{"report_id":"dedb9b8f-74f3-4201-8d8a-3afa99fdf826","version":6,"status":"done","tags":[],"date":"2026-04-18T15:16:55Z","url":{"schema":"http","addr":"vipleaks.xyz","fqdn":"vipleaks.xyz","domain":"vipleaks.xyz","tld":"xyz"},"ip":{"addr":"185.27.134.33","port":0,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"vipleaks.xyz/?i=1","fqdn":"vipleaks.xyz","domain":"vipleaks.xyz","tld":"xyz"},"title":"Content Fans - Exclusive VIP Content","dom":{"size":88487,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2507)","md5":"903c804dd6083bac71def3d4eda0accc","sha1":"f4410d8cca3de6bec4be35c07bd1b4418e7fe254","sha256":"f2952f2a297cdcb2dd5a7486929472d830c7e5abb162ef321de9bdf2d819a06d","sha512":"405e9b06ff2da37f3d8f6d1c6b6d3c194fa4b1a74fb83aba490d423ce1f564aef6f5bfc4d44691ff4e28a9b0224d648ca5ab041bf1df4b5c2eb74c49cb29f71a","ssdeep":"768:4gYb/ZAJpFAA5kw9Sm6htLBdkphuKeTcQhbofz2tlD/ie+FFD8r:tYb/ZATBew9SmYmqhPtB/ie6c","tlshash":"9083a56295b30532216390d92ba7560a32b4d203c906c51cbfad53e84fdeddee9b3b5c","dom_hash":"domhash96c1435b36ce90448ab9df22ec513715","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vipleaks.xyz","fqdn":"vipleaks.xyz","domain":"vipleaks.xyz","tld":"xyz"},"ip":{"addr":"185.27.134.33","port":0,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-23T15:16:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"content-fans.com","ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":20,"received_data":3423517,"sent_data":8964,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"vipleaks.xyz","ip":{"addr":"185.27.134.33","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-11-16","domain_rank":0,"first_seen":"2026-04-18T15:16:56.808695Z","last_seen":"2026-04-18T15:16:56.808695Z","alert_count":0,"request_count":3,"received_data":94818,"sent_data":1453,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":4,"received_data":197468,"sent_data":2208,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vipleaks.xyz/","fqdn":"vipleaks.xyz","domain":"vipleaks.xyz","tld":"xyz"},"ip":{"addr":"185.27.134.33","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"f94d3606849216dbaa48c22979cca785","sha1":"3863f6e5fd9f6dd3836efc4fb8d35eb3cb65e972","sha256":"a594b87fc18d5d1a98ff1996c3cba74f958a335b27a080161f1328e8bcab23e5","sha512":"d8d9937b86354fa8d1dfabfa3fe1e798261f4c25f33bf5d240dee2860e5d2c3ea0eed961933a46639485019535a18f348342499a3ebe24061d1f21ef339bbc59","ssdeep":"","tlshash":"a6f0e178e171b0d94bc150d6097b954f90225ad2f542c4fbc04252606996ded0a9ae2f","size":600,"data":"","first_seen":"2026-04-18T15:17:02.110175Z","last_seen":"2026-04-18T15:24:46.047305Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vipleaks.xyz/aes.js","fqdn":"vipleaks.xyz","domain":"vipleaks.xyz","tld":"xyz"},"ip":{"addr":"185.27.134.33","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc66e046447092c606f2587837f96874","sha1":"fcf354a8044f494ee1f9fe868dde3f570f50e593","sha256":"5069425b121346b36f730910d05402d50920fc2178b01e0c878b71af4ef1eb96","sha512":"51cd149b2876e90621afc579fb172e253548a851d4c202181e1faba812f5beb1ae9ccf9f153137f60c569e05a79dcb272176e0126eceac54316208d2699a689f","ssdeep":"192:4hsoEj776Bn/tnHcgaollys/6+EgH3JLg7oLu0MyMVu:i50/3xoGs/jE839g2FB1","tlshash":"355200c203894a7cf2c92ed68c2f605620f3e54a3d251249efb399dbbc77d895075a36","size":13733,"data":"","first_seen":"2023-10-15T19:29:47Z","last_seen":"2026-04-22T10:42:04.007532Z","times_seen":7015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vipleaks.xyz/?i=1","fqdn":"vipleaks.xyz","domain":"vipleaks.xyz","tld":"xyz"},"ip":{"addr":"185.27.134.33","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef7e0dbb9d842662595079a345c79fe3","sha1":"eb59dbfe0b64594cc1b468e003e4eaab1ccec863","sha256":"2bab7f428d1303f9f4e568bbc87866891efc3f5495e7eeaa7b26183f9f583c41","sha512":"41c0909c50d53b3ab3909f3e2bc6a36af266a364d75eaf80e850dfac4572e1fd1d885b12b677f06294153065baf55d963a1a23b9b74d57ad8cd4e100fb3b51c8","ssdeep":"384:IwYOhuKeTcJix/yiwz0oLFJztMtF49oDRJie+nFFUwW4+Mf:/phuKeTcQhbofz2tlD/ie+FFD8+","tlshash":"35d2b61661b7123146b3613c1bcba10473b950436a44dd78bf4c9b882f8eea995f7bec","size":28857,"data":"","first_seen":"2026-04-18T15:17:02.111003Z","last_seen":"2026-04-18T15:24:46.048096Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"content-fans.com/assets/star-11-BI7mpj9F.jpg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/star-11-BI7mpj9F.jpg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 