{"report_id":"ea4037c5-deeb-4ea6-88a1-c2721f7854ff","version":6,"status":"done","tags":[],"date":"2025-08-29T16:27:43Z","url":{"schema":"http","addr":"vitaminkuofc.com/monotirou/","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vitaminkuofc.com/monotirou/","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"title":"Monotirou - Vitaminkuofc"},"submit":{"url":{"schema":"http","addr":"vitaminkuofc.com/monotirou/","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-03T16:27:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-29T16:27:19Z","timestamp":1756484839,"ip_dst":{"addr":"172.18.0.11","port":59920,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"23.109.170.61","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-29T16:27:19.244157+0000\",\"flow_id\":1492238419329658,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"23.109.170.61\",\"src_port\":443,\"dest_ip\":\"172.18.0.11\",\"dest_port\":59920,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=wrathypenitis.help\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA\",\"serial\":\"00:82:53:4F:F3:04:F0:DF:56:51:F8:96:71:76:8C:AB:F1\",\"fingerprint\":\"57:1c:3c:d5:c1:f2:62:8a:e4:97:ab:47:08:1d:6d:20:a7:31:0f:f1\",\"sni\":\"wrathypenitis.help\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-21T00:00:00\",\"notafter\":\"2025-10-19T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"76fd782f81a37e6b32ec21bbc9fb4c00\",\"string\":\"771,47,0-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1329,\"bytes_toclient\":3944,\"start\":\"2025-08-29T16:27:19.164474+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-29T16:27:19Z","timestamp":1756484839,"ip_dst":{"addr":"172.18.0.11","port":59914,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"23.109.170.61","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-29T16:27:19.249517+0000\",\"flow_id\":1071146940727672,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"23.109.170.61\",\"src_port\":443,\"dest_ip\":\"172.18.0.11\",\"dest_port\":59914,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=wrathypenitis.help\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA\",\"serial\":\"00:82:53:4F:F3:04:F0:DF:56:51:F8:96:71:76:8C:AB:F1\",\"fingerprint\":\"57:1c:3c:d5:c1:f2:62:8a:e4:97:ab:47:08:1d:6d:20:a7:31:0f:f1\",\"sni\":\"wrathypenitis.help\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-21T00:00:00\",\"notafter\":\"2025-10-19T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"76fd782f81a37e6b32ec21bbc9fb4c00\",\"string\":\"771,47,0-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1329,\"bytes_toclient\":3944,\"start\":\"2025-08-29T16:27:19.164216+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"wr.amigojimbang.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"dsimgcdn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"a.pemsrv.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2023-08-01","domain_rank":181476,"first_seen":"2023-08-05T12:08:36Z","last_seen":"2025-08-26T10:35:05.51935Z","alert_count":0,"request_count":1,"received_data":105481,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"divisiondrearilyunfiled.com","ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2024-05-21","domain_rank":53089,"first_seen":"2024-08-08T10:52:35Z","last_seen":"2025-08-27T16:19:09.039151Z","alert_count":0,"request_count":4,"received_data":155329,"sent_data":2965,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bunkersparring.shop","ip":{"addr":"188.42.247.188","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-05-15","domain_rank":187180,"first_seen":"2025-07-22T08:24:24.149351Z","last_seen":"2025-08-21T20:12:25.201259Z","alert_count":2,"request_count":2,"received_data":2862,"sent_data":2779,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.doodcdn.io","ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-05","domain_rank":200454,"first_seen":"2025-03-05T21:16:34.795928Z","last_seen":"2025-08-27T23:49:33.887329Z","alert_count":0,"request_count":7,"received_data":118458,"sent_data":3089,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ukankingwithea.com","ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2025-08-23T09:51:09.549361Z","alert_count":0,"request_count":1,"received_data":816,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"utysolomonaut.com","ip":{"addr":"104.21.70.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2025-08-17T07:31:48.079057Z","last_seen":"2025-08-24T08:22:23.149989Z","alert_count":0,"request_count":2,"received_data":1040,"sent_data":1136,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2025-08-24T11:41:41.01314Z","alert_count":0,"request_count":6,"received_data":10740,"sent_data":5131,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.magsrv.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2023-08-01","domain_rank":51490,"first_seen":"2023-08-04T16:18:00Z","last_seen":"2025-08-22T17:27:50.772868Z","alert_count":0,"request_count":5,"received_data":925650,"sent_data":2080,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"co600dp.cloudatacdn.com","ip":{"addr":"148.113.152.30","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"domain_registered":"2024-07-30","domain_rank":1893912,"first_seen":"2025-03-27T13:55:31.962668Z","last_seen":"2025-06-13T06:53:04.97829Z","alert_count":0,"request_count":1,"received_data":15692,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"wr.amigojimbang.com","ip":{"addr":"23.109.170.241","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-04-22","domain_rank":0,"first_seen":"2025-08-12T18:15:08.605699Z","last_seen":"2025-08-28T09:57:07.075616Z","alert_count":1,"request_count":1,"received_data":87771,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vitaminkuofc.com","ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-28","domain_rank":278468,"first_seen":"2025-08-15T08:46:13.459831Z","last_seen":"2025-08-15T08:46:13.459831Z","alert_count":0,"request_count":36,"received_data":1043170,"sent_data":18110,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Modern Image Formats:2.5.1","description":"Performance