:D2:F3:40:74:02:DB:66:36:23:CB:45:12","sha256":"08:51:D4:42:81:8D:57:AC:83:18:86:85:25:AD:F1:2F:82:17:60:A4:FA:C6:D4:09:86:34:D3:30:65:78:09:B2"}}},"request":{"raw":"GET /gtag/js?id=G-QTGQHQT0R0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Feb 2026 19:12:02 GMT\r\nexpires: Wed, 04 Feb 2026 19:12:02 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 131233\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":379769,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"2d11e135e49704af9075cd77de14acf4","sha1":"587939bc715f6f8f5edb3eed297d9b5cb7a728bb","sha256":"1b901db4820f976f57a2925932c0a70cfec0d5a5ddd8c2760d0c694c415ecca9","sha512":"6ae13d5cf289aec28d9b8e03786e09b256c380fffd3f420da58981881df0a18193a62ee7d2f87d3ff3cadec053d01a2aa58253d190904f70c37003719576e3c8","ssdeep":"6144:tVBfoNrq8oaoCsx77/p4SGx3iQA84zYul4mngSHIFr/PXFGY1:Jfo1hoaoCsxX/p4StQA80IFbwo","tlshash":"94841acd73c670269396a478403f118bb57b69a2f44cc899f18adce42d70a9a4237f7d","first_seen":"2026-02-04T19:12:33.557565Z","last_seen":"2026-02-04T19:12:33.557565Z","times_seen":1,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":77,"dns":0,"connect":7,"send":0,"wait":28,"receive":28,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:02.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0 HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"1194-686f9768-3c5b46;br\"\r\nlast-modified: Thu, 10 Jul 2025 10:35:20 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1394\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Feb 2026 19:12:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7uP6K%2B%2FHr%2BHCVZrpSk4njVmjEzlJ15WHqhUFKpP3GsDcz69YPnAkDwtxZPcpDZb4w8IEjrt1ZewVDeQAVGWhF%2FgC0upq%2FEj0czsqQWGv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a312e4b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4500,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"eca10535dd65f4979e3b3ad3ec8e02c2","sha1":"54c38c3bf24825e407741ef0e316f678a5b580db","sha256":"802bc6725fd37d15aa9d599fa3f921fca0d4c585162c7b23da8ccd6f3ded751d","sha512":"680521331d53bb6b47390979cbb907f78607dc713d99405ea8664d401b8e9e3106bca7111c1142d8abb4a5d71a7957998ada61407432f084648bba32ed8e1d27","ssdeep":"96:wqduIPMiXjA1L1AWeyQqECAvBvRgY31rr/qBvHsMTFsPFxLdY0fdKI:wktP/W1Henqxy1R31/iRHsIFiFPBkI","tlshash":"7c91318aff88217b71b7326a697f61ed373844339a085c22f874d1a03d9446406bafdd","first_seen":"2023-03-07T01:26:46Z","last_seen":"2026-04-19T14:09:38.45635Z","times_seen":3614,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"67a120c980.8f17d89ec7.com/2a425941d95f47f0ed843d0c6088e9e6/348265?version_name=d\u0026domain=mastitales.com","fqdn":"67a120c980.8f17d89ec7.com","domain":"8f17d89ec7.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"67a120c980.8f17d89ec7.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 02:14:52 GMT","end":"Sat, 02 May 2026 02:14:51 GMT"},"fingerprint":{"sha1":"5C:93:CD:94:D9:C4:6F:79:F9:EA:CE:CB:13:5E:1E:EC:2E:D4:E0:70","sha256":"8C:CB:31:90:63:80:89:76:B5:0D:85:2C:E5:1E:82:FA:43:7B:BA:E9:4E:52:F4:EF:4F:83:FB:D4:90:09:30:D9"}}},"request":{"raw":"GET /2a425941d95f47f0ed843d0c6088e9e6/348265?version_name=d\u0026domain=mastitales.com HTTP/1.1\r\nHost: 67a120c980.8f17d89ec7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.18.0\r\ncache-control: max-age=300\r\nexpires: Wed, 04 Feb 2026 19:17:04 GMT\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dc4fb5d8b51171b5c3783ece3fa525ba","sha1":"23f878843bc355edccd24d54e7262bbc1f6cc6b0","sha256":"6acfff6aa1e262796ae4d85dcb78ec10163777a96a3a03946f17f169c43aa965","sha512":"d6d5c804c08b0c695bdd70be03d0abdcf09bae3b4c90a68053c500244035f62df0b7c72a5ff0658189dea1bf7d2d90a43f99920797c0082672b85077740d22b6","ssdeep":"","tlshash":"c8210fbcdf5844fb00d40a89e684750842873187f0d8b599e5bc8eb8239f7e61b6721f","first_seen":"2026-02-04T19:12:33.560215Z","last_seen":"2026-02-04T19:12:33.560215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"67a120c980.8f17d89ec7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"07fac4b99e.2551910ed4.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzcxMDY4NjYyNzA0MDk2NTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQyLjAiLCJ0YWdfaWQiOjM0ODI2OSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjIsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0=","fqdn":"07fac4b99e.2551910ed4.com","domain":"2551910ed4.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"07fac4b99e.2551910ed4.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 02:48:09 GMT","end":"Sat, 02 May 2026 02:48:08 GMT"},"fingerprint":{"sha1":"48:01:15:24:8A:5F:E6:1C:DF:7A:2B:66:DF:64:35:66:14:E5:35:E6","sha256":"4E:77:DF:A7:04:28:7F:CD:BF:B3:43:7E:D5:56:3E:2C:BB:08:14:46:73:6A:27:8C:1E:F5:EA:C4:08:72:82:9F"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzcxMDY4NjYyNzA0MDk2NTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQyLjAiLCJ0YWdfaWQiOjM0ODI2OSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjIsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1\r\nHost: 07fac4b99e.2551910ed4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\ncontent-length: 0\r\nserver: nginx/1.22.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":101,"dns":0,"connect":21,"send":0,"wait":33,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/Masti-Tales-Logo.png","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:02.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Masti-Tales-Logo.png HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 19:12:02 GMT\r\netag: \"14f8b-687012dd-13d16;;;\"\r\nlast-modified: Thu, 10 Jul 2025 19:22:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 85899\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xWYSWqKjPvHwONyG9hSQ0SS0CxM8zH6NQgNXr%2FzPu06DPAH85jm%2B51pi65zJaenMqNQUcoaaL85cg%2FcNIjeVo0v1r06c%2Fl7wAwz6DxQ0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a315e5c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85899,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 852 x 266, 8-bit/color RGBA, non-interlaced","md5":"f089ddad25f8329ae1ac9aaf6dadf5a1","sha1":"408dcfa154aa8445411bb10e985c7f6d19072770","sha256":"fa46fe31223c56c9d8283e293eb86959875b45b74fafa5c57c1712f685c19d10","sha512":"878f6e8e04ec8956d0ab71953ae112f036795bbd2e773cbddd6925fba7731f782fd70738d3107fb6853cd56f10053a36762b4d4c318056f6751779b190fafc3a","ssdeep":"1536:P1Us8M7aojc5mNgZVDX0OSGFLAMFv15oxxhHcoe7Bcl9/bzgvqwcqfekE9:PF8M7actN4R0OSsAMVGSdSKGjki","tlshash":"df83121ceeff6fabe1ea7a3618024212ba9b102d7d580e9e068c4a18b3544b4d7d554e","first_seen":"2026-02-04T19:12:33.5617Z","last_seen":"2026-02-04T19:12:33.5617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":318,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mastitales.com/\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mastitales.com/\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.twinrdengine.com/adraw?zone=01DXF6DT004000000000001WBQ\u0026subid=1833114662a1440234390\u0026kw=","fqdn":"ad.twinrdengine.com","domain":"twinrdengine.com","tld":"com"},"ip":{"addr":"34.111.67.216","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://senzoriq.com/out.php?id=newrtb\u0026pos=270\u0026siteid=1456339\u0026subid=363145965\u0026domain=mastitales.com","date":"2026-02-04T19:12:06.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.twinrdengine.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:32:51 GMT","end":"Mon, 23 Mar 2026 16:28:46 GMT"},"fingerprint":{"sha1":"02:0E:19:90:FE:EB:CD:15:18:37:00:35:AD:34:18:E3:6A:DA:D8:A3","sha256":"81:FD:A2:C7:B7:0F:12:79:16:29:FF:78:75:2F:D7:3D:5D:C7:4C:52:D1:27:21:05:6B:C5:69:BD:CA:25:85:2F"}}},"request":{"raw":"GET /adraw?zone=01DXF6DT004000000000001WBQ\u0026subid=1833114662a1440234390\u0026kw= HTTP/1.1\r\nHost: ad.twinrdengine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://senzoriq.com/\r\nOrigin: https://senzoriq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://senzoriq.com\r\ncontent-type: text/xml\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ndate: Wed, 04 Feb 2026 19:12:06 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":4383,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (1244)","md5":"1decc6ab53ab11f4964c8b907b2ef1e5","sha1":"b33b9bd32c52aa6f272b6c48a0a28270393f8852","sha256":"61dab4d2fd0b597eb5312ac66fd8df2b674574a494a60a2227104785bc8960bf","sha512":"fde1bc4245f60cfee1fd2130dd5890b15763c2d2d28f12e3062cb3ab3a0719b019d10c8c56ad9d54e413c4684829ece05633e54a37a62e0de885934fa3d80ee9","ssdeep":"96:CknNYUmymfHgdeknNYUmymfbknNYUmymfm:dnNYzymHknNYzymAnNYzymm","tlshash":"6c91e63178f23c9dad116d258a2349109b50574b5da4cc82ff8e8cfcdf242b9259a6fe","first_seen":"2026-02-04T19:12:33.563344Z","last_seen":"2026-02-04T19:12:33.563344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":133,"dns":15,"connect":25,"send":0,"wait":146,"receive":1,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/11/1-2.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/1-2.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 16:15:10 GMT\r\netag: \"43ee-6910e7ac-53f554;;;\"\r\nlast-modified: Sun, 09 Nov 2025 19:12:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17390\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TAvGo%2BptgTj9y5Ar937FLvqP4aKLR6cDHypqQ8DRqUaxw1h%2Bs1Jl%2FYbpirsQjRq9kr7TlCNoctcPILO2IpHhsAM2%2F6hPzGheyYNU6hZI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a348ee676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17390,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 288x216, components 3","md5":"4c1f250e9c12052949d48aa42de3901d","sha1":"019b0b7749ca4d367a49e764a65c4cec7ab1ba2b","sha256":"3ed77fe133871e02ef8b05bd8288d2a1c491adb77abe7b21fdbdfcf50c3f0103","sha512":"9471d235cbbc27d4d005825eb5221da755f0dc6e1435d34562028d807f81fc35e15943c6d57de6aae9e29f7df4d70a0cc317e50db887c6e1ed778d49df6820c6","ssdeep":"384:/iEJt8w+Kfj6tnVDQBGBjS7qP+7jXKTGW9D0N6ecesQQn6dP9Vc1i8Olo:aOtEK6tnVDQgm7e+cGl6ecam6dlCsTlo","tlshash":"4a72e11b779be6c4b41b2d3495178e6c37c6e72997d91fc27acf020149f2ac19a3b086","first_seen":"2026-02-04T19:12:33.564719Z","last_seen":"2026-02-04T19:12:33.564719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"58ea-692fe995-3c20bb;br\"\r\nlast-modified: Wed, 03 Dec 2025 07:41:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4912\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BhZjHmbEDx%2F0pyCAv%2Fs9%2B5tZfR3JUBYZdgfFEuLAmZ8qz1y7ZauCouVTtt53zGffXMohsTApV%2B%2F1l1yC1x%2Fmy%2FsDPNp%2F%2Bou7Jai%2BNB0S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a360f2376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-20T08:00:49.176423Z","times_seen":157616,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 02:32:13 GMT","end":"Thu, 12 Mar 2026 02:32:12 GMT"},"fingerprint":{"sha1":"5D:9C:D7:15:7D:69:8C:F7:40:12:0E:10:F1:FF:68:59:A6:F6:E2:38","sha256":"7D:0B:09:36:73:70:FE:A2:CB:1A:80:52:3B:1A:C0:0D:64:38:DA:DC:AB:9E:7A:95:F4:55:F2:6A:A4:F0:A8:FE"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Wed, 04 Feb 2026 19:17:03 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=348265","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"OPTIONS /fp?tag_id=348265 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mastitales.com/\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:04 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://mastitales.com\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"satincrave.com/portstandart.php?id=3","fqdn":"satincrave.com","domain":"satincrave.com","tld":"com"},"ip":{"addr":"172.67.133.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://satincrave.com/kalitecheck.php?id=324","date":"2026-02-04T19:12:07.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"satincrave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 20:07:21 GMT","end":"Wed, 15 Apr 2026 21:05:58 GMT"},"fingerprint":{"sha1":"E8:58:FE:69:52:57:10:9B:A4:D6:F8:68:5E:39:BA:48:A2:FF:00:AA","sha256":"B1:07:29:7C:B8:0F:9A:70:B9:C3:DD:4E:55:F5:22:41:ED:4F:9D:75:CA:C2:20:E3:84:E1:AB:7D:9E:CB:3B:A2"}}},"request":{"raw":"GET /portstandart.php?id=3 HTTP/1.1\r\nHost: satincrave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://satincrave.com/kalitecheck.php?id=324\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33, PleskLin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PPLRRARfROkNFCavk0iYbTOEkHb4tQtR0x38WKcPXvlXkexZCFnJFw%2BYG0GM%2F1HZKf8m5I811qyMzR9B5MSaUmdT%2FPeZTqTvcYEJrAre\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c8c7a4e3c741ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":273,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"01f58a64287cf142fb8932f2a5f27eee","sha1":"743518057cf73ada20f59b538ab3c436cb13f049","sha256":"d78611d572b99552d686d426835c646c7a3c38d65a555d006d75baa4f5d72fe2","sha512":"3e4692260dec6221a2689263d5996f6fb00eecfdf0e0e4544a8029aa66e121e7ba7e258cce869f40b368c821c01f2e093d798f20c9f54e2fc275613112b0ea23","ssdeep":"","tlshash":"42d02bd30d04804157728a9017f0f21d4453b90f5c51dc81a99d54a22ac0e97fc87a94","first_seen":"2026-01-16T07:16:22.145664Z","last_seen":"2026-04-05T04:30:43.817567Z","times_seen":11,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/cropped-Msti-Tales-Favicon-32x32.png","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/cropped-Msti-Tales-Favicon-32x32.png HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nCookie: _ga_QTGQHQT0R0=GS2.1.s1770232323$o1$g0$t1770232323$j60$l0$h0; _ga=GA1.1.2120780993.1770232324\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 19:45:14 GMT\r\netag: \"4b2-68701a80-3c1892;;;\"\r\nlast-modified: Thu, 10 Jul 2025 19:54:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 1202\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SERo5ripKPkFkwC3u5Z8s794ZT0CBLHeIFvlHCprU10zyoABIBp7d%2FbheWrDp6VPbXdSHOgdyzhP7qIId1owy8Aa2vJwntm4Ku3ngPeZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a38ef9776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"3b6327538b8ac9bbdeee5631ca373ab9","sha1":"b0d79babf3c2148806484f190aba6929f653329b","sha256":"312c7ceac522d7fa347df4407048091c6bf1e1a0bd3b422d8eb96ae16a3664a1","sha512":"c6216cd19d8ce35dcc904e612662d9b8c87bb13d60445e97cffeca04d0b60022727f2056d2f476035c49b4147a5b178078c1726f4cc7c20190fa1637de4ce62a","ssdeep":"","tlshash":"b521da9355151430cb4bae331d4650ab9d4c2ef659f971ad60d6440d61f416d7c0ffca","first_seen":"2026-02-04T19:12:33.567879Z","last_seen":"2026-02-04T19:12:33.567879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"07fac4b99e.2551910ed4.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzcxMDY4NjYyNzA0MDk2NTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQyLjAiLCJ0YWdfaWQiOjM0ODI2NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjA2LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"07fac4b99e.2551910ed4.com","domain":"2551910ed4.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"07fac4b99e.2551910ed4.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 02:48:09 GMT","end":"Sat, 02 May 2026 02:48:08 GMT"},"fingerprint":{"sha1":"48:01:15:24:8A:5F:E6:1C:DF:7A:2B:66:DF:64:35:66:14:E5:35:E6","sha256":"4E:77:DF:A7:04:28:7F:CD:BF:B3:43:7E:D5:56:3E:2C:BB:08:14:46:73:6A:27:8C:1E:F5:EA:C4:08:72:82:9F"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzcxMDY4NjYyNzA0MDk2NTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQyLjAiLCJ0YWdfaWQiOjM0ODI2NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjA2LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: 07fac4b99e.2551910ed4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cbxyz.com/api/public/affiliates/vast/?campaign=T3w7p\u0026program=21\u0026track=twinred_row_vast_desktop\u0026gender=f","fqdn":"cbxyz.com","domain":"cbxyz.com","tld":"com"},"ip":{"addr":"104.18.43.