64512\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-fc00\"\r\nExpires: Sun, 18 Apr 2027 15:16:34 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":64512,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 532x640, components 3","md5":"a9ea90d82dc1ed87d03780311680521f","sha1":"5732ee1b5c0b9a8ec520f03f15157ea0fea3fe98","sha256":"0e15fe4d7245610fdcd231feff4788eb5bee8c4cb173a6694fe2f7b890cf3c70","sha512":"8d467c05a213c63f6eb1387d086ec470e233e03520262eb59cb6d8c7b714494786701192b852b1f2034aba36a8d2f9dab6a1bee4c6e4a6c7dfcfa1b0a9f95755","ssdeep":"768:nzJEmZ9ndEcHf0Ah94Q6W9U8KkE/5DNJ4CvfmTkuK7yGQwBU7Eq82c1/6/lgTM7m:9EIjV/kgExBvfkgQpdE6Wh5qZz8+ld6B","tlshash":"7b5302a60541ec0cfca02d973034de2776f5f25a6da752f6a6c436a8f0d24af6f94831","first_seen":"2026-04-18T15:17:02.08847Z","last_seen":"2026-04-18T15:24:46.039205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":238,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vipleaks.xyz/?i=1","fqdn":"vipleaks.xyz","domain":"vipleaks.xyz","tld":"xyz"},"ip":{"addr":"185.27.134.33","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T15:16:34.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vipleaks.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 19:49:05 GMT","end":"Thu, 16 Jul 2026 19:49:04 GMT"},"fingerprint":{"sha1":"45:32:DF:73:17:D1:D9:81:D8:AB:63:C3:34:26:0D:DB:17:AB:E6:1D","sha256":"3F:56:A6:E5:6A:CF:2C:F0:20:AB:FF:E9:16:FC:98:22:9E:14:2A:FA:9C:D6:CB:00:0D:4B:45:03:31:79:37:ED"}}},"request":{"raw":"GET /?i=1 HTTP/1.1\r\nHost: vipleaks.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nCookie: __test=5edbe4a57186ce589f9477a8d231b582\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 79428\r\nConnection: keep-alive\r\nLast-Modified: Fri, 17 Apr 2026 23:01:22 GMT\r\nETag: \"13644-64fafed77fc9d\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000, public, proxy-revalidate\r\nExpires: Mon, 18 May 2026 15:16:34 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79428,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"24929cc49473c06d355280ff9090ac77","sha1":"2ed24e51d9214284758cd23364d7fba0549131b1","sha256":"180b90ed13b6e3a740b72e8bd22601e4653bf399d16e00331e3e5ebe2dd1ad14","sha512":"39cfd8add5e93088f7a3b7dc02206306d8cabc50303a11b8341336791d400c14a5362cb7433ca18a54ec96fd21379b85f04d77aa56322d6c4e38db0f1cdd75b1","ssdeep":"768:fgYb/ZAJpFAA5kwfS5lu29lzTphuKeTcQhbofz2tlD/ie+FFD8v:YYb/ZATBewfS5I8qhPtB/ie6c","tlshash":"0a73a66292f30572253390a92fd7960a33b0d103c905d9187f9d63d84f8aedae9e7b5c","first_seen":"2026-04-18T15:17:02.089706Z","last_seen":"2026-04-18T15:24:46.040953Z","times_seen":2,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/star-8-ioUM35pN.jpg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/star-8-ioUM35pN.jpg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 52229\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-cc05\"\r\nExpires: Sun, 18 Apr 2027 15:16:34 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":52229,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 640x635, components 3","md5":"e52e0eef5df28ca55deac604455f3943","sha1":"b860c24a6609327bbd5a6e31f293eddc1e80ca11","sha256":"6b924360b3cad632dbaad4f10d28e9be5ab86e8434479ab7c50813c6b0fe3286","sha512":"8bbaed106cb9fc80b54daa9f0138fa3419e0ec269bb7333adf78d1d9ef6d06a2172123d2cd6bb342408097d08781ce2ef32376fc3340573d273fc137c27a8144","ssdeep":"1536:n7hh7IOyt1GBMvbi9kmd1vUNQ0kCfYHAUI5t:7h6OaSMvOd1ALDf9t","tlshash":"0833f1cb4faf13d4e60058b8404fa96762bfee910fa75453f2d96f3d4e8830161c1a99","first_seen":"2026-04-18T15:17:02.090893Z","last_seen":"2026-04-18T15:24:46.035059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":188,"dns":0,"connect":17,"send":0,"wait":35,"receive":19,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/leak-7-Bd5G8pnO.webp","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/leak-7-Bd5G8pnO.webp HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 471122\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-73052\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":471122,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ad72beacd4a84ff2e37464e88f58ceb","sha1":"769aa7134936cb9e3499fcee503282f6f1e8590d","sha256":"921bde801b86c749aaba2acaf88c94b7050d78d61d561b2f42220ab2ae88f3f4","sha512":"555ee1b1df3ebf73035ab89d87488e686678919ec04b9abd324e120171e8a7997162855afc3fe676193e9b31a85d223167cbc3671741fe0d2730162c44408a5b","ssdeep":"12288:BwpTWxmrkkaIlGq+6CVsoCGQ+cy6/6LADL0:Bma4rPayGq58jChy86LADL0","tlshash":"82a42389248974dbca5cc2bf405c228f7a0cd77d673397828c50ba5f6eb498a7d26f50","first_seen":"2026-04-18T15:17:02.092018Z","last_seen":"2026-04-18T15:24:46.043856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/leak-5-VewLTa4x.webp","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/leak-5-VewLTa4x.webp HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 237644\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-3a04c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":237644,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c7dbb9a1b2a738d8315b55ab7172f27b","sha1":"5f835e2ada0180a55a3594512649a9a4c130ec62","sha256":"34970fb4cd150378aec056acdf95a979fbc4ccc06b35d24333bc179830b1de07","sha512":"01a40cdb43fe74fcac1899fba741c7fcd9674e7174cdefd9b22c00c72b9b7642d8ba4cbc002102cf4a3da48b0bf582963712f89e84df7a89e67dd27399bd04ad","ssdeep":"6144:s2iFudCyID72Ur4L/mDJ0TpJrnKgENJUHc:QQdCyID7ximiTpJrnKN28","tlshash":"fd340209e1a87973dc01ba37221f858eb74f837a5a7b6513c1a230631f94ad5fd13a35","first_seen":"2026-04-18T15:17:02.093162Z","last_seen":"2026-04-18T15:24:46.041479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/seo-logo.jpeg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:35.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /seo-logo.jpeg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:35 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 14387\r\nLast-Modified: Wed, 08 Apr 2026 12:44:44 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbc-3833\"\r\nExpires: Sun, 18 Apr 2027 15:16:35 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":14387,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 738x180, components 3","md5":"08d72255df26b5cf8df3a16661d61121","sha1":"e4fc171d4e34aade9ce8b342f54f8b35de132484","sha256":"fa2751c4c4fe058bee05cc1694f4f403478b8e4387d388c6a3ecbd58e70ecdfc","sha512":"78ee5cb1122fe5c82ec1c82a05bac32233e8ca3c1da0c05be86ee85cf23f79ae57c3fa21369c2e217053d9c4c76dd5add1ec376c1845bf5ee5d6b6667b2a3036","ssdeep":"192:Is1hMH4TlfHrobjTEjyVd9G/MUSDa3fZxc14aMEDAzwcxVdkPmdXYTjM2jrNBTsr:TvLibjWyVa/vxc1FnDAXVv0Yk3TszBN","tlshash":"dd526d3ba6188b63f15497f2ff430e157b475228b9b135bef6832e9b5a04a40095826e","first_seen":"2026-04-18T15:17:02.094095Z","last_seen":"2026-04-18T15:24:46.039768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/seo-logo.jpeg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:35.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /seo-logo.jpeg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:35 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 14387\r\nLast-Modified: Wed, 08 Apr 2026 12:44:44 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbc-3833\"\r\nExpires: Sun, 18 Apr 2027 15:16:35 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":14387,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 738x180, components 3","md5":"08d72255df26b5cf8df3a16661d61121","sha1":"e4fc171d4e34aade9ce8b342f54f8b35de132484","sha256":"fa2751c4c4fe058bee05cc1694f4f403478b8e4387d388c6a3ecbd58e70ecdfc","sha512":"78ee5cb1122fe5c82ec1c82a05bac32233e8ca3c1da0c05be86ee85cf23f79ae57c3fa21369c2e217053d9c4c76dd5add1ec376c1845bf5ee5d6b6667b2a3036","ssdeep":"192:Is1hMH4TlfHrobjTEjyVd9G/MUSDa3fZxc14aMEDAzwcxVdkPmdXYTjM2jrNBTsr:TvLibjWyVa/vxc1FnDAXVv0Yk3TszBN","tlshash":"dd526d3ba6188b63f15497f2ff430e157b475228b9b135bef6832e9b5a04a40095826e","first_seen":"2026-04-18T15:17:02.094095Z","last_seen":"2026-04-18T15:24:46.039768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vipleaks.xyz/aes.js","fqdn":"vipleaks.xyz","domain":"vipleaks.xyz","tld":"xyz"},"ip":{"addr":"185.27.134.33","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vipleaks.xyz/","date":"2026-04-18T15:16:34.