plugin from the WordPress Performance Team, which adds support for outputting images in WebP or AVIF format and supports the `picture` element to enable format fallbacks.","website":"https://wordpress.org/plugins/webp-uploads/","common_platform_enumeration":"","icon":"modern-image-formats.svg","categories":["WordPress plugins","Performance"]},{"name":"Performance Lab:3.9.0","description":"Performance plugin from the WordPress Performance Team, which is a collection of standalone performance modules.","website":"https://wordpress.org/plugins/performance-lab/","common_platform_enumeration":"","icon":"Performance Lab.svg","categories":["WordPress plugins","Performance"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"SpeedyCache","description":"SpeedyCache is a WordPress plugin for optimizing page load times and caching efficiency.","website":"https://speedycache.com","common_platform_enumeration":"","icon":"SpeedyCache.svg","categories":["WordPress plugins","Caching"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"bxSlider:4.2.15","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-08-27T16:42:07.060667Z","alert_count":0,"request_count":6,"received_data":13637,"sent_data":3663,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"static.doodcdn.io","ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-05","domain_rank":224488,"first_seen":"2025-03-05T21:16:34.803152Z","last_seen":"2025-08-27T23:49:33.174225Z","alert_count":0,"request_count":1,"received_data":113773,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ingajoytowork.org","ip":{"addr":"52.85.49.55","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":4086,"sent_data":980,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-08-27T15:53:10.061958Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-08-27T16:38:44.47818Z","alert_count":0,"request_count":1,"received_data":24100,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2020-01-28T19:52:40Z","last_seen":"2025-08-29T04:58:06.279596Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":961,"comment":"","tags":null,"fingerprints":null},{"fqdn":"do7go.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-20","domain_rank":100798,"first_seen":"2025-03-23T11:26:11.31635Z","last_seen":"2025-08-23T11:42:00.790999Z","alert_count":0,"request_count":1,"received_data":38868,"sent_data":526,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.pemsrv.com","ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":104334,"first_seen":"2023-08-04T13:10:46Z","last_seen":"2025-08-27T08:04:13.222156Z","alert_count":0,"request_count":1,"received_data":251,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-27T15:20:49.600294Z","alert_count":0,"request_count":4,"received_data":688696,"sent_data":1779,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vjs.zencdn.net","ip":{"addr":"151.101.66.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2011-12-27","domain_rank":43797,"first_seen":"2012-05-21T08:26:59Z","last_seen":"2025-08-24T07:34:29.852866Z","alert_count":0,"request_count":2,"received_data":544227,"sent_data":878,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s3t3d2y9.afcdn.net","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2022-06-27","domain_rank":36521,"first_seen":"2025-05-07T19:37:13.89914Z","last_seen":"2025-08-29T11:46:06.097831Z","alert_count":0,"request_count":5,"received_data":734049,"sent_data":2752,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"d-s.io","ip":{"addr":"104.26.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-28","domain_rank":178790,"first_seen":"2025-07-29T20:52:04.325054Z","last_seen":"2025-08-27T23:49:33.047779Z","alert_count":0,"request_count":3,"received_data":40425,"sent_data":1535,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"d3eub2e21dc6h0.cloudfront.net","ip":{"addr":"54.230.245.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-10-02T19:01:08Z","last_seen":"2025-08-24T14:16:28.956877Z","alert_count":0,"request_count":2,"received_data":234180,"sent_data":1121,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"wrathypenitis.help","ip":{"addr":"23.109.170.61","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-21","domain_rank":0,"first_seen":"2025-08-21T05:46:19.017165Z","last_seen":"2025-08-28T09:57:07.1569Z","alert_count":2,"request_count":2,"received_data":1121,"sent_data":1045,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dsimgcdn.com","ip":{"addr":"104.26.2.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-21","domain_rank":0,"first_seen":"2025-08-21T20:12:24.754585Z","last_seen":"2025-08-28T23:50:25.312195Z","alert_count":2,"request_count":2,"received_data":234238,"sent_data":879,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-29T16:27:19Z","timestamp":1756484839,"ip_dst":{"addr":"172.18.0.11","port":59920,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"23.109.170.61","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-29T16:27:19.244157+0000\",\"flow_id\":1492238419329658,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"23.109.170.61\",\"src_port\":443,\"dest_ip\":\"172.18.0.11\",\"dest_port\":59920,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=wrathypenitis.help\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA\",\"serial\":\"00:82:53:4F:F3:04:F0:DF:56:51:F8:96:71:76:8C:AB:F1\",\"fingerprint\":\"57:1c:3c:d5:c1:f2:62:8a:e4:97:ab:47:08:1d:6d:20:a7:31:0f:f1\",\"sni\":\"wrathypenitis.help\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-21T00:00:00\",\"notafter\":\"2025-10-19T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"76fd782f81a37e6b32ec21bbc9fb4c00\",\"string\":\"771,47,0-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1329,\"bytes_toclient\":3944,\"start\":\"2025-08-29T16:27:19.164474+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-29T16:27:19Z","timestamp":1756484839,"ip_dst":{"addr":"172.18.0.11","port":59914,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"23.109.170.61","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-29T16:27:19.249517+0000\",\"flow_id\":1071146940727