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://senzoriq.com/out.php?id=newrtb\u0026pos=270\u0026siteid=1456339\u0026subid=363145965\u0026domain=mastitales.com","date":"2026-02-04T19:12:06.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbxyz.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 17:27:44 GMT","end":"Sun, 22 Mar 2026 17:27:43 GMT"},"fingerprint":{"sha1":"77:69:D8:E7:9D:40:16:20:A0:0A:B8:D1:D1:F1:6B:E8:C9:B5:51:BF","sha256":"30:9E:D6:43:B7:5B:ED:D2:51:7C:7F:CD:07:CE:05:2F:E7:41:F1:44:E7:4E:63:6E:23:45:48:8D:88:1F:56:4E"}}},"request":{"raw":"GET /api/public/affiliates/vast/?campaign=T3w7p\u0026program=21\u0026track=twinred_row_vast_desktop\u0026gender=f HTTP/1.1\r\nHost: cbxyz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://senzoriq.com/\r\nOrigin: https://senzoriq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:06 GMT\r\ncontent-type: application/xml\r\ncf-ray: 9c8c7a48f88b5684-OSL\r\nvary: Accept-Encoding,Accept-Language, Cookie\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: accept, accept-encoding, content-type, origin, user-agent, x-requested-with\r\naccess-control-allow-origin: *\r\ncontent-language: en\r\ncontent-security-policy: default-src 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://*.googletagmanager.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://player.vimeo.com/api/player.js https://static.hotjar.com https://script.hotjar.com ;  style-src 'self' data: 'unsafe-inline' https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com;  img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://*.google-analytics.com https://*.googletagmanager.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ;  font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ;  connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com wss://ws-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com ;  media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://storage.googleapis.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com;  object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ;  frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com https://directory-live.cb.dev https://directory-v3-live.cb.dev https://*.live.mmwebc.dev https://cbxyz.com ;  child-src 'self' blob: blob ;  worker-src 'self' blob: blob ;  form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://saas-onboarding.incodesmile.com https://smartpay.coinsmart.com https://crypto-payments.net https://secure.paygarden.com ;  manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ;  report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;\r\nreport-to: {\"group\":\"default\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://report-uri.mmcdn.com/a/t/g\"}],\"include_subdomains\":true}\r\nnel: {\"report_to\":\"default\",\"max_age\":2592000,\"include_subdomains\":true}\r\nx-frame-options: DENY\r\ncache-control: no-cache\r\nset-cookie: affkey=\"eJyrVipSslJQyigpKSi20tcvTs2ryi/KLNRLzs/VV9JRUEoByRoZGJnpGhjpGpgoGFpaGRpZGZiB5NJKQJLV6iVF2epWCurqOgrqyZkpMGZxUTKMCRbDYghYGUJHEYiB1SUg2QKYshIYIzEtDW5vLkS6VqkWAJw/M30=\"; Domain=.chaturbate.com; expires=Fri, 06 Mar 2026 19:12:06 GMT; HttpOnly; Max-Age=2592000; Path=/; SameSite=None; Secure\nsbr=sec:sbrb522c046-1bb4-496f-84f7-e1cbd6a284dc:1vniII:0IW8s2y_72Yyfdo-S9lU4LE-T21KwS1RPS1ECy3C7Gg; Domain=.chaturbate.com; expires=Mon, 30 Oct 2028 19:12:06 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure\n__cf_bm=C93jJHknXmKoqV6GnMlEmEIx1MYaijhrPVzJNVTClWE-1770232326-1.0.1.1-MWMNzs4zJxOrTZblt6uEAF0POsNJMuU.1n0Zci9SvpG8P0fsBtUzWEqjZccVfDy9JfJciZ9E90DthqOaGEWu0rqd6lkQYOhjJLisaHvcTI8; path=/; expires=Wed, 04-Feb-26 19:42:06 GMT; domain=.cbxyz.com; HttpOnly; Secure; SameSite=None\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":7425,"size_decoded":0,"mime_type":"application/xml","magic":"exported SGML document, ASCII text","md5":"8bd528f90c4d75bd63b26eb4110ee6dd","sha1":"bdccfdf059f2f1a6829d5a0244357e03794980b1","sha256":"78e46e805594b9a4dec673f390c57a1b48df1dfa6438ddc1dffb2a84204fa32d","sha512":"58ed4ae6f7be9c53a61b9bbe8d1ed428d3f78b74f4065f79157ec9a6b107923bc084fe0431be60903819f85da19248eaf66b679960fe0c3e53668fb051e759da","ssdeep":"96:X/m9eRqWGlyeRHBV9x+JRxWTWyeRg5q9KRLWpayeRCvyei:X/RoWGl1Vj+JvWTW1CdWpa1a1i","tlshash":"a8e142fd0afa2627194084173279fc55cfd56e6f1a8b1400f94c46634f4dee7826bea0","first_seen":"2026-02-04T19:12:33.569274Z","last_seen":"2026-02-04T19:12:33.569274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":51,"dns":6,"connect":1,"send":0,"wait":275,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onclckinp.com/keywords","fqdn":"onclckinp.com","domain":"onclckinp.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://satincrave.com/portstandart.php?id=3","date":"2026-02-04T19:12:07.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: onclckinp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://satincrave.com/\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 74\r\nOrigin: https://satincrave.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":74,"data":"{\"ad_tags\":\"\",\"page\":\"https%3A//satincrave.com/portstandart.php%3Fid%3D3\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:07 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"32323194b8b07fd0aa9b6f7fc79a7b30","sha1":"ea248c45722bff267b55a453dc794bc42171cef6","sha256":"080040b4937f3f423f32cd7f19b2a79ba1e1e213f1d9f4f4db4f609d4ad778d8","sha512":"e6b7cefe758be1e47a28ed8fc319cd61814e942838f0f65a26e629f0af39fae2547bece75c020c0cad5294b741a20911757b43b493dea2d3b109e4cf3ae3e9a3","ssdeep":"","tlshash":"9d600008200a08020880a000a20082002000a002002008282880008083002000888800","first_seen":"2023-09-22T06:12:14Z","last_seen":"2026-04-20T07:33:26.966194Z","times_seen":2350,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bid.onclckbn.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:08.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.60ah.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Jan 2026 02:32:17 GMT","end":"Sat, 11 Apr 2026 02:32:16 GMT"},"fingerprint":{"sha1":"D5:46:C2:4A:64:F2:FC:7F:84:CB:60:8E:6B:90:6E:22:F9:FF:1F:A0","sha256":"F3:7A:4B:6B:3B:3D:36:5F:65:2B:DD:3E:68:4A:BD:AF:F7:84:77:97:39:08:E4:D5:4F:3A:88:81:78:E2:F9:E1"}}},"request":{"raw":"GET /b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550 HTTP/1.1\r\nHost: cdn.60ah.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: nginx/1.20.1\r\nlast-modified: Mon, 23 Jun 2025 15:49:26 GMT\r\netag: W/\"a2e-6383f28086d80\"\r\nx-request-id: 6c3b9d33ef7ecc2ffd7cf0495f4add90\r\ncontent-encoding: gzip\r\nexpires: Fri, 06 Feb 2026 19:12:08 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2606,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (425)","md5":"28d590ec50222650e11913780176ae6f","sha1":"e1ede82b9406894cf75e62e5611969dd0d4e8010","sha256":"45130bde21b34abbccf398d7b4f8b9beabcc679f0d0cf9079883dcc34d84246b","sha512":"e0b71f741fbdda624e1fef6420f26316714671e37cb3ec775abc1a3531adf2d4c9a3250c0496d1c91c8c130224f8adf555f2c10795721e585e5dade74fcbeabf","ssdeep":"","tlshash":"5f5172e2c59204300616809e19ffb1cc7926213baa41c401ffddf121af9c7ab48768dc","first_seen":"2025-06-25T19:13:05.814782Z","last_seen":"2026-04-20T04:33:38.81002Z","times_seen":724,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/img/niches/filf/bg.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/img/niches/filf/bg.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 11:50:25 GMT\r\netag: \"1c468-686f9768-3c5b2c;;;\"\r\nlast-modified: Thu, 10 Jul 2025 10:35:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 115816\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rIvpaniyXGvWqp6yU1gbrcL68vNINoh01mjwgafncL%2FsPBwVwPVkJN4845Gwm%2BpGQyQD26hRriQsebHNrFSSGu%2BH1nhm39Z96u2YWt62\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a32cea876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115816,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1134x515, components 3","md5":"a788de5c128f4b3cdfb9ddf0e82f677e","sha1":"4137d83097002a9651b32e440f1907849fcffa3a","sha256":"6991d18b98baf3115b7ce9c68aa08b5ee13621663931d70ef40841a8f1026129","sha512":"fd2df62ca3f844360f05329143d565e314580eff9f12ba2e3e3dcfa30c565221e8fde984e7338847348c046a4130a2861b4b1f746e51a0d21218b8ec281256e9","ssdeep":"3072:vO1On8zoPF9r8eBMNATa/gjZgI1x5R/9gN/ll+Xz:vO1On8zoPF9r3BXcaGIb/uZHa","tlshash":"15b31216ff14854afc433881115bdea8581dcfe3bc22e1275b46ed4cc3829e57bb8a96","first_seen":"2023-06-02T23:51:56Z","last_seen":"2026-04-15T18:38:12.61308Z","times_seen":290,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/348269?version_name=d\u0026domain=mastitales.com","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 02:32:00 GMT","end":"Fri, 17 Apr 2026 02:31:59 GMT"},"fingerprint":{"sha1":"C0:D0:BE:4D:79:5F:09:31:FB:ED:56:A1:83:C7:A3:50:BD:DF:1D:58","sha256":"84:10:AE:EC:2D:6D:B5:C8:8B:37:98:B5:D4:9A:CB:76:F3:0E:C5:A1:84:C0:83:0C:72:11:39:E0:68:30:17:C2"}}},"request":{"raw":"GET /tags/348269?version_name=d\u0026domain=mastitales.com HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: MISS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1395,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f5caf18831b85efa2f8ac3119ec6d664","sha1":"c10a11a308353e1afb3a7b1ceb970b1268c8e4cb","sha256":"a7d80a8b7269f26820f8a165c41b5a30db69db4584b3c9d3c3b6796d647ef1cc","sha512":"4ed0252784bd8e672c5b65738692c3ee21f554d88ef480ff1317d9a8eb327ad41d57571856890cf3b355b0b57b93a0525d1d061f30aff7e7e3022bbab99a7149","ssdeep":"","tlshash":"e22111bccf5854fb00e10ac9d588760841973447f1d8b559e5ac4eb8239f3a21b1330f","first_seen":"2026-02-04T19:12:33.573291Z","last_seen":"2026-02-04T19:12:33.573291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":97,"dns":52,"connect":19,"send":0,"wait":43,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 02:32:13 GMT","end":"Thu, 12 Mar 2026 02:32:12 GMT"},"fingerprint":{"sha1":"5D:9C:D7:15:7D:69:8C:F7:40:12:0E:10:F1:FF:68:59:A6:F6:E2:38","sha256":"7D:0B:09:36:73:70:FE:A2:CB:1A:80:52:3B:1A:C0:0D:64:38:DA:DC:AB:9E:7A:95:F4:55:F2:6A:A4:F0:A8:FE"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Wed, 04 Feb 2026 19:17:03 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/banner/in/view/?mid=5824619568969960442\u0026pid=0\u0026site=1456339\u0026sc=\u0026usage_type=DCH\u0026subid=363145965\u0026sid=0\u0026cid=22170\u0026price=0\u0026is_cpm=1\u0026cpm=0.0007\u0026ecpm=0.0007\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=0\u0026ver=6.91.1\u0026ver_c=\u0026refdom=mastitales.com\u0026hostname=auc-banner-hz-21\u0026site_id=0\u0026spot_id=1456339\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026ip=\u0026testab=0\u0026px_id=1456339\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=banner-ext\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026min_cpm=0.0001\u0026placement_type_id=270\u0026verify_hash=bf499521f1f250d7f400c0e5b63b9acdba6f89fb1a77ccbe09e35d6b8eb15d2e\u0026score=1\u0026kubik_score=0\u0026kaminari_bot_ip=1\u0026tag_ab=d\u0026v2=0\u0026ttl=0\u0026space_id=1495\u0026banner_width=300\u0026banner_height=100\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=%2F%2Fsenzoriq.com%2Fout.php%3Fid%3Dnewrtb%26pos%3D270%26siteid%3D1456339%26subid%3D363145965%26domain%3Dmastitales.com\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1456339\u0026original_bid_usd=0.0007\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.00021630695536116698\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=53604833\u0026auction_time=1770232325\u0026account_id=3373\u0026url=\u0026stime=1770232325\u0026double_click_filter=false\u0026w=300\u0026h=100\u0026skin_id=11\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=Adult,amateur\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.10993844198466991\u0026container=Skin%20300x100%20Banner\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=117793\u0026advanced_pub_id=117793\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /banner/in/view/?mid=5824619568969960442\u0026pid=0\u0026site=1456339\u0026sc=\u0026usage_type=DCH\u0026subid=363145965\u0026sid=0\u0026cid=22170\u0026price=0\u0026is_cpm=1\u0026cpm=0.0007\u0026ecpm=0.0007\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=0\u0026ver=6.91.1\u0026ver_c=\u0026refdom=mastitales.com\u0026hostname=auc-banner-hz-21\u0026site_id=0\u0026spot_id=1456339\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026ip=\u0026testab=0\u0026px_id=1456339\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=banner-ext\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026min_cpm=0.0001\u0026placement_type_id=270\u0026verify_hash=bf499521f1f250d7f400c0e5b63b9acdba6f89fb1a77ccbe09e35d6b8eb15d2e\u0026score=1\u0026kubik_score=0\u0026kaminari_bot_ip=1\u0026tag_ab=d\u0026v2=0\u0026ttl=0\u0026space_id=1495\u0026banner_width=300\u0026banner_height=100\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=%2F%2Fsenzoriq.com%2Fout.php%3Fid%3Dnewrtb%26pos%3D270%26siteid%3D1456339%26subid%3D363145965%26domain%3Dmastitales.com\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1456339\u0026original_bid_usd=0.0007\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.00021630695536116698\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=53604833\u0026auction_time=1770232325\u0026account_id=3373\u0026url=\u0026stime=1770232325\u0026double_click_filter=false\u0026w=300\u0026h=100\u0026skin_id=11\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=Adult,amateur\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.10993844198466991\u0026container=Skin%20300x100%20Banner\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=117793\u0026advanced_pub_id=117793\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0 HTTP/1.1\r\nHost: rtbrenab.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.twinrdengine.com/europe-west4/imp/Npsg_GmmhuAOxrmDKjaVhrIF-pP1FVm1380i8B4DSRZe3RLBvpG_XATfE_DmyW3S9g3IY33-KsHlu-V8sSiF2CCK5QvPRaitWJUmt567TCIiPXA_hU9H7zm6x4t3buDMQbGmGU_XcySGVVdSsDMxW6dWtGTvVkW4NbZjgcNG2CoT90xbZH5SISM5HxDr5jJStrgwUyDV-aS_HiZg_X_lyeHq0mSDcvkTKkKj_uueQrpJ4tJe1ops6uHExVfU7U-1Nm7_c1jJ1iURPQum4Utkkp0ksbosxWtmB0Nc4YwuOBqYQII2t3qSdHnsZVcYAbnInBNPiivJEfCqut1gM6JiL-2S8HvV-TITyxY2qj-sIEipn8ZDBlXsu1bjO20nFi0ULTCQZ6XeXj2HncndNWEMJZUgXAzrIFz7Fh3lXp2OISBst6uAuqos9GyGGAFJcfo1ml6mRdQw4wYp3e901008k3qh04VdyekFXRYwveel9ZByGDOMhMN9YDAVE2b6UCVReOrX5NziXT4vjIsKAU9wVpWXUQA30N3ATycqD4d8mpMEQNxp7H1qT8NDJJbonXxQ-X__POSynPO_Y-xznLjfu9unpi1S3__gpX1QYEq0VE8JtD_lAHoADtIVw_ll3LL0l69loc2_LeTwhqv5HWDl1tbp_A9fDpB63r_PEz9XbPwvficf4jFoaCOoj5JFF9mYuCwPIExMjqYQbRKDK1yNivKvOmgdjHblodZe2Hdi049BFUPVXHAdekJsKcaITJxHi-qSN65S4rmfk_t7rntywoLJSsFbXgDulDhIcD_6xy1552stvKUExZF9SbbW3gGcFSZZIkaz3Rfh1fXRJk1ErerxuHRHL_QqxPHS6fkd6wChbvXEr5JMARrwO56gIduNgnHCYcpuU0O9UcwJxp8zF311gw7OH6HmIB0w1ZpIebMyjvFM4KAUmRC8a0oIf5Z0cxy840AgRQLHcXvcFGDDUyq1OgTg_u_vepyygdgKGQ-M1V8cwRrO2MUKcUvJCbYCrI3sWJB2OIO1K5m_rNyuYyhrCih2clQPdmSuCTv2lP-uIjOiKu74hgWDJMCUGdI/01KGN13A5SEYR3S180CE7D3JRA?","fqdn":"ad.twinrdengine.com","domain":"twinrdengine.com","tld":"com"},"ip":{"addr":"34.111.67.216","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://senzoriq.com/out.php?id=newrtb\u0026pos=270\u0026siteid=1456339\u0026subid=363145965\u0026domain=mastitales.com","date":"2026-02-04T19:12:06.