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vipleaks.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 19:49:05 GMT","end":"Thu, 16 Jul 2026 19:49:04 GMT"},"fingerprint":{"sha1":"45:32:DF:73:17:D1:D9:81:D8:AB:63:C3:34:26:0D:DB:17:AB:E6:1D","sha256":"3F:56:A6:E5:6A:CF:2C:F0:20:AB:FF:E9:16:FC:98:22:9E:14:2A:FA:9C:D6:CB:00:0D:4B:45:03:31:79:37:ED"}}},"request":{"raw":"GET /aes.js HTTP/1.1\r\nHost: vipleaks.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 13733\r\nLast-Modified: Mon, 30 Oct 2023 22:35:04 GMT\r\nConnection: keep-alive\r\nETag: \"65402f98-35a5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13733,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13733), with no line terminators","md5":"fc66e046447092c606f2587837f96874","sha1":"fcf354a8044f494ee1f9fe868dde3f570f50e593","sha256":"5069425b121346b36f730910d05402d50920fc2178b01e0c878b71af4ef1eb96","sha512":"51cd149b2876e90621afc579fb172e253548a851d4c202181e1faba812f5beb1ae9ccf9f153137f60c569e05a79dcb272176e0126eceac54316208d2699a689f","ssdeep":"192:4hsoEj776Bn/tnHcgaollys/6+EgH3JLg7oLu0MyMVu:i50/3xoGs/jE839g2FB1","tlshash":"355200c203894a7cf2c92ed68c2f605620f3e54a3d251249efb399dbbc77d895075a36","first_seen":"2023-10-15T19:29:47Z","last_seen":"2026-04-22T10:42:04.007532Z","times_seen":7015,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/star-7-PqP03Ne_.jpg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/star-7-PqP03Ne_.jpg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 63092\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-f674\"\r\nExpires: Sun, 18 Apr 2027 15:16:34 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":63092,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 532x640, components 3","md5":"8b4b0fecafd262c1c5da007d39ed60c6","sha1":"1c12880b5470616e4b41b1bbc3fd77d299148a55","sha256":"a7d056ffb3d07f0597f299c6f3fa4fab76989f637d81c4c9ea8eb63146f526aa","sha512":"9924b6a4ff51f155a79878020b7a2d5fd9847f07c26b37ebc088beda098769f0b7e12f049b739db0760ec2a4911f2567f5a54a58eb175a0ffaa098d0376102a6","ssdeep":"1536:8CQ5L7N1WNiA0mnivjDWwiysT0jISSMEbRYKWVIV6:uN1WNi8SCvy4hMBFI6","tlshash":"b553010a98f9e6993152cfb416661e48fbb46fc15352a423f6cdaf801d0b77a6ccc8c5","first_seen":"2026-04-18T15:17:02.095541Z","last_seen":"2026-04-18T15:24:46.032978Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":263,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vipleaks.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Apr 2026 22:33:37 GMT\r\nexpires: Thu, 15 Apr 2027 22:33:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 232977\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-22T11:03:16.441067Z","times_seen":152001,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":119,"dns":0,"connect":7,"send":0,"wait":22,"receive":6,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vipleaks.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Apr 2026 22:33:37 GMT\r\nexpires: Thu, 15 Apr 2027 22:33:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 232977\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-22T11:03:16.441067Z","times_seen":152001,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":117,"dns":0,"connect":8,"send":0,"wait":29,"receive":5,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/star-6-BG0jqe2f.jpg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/star-6-BG0jqe2f.jpg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 102335\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-18fbf\"\r\nExpires: Sun, 18 Apr 2027 15:16:34 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102335,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 562x640, components 