672,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"23.109.170.61\",\"src_port\":443,\"dest_ip\":\"172.18.0.11\",\"dest_port\":59914,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=wrathypenitis.help\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA\",\"serial\":\"00:82:53:4F:F3:04:F0:DF:56:51:F8:96:71:76:8C:AB:F1\",\"fingerprint\":\"57:1c:3c:d5:c1:f2:62:8a:e4:97:ab:47:08:1d:6d:20:a7:31:0f:f1\",\"sni\":\"wrathypenitis.help\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-21T00:00:00\",\"notafter\":\"2025-10-19T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"76fd782f81a37e6b32ec21bbc9fb4c00\",\"string\":\"771,47,0-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1329,\"bytes_toclient\":3944,\"start\":\"2025-08-29T16:27:19.164216+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vitaminkuofc.com/monotirou/","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f6255ce3b6038b4fa2ab65f3782c40e","sha1":"8504e750296b16cddef13b7c4bc26f99cb6d54fe","sha256":"0f2015272abc44320631013029abe4c8c82cc473fef33c874e71b9cd31d18f63","sha512":"236310fc33525de8f4b0862e6c6322987e79885b9a49b55ffabf1a9a98b73466da05bde85e0c5a71c3ff0ab92bd7388628795b363c3c42d929ed6f59263ac46a","ssdeep":"","tlshash":"aee072b20b028fa320f1b1c4502c42538074f122d5a8899aab8cc8c84290d0aff9a43f","size":296,"data":"","first_seen":"2025-08-29T16:27:52.948605Z","last_seen":"2025-08-29T16:27:52.948605Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://4619c593-5640-4563-9e8f-573018096c29/lib/shim_messaging_helper.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"865f01cbb34eb505834e826380d7dc2e","sha1":"c239ccc37191f1be78dfaa6bb3f1da5d314fdf9e","sha256":"30ed6392b8de4590bd974a4a797ee0b12b382f2141738115bfd2d692cfa6ec17","sha512":"9e37cd2e9fb9e4e926e2d1e1232c4c4ba3531d89b1d165293708849e0f88df6a40711d87c2b267ced9b6c4a27ac13079b5cb907334e2e297b588318df629b9ee","ssdeep":"","tlshash":"9e31ba1959fa0d1c0063b4a977673403722a90271149fe92bedcc3536f9652bc6f2bc8","size":1684,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-04-04T13:49:30.225507Z","times_seen":152115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ingajoytowork.org/Q3JsdkQiEA8beyJPDlAxMR5RU3YFV14wIHAXGRR2JkBdEid1GlxYJy8dGRIiMR0CAmotFxhTdgUQOjASABMWL3cMGxs4BxAzVDwoGjo2MRJxJRswKiAIJSwROTgDPC8ZNAkcMzcmOgEqDBsbFAc0Mxs6AHIYJSINNTMENyMPCzYhBi07WT8zFSANLgktMDogNBk1PT0RKSgDEi9yMSYyKzMkACcwDws5NxY5NxQ/FRojJSIWZkAqNCgoBzw1cAskXzAqATRYLx4LMBshPHcYPDUzEyU/OykZQwcxCyo0AiEVGR42ITwhN14VHBlDBzENOQUfLhUJCjYRaQE9LjEVNxYqThAZCggYExIrAT92JysIRBIuFgcjAyUqLgETcjcUOC0oNylEHRcRKgUMGTU6DBM0FhQsdwo8NA8dNDgtJAsgJQ8zEyQkCxN3CTw9RCgoVAYFKy0CUSIhLSQ5AyMuGw","fqdn":"ingajoytowork.org","domain":"ingajoytowork.org","tld":"org"},"ip":{"addr":"52.85.49.55","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebc7eaa29175606ec4345326e91779f8","sha1":"0b6cbf85190eead17cde53a9f7cfe98119b3adde","sha256":"35466e5b70d33db30fb56cfa0c44fd9ae299099491fc1473a855c4efdfb8fbcc","sha512":"704e9a148f861bdec35c3276e75001c53b9b9e0631331ee965638aae699fe291874be0ee99408382792ded48c6ebe97aa2f0dc8a77db8dc76e18b0d168cb6acd","ssdeep":"","tlshash":"fe510e8e34f3a0c2c2b66065453fb59afa385a91834cda18863d96bdbd304e96317f4c","size":2981,"data":"","first_seen":"2025-08-29T16:27:52.952111Z","last_seen":"2025-08-29T16:27:52.952111Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d-s.io/e/bfyfng6re0i6","fqdn":"d-s.io","domain":"d-s.io","tld":"io"},"ip":{"addr":"104.26.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fda1724412fd3c8db9942aa6e8e3deb","sha1":"539eed6112906a989e297d5d51c98af3dff08f2f","sha256":"3ddb9787e2d99f63e1c8169da967fa7b50e0baebb523aae738ff38899d2eaf7c","sha512":"1b6fe4694f5e61f4c298e0bf7d632c31df118d987b1643004ec2149ddf468e65c858fab779d5af8c0a9cb8941216cd977497c32351aef1cc3878796054f18158","ssdeep":"","tlshash":"c1e02e59a47301e042bba05ec30b232310a3f2833940d4d8ba8cef000f2ab228e9a1c8","size":294,"data":"","first_seen":"2024-01-26T23:16:31Z","last_seen":"2026-04-03T11:08:00.008086Z","times_seen":1765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/cache/speedycache/vitaminkuofc.com/assets/6dcca58db348f35d-lazyload.js","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dcca58db348f35d6eee39aadb7cd280","sha1":"0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec","sha256":"2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4","sha512":"ee897cdc326f80eb18c74b3c42fe1b97b3b16c0be8f048a763cb33db134fa47dc2eb07bc1ba6cd8feb91385d791aa89a28816fd49217a57763dc54df1ef3693e","ssdeep":"96:IncwFK9HqOq0tioGJULBx7PYuyrr5VrcAeS1h3osyTaZ+1KZZ/p5k1QDSYRV9uR5:M9YH9qfJ2x7PYf5BcVSPfq+DkGDjP9u/","tlshash":"5fc15308b065b43f65777032523f130bb23a606778884494f6b4eae99ebc81e5923f7d","size":5755,"data":"","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-04-04T12:49:15.191175Z","times_seen":3554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa661caff825db74efa9f9db5fd0a638","sha1":"6f282b42123bc56b657be14f83f00515670ee53c","sha256":"b393a8a6770fb253edcb30c80131c280de39fb5ae1ae5f9b3b26387e2eac9659","sha512":"07af6b65b6ead8f8ff2eb4784260dd09c3fdd3fd57c41c6470480c1f856cc34f1b277b8febc254a51deb7aa9d2a3e5779de4647210af2e30d96e6968a91d46cb","ssdeep":"3072:Nms/jp28VOkqDG2Cjym8pw8GWqI9ggxIisGEolY4o/CXMDpo:Hp28VOkq6208pw8GMggXs7Vpo","tlshash":"0a045c982792303441d3e12d6aff53093371506ab90f4884bb4dd8a427adeea51a3ffd","size":184613,"data":"","first_seen":"2025-08-05T17:03:18.278781Z","last_seen":"2025-10-03T12:03:07.883626Z","times_seen":539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/bVFVCazY3OiwNCSA8JlYHZGV2WwFnczIZUzJoJkZFejwtTVwnOiwbCwAwLD1jITIvAhAgLyZWBnI5IwVRaXMnBVVpZGQKUjZodk1CJDopVlQtLyUARzExIQYQITR/BlkuPC4HV3FnBF4YZHBwWx4jPCwPWSMmZ1kGOiFnWQZlZWxbE2cXZ1kGIzwsXQJxZg-BOBGQtdF8TZxdnWQYmI2dYd2VmdkUGfXBwW1ExNikEE2YTcFsHZGVzWwdxZ3INXyYwJAROcWcEWgVge3JNQ2lk","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8eab70d5a469bd5cdc181c7afe5f7dfc","sha1":"a5896d02251ebd27a6551fba686dd3e1b5d448d3","sha256":"115de1dd8b8658903d732ab4f4b11e286d0040acac4a1c241b385db2c1b22c15","sha512":"6091b78d719fc4bed375a3f6ac0055687bdd2cf6382b96680552863156e62cdfc6af55d697d2aede8aee3f23a53adc5