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.twinrdengine.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 15:32:51 GMT","end":"Mon, 23 Mar 2026 16:28:46 GMT"},"fingerprint":{"sha1":"02:0E:19:90:FE:EB:CD:15:18:37:00:35:AD:34:18:E3:6A:DA:D8:A3","sha256":"81:FD:A2:C7:B7:0F:12:79:16:29:FF:78:75:2F:D7:3D:5D:C7:4C:52:D1:27:21:05:6B:C5:69:BD:CA:25:85:2F"}}},"request":{"raw":"GET /europe-west4/imp/Npsg_GmmhuAOxrmDKjaVhrIF-pP1FVm1380i8B4DSRZe3RLBvpG_XATfE_DmyW3S9g3IY33-KsHlu-V8sSiF2CCK5QvPRaitWJUmt567TCIiPXA_hU9H7zm6x4t3buDMQbGmGU_XcySGVVdSsDMxW6dWtGTvVkW4NbZjgcNG2CoT90xbZH5SISM5HxDr5jJStrgwUyDV-aS_HiZg_X_lyeHq0mSDcvkTKkKj_uueQrpJ4tJe1ops6uHExVfU7U-1Nm7_c1jJ1iURPQum4Utkkp0ksbosxWtmB0Nc4YwuOBqYQII2t3qSdHnsZVcYAbnInBNPiivJEfCqut1gM6JiL-2S8HvV-TITyxY2qj-sIEipn8ZDBlXsu1bjO20nFi0ULTCQZ6XeXj2HncndNWEMJZUgXAzrIFz7Fh3lXp2OISBst6uAuqos9GyGGAFJcfo1ml6mRdQw4wYp3e901008k3qh04VdyekFXRYwveel9ZByGDOMhMN9YDAVE2b6UCVReOrX5NziXT4vjIsKAU9wVpWXUQA30N3ATycqD4d8mpMEQNxp7H1qT8NDJJbonXxQ-X__POSynPO_Y-xznLjfu9unpi1S3__gpX1QYEq0VE8JtD_lAHoADtIVw_ll3LL0l69loc2_LeTwhqv5HWDl1tbp_A9fDpB63r_PEz9XbPwvficf4jFoaCOoj5JFF9mYuCwPIExMjqYQbRKDK1yNivKvOmgdjHblodZe2Hdi049BFUPVXHAdekJsKcaITJxHi-qSN65S4rmfk_t7rntywoLJSsFbXgDulDhIcD_6xy1552stvKUExZF9SbbW3gGcFSZZIkaz3Rfh1fXRJk1ErerxuHRHL_QqxPHS6fkd6wChbvXEr5JMARrwO56gIduNgnHCYcpuU0O9UcwJxp8zF311gw7OH6HmIB0w1ZpIebMyjvFM4KAUmRC8a0oIf5Z0cxy840AgRQLHcXvcFGDDUyq1OgTg_u_vepyygdgKGQ-M1V8cwRrO2MUKcUvJCbYCrI3sWJB2OIO1K5m_rNyuYyhrCih2clQPdmSuCTv2lP-uIjOiKu74hgWDJMCUGdI/01KGN13A5SEYR3S180CE7D3JRA? HTTP/1.1\r\nHost: ad.twinrdengine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://senzoriq.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-20T08:01:57.197194Z","times_seen":272112,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T19:12:02.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://mastitales.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ej0gtTZ%2Bld%2FOYmu17X%2BgxQYqsNrnGkj2sOS9651i2AGHEaP6IHZD3UQaseNzajmpwSOcauHNonNtQyhUDGYFUepCo%2BCAOQFZH4Gu6%2FUv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c8c7a2dddfd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"bxSlider:4.2.15","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":207740,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (42003)","md5":"69349cdf8a33d714ac1de563cd262350","sha1":"aa23de8290d32d263e74bcb4aef13822f328031d","sha256":"4df2ad0f6ea0aba36e4e32bb6ff4bbca62912bb6d487b0b9e55cc894766a0ef1","sha512":"9f14f1fbbd721f4f42b50d58d175a8c8f9ea1aa769a406f22bb48920f45389e7fe98dc5abaa4ea58fcb087114f8bb75bcc9c969f4e6c85759f99a1044f9bb799","ssdeep":"1536:1Mlzypr5EeBw4r4Pr4yDK3JXTTTjgCtBz2kbM8EKO0Uz2pcVAlp3NHKiDIx8v5wq:1qex5Rf5d","tlshash":"5b14c8f653e09836270a97c7bc497a5a4812f4f6c9d042c3f7e650acdac6ef30e89654","first_seen":"2026-02-04T19:12:33.57514Z","last_seen":"2026-02-04T19:12:33.57514Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":294,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 05:32:34 GMT","end":"Tue, 31 Mar 2026 05:32:33 GMT"},"fingerprint":{"sha1":"50:AC:07:EC:79:B5:32:ED:7F:C5:56:C7:D3:5B:2F:F0:0D:A1:DB:81","sha256":"04:83:11:68:E8:6D:EA:03:69:80:2F:F0:AF:3E:A6:1D:46:55:C1:87:6E:C7:D9:C1:48:93:67:CF:0E:20:0B:BA"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 16 Jan 2026 12:21:20 GMT\r\netag: W/\"696a2d40-2494b\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 04 Feb 2026 19:17:03 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149835,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9f7b734689cae2d039dae1123333dded","sha1":"e20b71453fccd4fcdca964d4d609111c77f60484","sha256":"996fbfcbf5a7091890788228af5539ec39c018efcc8ea9bad557991859f03572","sha512":"584f0a5e0a073862bae0d847a2a03f4a08fdfeca97e22eea85bef7399292cc408d2d236c297f44a8ea883829f094489f62a6ae6859600c5327e6f285551fa131","ssdeep":"1536:O18MdnC5OPz8YBP9r2RcZAdtK8wBgg0341LloXQTtQyodhm161zKK+AKn7K0ketc:mBFSGAdt6Rydhmo1GqKGPetsz","tlshash":"11e349dcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb9237f7a","first_seen":"2026-01-16T14:34:54.211339Z","last_seen":"2026-02-17T11:09:06.763188Z","times_seen":683,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/1-138.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/1-138.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 19:12:03 GMT\r\netag: \"5b40-6874a0d3-3b3290;;;\"\r\nlast-modified: Mon, 14 Jul 2025 06:16:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23360\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhLtJjwqJdX%2BfmIG1THQ379qdGZ%2F0ixucmXgqmRE%2BlbpouB9SamTP3%2BmwxC%2F0oK1a11b0%2Fna%2BQUuxkK6bhvwhUOZZjCe9mBiOkCf8jKs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a34aef476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23360,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 240x180, components 3","md5":"1037f0096425af42e88b91465b6eee53","sha1":"0618ba8171c2909b4fc84903c2b28f79623896f9","sha256":"516c560b04eb97391869d5a77a86ab2ee607b1026e625acd2b2734669a3d617d","sha512":"172f165bf6b24789e7ee9561c0673e2bcdfbb81afe0d263f0e7b7dcd1728aa3e952edf2a3ff98437baa38fc7dee310382bd857d254dc476c3ce139cf821fefa0","ssdeep":"384:y/P2Uc+wKzzStINGqJFAjfZ2lgHf9MBmMHPUO2jdCgJECdOpHww1W:aPfwcW2GOAjRnf9QHh2jREFhL1W","tlshash":"e9a2d12e6432e3c0ef3249756e9db31a2778a7842da1614d79c5b0ea243af47171835b","first_seen":"2026-02-04T19:12:33.576368Z","last_seen":"2026-02-04T19:12:33.576368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=348265","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"POST /fp?tag_id=348265 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1971\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1971,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":358},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":276},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":1},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":0},\"sessionStorage\":{\"value\":true,\"duration\":1},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":1},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":30},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:05 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://mastitales.com\r\nSet-Cookie: id=15875471002123008813; Expires=Thu, 04 Feb 2027 19:12:05 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-20T07:33:27.00856Z","times_seen":6298,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mauc.onclckstr.com/video/show/?token=eyJhbGciOiJIUzI1NiJ9.eyJhY2NlbGVyb21ldGVyIjowLCJhY2NlcHRMYW5ndWFnZSI6ImVuIiwiYWNjb3VudF9pZCI6NDE2NywiYWN0aW9uX3JhdGUiOjEsImFkdmFuY2VkX3B1Yl9pZCI6MCwiYXVjdGlvbklEIjoiNjU2MjE4MTMwNzUwNzIyOTIxMSIsImF1Y3Rpb25fdGltZSI6IjE3NzAyMzIzMjUiLCJiYW5uZXJUeXBlIjowLCJiYXNlQmlkRmxvb3IiOjAsImJpZEZsb29yIjowLjAxMSwiYnJvd3NlckZhbWlseSI6IiIsImJyb3dzZXJOYW1lIjoiIiwiYnVybCI6IiIsImNhbXBhaWduSUQiOjE0Mjc0LCJjYW1wYWlnbl90eXBlIjoicG9wdW5kZXIiLCJjYXJyaWVyIjoiLSIsImNsaWVudF9wYXltZW50X21vZGVsIjoiIiwiY2xpZW50X3ByaWNlIjowLCJjb3VudHJ5IjoiTk8iLCJjcG0iOjAuMDExLCJjcmVhdGl2ZUlEIjoiIiwiZGV2aWNlX3RoZW1lIjoiIiwiZGlyZWN0X2NsaWVudF9wcmljZSI6MCwiZG9tYWluUmVmZXJyZXIiOiJzZW56b3JpcS5jb20iLCJlbnRyeV9zb3VyY2UiOiJ1bmRlZmluZWQiLCJlcnJvciI6IiIsImVzdGltYXRpb25DdHIiOiIwLjAwMjQxODg5Nzc1MDI0NjU3NiIsImV2ZW50VHlwZSI6IiIsImV4cGlyZSI6MCwiZXh0Q2FtcGFpZ25JRCI6IjYxODE1IiwiZmluYWxfc291cmNlX2lkIjowLCJnZW9fbWlzbWF0Y2giOiJOTyIsImd5cm9zY29wZSI6MCwiaWFiQ2F0ZWdvcnkiOiJJQUIyNSIsImlhdCI6MTc3MDIzMjMyNi4xMDI5NDQsImlmcmFtZV9jbGljayI6MCwiaW50ZXJlc3RWZXJ0SWRzIjoiIiwiaXAiOjE1MzI2MzU4MDIsImlwX21pc21hdGNoIjoiOTEuOTAuNDIuMTU0IiwiaXB2NCI6IiIsImlwdjYiOiI6OiIsImlzQWRibG9jayI6MCwiaXNEZWZhdWx0IjoxLCJpc0lmcmFtZSI6MCwiaXNTZWMiOjAsImlzX3NlY29uZF9wcmljZSI6MCwiaXNfd2VidmlldyI6MCwiaXNwX21pc21hdGNoIjoiLSIsImthbWluYXJpX2JvdF9pcCI6MSwia3ViaWtfc2NvcmUiOjk2LjQ5LCJsdl9pZCI6MCwibWVkaWF0aW9uIjowLCJtZWRpYXRpb25fZWNwbSI6MC4wMTEsIm1lZGlhdGlvbl90eXBlIjoiZGVmYXVsdCIsIm1pc21hdGNoX2ZpbHRlcnMiOiJ0dGxfbWlzbWF0Y2giLCJuZXR3b3JrX2lkIjowLCJuZXR3b3JrX3Nwb3RfaWQiOjAsIm9mZmVyX2xhYmVsc19pZHMiOiI0Iiwib3JpZ1JlZiI6InNlbnpvcmlxLmNvbSIsIm9yaWdpbmFsQmlkIjowLjAxMSwib3NGYW1pbHkiOiIiLCJvc1R5cGUiOiIiLCJwYXltZW50TW9kZWwiOiJjcG0iLCJwbGFjZW1lbnRUeXBlSUQiOjMwOCwicG9zaXRpb24iOjEsInByaWNlIjowLCJwcmltYXJ5UmVmZXJyZXIiOiIiLCJwcmlvcml0eSI6MCwicHJvY2Vzc2VkX2tleXdvcmRzIjoiIiwicHVibGlzaGVySWQiOiIxNzk1NTMiLCJyZWFsX2JpZCI6MC4wMTEsInJlZmVyZXJDaGFuZ2UiOjAsInJlZmZlcmVyIjoiaHR0cHM6Ly9zZW56b3JpcS5jb20vIiwicmVsYXRpdmVTY29yZSI6MSwicmVzcG9uc2VfdHlwZSI6InZhc3QiLCJzY29yZSI6MSwic2VnbWVudF9pZCI6MTQ0MDIzNDM5MCwic2VxdWVuY2UiOjEsInNlcnZpY2Vfc3BvdF9pZCI6OTQ5NzksInNpdGVfaWQ2NCI6MCwic29jaWFsX25ldHdvcmsiOiIiLCJzb3VyY2VJRCI6MTgzMzExNDY2Miwic3BvdElEIjo2MTA4NDg2LCJzcG90VHlwZSI6Im5hdGl2ZSIsInNzcElEIjozNzU4LCJzdWIiOiJhdWMtdmlkZW8taHotMyIsInRhZ0FCIjoiYSIsInRjdmFzdF91c2VyX2ZwIjoiNDNmZWJkN2FiOTQxMmQyNjlmYmIzNDgxYzE3NDQ4MmEiLCJ0bWFfd2FsbGV0X2JhbGFuY2UiOjAsInRvcGljcyI6IiIsInRyYWNrSUQiOiJhdWMtdmlkZW8taHotMyIsInRyYWZmaWNfY2F0ZWdvcnkiOiJhZHVsdCIsInVhX21pc21hdGNoIjoiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6MTM0LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvMTM0LjAiLCJ1bmlxdWVuZXNzS2V5IjoiIiwidXNhZ2VUeXBlIjoiRENIIiwidXNlcktleXdvcmRzIjoiIiwidXNlcl9mcCI6IjE0MzExOTI3OTEyOTI1ODE2MjQ1IiwidXRtQ2FtcGFpZ24iOiIiLCJ1dG1Db250ZW50IjoiIiwidXRtTWVkaXVtIjoiIiwidXRtU291cmNlIjoiIiwidmlydHVhbFNwb3RJZCI6MH0.W8AXy8wna4umM3s_I0FmcXAmyckSlaRERygZaJkVPYc\u0026hostname=auc-video-hz-3\u0026go=1[SESSIONTIME][PLAYBACK][TMA][BUILD_VERSION][BUILD_TYPE]","fqdn":"mauc.onclckstr.com","domain":"onclckstr.com","tld":"com"},"ip":{"addr":"23.88.86.80","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://senzoriq.com/out.php?id=newrtb\u0026pos=270\u0026siteid=1456339\u0026subid=363145965\u0026domain=mastitales.com","date":"2026-02-04T19:12:06.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 02:22:49 GMT","end":"Thu, 16 Apr 2026 02:22:48 GMT"},"fingerprint":{"sha1":"18:80:7D:16:42:BF:F5:42:07:6F:8F:D7:B9:76:B8:D9:2B:55:62:9A","sha256":"02:11:05:C0:04:BA:72:63:FC:74:B7:59:84:A3:27:78:54:46:4C:7D:48:78:38:D4:79:7F:46:21:0F:76:FF:A2"}}},"request":{"raw":"GET /video/show/?token=eyJhbGciOiJIUzI1NiJ9.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.W8AXy8wna4umM3s_I0FmcXAmyckSlaRERygZaJkVPYc\u0026hostname=auc-video-hz-3\u0026go=1[SESSIONTIME][PLAYBACK][TMA][BUILD_VERSION][BUILD_TYPE] HTTP/1.1\r\nHost: mauc.onclckstr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://senzoriq.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:07 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":116,"dns":7,"connect":40,"send":0,"wait":27,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/11/1-5.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/1-5.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 29 Jan 2026 07:05:04 GMT\r\netag: \"567b-6910e7b1-52da7a;;;\"\r\nlast-modified: Sun, 09 Nov 2025 19:12:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22139\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VSL4vCqn9Hwl2UAkdbIGbNsVlppmDOZeE0DFeRu27kPnUMdwCxkD8YBQXNwRXQ%2BOU1SvJ7Vmt5j5W3cALNNKGB18uvwPCl7aGvM0H3s5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a348ee076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22139,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 288x216, components 3","md5":"866846e3ea4bf84e649fefbd2c095fd2","sha1":"088f572ac4a8a3a63bca59f5401f4e6f2950851f","sha256":"9c37076bb058e120d121ef2f9f767d56a14b05a673e3dc6649f3979ba68b1f43","sha512":"2ca6e30577a559ed74aadb17d1cd9d5da2b58ee80e08069dd6556edd78f631053f9a36ca30cb0edebdd50c0cfecbd21f8ff78eaa30dd0e143998a4d12cd2e0f2","ssdeep":"384:kzTuuww92+5oUKNVbKUrzVlH1jusQqNmkDXKSfgvpc7Q:k3R9Mlvbxz5jzhXKtvb","tlshash":"dca2e0106247ace3fd57713964e11e6877f04b19bbb0780e30e93fd43a9b98d09d6615","first_seen":"2026-02-04T19:12:33.584635Z","last_seen":"2026-02-04T19:12:33.584635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/1-166.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/1-166.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Jan 2026 23:12:19 GMT\r\netag: \"4368-68871209-3b87b1;;;\"\r\nlast-modified: Mon, 28 Jul 2025 06:00:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17256\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wCvaAWKwmCFGnjEw8MgcSPy%2BerIASF1MtMrv9uTvUq%2BYL90HoxrvC5%2Be3n2lnGJjvoMWiCoqTakF0hH92kv5J2tb4SnZ7juEh5dX3Ykc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a349eef76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17256,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 240x180, components 3","md5":"4b036d16b638d3e32408d85caaecc7c9","sha1":"444b238330a3bb4fbf7ea17e593a6b34af6d0610","sha256":"6a577bf54d680ce5abc8cdf73390478e1829b1ed5baab1334e3f6225c10c3517","sha512":"870d8e3b8eaad5a4db205f768fb4ef68e72c82f79792d779e0e9c732491394d2f91288b547dc8836132271bd274a4d6a3c762d2d9fc764e4d29ae924be362e9e","ssdeep":"384:He5FlBZ0DeAkzyORJZOe0zyyQUXwVTa+BgegUYUGl+vGaIIW:He5FTzAkzxJZd0OfUAnBgjUYz8vGjIW","tlshash":"fd72c0e3ef0275c2f35de076d1581f8bb8841e9e24d7012b7780919cf39ea5a8c2c5a2","first_seen":"2026-02-04T19:12:33.586281Z","last_seen":"2026-02-04T19:12:33.586281Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 327\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":327,"data":"{\"ad_tags\":\"Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!\",\"page\":\"https%3A//mastitales.com/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\ncontent-type: application/json\r\ncontent-length: 32\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a558ebc75c92de934062afc81196006b","sha1":"3c8c471575dab1d8688ac419325c49baab25fcd7","sha256":"c7f0c41fb42c73f02ac62b0a8fa846a8f843c65b6a0189a0f4fe5d6511de4845","sha512":"7f67366258662159a709647c32aa80b9316f218d534345a58468c83c32eecb28322aabadb1f9fced3974a4a74c0ef4228969ef047436e4f5ad297a92290ca0d7","ssdeep":"","tlshash":"0f80000c328a080b0c8ca8003e008a32280aa202080a3ce8a8e2a0a8a380380b02ca0c","first_seen":"2025-07-21T15:31:02.341759Z","last_seen":"2026-03-26T02:20:00.487561Z","times_seen":24,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.onclckstr.com/vast?spot_id=6108486","fqdn":"bid.onclckstr.com","domain":"onclckstr.com","tld":"com"},"ip":{"addr":"91.216.220.30","port":443,"asn":3232,"as":"ModernColo LP","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://senzoriq.com/out.php?id=newrtb\u0026pos=270\u0026siteid=1456339\u0026subid=363145965\u0026domain=mastitales.com","date":"2026-02-04T19:12:05.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bid.onclckstr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 19:13:14 GMT","end":"Sun, 05 Apr 2026 19:13:13 GMT"},"fingerprint":{"sha1":"95:47:0C:4C:3E:8E:2C:F8:ED:DA:1A:F2:80:88:B9:54:8F:50:77:C1","sha256":"5B:8B:83:50:5D:47:8D:78:DA:8A:8C:0E:77:69:32:8E:31:B3:47:FE:CC:21:4F:14:98:E2:AB:9E:29:0B:31:D7"}}},"request":{"raw":"GET /vast?spot_id=6108486 HTTP/1.1\r\nHost: bid.onclckstr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://senzoriq.com/\r\nOrigin: https://senzoriq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: text/xml;charset=UTF-8\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding, *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://senzoriq.