3","md5":"353d8b26519e03fb2f5a8533f9bb3c38","sha1":"915161fe68f9f49ccc167f818a4be205c9e2573e","sha256":"3075a29428fd97c41a5c1c40de2ab409521312b811440e30883c3819ce02db6c","sha512":"d7032491c0739a62cbd37b7613807a04c183694881c24e7eac0500ce005de4b34c2a698d61946f74c43b7114b19c4403dc3c85d9780d393441a9cad9ca181cbb","ssdeep":"3072:iMRhVpA2Xrz/N5rNUU/IUCVRayyro0YM4Q7OHklNzb:bNA2//aUrGRalro0YM4Q7scNzb","tlshash":"1ba3024485e5dcd5b3c6017fe8495da781d4e184323837aea64fe6c4a82a7b09f6f409","first_seen":"2026-04-18T15:17:02.096882Z","last_seen":"2026-04-18T15:24:46.04646Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":262,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/star-10-wGUIs9t2.jpg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/star-10-wGUIs9t2.jpg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 124100\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-1e4c4\"\r\nExpires: Sun, 18 Apr 2027 15:16:34 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124100,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 540x640, components 3","md5":"7ff134d2badb29d81f826d5558290af5","sha1":"4cc449703b1c4fb51e979a0f56633eec2d26a8ec","sha256":"c7de1e8b02fe64b518d765e09727a9ce5d232ef2e430c817f3ac85c049a8b75b","sha512":"72756ecabae749a999cee147cfe27df3db5a52ba4ea32a0cd9bc458bcb693748c7662dd5a0d655bb70df86234bded1e3e2bc5ba7d65ff3f372c1fbdaf1c9493e","ssdeep":"3072:GAvstK7T/w+MvxpZB/jj/vhhiF2mv/bFvi/W+rwKnu:7k4SrZB/P/v/O2Q/0/W+pu","tlshash":"dac313bb119d7c19f9fc33315418a71c39cb9b99c1a29fb28c7d05410e8915f9da364e","first_seen":"2026-04-18T15:17:02.097892Z","last_seen":"2026-04-18T15:24:46.038683Z","times_seen":2,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":224,"dns":0,"connect":0,"send":0,"wait":19,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/leak-1-Cfv4LEaX.webp","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/leak-1-Cfv4LEaX.webp HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 351342\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-55c6e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":351342,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d2e693f1cd251e1ed1f967c2da7364fc","sha1":"4e47e6cf706ce8d06d317a9db30c699c2d0e4d69","sha256":"90510b2a6128716385889de3e2a0f81ace76c111d3d7d17ee9c80bf204914622","sha512":"7312f4d655b2ad2f7cc2add85397e729b10f5e05e534c09c7b6966cf91ab8227abd90d53ba2fe0c0eb873178d7633183404bba5242df5bba643d8ed7fd9bd62d","ssdeep":"6144:G/6afAj+WVVAJ9o+CGxWc5NU/AGrQI8TD5nifyyxib9K3dw597QPEWKpj:G/lfAjVc9odGxv5NU/VrQI8/5nimh+dW","tlshash":"1274126ca5e86659c4c3dd3b352843adf30693a7a8ab530ef4e27216bc7a0c53f45d60","first_seen":"2026-04-18T15:17:02.098705Z","last_seen":"2026-04-18T15:24:46.042069Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vipleaks.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Apr 2026 22:33:37 GMT\r\nexpires: Thu, 15 Apr 2027 22:33:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 232977\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-22T11:03:16.441067Z","times_seen":152001,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":144,"dns":0,"connect":26,"send":0,"wait":10,"receive":2,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/leak-9-B8VFjDQQ.webp","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/leak-9-B8VFjDQQ.webp HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 253346\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-3dda2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":253346,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce46ca9a3e5a8c764c7b2cca6b842afe","sha1":"e3c11b21aa002dd49d9fc8a44fe7a6f52b307a49","sha256":"e301f2fb0b47dd779ba8690040e8b518c83b3e2b246d46bbae5a78a1066cd7e9","sha512":"186bdbd42e93b83d896a12d7ededa858a95b43c5f32f60a6e4b266a332200020df0566ef21d6cc021bffe75930fc6b9c7300c145bec2bb184f4266496e2eabd4","ssdeep":"6144:RI39gDqg0kfVlE43F8jsMI2RthCKMUw6k2ue:U9gD10gE418j3sKMUw6oe","tlshash":"7f44128dc5dc3833d891827b2015529ff51fda3e4c8b570214e9781b6c7e1e4af66b98","first_seen":"2026-04-18T15:17:02.099961Z","last_seen":"2026-04-18T15:24:46.036252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/star-2-CU4kuCwY.jpg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/star-2-CU4kuCwY.jpg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 62354\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-f392\"\r\nExpires: Sun, 18 