ba7964f0f45f2e78b9d583d093ec104c9","ssdeep":"","tlshash":"06018abee6500c967423625647f1f8ee4ec725ca14e31b153e030773f789517c28061c","size":845,"data":"","first_seen":"2025-08-29T16:27:52.88117Z","last_seen":"2025-08-29T16:27:52.88117Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa661caff825db74efa9f9db5fd0a638","sha1":"6f282b42123bc56b657be14f83f00515670ee53c","sha256":"b393a8a6770fb253edcb30c80131c280de39fb5ae1ae5f9b3b26387e2eac9659","sha512":"07af6b65b6ead8f8ff2eb4784260dd09c3fdd3fd57c41c6470480c1f856cc34f1b277b8febc254a51deb7aa9d2a3e5779de4647210af2e30d96e6968a91d46cb","ssdeep":"3072:Nms/jp28VOkqDG2Cjym8pw8GWqI9ggxIisGEolY4o/CXMDpo:Hp28VOkq6208pw8GMggXs7Vpo","tlshash":"0a045c982792303441d3e12d6aff53093371506ab90f4884bb4dd8a427adeea51a3ffd","size":184613,"data":"","first_seen":"2025-08-05T17:03:18.278781Z","last_seen":"2025-10-03T12:03:07.883626Z","times_seen":539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/monotirou/","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f4f87e368f94555357d00f9b7e8ed4c","sha1":"db0173149e571a755cef6a33bb0063382f1b1ba9","sha256":"f997368baa677bfcf69257707de671a58de76eee3cf27855226cc417ec78dad8","sha512":"c99aaf4acc8b400f38f613df5373af1ee8c03a0b51ff5486bff9c2229d600506a00e9292ce6903a830108e5819b4d84509c8792e39d42df9c628110d70169c59","ssdeep":"","tlshash":"2d8004d535c3500447d3115400571cd45034c57115444d404054dc511d55034711545c","size":37,"data":"","first_seen":"2023-08-05T22:12:59Z","last_seen":"2026-04-04T07:36:06.937904Z","times_seen":1155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.2","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T13:47:46.943916Z","times_seen":195806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d-s.io/e/bfyfng6re0i6","fqdn":"d-s.io","domain":"d-s.io","tld":"io"},"ip":{"addr":"104.26.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61fa153f2827c887a48a351ae3c6cfd3","sha1":"5fbd02245cf700ea94d638c8d76924ecca52d330","sha256":"4c44d7c28ec0f6ca3e2624c6af1d3be324576d01ef6f6c2dc0af7e61664b8c2c","sha512":"cbe467dc51f0eec90d8b40bc35a1a0eb2c320ac67cc022c518b431987fa05a3d565f793c377d5f33a612555ad4d7ad66acfb4b47ba6323da26db293f095257d8","ssdeep":"","tlshash":"c650000003000000030c0000c000000000000003000030c000c0000000000000000000","size":8,"data":"","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-04-04T10:33:38.557334Z","times_seen":18605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/?ebued=1004073","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34eec0f452627454f163b5414559b5c8","sha1":"86fe834882578cd65fca921262ffaf5d308a7625","sha256":"19d203d8417787024e207bcf9ac9c5d48f98ab7b14cdbc25534a071e7f19bc75","sha512":"5899e2b25ed6a1949c0f6977b8f62905e19b0fa164b90fd000f18c0204fd53545eeaa73165d3b35fc8c2d08f3c3e4c1ba9137fc68980d4a9e66b6c9c43d9418d","ssdeep":"3072:XBUNPgDYzi07L02raYDbe+Y5UKS+7L0x2i++Zc53+Zc0M8EJ:XuN4DUi07w2rnXFZU3+iAm","tlshash":"33345cc9ba923469836374f540bf124ab23f5a69b8084dd4f496d4d07db8d0a437bfac","size":232493,"data":"","first_seen":"2025-08-29T16:27:52.878163Z","last_seen":"2025-08-29T16:27:52.878163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d-s.io/e/bfyfng6re0i6","fqdn":"d-s.io","domain":"d-s.io","tld":"io"},"ip":{"addr":"104.26.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cba5ea2486c4f64c88a79120226a9da","sha1":"2413204e923a7835d2cb651007c106444c3b24ed","sha256":"cef8fe7804781d4f2bf52e98ff61a78266334a96ec5037bac123d47a2275c85a","sha512":"dd449b8e30c15b30939519534ddab3c9e5a1ef377f3008cd7d852a6205b6c6e3ed8619a77ee0848d42a361e340bbc84f7f7cd7d5d2b822a25a04a2e256f4e39f","ssdeep":"192:ysUXsVvKoSUrTpr4uT9o2gJtGcQGh/9uzmZSkennyN4AiA3Vo:ysmsVvN3T5ZpotGHGh/9uzmZrennD2i","tlshash":"f20264a13ee08768c3e2165fb73fe654f6a28ddc19d6cc08e14a5904f741d87d6716b0","size":8907,"data":"","first_seen":"2025-08-29T16:27:52.957165Z","last_seen":"2025-08-29T16:27:52.957165Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/aas/r45d/vki/1941940/4d81a660.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd17bb90a83c359053808f1e15907e83","sha1":"fc71751a67a2b4343538ad91e593813431732a5b","sha256":"16251cfccc2418f92420c0eb2aead9eb26d44f5623054c825db8b280ab9cbc4a","sha512":"13f43564217cbd390fa67a0a91ed675b8cb120611c60de5a39c1ec50f1dbecc9e57bb1a3831639eb2ac1fd17f47e5458cf2e86072c2b16b0c9d04ddd01f70741","ssdeep":"1536:/7qvKuBtIHvgs8KSq+014rqvfd7b0u0KeGJBq7Sg42GEDkIna7jW/1DR/iewDmX8:/7qv/IPzS7Sm474aESgjHxvjt+gt0","tlshash":"69e3b69cfe8124b54a4ad1ad2c3fa5869675ecd3969d20309db3d1c8ff6cc0b8135ab4","size":147498,"data":"","first_seen":"2025-08-29T03:43:07.516331Z","last_seen":"2025-08-31T21:09:41.795339Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/monotirou/","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a52dad6539b2522c26111da2a1bd48e8","sha1":"ee5ec17d8114c0b6996a182648af4c61d00820c8","sha256":"eea5cd60211ca7030f63f19e32fe5b0afb6766df3d7a59c4b5a2f436ade86db1","sha512":"5b23a69bd621f0183ec9935020b2d6a0ddfa5edd4adaa2b51ba71353eb8b07f47a278e6e5edc2cf03005587236b2dd8285fa2f4afe2ecf6c8b805508010286f1","ssdeep":"","tlshash":"e39002392443501e602e48616b621a08ad598465d1186556130704b0e0d3c865c014cf","size":55,"data":"","first_seen":"2023-03-07T14:39:57Z","last_seen":"2026-03-29T01:49:10.102459Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/cache/speedycache/vitaminkuofc.com/assets/eca10535dd65f497-navigation.js","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29137269129644ed4e17ac1fdea84d0f","sha1":"0e9281cbcdf3a46eaaeb5fb5a4e52bb0a6df3037","sha256":"a0d27c820524ceac803627fcbd790415bf8178142cc7733ea1ad773a52e74324","sha512":"df21033ef64b4112e5e424944d21b09e8774944b88c3991af098f7baa4bfc2ad8be22a8852914644e3c6e7b1ec9a61373fd9253c0650da98ea8b9222a3da6b3a","ssdeep":"","tlshash":"5261625e3d401a7e64ff26db30eb53bd3f21091ada0d1811f1f8c0a15e7809129abe9d","size":3422,"data":"","first_seen":"2025-08-15T08:46:17.118814Z","last_seen":"2025-09-05T06:29:02.209353Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa661caff825db74efa9f9db5fd0a638","sha1":"6f282b42123bc56b657be14f83f00515670ee53c","sha256":"b393a8a6770fb253edcb30c80131c280de39fb5ae1ae5f9b3b26387e2eac9659