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24641,"size_decoded":0,"mime_type":"text/xml; charset=UTF-8","magic":"ASCII text, with very long lines (2993)","md5":"301a4d02b5448ba1d7e832210016e895","sha1":"67426a0e2b3bfa6912e3690b95044830de87a3e6","sha256":"1f0ceb56c6400fceec4be6eb67bf0e9e48a9d5e30a54b8fe21cc99f9f93b694e","sha512":"ab7bce61b495e0bd749a175d0ba6fe1798498a7c3dbfa2f6e22b6d533e3f44c1a57b007377645aa56498ba12cd88eb5cdb4d16b30a81e7456290009aebfbcee7","ssdeep":"384:Wyh2l5TfOWrFTh2l5TfOWrXv5h2l5TfOWrF+h2l5TfOWrunh2l5TfOWrFph2l5Tk:7g8M1g8MBg8MQg8Mgg8Mrg8Mpg8Mp","tlshash":"e6b2d75304ac2a3d7756e5997da4af3a2742019b28f0546bf2dd6c8dfb0298fe01837c","first_seen":"2026-02-04T19:12:33.589573Z","last_seen":"2026-02-04T19:12:33.589573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":70,"dns":5,"connect":21,"send":0,"wait":179,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"67a120c980.8f17d89ec7.com/2a425941d95f47f0ed843d0c6088e9e6/348265?version_name=d\u0026domain=mastitales.com","fqdn":"67a120c980.8f17d89ec7.com","domain":"8f17d89ec7.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"67a120c980.8f17d89ec7.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 02:14:52 GMT","end":"Sat, 02 May 2026 02:14:51 GMT"},"fingerprint":{"sha1":"5C:93:CD:94:D9:C4:6F:79:F9:EA:CE:CB:13:5E:1E:EC:2E:D4:E0:70","sha256":"8C:CB:31:90:63:80:89:76:B5:0D:85:2C:E5:1E:82:FA:43:7B:BA:E9:4E:52:F4:EF:4F:83:FB:D4:90:09:30:D9"}}},"request":{"raw":"GET /2a425941d95f47f0ed843d0c6088e9e6/348265?version_name=d\u0026domain=mastitales.com HTTP/1.1\r\nHost: 67a120c980.8f17d89ec7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.18.0\r\ncache-control: max-age=300\r\nexpires: Wed, 04 Feb 2026 19:17:03 GMT\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: MISS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dc4fb5d8b51171b5c3783ece3fa525ba","sha1":"23f878843bc355edccd24d54e7262bbc1f6cc6b0","sha256":"6acfff6aa1e262796ae4d85dcb78ec10163777a96a3a03946f17f169c43aa965","sha512":"d6d5c804c08b0c695bdd70be03d0abdcf09bae3b4c90a68053c500244035f62df0b7c72a5ff0658189dea1bf7d2d90a43f99920797c0082672b85077740d22b6","ssdeep":"","tlshash":"c8210fbcdf5844fb00d40a89e684750842873187f0d8b599e5bc8eb8239f7e61b6721f","first_seen":"2026-02-04T19:12:33.560215Z","last_seen":"2026-02-04T19:12:33.560215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"67a120c980.8f17d89ec7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/page/2/","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /page/2/ HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nCookie: _ga_QTGQHQT0R0=GS2.1.s1770232323$o1$g0$t1770232323$j60$l0$h0; _ga=GA1.1.2120780993.1770232324\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:02.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0 HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"167b-686f9768-3c5b44;br\"\r\nlast-modified: Thu, 10 Jul 2025 10:35:20 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2036\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Feb 2026 19:12:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nmxlr1MhCrCbf9uAzvyi6uPtc0fomu35SyuKEajqACsK6B%2FRG2WCUQzd1LjeayurOElBl4hiy0M8UXj0hq5bj2mPOnVXE5iGeAjOnxKr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a312e4f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5755,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5710)","md5":"6dcca58db348f35d6eee39aadb7cd280","sha1":"0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec","sha256":"2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4","sha512":"ee897cdc326f80eb18c74b3c42fe1b97b3b16c0be8f048a763cb33db134fa47dc2eb07bc1ba6cd8feb91385d791aa89a28816fd49217a57763dc54df1ef3693e","ssdeep":"96:IncwFK9HqOq0tioGJULBx7PYuyrr5VrcAeS1h3osyTaZ+1KZZ/p5k1QDSYRV9uR5:M9YH9qfJ2x7PYf5BcVSPfq+DkGDjP9u/","tlshash":"5fc15308b065b43f65777032523f130bb23a606778884494f6b4eae99ebc81e5923f7d","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-04-19T14:09:38.354009Z","times_seen":3656,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/348269?version_name=d\u0026domain=mastitales.com","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 02:32:00 GMT","end":"Fri, 17 Apr 2026 02:31:59 GMT"},"fingerprint":{"sha1":"C0:D0:BE:4D:79:5F:09:31:FB:ED:56:A1:83:C7:A3:50:BD:DF:1D:58","sha256":"84:10:AE:EC:2D:6D:B5:C8:8B:37:98:B5:D4:9A:CB:76:F3:0E:C5:A1:84:C0:83:0C:72:11:39:E0:68:30:17:C2"}}},"request":{"raw":"GET /tags/348269?version_name=d\u0026domain=mastitales.com HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1395,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f5caf18831b85efa2f8ac3119ec6d664","sha1":"c10a11a308353e1afb3a7b1ceb970b1268c8e4cb","sha256":"a7d80a8b7269f26820f8a165c41b5a30db69db4584b3c9d3c3b6796d647ef1cc","sha512":"4ed0252784bd8e672c5b65738692c3ee21f554d88ef480ff1317d9a8eb327ad41d57571856890cf3b355b0b57b93a0525d1d061f30aff7e7e3022bbab99a7149","ssdeep":"","tlshash":"e22111bccf5854fb00e10ac9d588760841973447f1d8b559e5ac4eb8239f3a21b1330f","first_seen":"2026-02-04T19:12:33.573291Z","last_seen":"2026-02-04T19:12:33.573291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 327\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":327,"data":"{\"ad_tags\":\"Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!\",\"page\":\"https%3A//mastitales.com/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\ncontent-type: application/json\r\ncontent-length: 32\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a558ebc75c92de934062afc81196006b","sha1":"3c8c471575dab1d8688ac419325c49baab25fcd7","sha256":"c7f0c41fb42c73f02ac62b0a8fa846a8f843c65b6a0189a0f4fe5d6511de4845","sha512":"7f67366258662159a709647c32aa80b9316f218d534345a58468c83c32eecb28322aabadb1f9fced3974a4a74c0ef4228969ef047436e4f5ad297a92290ca0d7","ssdeep":"","tlshash":"0f80000c328a080b0c8ca8003e008a32280aa202080a3ce8a8e2a0a8a380380b02ca0c","first_seen":"2025-07-21T15:31:02.341759Z","last_seen":"2026-03-26T02:20:00.487561Z","times_seen":24,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=348265","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"POST /fp?tag_id=348265 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1971\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1971,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":280},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":201},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":1},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":25},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:05 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://mastitales.com\r\nSet-Cookie: id=7105047222084214135; Expires=Thu, 04 Feb 2027 19:12:05 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-20T07:33:27.00856Z","times_seen":6298,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumb.live.mmcdn.com/roomad/quantum_heart.mp4","fqdn":"thumb.live.mmcdn.com","domain":"mmcdn.com","tld":"com"},"ip":{"addr":"104.17.38.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://senzoriq.com/out.php?id=newrtb\u0026pos=270\u0026siteid=1456339\u0026subid=363145965\u0026domain=mastitales.com","date":"2026-02-04T19:12:06.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.live.mmcdn.com","organization":"Multi Media, LLC"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Thu, 12 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:97:CF:47:25:CD:AC:C2:26:43:57:EA:AC:01:AA:D3:8A:25:28:9D","sha256":"55:E0:CC:D4:07:6D:4B:DC:CB:4A:19:D2:88:43:B7:D4:44:04:70:71:35:D7:68:10:AF:3A:2E:40:9D:85:44:0A"}}},"request":{"raw":"GET /roomad/quantum_heart.mp4 HTTP/1.1\r\nHost: thumb.live.mmcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://senzoriq.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 04 Feb 2026 19:12:06 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 435380\r\ncf-ray: 9c8c7a4b587056c1-OSL\r\ncache-control: max-age=120, public\r\nx-server-name: CB Jpeg Server\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'none'; img-src 'self' data:; media-src 'self' data:; style-src 'unsafe-inline'\r\nx-frame-options: DENY\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 04 Feb 2026 19:09:30 GMT\r\ncf-cache-status: HIT\r\nage: 66\r\ncontent-range: bytes 0-435379/435380\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":435380,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"098fce08761850dc1eff048232f3bb9d","sha1":"908658877e9f937f83ba7886fc1c512cb4beac06","sha256":"5dede1f7eb9e959dbff4963032b95b7b817673821c57611d8b13c13b8cfcc981","sha512":"c52abef17c746ed37838a2a3434b2d5fcde82515842ab7cc987aa9ae481fd68b9a9015beac3c74a95e2b15eb2e791a8e92a077ff6be464fadfc964215f6af230","ssdeep":"12288:ykDuDgSCLrWyYwlqqYYxoHZEnB+0N8k7ASbwvUy6SS:ykDCJ4YOgWB+880Tbjyq","tlshash":"ae9422ea475d648bc9f98331c5989b213722e2947a27532becdd3d759ecf6e02e408c0","first_seen":"2026-02-04T19:12:33.591732Z","last_seen":"2026-02-04T19:12:33.591732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":28,"dns":3,"connect":1,"send":0,"wait":18,"receive":25,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=413831","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://satincrave.com/portstandart.php?id=3","date":"2026-02-04T19:12:07.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"OPTIONS /fp?tag_id=413831 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://satincrave.com/\r\nOrigin: https://satincrave.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:07 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://satincrave.com\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=413831","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://satincrave.com/portstandart.php?id=3","date":"2026-02-04T19:12:07.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"POST /fp?tag_id=413831 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://satincrave.com/\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1973\r\nOrigin: https://satincrave.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: id=7105047222084214135\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1973,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":166},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":185},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":18},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":1},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":false,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":34},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:07 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 60\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://satincrave.com\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"aed48a0973cb6e9b8e24f1c0e9255a7d","sha1":"73c0149e72a9d8d7c3242fce97b6fea35b479d94","sha256":"5190eb4819735e9de5702d94c90fdddbaa76ae92e623cfaa4125d9420318bbe2","sha512":"6c3e2cb3cb196c097da73e6939b354cf129bc996290fec9433798d95c2df3069e4f15a7d0c8523b55ce573991eadab9d2e2d47bc2ba3c1193ecd65c55298b2df","ssdeep":"","tlshash":"75a002114b640a3e84f28490433608f40dc853c0ae0333c7dc4168c008d3009602fa41","first_seen":"2025-07-26T20:08:43.239696Z","last_seen":"2026-04-20T04:33:38.845647Z","times_seen":1109,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/1-168.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/1-168.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 29 Jan 2026 18:08:40 GMT\r\netag: \"3d3d-6887120b-3b88e5;;;\"\r\nlast-modified: Mon, 28 Jul 2025 06:00:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15677\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4TAEiOybBFZEGel%2FyYvwXbVY1GlaiaZ0ARHWOk2sp%2BtPX3ga7WE%2BCGZsJtcs36H5C0C%2Fw7BVNQNhUnQ7fK28kHR0JVEzmOH2MPyroKKZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a349eee76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15677,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 240x180, components 3","md5":"150167e6288ed10138582032785f2314","sha1":"35ef97b8f776ba85c7ebe5f52069b2f14ebd2737","sha256":"d651b3254bf8a557561dce0a3f453c43ab498dcfcf8bdd808ab63aa7e59177a5","sha512":"1f7d03bf0f30a2695674c00f431888059b8cae330aa1cdd70a0122d014e7ab04427defd46326da68cb9e908b8c6ffb06b35898747b968fcb38d8014936ee63ba","ssdeep":"384:O1swUYbZXNrGCInPo8XFY0MgALp/GhQDZRR3vo:OgOhG1PXFY0cp/eQD9w","tlshash":"aa62df90a3ba8be6f14597b2a079af6162e30d143170e46edfc40fe192bf1a5c1c60cc","first_seen":"2026-02-04T19:12:33.593998Z","last_seen":"2026-02-04T19:12:33.593998Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/1-143.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/1-143.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 16:41:48 GMT\r\netag: \"56d0-688711ef-3b13d6;;;\"\r\nlast-modified: Mon, 28 Jul 2025 06:00:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22224\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7S6OY%2BRHpigKmBsGTdye88tJ8MEr1gvmvrSqnp0sBD9wqDAB6thtonnKYUQPaGj8nDu7oWdVF1yy7rNzkzD8KBiUIXeXoPF1JtH4V3Po\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a349ef276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22224,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 240x180, components 3","md5":"ea2e6134de2601077967034d1ea719f0","sha1":"9a6b15204a5006f2e85489f526f2499bbc9ed18c","sha256":"c0cfd23d626cf5926582bd9ac826e70edfa93755c937cc50cf4e083a85016484","sha512":"373f9fc38ede6f92c12a17d3ce31c51e18c071d1355b3acba2bacbeed0dc4212bb29641ad15646c32a58442fbe1f371b3abd3bfe4872b6c5b73d5ee76f8537d7","ssdeep":"384:dpGs+QkgiWFPlaGSRGX4/zDlM/WQwarxTB1OEw9nyfD2Ae3Se0b7tK:3GBQkLWFlkz5nah/OEw9uD2Ae3SR7w","tlshash":"14a2d00425577ac4f27446e5c6894d223eeaa9e717cb760b63cd1813f06d39309e8da7","first_seen":"2026-02-04T19:12:33.595499Z","last_seen":"2026-02-04T19:12:33.595499Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/1-48.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/1-48.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 16:41:50 GMT\r\netag: \"4b08-6870b8a3-3c5f3b;;;\"\r\nlast-modified: Fri, 11 Jul 2025 07:09:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19208\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qIQpEqnz3N47eJbOykPGPgqzWnuOBgH4xEc0phenT2yFnOhKf21G40JlHnptAIHE5EdGht1U43gffRyl3P%2Fl8%2FUf%2FkvTNh%2FLz%2BLNQlKu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a34aef576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19208,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 240x180, components 3","md5":"6a99b07cc8346ac6ad3d8ff6142c8fd1","sha1":"29338109df393e74309179b9fcc138e9e98dc3c3","sha256":"766ef8da378d2bef874b146538430fd303ebfbe62b4bb7fa9996c9f350eeb88c","sha512":"e99304e4dc60e4692027cf622b701a7cc8de475d240f35a4c43ab005c109a9698e81b2683929cfc9d7a090589af09ddc2a4a536ef9619f00b2a17e8ffe212562","ssdeep":"384:TsobeQK94d2WkP3/liMlZEZ/8WU5m5OTEPz7KXRP/++:TsOeHgyP3/llqh8WEEyXJG+","tlshash":"e582e10b776839c6f535c3699093dffab7e8c632598e637960e04895123e6d1b8f1a80","first_seen":"2026-02-04T19:12:33.596959Z","last_seen":"2026-02-04T19:12:33.596959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mastitales.com/\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":77,"dns":1,"connect":33,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"07fac4b99e.2551910ed4.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzcxMDY4NjYyNzA0MDk2NTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQyLjAiLCJ0YWdfaWQiOjM0ODI2NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjA3LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"07fac4b99e.2551910ed4.com","domain":"2551910ed4.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"07fac4b99e.2551910ed4.