Apr 2027 15:16:34 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":62354,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 522x640, components 3","md5":"722b1695b9c1730c6cf09988e9b31e0b","sha1":"39974f6b3618a89873010295c1b0989dd08b9aea","sha256":"032492cba2aa5f395bd2d854a760dd7e20630ed2f21c163a33a59e23ffbce3bd","sha512":"4c3c71aaf0cdd683c18e9f9d1d9411a28b1fa4b19a832a8c06e3bfc578ad6540a0dd4d84497fa47efa751cc07c4f50de3f2d327308f511ceeb67d0c70825f798","ssdeep":"1536:BUW9Oq/eguEQ+c1K26fd3/t+1c4KuclAa8sr53wsJUQU109m:BUu58FP1Yfd3/wSP+UykU1em","tlshash":"245302db7fa3b443d75005906596498e1cbbce5f8e398ebe34f8bd4f140a365298a203","first_seen":"2026-04-18T15:17:02.101118Z","last_seen":"2026-04-18T15:24:46.045352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":210,"dns":55,"connect":19,"send":0,"wait":34,"receive":19,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/star-3-C4k2SXf0.jpg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/star-3-C4k2SXf0.jpg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 92992\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-16b40\"\r\nExpires: Sun, 18 Apr 2027 15:16:34 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92992,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 536x640, components 3","md5":"0378cbdea9549aefceaea88ad626383c","sha1":"013d1e9277d23cf80fd97cae4ab73abcf3e1328d","sha256":"89474b4d5b440d18e963423701a5a3f2fd72b7b1f33e5585a6f08a138473cbe3","sha512":"4b0380007ea4c273f2683f82395e9bdd520c9538a15719822193e241a1dba6a28916e041b3de8fc8ac856d9007c879396bc219518cb0625afa1a0743e2c44eab","ssdeep":"1536:vKzxL6w+uHd+8YfCbotRVdfhLBp5jdxDEkePfNIaSXy4UbXJMaihgp:vKzaMbb+RV9hLblGfNbE+XJMaihgp","tlshash":"7a93024f0733b0e27261ab479d94346c93d3176725d66c12bf9888bab9481dbcead01f","first_seen":"2026-04-18T15:17:02.102326Z","last_seen":"2026-04-18T15:24:46.042696Z","times_seen":2,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":206,"dns":61,"connect":19,"send":0,"wait":36,"receive":36,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/star-4-CDeMmF44.jpg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/star-4-CDeMmF44.jpg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 109839\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-1ad0f\"\r\nExpires: Sun, 18 Apr 2027 15:16:34 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":109839,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 541x640, components 3","md5":"bc08b30524045730b68d9240c3074cda","sha1":"dc7da51e22be2718f354f01720dabc6d1fd04dd5","sha256":"feeebdaf90c92947ec30140a8d76eb78cf3c0eb88f7affb0516de2ed77d81fbf","sha512":"a7de3ac81939538f904076ccd04701c33af206f3900047c11713030b145b2df2368516e3f0e1c4afee4ef7615b55dbfca826c756ba07471cd279cb2d05452bb7","ssdeep":"3072:JM6d8Fto3JYIezTNDO0uy97G3J0dD4mZKXBdHxeAtXU:J7wGiIefs0uS7G3GD4mZQXdU","tlshash":"0eb302c1f35004e57339b87aa73307adb5c5531371d826bfaacdb06968075a063e772a","first_seen":"2026-04-18T15:17:02.103148Z","last_seen":"2026-04-18T15:24:46.045874Z","times_seen":2,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":204,"dns":63,"connect":19,"send":0,"wait":20,"receive":37,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vipleaks.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Apr 2026 22:33:37 GMT\r\nexpires: Thu, 15 Apr 2027 22:33:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 232977\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-22T11:03:16.441067Z","times_seen":152001,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":114,"dns":0,"connect":9,"send":0,"wait":13,"receive":12,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/leak-2-Ete2H5ki.webp","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/leak-2-Ete2H5ki.webp HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 