","sha512":"07af6b65b6ead8f8ff2eb4784260dd09c3fdd3fd57c41c6470480c1f856cc34f1b277b8febc254a51deb7aa9d2a3e5779de4647210af2e30d96e6968a91d46cb","ssdeep":"3072:Nms/jp28VOkqDG2Cjym8pw8GWqI9ggxIisGEolY4o/CXMDpo:Hp28VOkq6208pw8GMggXs7Vpo","tlshash":"0a045c982792303441d3e12d6aff53093371506ab90f4884bb4dd8a427adeea51a3ffd","size":184613,"data":"","first_seen":"2025-08-05T17:03:18.278781Z","last_seen":"2025-10-03T12:03:07.883626Z","times_seen":539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82d32f8d72c3a1640aa1ef00909b0003","sha1":"1338a6f396b9c3d9ff5249ba504cf219acc61cfb","sha256":"15442f52e99fdc64b6b90064f01825f7e476c0c3ab1fd1d879055aeb2b51f7f0","sha512":"a1adb6f5ebcbef9a95b1cb35be7fb0c1652c16a035fe4a3f7f451cde008fccd586346194dcc0c61e5c28e8368dd19ff64a57caf028d575d836bb686b46e8ae3d","ssdeep":"192:zfkIZJv+GrBMxat4wi84pWhd0LhDWUhYcxmgxDc+:oIWGdMxat4wi84ohd0LJWZgJBj","tlshash":"7d229ac7af096a28c33514e7201778d3310dbe9a50a4ac558524dfe8be7c374767be8a","size":9994,"data":"","first_seen":"2025-08-29T16:07:52.600216Z","last_seen":"2025-08-29T16:27:52.939831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d-s.io/e/bfyfng6re0i6","fqdn":"d-s.io","domain":"d-s.io","tld":"io"},"ip":{"addr":"104.26.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4c1f84a22b8d001e682302a38e88152","sha1":"7990ed8ff72e70a4da21573385662d902d2b8555","sha256":"c1852b7771acd27f5505ee9a1f55d5569ae528a48e8e8b36186ff06630fab418","sha512":"fea9f1d0b7256b344e219952b45aa2c301d8cdd16465958263616a951742fe56e599e854489583e5a25c6456f1d78f81905721c66a274318fcbf8c4316cd818a","ssdeep":"","tlshash":"11b0223c3002802288abc8afb828c8003c28000cb032f30bfa2f80f20c30ee2208b028","size":89,"data":"","first_seen":"2023-03-10T13:33:58Z","last_seen":"2026-03-26T00:46:16.5102Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/monotirou/","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a52dad6539b2522c26111da2a1bd48e8","sha1":"ee5ec17d8114c0b6996a182648af4c61d00820c8","sha256":"eea5cd60211ca7030f63f19e32fe5b0afb6766df3d7a59c4b5a2f436ade86db1","sha512":"5b23a69bd621f0183ec9935020b2d6a0ddfa5edd4adaa2b51ba71353eb8b07f47a278e6e5edc2cf03005587236b2dd8285fa2f4afe2ecf6c8b805508010286f1","ssdeep":"","tlshash":"e39002392443501e602e48616b621a08ad598465d1186556130704b0e0d3c865c014cf","size":55,"data":"","first_seen":"2023-03-07T14:39:57Z","last_seen":"2026-03-29T01:49:10.102459Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/monotirou/","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a52dad6539b2522c26111da2a1bd48e8","sha1":"ee5ec17d8114c0b6996a182648af4c61d00820c8","sha256":"eea5cd60211ca7030f63f19e32fe5b0afb6766df3d7a59c4b5a2f436ade86db1","sha512":"5b23a69bd621f0183ec9935020b2d6a0ddfa5edd4adaa2b51ba71353eb8b07f47a278e6e5edc2cf03005587236b2dd8285fa2f4afe2ecf6c8b805508010286f1","ssdeep":"","tlshash":"e39002392443501e602e48616b621a08ad598465d1186556130704b0e0d3c865c014cf","size":55,"data":"","first_seen":"2023-03-07T14:39:57Z","last_seen":"2026-03-29T01:49:10.102459Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/monotirou/","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a52dad6539b2522c26111da2a1bd48e8","sha1":"ee5ec17d8114c0b6996a182648af4c61d00820c8","sha256":"eea5cd60211ca7030f63f19e32fe5b0afb6766df3d7a59c4b5a2f436ade86db1","sha512":"5b23a69bd621f0183ec9935020b2d6a0ddfa5edd4adaa2b51ba71353eb8b07f47a278e6e5edc2cf03005587236b2dd8285fa2f4afe2ecf6c8b805508010286f1","ssdeep":"","tlshash":"e39002392443501e602e48616b621a08ad598465d1186556130704b0e0d3c865c014cf","size":55,"data":"","first_seen":"2023-03-07T14:39:57Z","last_seen":"2026-03-29T01:49:10.102459Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-04T13:46:00.042103Z","times_seen":217618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T13:49:26.30716Z","times_seen":638763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/08/IMG_20250820_103851.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/IMG_20250820_103851.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22594\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Wed, 20 Aug 2025 04:04:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7QD9FYKH53ejr%2BO4MAWmG46F4JsBdJaqsKZINSRE%2FKFWiDS%2FZMNiKT%2F%2Fp8vZIourmk07WJ6sJDZTwtqs2pRpkEagc6ycTRSiH9SQRett\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f0eb6568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22594,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x810, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8c4d970b161726ee72464bf88fd8b5e2","sha1":"b35e9fb8f993d0541b36670a4096eacb7ca457b9","sha256":"f70fbf2fed77d901f16ba9723f9d84476c392e2302e8b35b25e132f670adc992","sha512":"0214e1b34a75110d559235e2c3802e5e756c9b40b01029c9ecf803bd65581709d9be4d83db9331ea4dbc21aecc001921cbdeb4c567d3bd985d86c028dd62e4ae","ssdeep":"384:CS26g55y11tKA9FocQa5F2CLXZrJbKoI/rwnuT2kX/ZYQSN:CX6qotKAHQan3pQrPaF","tlshash":"b4a2e1d126f8b0aae4b7f6c98b053c063010d9bd7b25ce898d20d12a11e95c97ebb50e","first_seen":"2025-08-29T16:27:52.82158Z","last_seen":"2025-08-29T16:27:52.82158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/05/IMG_20250527_230130.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/IMG_20250527_230130.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33664\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 29 Aug 2026 16:27:18 GMT\r\nlast-modified: Wed, 28 May 2025 01:09:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=crdtGAQzfbIDG2VSqX4jkl%2FlQlWP8IlnCMGNWXn9kE%2FPz%2BwVZCvKH8U5jn8zhuW8zWwluo6eQS14f3wei%2Fc49QVeM96lwtQzQ2TzvqGm\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f2ebd568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2149f7be3556a75446077bc9335aa4e6","sha1":"2b6049c24f7fa1e391ad7715b87501ff0a9fcfa5","sha256":"964634052a46af641b389c012e6df8a0e7e821d5d28d631676481423834402a1","sha512":"6131e9dc4d27271de778f83c6d4d47843c29e2d1897bea245f4916b284e2b95610f0d4696574540ce2008c2ee90e33d07612ce5066800996276a63b52cbf78f7","ssdeep":"768:cFdKJXA5a1Pkf1wRIt4BCcDEI5wLhENYrT9OJLI8GfAdJlx:KKtA5a1Mf1NHcR5wRT9OJLXGfAdJ","tlshash":"53e2e18ceb77d33af85bc638c2364e5a919d93182a460be8f01c55c49752a28532bb6c","first_seen":"2025-08-29T16:27:52.826054Z","last_seen":"2025-08-29T16:27:52.826054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/ads/ad.js","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 