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 02:48:09 GMT","end":"Sat, 02 May 2026 02:48:08 GMT"},"fingerprint":{"sha1":"48:01:15:24:8A:5F:E6:1C:DF:7A:2B:66:DF:64:35:66:14:E5:35:E6","sha256":"4E:77:DF:A7:04:28:7F:CD:BF:B3:43:7E:D5:56:3E:2C:BB:08:14:46:73:6A:27:8C:1E:F5:EA:C4:08:72:82:9F"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzcxMDY4NjYyNzA0MDk2NTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQyLjAiLCJ0YWdfaWQiOjM0ODI2NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjA3LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: 07fac4b99e.2551910ed4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\ncontent-length: 0\r\nserver: nginx/1.22.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 327\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":327,"data":"{\"ad_tags\":\"Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!\",\"page\":\"https%3A//mastitales.com/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\ncontent-type: application/json\r\ncontent-length: 32\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a558ebc75c92de934062afc81196006b","sha1":"3c8c471575dab1d8688ac419325c49baab25fcd7","sha256":"c7f0c41fb42c73f02ac62b0a8fa846a8f843c65b6a0189a0f4fe5d6511de4845","sha512":"7f67366258662159a709647c32aa80b9316f218d534345a58468c83c32eecb28322aabadb1f9fced3974a4a74c0ef4228969ef047436e4f5ad297a92290ca0d7","ssdeep":"","tlshash":"0f80000c328a080b0c8ca8003e008a32280aa202080a3ce8a8e2a0a8a380380b02ca0c","first_seen":"2025-07-21T15:31:02.341759Z","last_seen":"2026-03-26T02:20:00.487561Z","times_seen":24,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/get/?go=1\u0026data=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","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /get/?go=1\u0026data=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 HTTP/1.1\r\nHost: rtbrenab.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 3198\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16641,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2415)","md5":"ccddc64681a29960e436511dbb87e7b0","sha1":"524be3200c6ff2966061f43eccf5bbc31e7af572","sha256":"61cd43809bd1e477fe95e1207345b2bfe5ed16e14cc8b95c02b245957b88792f","sha512":"f88056bc3db04e93e3ed60b7a1e83628aff090cdb2da0803378eba081bac1ab587e9d8320fddd24d477ea0a10ce0606cf810380c11b2457336bb8b542b8c7962","ssdeep":"192:ZkVt77BGRuubIGcUBGRbbVGRbbyGRbbLGRbbQ9vLXl5bQ/+stzFC06YI:Za77QRuuMG6Rb4RbNRbORbSvQ/+st4","tlshash":"72721605ba77586140937019a25b310136a8774399c9ddb8fabcc322cfb873961efb4c","first_seen":"2026-02-04T19:12:33.59844Z","last_seen":"2026-02-04T19:12:33.59844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":97,"dns":35,"connect":25,"send":0,"wait":144,"receive":1,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"07fac4b99e.2551910ed4.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzcxMDY4NjYyNzA0MDk2NTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQyLjAiLCJ0YWdfaWQiOjM0ODI2OSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjQxLCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"07fac4b99e.2551910ed4.com","domain":"2551910ed4.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"07fac4b99e.2551910ed4.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 02:48:09 GMT","end":"Sat, 02 May 2026 02:48:08 GMT"},"fingerprint":{"sha1":"48:01:15:24:8A:5F:E6:1C:DF:7A:2B:66:DF:64:35:66:14:E5:35:E6","sha256":"4E:77:DF:A7:04:28:7F:CD:BF:B3:43:7E:D5:56:3E:2C:BB:08:14:46:73:6A:27:8C:1E:F5:EA:C4:08:72:82:9F"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzcxMDY4NjYyNzA0MDk2NTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQyLjAiLCJ0YWdfaWQiOjM0ODI2OSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjQxLCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: 07fac4b99e.2551910ed4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 327\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":327,"data":"{\"ad_tags\":\"Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!\",\"page\":\"https%3A//mastitales.com/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: application/json\r\ncontent-length: 32\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c685bb13085201bd0721a32775af3187","sha1":"91397244ea42407478b65668d5fe4195979900d0","sha256":"e4d769350a2dd615800efceaaade3999e331084bcbc3ed930ee71af566028b56","sha512":"64b06c3407b75c72577b4db23d62942a5a3bdd26706bfc31e24d6e702b9e5fff081728612a5f1c2262c678c2c99007ca694dd021b7ee1e420114ac85418efd49","ssdeep":"","tlshash":"3a80000c328e0a8a0c88b80032208b02288aa00a0808e8a823e208a88ba0a00b08c88c","first_seen":"2025-07-19T06:57:16.822929Z","last_seen":"2026-04-19T15:37:01.367749Z","times_seen":13,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=348269","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"POST /fp?tag_id=348269 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1972\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nCookie: id=1519219650855402052\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1972,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":656},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":471},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":1},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":21},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":42},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:05 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://mastitales.com\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-20T07:33:27.00856Z","times_seen":6298,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 02:32:13 GMT","end":"Thu, 12 Mar 2026 02:32:12 GMT"},"fingerprint":{"sha1":"5D:9C:D7:15:7D:69:8C:F7:40:12:0E:10:F1:FF:68:59:A6:F6:E2:38","sha256":"7D:0B:09:36:73:70:FE:A2:CB:1A:80:52:3B:1A:C0:0D:64:38:DA:DC:AB:9E:7A:95:F4:55:F2:6A:A4:F0:A8:FE"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Wed, 04 Feb 2026 19:17:03 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"btds.zog.link/in/912/?sid=6106550\u0026source=2089872083\u0026idzone=0\u0026w=300\u0026h=250\u0026mo=\u0026ve=\u0026site_id=6106550\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026ad_tags=,\u0026spot_id=6106550\u0026p=https%3A%2F%2Fsatincrave.com%2Fkalitecheck.php%3Fid%3D324\u0026katds_labels=\u0026btype=2\u0026score=100\u0026bf=0\u0026dr=satincrave.com","fqdn":"btds.zog.link","domain":"zog.link","tld":"link"},"ip":{"addr":"62.122.168.42","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bid.onclckbn.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:08.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"btds.zog.link","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 18:03:31 GMT","end":"Fri, 01 May 2026 18:03:30 GMT"},"fingerprint":{"sha1":"99:1B:46:76:2C:B9:5E:29:24:43:91:EB:8F:45:62:B0:E1:5C:C7:ED","sha256":"6D:3C:AC:A9:39:73:34:30:5A:85:AE:64:21:1E:2F:98:14:96:96:07:42:F0:83:89:AF:FB:97:98:E6:38:0A:C1"}}},"request":{"raw":"GET /in/912/?sid=6106550\u0026source=2089872083\u0026idzone=0\u0026w=300\u0026h=250\u0026mo=\u0026ve=\u0026site_id=6106550\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026ad_tags=,\u0026spot_id=6106550\u0026p=https%3A%2F%2Fsatincrave.com%2Fkalitecheck.php%3Fid%3D324\u0026katds_labels=\u0026btype=2\u0026score=100\u0026bf=0\u0026dr=satincrave.com HTTP/1.1\r\nHost: btds.zog.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: 912.0=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.20.1\r\ndate: Wed, 04 Feb 2026 19:12:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://cdn.60ah.com/b/banner_dev.html?source=2089872083\u0026w=300\u0026h=250\u0026id=6106550\r\npragma: no-cache\r\nvary: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nset-cookie: 912.0=1; expires=Thu, 05 Feb 2026 19:12:08 GMT; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2606,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/11/1-12.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/1-12.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 20:41:47 GMT\r\netag: \"44c5-6910e7b3-53f63c;;;\"\r\nlast-modified: Sun, 09 Nov 2025 19:12:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17605\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jIf%2F9ujtxqCZWC%2B8zgkndcjeI09UTJM%2BvKJnoInU1HmiMc84XbabUUbL2gbvfdxzrecF4ZT0qkSpvxqkmeMF1WiIKp9PJhorhEyamxul\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a348edf76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17605,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"5ab83e640eae393f28abb8ce28670b39","sha1":"0c666dad8206f9c984e716e08b0ebde22eb8a237","sha256":"8e9b5736f54737da73109a469b7e6bf9bafbea508a6ed3c8c4ef102696a03a56","sha512":"b2f47691f560816ab5dc01777b69c4f8cc7c44d0d97bb324c8fc534ad9d4ef82bab991df1fb4d751f51ff8180b599bf485712eeca58fbe58af3760687a60b6b7","ssdeep":"384:6hmDelCpwT79/BuS3vcoCEk3XW7DEj6EsDd0ZPID/a3ACu:6hEwTZ5R3EoU27DEjhsQES3i","tlshash":"d582c092bc1f508afc4d62758c793f58a5cc54e64e4ba09720e09f43792b3971cb8f2a","first_seen":"2026-02-04T19:12:33.601318Z","last_seen":"2026-02-04T19:12:33.601318Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mastitales.com/\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.onclckstr.com/event?katds_ep=jxJZPuPhX1Q5Y7ubag-iRiOTiAIZ3ikfPaFgLJRtecL0OCSW8GDKHzLVQDqTW5pug3tRP4PdMpOyIeD5pgipZooZHlHLxThBo0OhRYneNrQiq9fhcZw1-0AcY69shjop0K2R4tHzyRo1ioDNrDCTqSxkSxOezp5ADA","fqdn":"bid.onclckstr.com","domain":"onclckstr.com","tld":"com"},"ip":{"addr":"91.216.220.30","port":443,"asn":3232,"as":"ModernColo LP","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://senzoriq.com/out.php?id=newrtb\u0026pos=270\u0026siteid=1456339\u0026subid=363145965\u0026domain=mastitales.com","date":"2026-02-04T19:12:06.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bid.onclckstr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Jan 2026 19:13:14 GMT","end":"Sun, 05 Apr 2026 19:13:13 GMT"},"fingerprint":{"sha1":"95:47:0C:4C:3E:8E:2C:F8:ED:DA:1A:F2:80:88:B9:54:8F:50:77:C1","sha256":"5B:8B:83:50:5D:47:8D:78:DA:8A:8C:0E:77:69:32:8E:31:B3:47:FE:CC:21:4F:14:98:E2:AB:9E:29:0B:31:D7"}}},"request":{"raw":"GET /event?katds_ep=jxJZPuPhX1Q5Y7ubag-iRiOTiAIZ3ikfPaFgLJRtecL0OCSW8GDKHzLVQDqTW5pug3tRP4PdMpOyIeD5pgipZooZHlHLxThBo0OhRYneNrQiq9fhcZw1-0AcY69shjop0K2R4tHzyRo1ioDNrDCTqSxkSxOezp5ADA HTTP/1.1\r\nHost: bid.onclckstr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://senzoriq.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Wed, 04 Feb 2026 19:12:06 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":115,"dns":4,"connect":24,"send":0,"wait":23,"receive":1,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 13:31:36 GMT\r\netag: \"12d68-686f9768-3c5b51;;;\"\r\nlast-modified: Thu, 10 Jul 2025 10:35:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdpvih6H6ko%2BOb%2BGt8R%2BG%2BrUrN9lzEKsFhp04%2BGjHpweVn16aZg6AwpPAbj%2BvHujcxqEV06SO%2FISqeiEO8Vj7IGnlatpRaexWmQviGDn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a332ebe76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-20T07:59:34.1957Z","times_seen":432833,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/11/1-8.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/1-8.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 17:35:18 GMT\r\netag: \"74d2-6910e7b1-53f5a3;;;\"\r\nlast-modified: Sun, 09 Nov 2025 19:12:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29906\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3MBWMQNlPpqiyVrRyfK2j%2FQqOR49Qi1Ba%2F1CK7xDMQGupdKVMUivhISWjaG%2FWMx3y5mw7y5y64eC1FPcCopuGJdLrXztyhV0%2FO3DZUrL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a348ee576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29906,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 288x216, components 3","md5":"d168c8ac937280429515a6bbfad8a199","sha1":"fb4284ae2078198b75aff14070105ade93d96fc7","sha256":"d040f84e3986f9d966453a8d92fa40976a56a4f03519e228c0bac5c0b1c3cf09","sha512":"294916dc698c614bbc6f2b872a405356c04f4aab3b7c27a6014c017b439867a3a57a310c6f7dcadc307b6d1ad3b706ba9961d603bd42c4d4c9caa587cde8c799","ssdeep":"768:CUYsgVb4rIMaclE8x4YBIqkI3/vsz+Y5bm0IEo:CUYPxyTacG8xTBPkIPvv/0IEo","tlshash":"95d2f14457e0f389ef820d610e88ee272ff1470ab3886f6279fa431069d57415a7b86e","first_seen":"2026-02-04T19:12:33.603417Z","last_seen":"2026-02-04T19:12:33.603417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/348269?version_name=d\u0026domain=mastitales.com","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 02:32:00 GMT","end":"Fri, 17 Apr 2026 02:31:59 GMT"},"fingerprint":{"sha1":"C0:D0:BE:4D:79:5F:09:31:FB:ED:56:A1:83:C7:A3:50:BD:DF:1D:58","sha256":"84:10:AE:EC:2D:6D:B5:C8:8B:37:98:B5:D4:9A:CB:76:F3:0E:C5:A1:84:C0:83:0C:72:11:39:E0:68:30:17:C2"}}},"request":{"raw":"GET /tags/348269?version_name=d\u0026domain=mastitales.com HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1395,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f5caf18831b85efa2f8ac3119ec6d664","sha1":"c10a11a308353e1afb3a7b1ceb970b1268c8e4cb","sha256":"a7d80a8b7269f26820f8a165c41b5a30db69db4584b3c9d3c3b6796d647ef1cc","sha512":"4ed0252784bd8e672c5b65738692c3ee21f554d88ef480ff1317d9a8eb327ad41d57571856890cf3b355b0b57b93a0525d1d061f30aff7e7e3022bbab99a7149","ssdeep":"","tlshash":"e22111bccf5854fb00e10ac9d588760841973447f1d8b559e5ac4eb8239f3a21b1330f","first_seen":"2026-02-04T19:12:33.573291Z","last_seen":"2026-02-04T19:12:33.573291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mastitales.com/\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":89,"dns":3,"connect":25,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.cabnnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 04:32:05 GMT","end":"Tue, 10 Mar 2026 04:32:04 GMT"},"fingerprint":{"sha1":"FB:8C:65:CE:0B:5E:7F:2E:C6:58:EB:3B:D2:6E:8E:7A:B7:B7:51:EF","sha256":"FB:93:6B:07:DC:2C:B3:38:60:36:C5:FC:E7:C7:DE:74:5A:F6:0E:4E:92:A5:72:F1:03:9F:FE:61:7A:ED:04:96"}}},"request":{"raw":"GET /banner-admanager/build.m.js HTTP/1.1\r\nHost: js.cabnnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 30 Jan 2026 09:38:08 GMT\r\netag: W/\"697c7c00-14c02\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 04 Feb 2026 19:17:04 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84994,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"73fec96c215a8949433222a12792a539","sha1":"ec1ec7a7cd760dcda7ac66c75f332f7b86e87501","sha256":"cba1edf1f89e886d65ddaa10fa35c268dba2f4286d6f23a936d7eb8040b8f1e5","sha512":"ef9a2998146a0ad8bf0c773b0b500fef6d0e70e3b22952199d976566814ca7674f39606c902b4641f95ece4f6730eaf7fa708649d3c897a0e91d986969c4f189","ssdeep":"1536:7aftpnDfu3pIDBgJBpqgiZMZLUyzOBOi6mLEIWDDIWA:7g9DfuTPpqSL37m43U","tlshash":"67836c843290b4b541e640afa43f430af33d2d06b40aa458f16dede77b79e896176f39","first_seen":"2026-01-30T10:33:19.991148Z","last_seen":"2026-02-10T22:56:55.78229Z","times_seen":65,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":88,"dns":27,"connect":25,"send":0,"wait":46,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"07fac4b99e.2551910ed4.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzcxMDY4NjYyNzA0MDk2NTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQyLjAiLCJ0YWdfaWQiOjM0ODI2NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjA5LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"07fac4b99e.2551910ed4.com","domain":"2551910ed4.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"07fac4b99e.2551910ed4.