759368\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-b9648\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":759368,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"609df12a4de81be68cd31fc194fd93e8","sha1":"7f247c05bbbfc51860d6d20f6e794004118c321e","sha256":"8ac1baf524bb76783641b485a89811973ead27365e12971445b37b96c29197b4","sha512":"5be2497a663e2e573c3d049d54ba5624ca6f8975f127fcdcb6b65ccf381589138d576a6f4732cef09114b4d2c9adfcf4b54098bc1a4017115aff05f8698c1d73","ssdeep":"12288:Ev8fL6tuhVoST3tiLze20BXMFcniKMXKMh6E2s4IbyWKCAu0KJfGpa1mESkP:JfWtkVLYLzeNB8Fcn5MH0p9IbeLKJjDP","tlshash":"0af42359009e023ecd8ba63e78c888ee7b1e5fb2de43c135d58730183ec86a55f75a65","first_seen":"2026-04-18T15:17:02.103953Z","last_seen":"2026-04-18T15:24:46.040346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vipleaks.xyz/","fqdn":"vipleaks.xyz","domain":"vipleaks.xyz","tld":"xyz"},"ip":{"addr":"185.27.134.33","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T15:16:33.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vipleaks.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 19:49:05 GMT","end":"Thu, 16 Jul 2026 19:49:04 GMT"},"fingerprint":{"sha1":"45:32:DF:73:17:D1:D9:81:D8:AB:63:C3:34:26:0D:DB:17:AB:E6:1D","sha256":"3F:56:A6:E5:6A:CF:2C:F0:20:AB:FF:E9:16:FC:98:22:9E:14:2A:FA:9C:D6:CB:00:0D:4B:45:03:31:79:37:ED"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vipleaks.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 18 Apr 2026 15:16:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 839\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":839,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (839), with no line terminators","md5":"4ebb2af554bbd4b24b5c0f9bdf71888f","sha1":"089c0aa3ee186763437d4c4724ffef0fdc0b6a89","sha256":"35189b2660217ee3f124e3aea4f4704000ca5ad58fa760e586a3457e463b0566","sha512":"e3e3006980196eedf1fc60af9d8aef05d87de2ffa39ecb9a3b534413b91c7eef40a067eb74286cfadbf4b15d8c3954be4f7f86c3c87e84e6d389fad26ba63575","ssdeep":"","tlshash":"350141b9eca1f0c99bc004c00576c55e6412daa2e501c8ab80c142a46291bdc0d86d3f","first_seen":"2026-04-18T15:17:02.104715Z","last_seen":"2026-04-18T15:24:46.034353Z","times_seen":2,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":195,"dns":124,"connect":31,"send":0,"wait":31,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 18 Apr 2026 15:16:34 GMT\r\ndate: Sat, 18 Apr 2026 15:16:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-04-22T10:45:39.85919Z","times_seen":22137,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":189,"dns":3,"connect":15,"send":0,"wait":33,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/star-5-DCVzaqlD.jpg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/star-5-DCVzaqlD.jpg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 88016\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-157d0\"\r\nExpires: Sun, 18 Apr 2027 15:16:34 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":88016,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 534x640, components 3","md5":"c57ac04a5ad44d5761b766c0345162e3","sha1":"b60f4b0fb8c2e31861f0509863a524b2e20e22e3","sha256":"1261d3b2dd09bc5e7eae6848269cd0c2124b2a5bf076c6e243989a5f89caef38","sha512":"724d6365bcd59161478d5f71cedcee64e841bdd9c61680f2d5687ee319f22be297c6a1c6ec10eb541802aeba1b21bb41816f362da3d5f32a14d8e0809f5141c5","ssdeep":"1536:yTsj6V7cIc7bOUK5uCaYMNPF/R8EGMDOb3TTZH+QwmKwPcI:Vg9KbOUK5Dal1R8EGMDObZwcf","tlshash":"56831247b458f28c776ff234a4368b89ee058d7916f972a589d2328a056f5030cfd235","first_seen":"2026-04-18T15:17:02.106154Z","last_seen":"2026-04-18T15:24:46.038126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/star-12-Byd5enVw.jpg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/star-12-Byd5enVw.jpg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 74736\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-123f0\"\r\nExpires: Sun, 18 Apr 2027 15:16:34 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":74736,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 528x640, components 3","md5":"e0ce54482524d7b25f21e6e9cf8bf122","sha1":"6690217a33e02940665dda99f2c43e29e5d419d0","sha256":"857654f51612b033b8130e5833ba0024f2b534a912ca73cbe3e99c0b0075a089","sha512":"7536f94cd5a91141e4659abf27927a06a01fffc68cf1d59625e48c9deb8f2c6f27f58c64daf62bffb98ce234cd8530a007e9a9554760185398808c1583638998","ssdeep":"1536:HPO37nxIeJLb/1wIdK1KjmnOAuvciKUIBwXFTC2K7BR+/jio:W37xIeNb/cHHIciKWVP/eo","tlshash":"6173021393461489b5c88f7c5d465a9df6e61b0ea31c39cf29fec970cddb42a2834a0b","first_seen":"2026-04-18T15:17:02.106983Z","last_seen":"2026-04-18T15:24:46.0337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":17,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/star-9-Cdn0vgW4.jpg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/star-9-Cdn0vgW4.jpg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 