22:05:00 GMT","end":"Mon, 29 Sep 2025 23:04:57 GMT"},"fingerprint":{"sha1":"26:61:CA:6E:DD:B0:60:E8:C4:A8:7B:C3:6C:83:89:43:D1:E2:C5:D7","sha256":"29:56:1F:AB:6E:79:B9:DA:69:1B:5C:D5:4B:31:EB:43:FD:16:0E:33:DE:21:C1:27:6B:BF:B2:B8:45:6E:13:6E"}}},"request":{"raw":"GET /ads/ad.js HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 28 Aug 2026 01:36:38 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 65199\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HIRjXHwbsRVLtQ5%2FWDpfaJtbO%2BWsXk5z%2F9qNRdOeCT%2B%2BceLftebUCdzNd293KvKTMjIP2aEDNiIbT%2B0wQBqSHk4EAPrPpeEutg%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: 976d6a4068bb0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"69a305bcdc8e061bbd43294a477a3678","sha1":"506582a1d912d546f5942d95ffae95ec7f4c37ce","sha256":"8964d85afd6d5d84b97872464646809c952ab900cdf5c5d7c3b7b4bdb74202fa","sha512":"feb32ed92acbef86c4ce3cb32637ccdf02519d1725db5af667cfe29b842efe4a195ad0deef44fb6c592a50d7e4759bd4c819c2dc439a4d373ef186cb7d2dc553","ssdeep":"","tlshash":"9d70000222808032c03c8000808800088020000ac08320222a000000000030200002c3","first_seen":"2023-03-07T01:24:29Z","last_seen":"2026-04-01T22:14:46.352109Z","times_seen":2249,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":112,"dns":23,"connect":2,"send":0,"wait":19,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/video.js/7.21.5/video.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/video.js/7.21.5/video.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 137405\r\ncf-ray: 976d6a401a01568e-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64bb5c88-218bd\"\r\nlast-modified: Sat, 22 Jul 2023 04:35:20 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 118978\r\nexpires: Wed, 19 Aug 2026 16:27:18 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9qCEgPBEfnY%2FQ94V2%2BJe3aXunmoWlwJwAn7ww3GO8p6eUGX8vjmjgHMkAZCiZU6VrJcmv1XiRdQucCv135fi4F77Qgx4mrufWly69EpWJuiYj07731PBICXvT4foHaPy2WuYKN%2Bo\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589278,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48459)","md5":"d7fdaaab43bc993b85290c713fd2d289","sha1":"46bf3d27b2cf38b0e999d3b0a7613011181c87f9","sha256":"c9535ea3a4e0af22e960ac1e32d363a71029f31aa96b29fc894e111fee49329e","sha512":"e1cc8a4de54d2d1454b9b58718c7446aba03c7901e09b72a480bfa1d916c96492df25acfe1a95e8fcb15ea9ef12a48ccf799a0eedcf36640524ec089e38f2077","ssdeep":"6144:t4iiw3vnwan/i4WfvISkj4dsJDMXEuxFY9zpDkmqPgr4dAXFeUffWuRgn:t4iiw3vnhn/iyDMXEu0sTdExRgn","tlshash":"b9c42bc87285717247d370b6543f120a723a9e6d5808c16cf529e9da2df8e4da23bf78","first_seen":"2023-10-15T07:44:37Z","last_seen":"2026-04-01T22:14:46.126219Z","times_seen":2027,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":43,"dns":4,"connect":1,"send":0,"wait":19,"receive":7,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 29 Aug 2025 17:15:17 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4JktCpOP8zL44TSKxuxT%2FoU6aq5qGKUGwcI80Ie9Q2bpaIAhTS4fRnObIkL%2F09BR7oft89lIsgrnDHigKtKXuEK7PASjp9CTKstxPew\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncf-ray: 976d6a3b8e82568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T13:49:40.769016Z","times_seen":292179,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vjs.zencdn.net/7.8.4/video.min.js?ver=7.8.4","fqdn":"vjs.zencdn.net","domain":"zencdn.net","tld":"net"},"ip":{"addr":"151.101.66.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vjs.zencdn.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2024 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 07 Jan 2025 21:56:05 GMT","end":"Sun, 08 Feb 2026 21:56:04 GMT"},"fingerprint":{"sha1":"22:88:1F:07:1F:92:14:54:4B:E7:66:41:59:BF:5D:37:AF:C0:31:C7","sha256":"D8:1B:9B:E3:C9:29:CD:95:A8:5F:41:02:B8:20:F7:4E:F9:81:86:30:1D:9D:00:5B:98:B8:5F:02:07:B5:0F:7A"}}},"request":{"raw":"GET /7.8.4/video.min.js?ver=7.8.4 HTTP/1.1\r\nHost: vjs.zencdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 08 Jul 2020 20:29:39 GMT\r\netag: \"102cc1896541330762962b95fcb31f95\"\r\ncache-control: public, max-age=31536000\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 13626\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncontent-length: 139307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":498019,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45362)","md5":"102cc1896541330762962b95fcb31f95","sha1":"58af851e231b29a31690a7b74ebfa89a62977a0d","sha256":"be788c49f862ad8e0f7947411cb71db6aac0046b3cee79c3144179a57baf07bb","sha512":"503091c1654cf25028bab44fea4f81e6ce833c0f90564b903bce385aefc5a8ef3ed31f1331fdb37c0e1f839905626d260c03583416cf07a2cfe75ed70990bdfe","ssdeep":"6144:n5cPVpGLX7pr8FLRhf8WGabGU12fAVHdPj7mZztiurMWN0LO:n5cPVpGLX98TqR2RV20LO","tlshash":"b6b42bc97281b17247d370b6503f120a733a99685849c16cf529f9da2db8e4da23bf7c","first_seen":"2023-03-07T01:25:57Z","last_seen":"2026-04-04T11:43:31.560628Z","times_seen":2609,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":45,"dns":6,"connect":13,"send":0,"wait":14,"receive":32,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pemsrv.com/popunder1000.js","fqdn":"a.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:26:30 GMT","end":"Sun, 09 Nov 2025 10:26:29 GMT"},"fingerprint":{"sha1":"5F:47:25:B6:96:C0:63:5C:07:7B:C4:6F:89:5C:87:0B:49:94:70:EA","sha256":"B5:77:8A:78:DA:8C:29:56:B2:2E:AD:B2:BC:02:75:DB:93:32:DF:FD:CA:6F:97:04:2E:34:4F:41:C4:5E:7B:09"}}},"request":{"raw":"GET /popunder1000.js HTTP/1.1\r\nHost: a.