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 02:48:09 GMT","end":"Sat, 02 May 2026 02:48:08 GMT"},"fingerprint":{"sha1":"48:01:15:24:8A:5F:E6:1C:DF:7A:2B:66:DF:64:35:66:14:E5:35:E6","sha256":"4E:77:DF:A7:04:28:7F:CD:BF:B3:43:7E:D5:56:3E:2C:BB:08:14:46:73:6A:27:8C:1E:F5:EA:C4:08:72:82:9F"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMzcxMDY4NjYyNzA0MDk2NTAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjQyLjAiLCJ0YWdfaWQiOjM0ODI2NSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjoxLjA5LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: 07fac4b99e.2551910ed4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 327\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":327,"data":"{\"ad_tags\":\"Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!\",\"page\":\"https%3A//mastitales.com/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: application/json\r\ncontent-length: 32\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a558ebc75c92de934062afc81196006b","sha1":"3c8c471575dab1d8688ac419325c49baab25fcd7","sha256":"c7f0c41fb42c73f02ac62b0a8fa846a8f843c65b6a0189a0f4fe5d6511de4845","sha512":"7f67366258662159a709647c32aa80b9316f218d534345a58468c83c32eecb28322aabadb1f9fced3974a4a74c0ef4228969ef047436e4f5ad297a92290ca0d7","ssdeep":"","tlshash":"0f80000c328a080b0c8ca8003e008a32280aa202080a3ce8a8e2a0a8a380380b02ca0c","first_seen":"2025-07-21T15:31:02.341759Z","last_seen":"2026-03-26T02:20:00.487561Z","times_seen":24,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.9.0.1752143720","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:02.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/main.js?ver=1.9.0.1752143720 HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"996b-686f9768-3c5b45;br\"\r\nlast-modified: Thu, 10 Jul 2025 10:35:20 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 9598\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Feb 2026 19:12:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=irnfqtpX3VVdvJJQt9qPjpWPJ3ixzCL8n2cXJOuq0XRtC4Y2Hxy8dEgLxqp97m27xEIbE6VYgYJFTZb5NVbxDH21bxSXPBpqypMmEkV%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a312e5076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39275,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"783fecdc0e20f9cbdee6b57839de44e4","sha1":"0d9062e511793c4ac674742de2de74dd13a85dc9","sha256":"45c5b2ddd2dd6bae51444e5c06a67a069b87457c72e3876bbaefa17dbaf9315f","sha512":"a7d0a8702df2b6d6074ee47e746ad8d46fb851ccecfb9f8925a2d7cebd2073d51591ac4722c3d09184cca52e9ae241820330e3d7db05bd2c9b1d49ed3ce06981","ssdeep":"768:lqZvNO9ADc60/sjbrtXxCiVR3xCoP9nnI33mnDSb4B34BI3fs9a:lqPO9V6pZXc8R5nbGQGa","tlshash":"01037385fb7c254a827a30ee6c6f12cc353d5132a442046fbd39a6e458a0b3d73a7d79","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-04-18T17:22:45.569556Z","times_seen":2009,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/11/1-11.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/1-11.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 14:16:04 GMT\r\netag: \"420a-6910e7b3-53f62f;;;\"\r\nlast-modified: Sun, 09 Nov 2025 19:12:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16906\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTAkpMrg%2BQ2DGC9i%2Bp90ZHpI4ChXpIP8DM%2Fr7Y0jDPUnJA65bYYzGrZC0Ad9t%2FYdXUTCuCqFj1P%2F3e5s7NgVr50N3NAyDYvr4KFhDJvK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a347edd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16906,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"a8fe0f57829192721edaed523405da87","sha1":"8f655140b7137d2fafbea0a6ddbc878489f99226","sha256":"17789ad11cbdba033a2ba6a24f1a4ba5304c050331e092aeded5d2034b1d4dcc","sha512":"9793f456f435ac0e155a094281e42bfdfbbb20ca96d16d72dedafff2f9cd47c25d1c07133e47ead88c66019072740f06a227b1627e543a0691e97a826f48b0a8","ssdeep":"384:/CL/bQKreHL0RrE9UTSWJoYhsgUbJTCeY9R8H/oPNEj4EFAX:wbQxHMEyGRTY9R8Hmjd","tlshash":"dc72cf70470d5de1f63424f103b92e6e58f82e05710a297e17d23aaf1cbb561ac59ac7","first_seen":"2026-02-04T19:12:33.605354Z","last_seen":"2026-02-04T19:12:33.605354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/1-164.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/1-164.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 29 Jan 2026 03:15:37 GMT\r\netag: \"624b-68871206-3b879c;;;\"\r\nlast-modified: Mon, 28 Jul 2025 06:00:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25163\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IXhzRs0MdzkCZi2bJwUqd%2F4N%2FJr6xeI18ZNOFZUV%2FPulTLJ6otjm1qpPvS8iUyUKRK0SbMVD5DQA5toNoFN8ap3gVxTK3jPbwtpitDGd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a349ef176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25163,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 240x180, components 3","md5":"01c478c4168624414742dc9622c17656","sha1":"f5882260c1e435b1ea45f26db8c2b5add8805e0b","sha256":"3c705461ba3cc05c7ab8ede83878fecd3c9be93995a40053810752090e96736a","sha512":"abaa41450f00c1d01f6ec7f77b303cbf29bf3c34656dd0aca72036b95c275f525c6016f9d6484717908427baecdb07f9e1e3ace320e97e838e3a6dc981879ab9","ssdeep":"768:KL/C6lr2dBWSm9AhLXRz6BGqUJvOhmRj5EBjV0lO:kHCbVmKhVzlqU5OhEj560w","tlshash":"39b2e1cbd3315fc7fae1aaa1a518df8313c23da916940beb94f26ee18830a50f570754","first_seen":"2026-02-04T19:12:33.606682Z","last_seen":"2026-02-04T19:12:33.606682Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/get/?go=1\u0026data=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","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"157.90.85.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /get/?go=1\u0026data=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 HTTP/1.1\r\nHost: rtbrenab.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 3420\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19542,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2910)","md5":"bb714a2594e1c83b7fe465ce03631a35","sha1":"85607eb437516d0ab86020ac5adb5a84a838f6a2","sha256":"aaed28772b10c3ff1aa9d41c9da74dae7b6fdd4d27f2a2c1edfdb25d20711ba2","sha512":"ebe106267e9eb5e5ea69c3c0441eec8dc7c6b8a67556444baff2540bebb1fe91fcb891f5e9290aa86d8cc831a42c972be0a5f3299f407bb1f96e978efcf7b86d","ssdeep":"384:ZH7YRxI9BfuKGLxI9BSXxI9BSUxI9BS5xI9BSgvQ/+stM:ZkRxI9d7SxI9QxI9rxI9YxI9LQ/+stM","tlshash":"cb92d6047d179462408e6120639fb51a2ee9a78397c1bc58fafdc325dfb873521abb4c","first_seen":"2026-02-04T19:12:33.607925Z","last_seen":"2026-02-04T19:12:33.607925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":98,"dns":33,"connect":25,"send":0,"wait":151,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flepquix.com/in/dip?event_id=85397797-a086-431d-9a73-c9599acb7221","fqdn":"flepquix.com","domain":"flepquix.com","tld":"com"},"ip":{"addr":"178.63.5.120","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /in/dip?event_id=85397797-a086-431d-9a73-c9599acb7221 HTTP/1.1\r\nHost: flepquix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":72,"dns":3,"connect":26,"send":0,"wait":29,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:02.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15 HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"5ebc-686f9768-3c5b41;br\"\r\nlast-modified: Thu, 10 Jul 2025 10:35:20 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6023\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Feb 2026 19:12:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BiHnqfx18V0LSw0u2m35pipnEKxgASV1%2BV1Y1u4FDvJsPMFW7w0jBlnxYGMSKEapmMc%2F9f39SPjXk%2F1NQBX5lVYjzmjDCwlaRp48B%2BXB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a312e4d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24252,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24063)","md5":"c675495748ef0df6858b93dd9e623c46","sha1":"e1be723e4e25d37282821c50b7e12796d3df5f8d","sha256":"9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271","sha512":"1775ad0e5bc7d3cc9ebdd032b94e440a0872f616f983ff867511984daba748ed52e1de5c67f0e4648947bef65b499b3a6197ff7726cf1f481b7d4253b6711127","ssdeep":"384:nudkTa6bYaGQZKbZi1X5U59g+rzyPSS1SMVu8r2WiWQK7XYANWck6QDhC2k+0CMu:uv9gPSSbs8PwhCK0CMl+ArJwz","tlshash":"e6b2b609b13939be05f632baf25ecb0550f6448d9827f0f4a8b5c94ddad88d4102fbe6","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-04-19T14:09:38.543476Z","times_seen":3892,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=348269","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"OPTIONS /fp?tag_id=348269 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mastitales.com/\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:04 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://mastitales.com\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":1,"connect":29,"send":0,"wait":25,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chaturbate.com/api/public/affiliates/vast_event/?event=impression\u0026tour=I7t4\u0026campaign=T3w7p\u0026track=twinred_row_vast_desktop","fqdn":"chaturbate.com","domain":"chaturbate.com","tld":"com"},"ip":{"addr":"104.18.207.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://senzoriq.com/out.php?id=newrtb\u0026pos=270\u0026siteid=1456339\u0026subid=363145965\u0026domain=mastitales.com","date":"2026-02-04T19:12:06.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.highwebmedia.com","organization":"Multi Media, LLC"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AE:55:4C:C2:BD:11:E5:9E:96:A3:A9:16:11:37:B0:3F:BC:53:4B:3E","sha256":"32:1D:92:0F:F5:C6:25:39:35:05:67:2B:8F:B8:87:33:C0:53:19:DC:B4:D2:81:D4:4C:83:7E:BE:78:85:3A:34"}}},"request":{"raw":"GET /api/public/affiliates/vast_event/?event=impression\u0026tour=I7t4\u0026campaign=T3w7p\u0026track=twinred_row_vast_desktop HTTP/1.1\r\nHost: chaturbate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://senzoriq.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 04 Feb 2026 19:12:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: 9c8c7a4c0e5bb50b-OSL\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: accept, accept-encoding, content-type, origin, user-agent, x-requested-with\r\naccess-control-allow-origin: *\r\nvary: Accept-Language, Cookie\r\ncontent-language: en\r\ncontent-security-policy: default-src 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://ajax.googleapis.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://*.googletagmanager.com https://www.google.com/recaptcha/ https://www.google.com/cv/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/cv/ https://www.gstatic.com/eureka/ https://www.gstatic.com/cast/ https://*.nr-data.net https://player.vimeo.com/api/player.js https://static.hotjar.com https://script.hotjar.com ;  style-src 'self' data: 'unsafe-inline' https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com;  img-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://*.stream.highwebmedia.com https://*.chaturbate.com https://chaturbate.com https://*.google-analytics.com https://*.googletagmanager.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.nr-data.net https://stats.g.doubleclick.net https://cbgames.s3.amazonaws.com https://player.vimeo.com https://script.hotjar.com http://script.hotjar.com ;  font-src 'self' data: https://*.mmcdn.com https://*.highwebmedia.com https://cdnjs.cloudflare.com https://fonts.gstatic.com http://script.hotjar.com https://script.hotjar.com ;  connect-src 'self' blob: blob https://*.mmcdn.com wss://*.mmcdn.com wss://*.mmcdn.com:8443 https://*.mmcdn.com:8443 https://*.highwebmedia.com wss://*.highwebmedia.com wss://*.highwebmedia.com:8443 https://*.nr-data.net https://*.chaturbate.com https://chaturbate.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://cbvideoupload.s3-accelerate.amazonaws.com https://stats.g.doubleclick.net https://internet-up.ably-realtime.com wss://ws-up.ably-realtime.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com https://tls-use1.fpapi.io https://use1.fptls.com https://eun1.fptls.com https://aps1.fptls.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com ;  media-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://*.chaturbate.com https://chaturbate.com mediasource: blob: data: https://storage.googleapis.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com;  object-src 'self' https://*.mmcdn.com https://*.highwebmedia.com https://download.macromedia.com https://static-pub.highwebmedia.com https://s3pv.highwebmedia.com https://cbphotovideo.s3.amazonaws.com https://cbphotovideo-eu.s3.amazonaws.com https://static-pub.highwebmedia.com.s3.amazonaws.com https://wowdvr.s3.amazonaws.com https://cbvideoupload.s3.amazonaws.com ;  frame-src 'self' https://*.mmcdn.com https://*.chaturbate.com https://chaturbate.com https://*.highwebmedia.com https://adserver.exoticads.com https://www.google.com/recaptcha/ https://*.wnu.com https://wnu.com https://checkout.2000charge.com https://www.sofort.com https://*.girogate.de https://player.vimeo.com https://vars.hotjar.com https://directory-live.cb.dev https://directory-v3-live.cb.dev https://*.live.mmwebc.dev https://cbxyz.com ;  child-src 'self' blob: blob ;  worker-src 'self' blob: blob ;  form-action 'self' https://*.chaturbate.com https://chaturbate.com https://*.stream.highwebmedia.com https://*.wnu.com https://wnu.com https://devportal.cb.dev https://*.web.amer-1.jumio.ai https://saas-onboarding.incodesmile.com https://smartpay.coinsmart.com https://crypto-payments.net https://secure.paygarden.com ;  manifest-src 'self' https://*.mmcdn.com https://*.highwebmedia.com ;  report-uri https://report-uri.mmcdn.com/r/t/csp/enforce;\r\nreport-to: {\"group\":\"default\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://report-uri.mmcdn.com/a/t/g\"}],\"include_subdomains\":true}\r\nnel: {\"report_to\":\"default\",\"max_age\":2592000,\"include_subdomains\":true}\r\nx-frame-options: DENY\r\ncache-control: no-cache\r\nset-cookie: sbr=sec:sbr458cf4b9-dfa4-4efd-9ec0-1ab9d4eefe6a:1vniIJ:FooNKsUyckXxmLWwb20EeZsj_pgUQPFVauqcxpOcloY; Domain=.chaturbate.com; expires=Mon, 30 Oct 2028 19:12:07 GMT; HttpOnly; Max-Age=86313600; Path=/; Secure\nlanguage_subdomain_continuity=1; Domain=.chaturbate.com; expires=Wed, 04 Feb 2026 19:12:12 GMT; Max-Age=5; Path=/\n__cf_bm=3ivcf80xMaT2Yk9PQUge8D1KQ7775GzAAVCci3JoRPo-1770232327-1.0.1.1-OtS2J_.pU7BJUQ9l.7fvuU_FXluB.aB4z2qFJBt7VrXVip_v9g1I.XipDX1YrgUvdryj1AQXbHfkNOftb664EKROcuhNr5g1gJShjDgM_TA; path=/; expires=Wed, 04-Feb-26 19:42:07 GMT; domain=.chaturbate.com; HttpOnly; Secure; SameSite=None\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block; report=https://report-uri.highwebmedia.com/r/t/xss/enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":98,"dns":3,"connect":1,"send":0,"wait":177,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:02.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"3509-686f95f1-3c242f;br\"\r\nlast-modified: Thu, 10 Jul 2025 10:29:05 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4679\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Feb 2026 19:12:02 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2fa1kE60GEAwF3WL6uzfeXuhU8K0COMNHbHH9J22TzHOxdm82wvPZ1jc0yYOJ8nt8xBx4MrHw1idI0ZZ0xc6CJ86B6XH2ZOHH%2FGhgnC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a311e4976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-20T07:59:55.970089Z","times_seen":676977,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/11/1-10.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/1-10.