103493\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-19445\"\r\nExpires: Sun, 18 Apr 2027 15:16:34 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103493,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 640x621, components 3","md5":"aa2f7625577f5d5435f364664aee337d","sha1":"c60bde360924e83ba5d7881565fad8b9d610d1d0","sha256":"5c24300b10f8e608498ab1880df3c08ddf12b6f5998549becd1f93b6d5a246ea","sha512":"cc4997fd9f21cdcc5799323bab47d8c49c71d1afc6701828068a4b08e7b839254c176098de3154de2c435a0fc6e9ca1c56d0ec6937d950b8559620ddb3dc8c33","ssdeep":"1536:duNSyEk12+hq55RkjtljEQeMcU/ODJgSogYKJpd4qGTQDWh4a8lRPxKWB+R:duNu+hq550ljEFw/yJB+wWufRPq","tlshash":"05a3122ad8dbd9d57e3abb20496621e686f5cb5f11f12c109ec06f2d942577248f0bf0","first_seen":"2026-04-18T15:17:02.107759Z","last_seen":"2026-04-18T15:24:46.035695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":187,"dns":53,"connect":19,"send":0,"wait":34,"receive":36,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/star-13-Cic3g6P_.jpg","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/star-13-Cic3g6P_.jpg HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 31318\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-7a56\"\r\nExpires: Sun, 18 Apr 2027 15:16:34 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31318,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 395x400, components 3","md5":"fb619ccab87be3f4cb78fcfe78b74048","sha1":"c0eaa6abd51337df8c3caf1928e61c5c4eb0b7b9","sha256":"2560872abc342da0b94e4d846e6aafe611ccd63da1aac583b5626abf4e07e629","sha512":"77308a616bda1fb0e35e7b5bbead0790752ba418623ff252c31f4e815fa6845fc17ce38434eaf4022639135bd9beac4494e0f8a249cc734845a702d8d06db391","ssdeep":"768:BOiXADtrmqfnAcyD/Ctt+GTRrldSN2EVDo:oeANX5yDQtLtSASDo","tlshash":"fee2d091f632d0f7f8f71a311ba1b5d4e629f0a1496d5935a01c1bbfd8e4081989c3ea","first_seen":"2026-04-18T15:17:02.108544Z","last_seen":"2026-04-18T15:24:46.043278Z","times_seen":2,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":180,"dns":57,"connect":19,"send":0,"wait":37,"receive":1,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-fans.com/assets/leak-8-AOv60Hof.webp","fqdn":"content-fans.com","domain":"content-fans.com","tld":"com"},"ip":{"addr":"213.111.147.150","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vipleaks.xyz/?i=1","date":"2026-04-18T15:16:34.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-fans.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Mar 2026 08:29:50 GMT","end":"Wed, 10 Jun 2026 08:29:49 GMT"},"fingerprint":{"sha1":"BF:39:9E:D1:F0:0B:D7:56:EC:38:D5:71:99:EA:31:0C:01:47:43:2A","sha256":"4D:2A:53:F1:97:E5:14:D2:A5:22:E2:4B:E2:A1:44:29:63:D6:23:91:47:EA:14:C5:2D:A2:E1:2F:38:4A:FE:9C"}}},"request":{"raw":"GET /assets/leak-8-AOv60Hof.webp HTTP/1.1\r\nHost: content-fans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vipleaks.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 346574\r\nLast-Modified: Wed, 08 Apr 2026 12:44:45 GMT\r\nConnection: keep-alive\r\nETag: \"69d64dbd-549ce\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":346574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"51eb745dd8671d0e7ffa8cb205605283","sha1":"8715df5a7aab454c3becfe3e3f0d2cab2f78b9dd","sha256":"18171c487b5b40897d96e911b7acad029ff9e0b3eee89367cbe10080d51e2721","sha512":"90ff995caf78a38c74ec6c41a90b83d2b6b2ce786737587027bdbe4584eec060b9ed81a36ab5995914c7568dea9cdcd2280c32ae1fba8c2e28bf7ee92ef5dbfb","ssdeep":"6144:sbKCasSh50XVtgFib+QUrba2n1PqiydhMvk3cHGmVG/Exz0FE:sbK8+SltgMb+QUrba2IjdhGkNp/E9","tlshash":"4574128c98edfc50e87be435611b020efb2b93799c2f5313119134572f6a181b9ea32b","first_seen":"2026-04-18T15:17:02.109376Z","last_seen":"2026-04-18T15:24:46.04437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}