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 11:50:25 GMT\r\netag: \"4e0f-6910e7b3-53f5d7;;;\"\r\nlast-modified: Sun, 09 Nov 2025 19:12:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19983\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rvIF1gfy2yp7fdje0NkfF9ojfTAgSDU58ojvgyXbvBbw4ZzaJhzmzV3Oo81rMU1fyudnKj%2FUdM6jGuzPFkX%2FztqilHu%2BGVMMitEswLOt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a347edb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19983,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 288x216, components 3","md5":"e05be93a41e7d0bf42948d6aaba563f2","sha1":"572f199afe9dd5398f3223964b95d31a8a87a1db","sha256":"cf9fea4a44b7e4e2275d8d73d3c9c3dc7d195cea37da28a45e67ec3a4d884391","sha512":"e375ee2447ea46ce8d306a8d3b54c29cfc1d2c5b03311b95501bd08e5ee04afe666a0b6018f33588b6e80ee50ccd483bd6cefa88e39271651f3fbc83fcb0da28","ssdeep":"384:jiuMewROqxyKDxBXIpuZsBqgibqIK1RiCbHN:jiuMTp7IpjBg9aYut","tlshash":"c092d00eff2586e2b861903c15985cf387e4ae51029b4dbb52e6cf7dc416b9a1192b33","first_seen":"2026-02-04T19:12:33.61056Z","last_seen":"2026-02-04T19:12:33.61056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/11/1-9.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/1-9.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 16:58:41 GMT\r\netag: \"820e-6910e7b1-53f5b7;;;\"\r\nlast-modified: Sun, 09 Nov 2025 19:12:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33294\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71LIOe1wK4XKIgewOH0iFTTg2mN%2Fhu28FCjUfMVxrWw8QKrmHg6%2BDg%2BT2FLV6kd3f%2FfM5FWNNEXOLbBFlMofsjGVlWKnFlscWSVLgTlQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a348ee376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33294,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, progressive, precision 8, 288x216, components 3","md5":"88f430a4b8e7cda6f6df14e01437ccc1","sha1":"e9a4187d9c52f2d576e6be89e3b9c71771d79c27","sha256":"766cc628529ef16ea90579a65e3d7e848d6b98d1c0518831cbfe193b993d915b","sha512":"65970f5e9b11b9c0ceba2a9b1f1db7d8bf19dfd83c48b07154d1d50e4ccf6e9b99278ad706b582953199703c62e0dd2f0b800283744a5ef949ff643bdd7540f1","ssdeep":"768:DkhqYALFM2pbaoXpvAy3HABtTj0a0v6qzEGtx6KZyLfpdrv:DCkLWkX5lX6JO6qzEGtxPZw","tlshash":"3ce2f1637b50bdcfbe94d38119544f92c3d8a80a6f605967fcadb98aaa7f440d900dc2","first_seen":"2026-02-04T19:12:33.611885Z","last_seen":"2026-02-04T19:12:33.611885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/1-167.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/1-167.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Jan 2026 02:27:18 GMT\r\netag: \"5b32-68871209-3b87ba;;;\"\r\nlast-modified: Mon, 28 Jul 2025 06:00:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23346\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x96cwrZadTz3Uvh1%2FtkZgAg8f1nqwERnIh1mIQuxxJ24W0nVmt%2F3pb%2BRUed%2BWd%2BXyvTcDG0MCEL5SrHk4C2ejlbfjWRH66%2BhMOsGJrvO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a349ef076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23346,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 240x180, components 3","md5":"13f1a3e35a6660298349ccc0bb9afc6c","sha1":"5a000be25d2c47ec97d8c2d11ccac00499c47120","sha256":"c3bba054daee3cf410f962bed91ba19e2382ad1d587fecbdc9157d5a50b393ab","sha512":"a11c954d753362eee5e6bda2729b3ba304effba921165b10d07d2919e18a17f645e4ad670215d45deb7b3f2c287701a4a7b62ab47ce3f47cb57abba98d71fd13","ssdeep":"384:3RevxRoiLlWUKMHtaZfaV/95+wd08fRnvg/GCkOGgSQ6ET0Gom6fWF8W:henNLgM8S1WyYOpxGom6fW9","tlshash":"baa2d0604e5d6384fc5e763026a2fe9994f1230350b5593b98d23491bebe1d31afc2f2","first_seen":"2026-02-04T19:12:33.613067Z","last_seen":"2026-02-04T19:12:33.613067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preroll.hostave3.net/notifications/zeropixel.png","fqdn":"preroll.hostave3.net","domain":"hostave3.net","tld":"net"},"ip":{"addr":"172.67.145.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:05.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hostave3.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 17:15:23 GMT","end":"Mon, 16 Mar 2026 18:13:55 GMT"},"fingerprint":{"sha1":"41:3C:1E:E0:08:D1:6C:38:21:47:B8:14:0C:25:76:36:FD:34:24:1A","sha256":"0E:AA:90:56:57:3E:C1:BB:8F:02:C9:62:A7:53:D7:BC:00:93:1C:74:16:9B:35:37:E5:FB:00:A7:58:81:44:BE"}}},"request":{"raw":"GET /notifications/zeropixel.png HTTP/1.1\r\nHost: preroll.hostave3.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 42\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Sep 2018 08:40:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hrj3TZZIT4yebnpjIDZVMKjd%2BQ3MuMtno5CyDRt9vWoA3LQqlgNPGdjjGMRm0u%2BmynKS%2FlJFEaxcsoKFNuYJXqrkFBTHYtqW6z4vzlQyA1N%2FhFia\"}]}\r\netag: \"5b977f94-2a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1867024\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9c8c7a42c8f135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-20T07:59:54.415044Z","times_seen":808784,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":27,"dns":3,"connect":1,"send":0,"wait":5,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adspector.io/sync?ssp=44","fqdn":"a.adspector.io","domain":"adspector.io","tld":"io"},"ip":{"addr":"213.171.19.202","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://satincrave.com/portstandart.php?id=3","date":"2026-02-04T19:12:08.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adspector.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 04:18:03 GMT","end":"Thu, 30 Apr 2026 04:18:02 GMT"},"fingerprint":{"sha1":"73:2D:90:98:70:5D:4A:E3:E2:61:10:A2:E3:52:9F:FB:42:9F:BE:C8","sha256":"87:AB:82:11:47:84:A9:93:16:37:B9:88:5E:86:0F:8C:44:67:0B:D8:87:39:09:54:A0:50:8D:64:7C:7F:BB:27"}}},"request":{"raw":"GET /sync?ssp=44 HTTP/1.1\r\nHost: a.adspector.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Wed, 04 Feb 2026 19:12:08 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: preadspector=1; Expires=Fri, 06 Mar 2026 22:12:08 GMT; Domain=.adspector.io; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":100,"dns":4,"connect":41,"send":0,"wait":83,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/style.css?ver=1.9.0.1752143720","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:02.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/themes/retrotube/style.css?ver=1.9.0.1752143720 HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 03:09:25 GMT\r\netag: \"125f5-686f9768-3c5b7c;br\"\r\nlast-modified: Thu, 10 Jul 2025 10:35:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 13354\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Feb 2026 19:12:02 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLlAGm6%2BBmnPHHh0TinfNTKkyptlsUtrR0aJCcmusJrxUiXdnCe545t6cwcOiwKv0Bm%2FeBJQZcgZWdtAiyCuWXvOwzWsUDPDoI6m5fBr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a311e4776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75253,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"836ae592cfaff0f4f2a017c6e99ac464","sha1":"5e703bf5a22396e99ea19c2a02a756580346e583","sha256":"07ccd3ae0f047e83c901ee31dd88615ff93034a99d1c70245f1253576198466d","sha512":"75798301828dfd96d9523a58e782b26b51666926c05bd623b67a42ad47492f329dae013a83be9d69fc2dc5b60ef94b644cfc3067dc10dd648c0a41351a17ffc8","ssdeep":"1536:F+vfevN5dbpil/zinqEqFkQiN0NtIhjwU3zl0oyEjG/2WmM1/S/5s5DX3F/Is5Du:F+3QN3pil/ziBN0jKl0KyrWixLO","tlshash":"89737465af141c44932bc2a9afd5e750c63e4051df0f0edff099a528d38a69502bff8a","first_seen":"2025-07-08T11:17:25.952713Z","last_seen":"2026-04-12T05:48:36.582368Z","times_seen":27,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=348269","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:04.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"POST /fp?tag_id=348269 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1971\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1971,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":624},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":435},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":1},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":89},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:04 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://mastitales.com\r\nSet-Cookie: id=1519219650855402052; Expires=Thu, 04 Feb 2027 19:12:04 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-20T07:33:27.00856Z","times_seen":6298,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":4,"connect":24,"send":0,"wait":25,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"67a120c980.8f17d89ec7.com/df0de2161c5b3c03245f55b7fdf081c6.js","fqdn":"67a120c980.8f17d89ec7.com","domain":"8f17d89ec7.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"67a120c980.8f17d89ec7.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 02:14:52 GMT","end":"Sat, 02 May 2026 02:14:51 GMT"},"fingerprint":{"sha1":"5C:93:CD:94:D9:C4:6F:79:F9:EA:CE:CB:13:5E:1E:EC:2E:D4:E0:70","sha256":"8C:CB:31:90:63:80:89:76:B5:0D:85:2C:E5:1E:82:FA:43:7B:BA:E9:4E:52:F4:EF:4F:83:FB:D4:90:09:30:D9"}}},"request":{"raw":"GET /df0de2161c5b3c03245f55b7fdf081c6.js HTTP/1.1\r\nHost: 67a120c980.8f17d89ec7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 16 Jan 2026 12:21:20 GMT\r\netag: W/\"696a2d40-2494b\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 04 Feb 2026 19:17:03 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149835,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9f7b734689cae2d039dae1123333dded","sha1":"e20b71453fccd4fcdca964d4d609111c77f60484","sha256":"996fbfcbf5a7091890788228af5539ec39c018efcc8ea9bad557991859f03572","sha512":"584f0a5e0a073862bae0d847a2a03f4a08fdfeca97e22eea85bef7399292cc408d2d236c297f44a8ea883829f094489f62a6ae6859600c5327e6f285551fa131","ssdeep":"1536:O18MdnC5OPz8YBP9r2RcZAdtK8wBgg0341LloXQTtQyodhm161zKK+AKn7K0ketc:mBFSGAdt6Rydhmo1GqKGPetsz","tlshash":"11e349dcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb9237f7a","first_seen":"2026-01-16T14:34:54.211339Z","last_seen":"2026-02-17T11:09:06.763188Z","times_seen":683,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":108,"dns":54,"connect":21,"send":0,"wait":45,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"67a120c980.8f17d89ec7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 02:32:13 GMT","end":"Thu, 12 Mar 2026 02:32:12 GMT"},"fingerprint":{"sha1":"5D:9C:D7:15:7D:69:8C:F7:40:12:0E:10:F1:FF:68:59:A6:F6:E2:38","sha256":"7D:0B:09:36:73:70:FE:A2:CB:1A:80:52:3B:1A:C0:0D:64:38:DA:DC:AB:9E:7A:95:F4:55:F2:6A:A4:F0:A8:FE"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Wed, 04 Feb 2026 19:17:03 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onclckinp.com/keywords","fqdn":"onclckinp.com","domain":"onclckinp.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://satincrave.com/portstandart.php?id=3","date":"2026-02-04T19:12:07.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: onclckinp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://satincrave.com/\r\nOrigin: https://satincrave.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:07 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/uploads/2025/07/1-2.jpg","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/1-2.jpg HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 04 Feb 2026 09:38:51 GMT\r\netag: \"7c17-686fa750-3c0c98;;;\"\r\nlast-modified: Thu, 10 Jul 2025 11:43:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31767\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CgqYu8NYAN1RbYdJGkFVGwnzok2dAQwjVFSHFL7ERQs0QbLq7VLSuXNsuxhUO4NJ%2FEqPTxS%2FPaHkS588AmbDQQBUJJR4fkTLPz%2BwwW5D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a34aef676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31767,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x162, components 3","md5":"391769a3055d7c8d8b15d6ec554da128","sha1":"1fb6efec036466fe0a4b00de509ba35a95d09eb5","sha256":"b6d5004a88d97aaecf0bf6c327c5f868cf3b117f27b61b3f4792c84b616cf4b2","sha512":"15abf485f06682ea90fdc680b745c20b9b3980acf7ed7e50be7147d521260b2b373df4ea14e771530bfd8692dc3d9ad96db909a89ae2cf007c044ecc90d83bb0","ssdeep":"384:buyfl2BSRUPISSH0yy9RQMA1jEeYgNGkkbLKkt7Kc6ZQVaEmFUH6B1ip92s/TeNK:buWoBSmPINBmxy5waVmH64/TaXdMERM","tlshash":"ace2f1529b85d6ebb9f205b5cd574c8fcfd982814602cba67fbe12343f083284316a89","first_seen":"2026-02-04T19:12:33.615832Z","last_seen":"2026-02-04T19:12:33.615832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flepquix.com/in/dip?event_id=85397797-a086-431d-9a73-c9599acb7221","fqdn":"flepquix.com","domain":"flepquix.com","tld":"com"},"ip":{"addr":"178.63.5.120","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /in/dip?event_id=85397797-a086-431d-9a73-c9599acb7221 HTTP/1.1\r\nHost: flepquix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":68,"dns":4,"connect":24,"send":0,"wait":31,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/iframe-scripts.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:05.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.cabnnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 04:32:05 GMT","end":"Tue, 10 Mar 2026 04:32:04 GMT"},"fingerprint":{"sha1":"FB:8C:65:CE:0B:5E:7F:2E:C6:58:EB:3B:D2:6E:8E:7A:B7:B7:51:EF","sha256":"FB:93:6B:07:DC:2C:B3:38:60:36:C5:FC:E7:C7:DE:74:5A:F6:0E:4E:92:A5:72:F1:03:9F:FE:61:7A:ED:04:96"}}},"request":{"raw":"GET /banner-admanager/iframe-scripts.js HTTP/1.1\r\nHost: js.cabnnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 30 Jan 2026 09:38:08 GMT\r\netag: W/\"697c7c00-178\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 04 Feb 2026 19:17:05 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (376), with no line terminators","md5":"89433f6864b61ee5dc3398a327f35069","sha1":"14d840847e8154f6ec2931a9d90126ed5c91fdb9","sha256":"587fc8a495b9e66cfaa0092ac5c3ebe3aeff08fee83fab4be94dc4ae09c982cb","sha512":"96863711edb791ffefa6188b2077dc1db9e270a7e27874140740a0820481ade585e20765f42f6df33afb77e5b1d20db281bfa9541f2be87cf97481de257cbc6a","ssdeep":"","tlshash":"dfe0682821a067bc006f266ef29a5aacf93801a6704a040884b1488d7c3ed76a6f4f24","first_seen":"2025-07-25T01:42:49.250588Z","last_seen":"2026-04-20T04:33:38.795876Z","times_seen":1606,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"satincrave.com/a2kontrol.php?id=34324","fqdn":"satincrave.com","domain":"satincrave.com","tld":"com"},"ip":{"addr":"172.67.133.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://senzoriq.com/out.php?id=newrtb\u0026pos=270\u0026siteid=1456339\u0026subid=363145965\u0026domain=mastitales.com","date":"2026-02-04T19:12:07.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"satincrave.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 20:07:21 GMT","end":"Wed, 15 Apr 2026 21:05:58 GMT"},"fingerprint":{"sha1":"E8:58:FE:69:52:57:10:9B:A4:D6:F8:68:5E:39:BA:48:A2:FF:00:AA","sha256":"B1:07:29:7C:B8:0F:9A:70:B9:C3:DD:4E:55:F5:22:41:ED:4F:9D:75:CA:C2:20:E3:84:E1:AB:7D:9E:CB:3B:A2"}}},"request":{"raw":"GET /a2kontrol.php?id=34324 HTTP/1.1\r\nHost: satincrave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://senzoriq.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33, PleskLin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cPekaYxFYOqUYIxkkHKbfq6gAnK847WsjY0jDTf0tXfuNdh2g2zup5S%2ByoeERo28UuPBLXE8xKdDGIFsM4JA1%2Br8gIx5ZmHit%2FoaRGF\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c8c7a4c8a741ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":531,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"775f8bbbdb3c585fe06f9c5fb3a7bed2","sha1":"9cff50106ed225ab123315877cd23c15c9ff244c","sha256":"121846a1d94ee35d57393e794607edbb4171c12aff1842c723608bf3d72b6e97","sha512":"c8754afaa232a9dcfed25b64c4cf6f0373f56caf1d3c9521884d06e0ef363f40fe0fcb84c9d40dc225c36ee6e1fe18f2dbc8486d4b50b7d59201579ab9b3e5a0","ssdeep":"","tlshash":"2cf0506b6c7e2029591580ba217ba55c3156300b51b7c3b87ca9a6821fe477e10897ec","first_seen":"2026-01-16T03:09:51.442802Z","last_seen":"2026-04-19T06:57:16.82568Z","times_seen":272,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":110,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"satincrave.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drimquop.com/in/dip?event_id=c1743909-92a9-4e1a-8d36-0dfe7b4a846b","fqdn":"drimquop.com","domain":"drimquop.com","tld":"com"},"ip":{"addr":"178.63.5.120","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://satincrave.com/portstandart.php?id=3","date":"2026-02-04T19:12:08.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /in/dip?event_id=c1743909-92a9-4e1a-8d36-0dfe7b4a846b HTTP/1.1\r\nHost: drimquop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://satincrave.com/\r\nOrigin: https://satincrave.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:08 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:02.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"4fce-686f9768-3c5b43;br\"\r\nlast-modified: Thu, 10 Jul 2025 10:35:20 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4876\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Feb 2026 19:12:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdf8ZCOjE3WCl%2BDwtmZhGBl3nqAdiVVzN%2FB5mnSdEdZZ6Cc3bEIEnlBkLHszGd%2F6r5hit0n12QN2i3e5wlm7nb9XWf1f4BpKvnUOniDq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a312e4e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20430,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20018)","md5":"4cd5ea35543390c5fc4e9def651ab721","sha1":"d360aa74dff157fcefda69336ecf420f04940f98","sha256":"9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17","sha512":"d666a51729862abb8d23b0cca5d5ade738c08df2a23fbabb55be95f2a1fbef60255bda850cb36457e70bb2706067f9cee620169c9166f5e9f29a48af470d4fab","ssdeep":"384:lrKvSC3FheMYNzktJlro8aVfPxodAuyalYleh++PFoAS4TSPE9MfA+0UUTK7:gqC36LkJcjPxodAl8DiPE9/+0UKK7","tlshash":"da9294c5bb053d53e9ff12f64157170ba2368eed050e10289839efc629314b1a6efb69","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-04-20T07:09:09.639119Z","times_seen":4694,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 02:32:13 GMT","end":"Thu, 12 Mar 2026 02:32:12 GMT"},"fingerprint":{"sha1":"5D:9C:D7:15:7D:69:8C:F7:40:12:0E:10:F1:FF:68:59:A6:F6:E2:38","sha256":"7D:0B:09:36:73:70:FE:A2:CB:1A:80:52:3B:1A:C0:0D:64:38:DA:DC:AB:9E:7A:95:F4:55:F2:6A:A4:F0:A8:FE"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Wed, 04 Feb 2026 19:17:03 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":61,"dns":13,"connect":21,"send":0,"wait":21,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=348265","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"POST /fp?tag_id=348265 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1971\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nCookie: id=1519219650855402052\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1971,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":222},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":189},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":1},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":0},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":27},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:05 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://mastitales.com\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-20T07:33:27.00856Z","times_seen":6298,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 327\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":327,"data":"{\"ad_tags\":\"Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!\",\"page\":\"https%3A//mastitales.com/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: application/json\r\ncontent-length: 32\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c685bb13085201bd0721a32775af3187","sha1":"91397244ea42407478b65668d5fe4195979900d0","sha256":"e4d769350a2dd615800efceaaade3999e331084bcbc3ed930ee71af566028b56","sha512":"64b06c3407b75c72577b4db23d62942a5a3bdd26706bfc31e24d6e702b9e5fff081728612a5f1c2262c678c2c99007ca694dd021b7ee1e420114ac85418efd49","ssdeep":"","tlshash":"3a80000c328e0a8a0c88b80032208b02288aa00a0808e8a823e208a88ba0a00b08c88c","first_seen":"2025-07-19T06:57:16.822929Z","last_seen":"2026-04-19T15:37:01.367749Z","times_seen":13,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/iframe-scripts.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:05.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.cabnnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 04:32:05 GMT","end":"Tue, 10 Mar 2026 04:32:04 GMT"},"fingerprint":{"sha1":"FB:8C:65:CE:0B:5E:7F:2E:C6:58:EB:3B:D2:6E:8E:7A:B7:B7:51:EF","sha256":"FB:93:6B:07:DC:2C:B3:38:60:36:C5:FC:E7:C7:DE:74:5A:F6:0E:4E:92:A5:72:F1:03:9F:FE:61:7A:ED:04:96"}}},"request":{"raw":"GET /banner-admanager/iframe-scripts.js HTTP/1.1\r\nHost: js.cabnnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 30 Jan 2026 09:38:08 GMT\r\netag: W/\"697c7c00-178\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 04 Feb 2026 19:17:05 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (376), with no line terminators","md5":"89433f6864b61ee5dc3398a327f35069","sha1":"14d840847e8154f6ec2931a9d90126ed5c91fdb9","sha256":"587fc8a495b9e66cfaa0092ac5c3ebe3aeff08fee83fab4be94dc4ae09c982cb","sha512":"96863711edb791ffefa6188b2077dc1db9e270a7e27874140740a0820481ade585e20765f42f6df33afb77e5b1d20db281bfa9541f2be87cf97481de257cbc6a","ssdeep":"","tlshash":"dfe0682821a067bc006f266ef29a5aacf93801a6704a040884b1488d7c3ed76a6f4f24","first_seen":"2025-07-25T01:42:49.250588Z","last_seen":"2026-04-20T04:33:38.795876Z","times_seen":1606,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"the-tukif.cfd/","fqdn":"the-tukif.cfd","domain":"the-tukif.cfd","tld":"cfd"},"ip":{"addr":"192.64.119.216","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T19:12:01.888Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: the-tukif.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Wed, 04 Feb 2026 19:12:02 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 46\r\nConnection: keep-alive\r\nLocation: https://mastitales.com/\r\nX-Served-By: Namecheap URL Forward\r\nServer: namecheap-nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207740,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":161,"dns":0,"connect":160,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-04T19:12:11Z","timestamp":1770232331,"ip_dst":{"addr":"172.18.0.20","port":59064,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"192.64.119.216","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2026-02-04T19:12:11.651977+0000\",\"flow_id\":300139193404282,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"192.64.119.216\",\"src_port\":80,\"dest_ip\":\"172.18.0.20\",\"dest_port\":59064,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"the-tukif.cfd\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://mastitales.com/\",\"length\":46},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":46,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":568,\"bytes_toclient\":505,\"start\":\"2026-02-04T19:12:01.166778+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-04T19:12:12Z","timestamp":1770232332,"ip_dst":{"addr":"172.18.0.20","port":59076,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"192.64.119.216","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2026-02-04T19:12:12.371758+0000\",\"flow_id\":2177477988420666,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"192.64.119.216\",\"src_port\":80,\"dest_ip\":\"172.18.0.20\",\"dest_port\":59076,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"the-tukif.cfd\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://mastitales.com/\",\"length\":46},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":46,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":688,\"bytes_toclient\":505,\"start\":\"2026-02-04T19:12:01.887866+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mastitales.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0","fqdn":"mastitales.com","domain":"mastitales.com","tld":"com"},"ip":{"addr":"104.21.35.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:02.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastitales.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:38:55 GMT","end":"Sun, 29 Mar 2026 22:36:40 GMT"},"fingerprint":{"sha1":"0D:21:D2:D8:1E:8C:07:B3:78:A9:E6:89:B9:CF:14:C1:79:8E:68:B5","sha256":"61:F9:0D:2E:42:EF:8A:92:A9:04:DE:32:4B:1B:07:C3:34:2B:69:77:57:85:8F:69:35:FC:4D:E4:3E:C3:81:C2"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: mastitales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 04 Nov 2025 02:05:12 GMT\r\netag: \"7918-686f9768-3c5b4b;br\"\r\nlast-modified: Thu, 10 Jul 2025 10:35:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 6646\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Feb 2026 19:12:02 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASBfHImcWU%2FZstDGfjWHoGGU9%2B7kq6drJTM5Ea1zIgEciIY7o20bLu9NPX99IzNpqvG26zIY7teAxJskJp%2BrkEaCH2ozFv%2Fb1p8eCr3w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8c7a311e4676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-20T08:02:17.491826Z","times_seen":247069,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"67a120c980.8f17d89ec7.com/2a425941d95f47f0ed843d0c6088e9e6/348265?version_name=d\u0026domain=mastitales.com","fqdn":"67a120c980.8f17d89ec7.com","domain":"8f17d89ec7.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:03.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"67a120c980.8f17d89ec7.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 02:14:52 GMT","end":"Sat, 02 May 2026 02:14:51 GMT"},"fingerprint":{"sha1":"5C:93:CD:94:D9:C4:6F:79:F9:EA:CE:CB:13:5E:1E:EC:2E:D4:E0:70","sha256":"8C:CB:31:90:63:80:89:76:B5:0D:85:2C:E5:1E:82:FA:43:7B:BA:E9:4E:52:F4:EF:4F:83:FB:D4:90:09:30:D9"}}},"request":{"raw":"GET /2a425941d95f47f0ed843d0c6088e9e6/348265?version_name=d\u0026domain=mastitales.com HTTP/1.1\r\nHost: 67a120c980.8f17d89ec7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 19:12:04 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.18.0\r\ncache-control: max-age=300\r\nexpires: Wed, 04 Feb 2026 19:17:04 GMT\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dc4fb5d8b51171b5c3783ece3fa525ba","sha1":"23f878843bc355edccd24d54e7262bbc1f6cc6b0","sha256":"6acfff6aa1e262796ae4d85dcb78ec10163777a96a3a03946f17f169c43aa965","sha512":"d6d5c804c08b0c695bdd70be03d0abdcf09bae3b4c90a68053c500244035f62df0b7c72a5ff0658189dea1bf7d2d90a43f99920797c0082672b85077740d22b6","ssdeep":"","tlshash":"c8210fbcdf5844fb00d40a89e684750842873187f0d8b599e5bc8eb8239f7e61b6721f","first_seen":"2026-02-04T19:12:33.560215Z","last_seen":"2026-02-04T19:12:33.560215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"67a120c980.8f17d89ec7.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=348269","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"POST /fp?tag_id=348269 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1971\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1971,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":425},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":265},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":1},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":1},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":36},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Wed, 04 Feb 2026 19:12:04 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://mastitales.com\r\nSet-Cookie: id=776729321285824242; Expires=Thu, 04 Feb 2027 19:12:04 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-20T07:33:27.00856Z","times_seen":6298,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mastitales.com/\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btds.zog.link/in/912/?sid=1456340\u0026source=2033437665\u0026idzone=0\u0026w=300\u0026h=250\u0026mo=\u0026ve=\u0026site_id=1456340\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026ad_tags=Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!,\u0026spot_id=1456340\u0026p=https%3A%2F%2Fmastitales.com%2F\u0026katds_labels=\u0026btype=4\u0026score=1\u0026bf=0\u0026dr=mastitales.com","fqdn":"btds.zog.link","domain":"zog.link","tld":"link"},"ip":{"addr":"62.122.168.42","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2026-02-04T19:12:05.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"btds.zog.link","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 18:03:31 GMT","end":"Fri, 01 May 2026 18:03:30 GMT"},"fingerprint":{"sha1":"99:1B:46:76:2C:B9:5E:29:24:43:91:EB:8F:45:62:B0:E1:5C:C7:ED","sha256":"6D:3C:AC:A9:39:73:34:30:5A:85:AE:64:21:1E:2F:98:14:96:96:07:42:F0:83:89:AF:FB:97:98:E6:38:0A:C1"}}},"request":{"raw":"GET /in/912/?sid=1456340\u0026source=2033437665\u0026idzone=0\u0026w=300\u0026h=250\u0026mo=\u0026ve=\u0026site_id=1456340\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026ad_tags=Free%2CXXX%2CPorn%2CVideos%2CWatch%2CNow%2CMasti%2CTales%2CMast%2CTales%2Coffers%2Cexclusive%2CXXX%2CPorn%2CVideos%2Cand%2Cfree%2Cporn%2CMovies%2CInstantly%2Cwatch%2Cover%2C10%2Cmillion%2Chardcore%2Csex%2Cmovies%2Con%2Cpremium%2Cporntube%2Cfrom%2Cprofessionals%2Cand%2Camateurs!,\u0026spot_id=1456340\u0026p=https%3A%2F%2Fmastitales.com%2F\u0026katds_labels=\u0026btype=4\u0026score=1\u0026bf=0\u0026dr=mastitales.com HTTP/1.1\r\nHost: btds.zog.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.20.1\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://cdn.60ah.com/b/banner_dev.html?source=2033437665\u0026w=300\u0026h=250\u0026id=1456340\r\npragma: no-cache\r\nvary: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nset-cookie: 912.0=1; expires=Thu, 05 Feb 2026 19:12:05 GMT; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2606,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":84,"dns":6,"connect":23,"send":0,"wait":23,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flepquix.com/in/dip?event_id=85397797-a086-431d-9a73-c9599acb7221","fqdn":"flepquix.com","domain":"flepquix.com","tld":"com"},"ip":{"addr":"178.63.5.120","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mastitales.com/","date":"2026-02-04T19:12:05.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 01:51:50 GMT","end":"Mon, 09 Mar 2026 01:51:49 GMT"},"fingerprint":{"sha1":"15:BF:4B:65:46:08:22:8D:E9:38:46:3E:D4:56:B1:02:94:D7:17:A4","sha256":"84:24:50:A3:0F:03:EA:54:61:3B:C5:4D:33:7B:1D:61:84:80:E3:A6:B0:1F:90:D1:38:32:01:C5:35:7B:D2:F6"}}},"request":{"raw":"GET /in/dip?event_id=85397797-a086-431d-9a73-c9599acb7221 HTTP/1.1\r\nHost: flepquix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mastitales.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mastitales.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Wed, 04 Feb 2026 19:12:05 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T07:59:57.054277Z","times_seen":13967079,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":1,"connect":41,"send":0,"wait":33,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}