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: application/javascript\r\netag: W/\"d140a5da066b39afaad5e4fbb7e\"\r\nexpires: Tue, 26 Aug 2025 13:20:47 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJCgH3agEAAAwBuUwKDAH3DAAAAAwBw7WvBgG3AQAAAA\r\nx-77-nzt-ray: e2f75420d55423fae6d4b16846f41511\r\nx-77-cache: HIT\r\nx-77-age: 362\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":104964,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3d0fcf70b3100008f562c2114c8b130c","sha1":"d140a5da066b39afaad5e4fbb7e08896279e0b16","sha256":"c3c969da43b596d942c9e0610b4c69a64ff9a7f903e0bc39b266f692d2eba344","sha512":"c21545b0c2acf56af97d87807504818b12a19b8bdc561e7d00ab224630262c1671ee6e080e7cdcde14f2bbf6544183cce75474acd1734812ddb519b823e75f24","ssdeep":"1536:5+sUFCLmY6s3bQkVitoBzgF5X5Z5jzQnVv1DxFsqsKxgZG1tiivY7:5+LamY6s3UQiGzaPYVtvsq5xg0t0","tlshash":"06a3068c75d2f46c87bbe0fa047f708fb9bd6ac3308c6444d6a2d5b47ca4a4a8173959","first_seen":"2025-05-21T14:57:27.101061Z","last_seen":"2025-09-16T03:47:27.775285Z","times_seen":543,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":64,"dns":51,"connect":7,"send":0,"wait":8,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y9.afcdn.net/library/91387/8477590b34082e89d84c6fb8c1c828d292612831.mp4","fqdn":"s3t3d2y9.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:20.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 13:12:21 GMT","end":"Sun, 28 Sep 2025 13:12:20 GMT"},"fingerprint":{"sha1":"86:FB:BA:4A:B6:BF:EC:BB:C9:E5:96:9C:6A:B2:8C:F6:67:7D:11:18","sha256":"0E:D1:2C:2E:A2:B0:0A:42:25:63:5F:7A:DA:F6:F6:CE:73:D9:D9:DF:0A:BB:A5:1C:F9:F0:9E:16:D9:B4:C5:43"}}},"request":{"raw":"GET /library/91387/8477590b34082e89d84c6fb8c1c828d292612831.mp4 HTTP/1.1\r\nHost: s3t3d2y9.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 29 Aug 2025 16:27:20 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 132032\r\nlast-modified: Wed, 04 Sep 2024 10:30:22 GMT\r\netag: \"66d836be-203c0\"\r\nexpires: Thu, 27 Aug 2026 09:25:28 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBuUwJGwH3uwQDAAwBuUwKCQH3JQEAAAgBw7WvFwGh\r\nx-77-nzt-ray: fdb541233701a459e8d4b168b9c66f11\r\nx-77-cache: HIT\r\nx-77-age: 197819\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 0-132031/132032\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":132032,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"df0181bd4744eefdb6633da06369ca88","sha1":"8477590b34082e89d84c6fb8c1c828d292612831","sha256":"92ceb9e2657adf24376a280de37134620f9f6d254499a64835f9b2a84263f8e3","sha512":"8904ff40f8c798fb8413c95cc24d60b500b056786dbe241dbbace624cf8afe8867c6c9c7665d5746004f4fda3bc7551bdda6adffcba59c4192d4085ddf99f1e2","ssdeep":"3072:IV8pWbTdelRxCjXrhnic71zV3BXl7t/b/ME2EI3SB11p8R0yn:vkJsAXrhiYZZN/ME2LEZG0yn","tlshash":"7dd31256f78c53ecdcb0c1b8a6db538a7309ac67158468ebde96f80d03d44fb8e011a6","first_seen":"2025-06-27T16:43:00.303774Z","last_seen":"2025-09-15T14:53:02.178077Z","times_seen":10,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":35,"connect":8,"send":0,"wait":11,"receive":39,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y9.afcdn.net/library/914186/8e55ef150f13d34737c301323609b39f6938e29c.mp4","fqdn":"s3t3d2y9.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:20.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 13:12:21 GMT","end":"Sun, 28 Sep 2025 13:12:20 GMT"},"fingerprint":{"sha1":"86:FB:BA:4A:B6:BF:EC:BB:C9:E5:96:9C:6A:B2:8C:F6:67:7D:11:18","sha256":"0E:D1:2C:2E:A2:B0:0A:42:25:63:5F:7A:DA:F6:F6:CE:73:D9:D9:DF:0A:BB:A5:1C:F9:F0:9E:16:D9:B4:C5:43"}}},"request":{"raw":"GET /library/914186/8e55ef150f13d34737c301323609b39f6938e29c.mp4 HTTP/1.1\r\nHost: s3t3d2y9.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 29 Aug 2025 16:27:20 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 200180\r\nlast-modified: Fri, 25 Jul 2025 12:25:14 GMT\r\netag: \"688377aa-30df4\"\r\nexpires: Sat, 25 Jul 2026 12:37:34 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBuUwJGwH3MIMiAAwBuUwKAQH3CYwCAAwBJRPCLgG3IUsJAA\r\nx-77-nzt-ray: fdb541233701a459e8d4b168f9c66b12\r\nx-77-cache: HIT\r\nx-77-age: 2261808\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 0-200179/200180\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":200180,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"5ec29b8bee6bbdda6ce428048ed487fd","sha1":"8e55ef150f13d34737c301323609b39f6938e29c","sha256":"f7cbc3daabdccf5d2c327f3f144f1bf6ac0c06905b296218c6963788872a0aa3","sha512":"e83da86747a6ffb8ac765c5c658b8ee8233e7861dae50001296f86fb329bf4de3c42568a2433a4ee3e8efc2d12c0ca80b0574fb5b3b68f93a6a98f17b24327f9","ssdeep":"6144:PV2hngMziMnKC2iI5jee+thHb6P6lrVwQwguM:PV+n5OEI5S3q6ZVwbo","tlshash":"7414f092bf3502d3f114473c8ef3c3067321d26a0716a167c7543a8afdba2a5cda69e1","first_seen":"2025-08-04T21:57:05.243993Z","last_seen":"2026-03-30T22:53:46.39914Z","times_seen":17,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":31,"connect":8,"send":0,"wait":16,"receive":26,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y9.afcdn.net/library/914186/4636d59cb909303f9dc237a06c10948fb8bb2b3b.mp4","fqdn":"s3t3d2y9.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:20.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 13:12:21 GMT","end":"Sun, 28 Sep 2025 13:12:20 GMT"},"fingerprint":{"sha1":"86:FB:BA:4A:B6:BF:EC:BB:C9:E5:96:9C:6A:B2:8C:F6:67:7D:11:18","sha256":"0E:D1:2C:2E:A2:B0:0A:42:25:63:5F:7A:DA:F6:F6:CE:73:D9:D9:DF:0A:BB:A5:1C:F9:F0:9E:16:D9:B4:C5:43"}}},"request":{"raw":"GET /library/914186/4636d59cb909303f9dc237a06c10948fb8bb2b3b.mp4 HTTP/1.1\r\nHost: s3t3d2y9.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 29 Aug 2025 16:27:20 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 332067\r\nlast-modified: Fri, 25 Jul 2025 10:55:12 GMT\r\netag: \"68836290-51123\"\r\nexpires: Sat, 25 Jul 2026 12:35:28 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBuUwJGwH3IIMiAAwBuUwKCQH3X28BAAwBw7WvBgG3WGgKAA\r\nx-77-nzt-ray: fdb541233701a459e8d4b1684c594812\r\nx-77-cache: HIT\r\nx-77-age: 2261792\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 0-332066/332067\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":332067,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"8ca183efece07e0bb9e52e66de28cd01","sha1":"4636d59cb909303f9dc237a06c10948fb8bb2b3b","sha256":"87823e51a686082464c9317af2ab58eb6528d116e19f6437fd4b6fee47a5ac2e","sha512":"47182b91314a12cedb76921ef55ebfe9e82041a108a5d16fe5c19354616e1bdb35b5487921438af8b9ed5ad899cadf5893bcb37da28586a4581ace5db02b5fc0","ssdeep":"6144:w25wxOHd+MwsEEcRTja0raKAVovBy4pgPUraN/JNTZ5HyeOixU5:wTxOHQMKTj6oJ1pfra5JNTZ9/Oixg","tlshash":"356412686b7205cbf560863dadfbd7937726d56043a2a26ba300b408fdf0ae1c7d11c6","first_seen":"2025-08-09T05:26:35.24181Z","last_seen":"2025-10-07T05:59:26.612184Z","times_seen":17,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":28,"connect":7,"send":0,"wait":18,"receive":35,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4899\r\ncache-control: public, max-age=172800\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Wed, 25 Jun 2025 06:25:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yF5i%2BI8EHk8HGUIBy3J7xL0mulhSxQN2Fn8r%2FP0Tfk5slzDOzCp%2BXpn9YlEw0jD0AdHiChixuSnJFTtxQVlZrqh%2FWrUmQpHPQx40O%2BtX\"}]}\r\ncf-ray: 976d6a3b9e88568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20430,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20018)","md5":"4cd5ea35543390c5fc4e9def651ab721","sha1":"d360aa74dff157fcefda69336ecf420f04940f98","sha256":"9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17","sha512":"d666a51729862abb8d23b0cca5d5ade738c08df2a23fbabb55be95f2a1fbef60255bda850cb36457e70bb2706067f9cee620169c9166f5e9f29a48af470d4fab","ssdeep":"384:lrKvSC3FheMYNzktJlro8aVfPxodAuyalYleh++PFoAS4TSPE9MfA+0UUTK7:gqC36LkJcjPxodAl8DiPE9/+0UKK7","tlshash":"da9294c5bb053d53e9ff12f64157170ba2368eed050e10289839efc629314b1a6efb69","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-04-04T12:49:15.265912Z","times_seen":4557,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 14:13:33 GMT","end":"Sun, 23 Nov 2025 15:11:16 GMT"},"fingerprint":{"sha1":"1A:11:63:8A:09:D9:A9:1F:C1:06:34:29:E0:E0:95:E7:BA:BC:63:A3","sha256":"20:A6:48:1D:DB:42:37:88:BF:13:AD:64:91:6B:C4:6D:02:EA:D4:98:E1:E5:88:85:C0:D3:03:48:B4:F1:11:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d-s.io/\r\nOrigin: https://d-s.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://d-s.io\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dyfoTPSsq2YBRpAWb0J905uhKXXEyUeTkFp9GS5DfH9TiOn8EWv1NEt3ZaI5ma580JIspt4q7RuYXVNFcOaaTwDDmgVMDv9VZXyeD2LtXHQ%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: csu=802123683112981@1@1756484839; SameSite=None; Secure; Max-Age=31104000\r\ncf-ray: 976d6a4848da568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"bfb876d5bf68d1c7d9fe11d710ac3288","sha1":"d9a0b75e5123abb12b3440e653102626b570f229","sha256":"a4e8317701ab61703bb80e173e409cb3c195b37a2ed3dad5fa0c4730b18a71c7","sha512":"68b142fabb505566d03b46da67e45fda2232e21c77c0d38ba16f56a76e5d479cc2a2ca2dbf04a01f416dc78285075d36ef5cfceed405566ed5c689a92794d806","ssdeep":"","tlshash":"a98000fc0000ac80a2c8000c00000a82c0a08b8f0832c328030a080000b2a88b2e0ce0","first_seen":"2025-08-29T16:27:52.840693Z","last_seen":"2025-08-29T16:27:52.840693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":81,"dns":39,"connect":1,"send":0,"wait":129,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AdBytiMyjxJr0JXb7-i0Zt6l38EknntPvaBgGsO4yCGL6FSMTDClaqBqZG_xIQBB5t57h8_0F8F5Vw\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1642317698%3A1756484839779809","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:23:22 GMT","end":"Mon, 03 Nov 2025 19:23:21 GMT"},"fingerprint":{"sha1":"3E:26:D2:5A:C7:91:21:F0:A5:DF:2D:B3:FE:CC:22:E5:04:72:BA:E1","sha256":"C1:32:E8:39:F2:87:CE:BF:D8:BA:88:F4:CC:52:83:E2:53:F6:B7:5A:C4:81:03:72:91:C2:45:BB:4A:27:24:CA"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AdBytiMyjxJr0JXb7-i0Zt6l38EknntPvaBgGsO4yCGL6FSMTDClaqBqZG_xIQBB5t57h8_0F8F5Vw\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1642317698%3A1756484839779809 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d-s.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy: script-src 'nonce-4kMfLoXCYCwA7MemjulMMQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.Dg5wdk2tYyk.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/06/Anima-Ft-Cucumber.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Anima-Ft-Cucumber.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17800\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 29 Aug 2026 16:27:18 GMT\r\nlast-modified: Wed, 11 Jun 2025 01:31:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sCYjtG2VDb4fwx%2Fh8rsbRKfDYf%2F2DLhR0OWxSXTKxxMxgxv7Ack0bgFMzPisyxTvpl3Mk4vZeWrcaw7Vcwh9B5ngzt7v2%2FPbvUckfjza\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f0eb0568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17800,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d3d55b7d5c8ada66904b30cbbdbb442","sha1":"50bb904e9bdfb4cadc46b01069b0ce4f864c5f0e","sha256":"5f830f94bb112032446c171aaf59adace0d9a6385837c50250badfa657e9bc71","sha512":"abf67e82b243bb7593630f98f4a6a0856dfdf18b5e0414604c9f9628eb5c0eb13fe09aab661b2712cc46e4755a0322cfc371574d09e6fc9459e915480de58d46","ssdeep":"384:lwOw3P7LuycNTWAeVymRP85iOwsZ6HQ74mZqF5Y0faUiQlMENoh:6J/7MTWA+vRUsOfZKQ74mZMO6fiEN","tlshash":"3e82d12fc3796b08c09431b24a9c5f5bfee6d092d7834a57000de1bd6a0d3a26d592df","first_seen":"2025-08-29T16:27:52.842548Z","last_seen":"2025-08-29T16:27:52.842548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/08/IMG_20250820_104059.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/IMG_20250820_104059.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15966\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 28 Aug 2026 00:26:25 GMT\r\nlast-modified: Thu, 21 Aug 2025 06:18:37 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NMvF3GuYnmxvDcziJsytzGsZb4CxT6T9KAHo5iWiptNsKxWHzv6a4KFy7n54p8jhwy8Yz2D6%2B5cTaY137uyKlFj2BAwuYaCHxQ%2FLhPVN\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f0eb2568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1088x816, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd25400d8ce34edbb812d83373806660","sha1":"e88c121e25ed8b6997d8766d373962020893bff6","sha256":"0eeab561e2499a923ca64ef9008366ecd6c054ab7d7078be745e2539135f06ca","sha512":"ef34e6c5db7f95299e97d728736e13cf580fa7e823ff7746f935439a2a370d98ba547d1a335133aeb36119a974a0205780b04707ddb712a93259de156754d8a6","ssdeep":"384:UJYPRCItmo6peC3Z00u+UMzAi1fz8MdTOkgAnSQBG+/B7:UsM+IUMEiNXKmlA+/B7","tlshash":"d162c07d92911207a49ceb734d5f20612926c479d1466a9e37990bc0ebf6f341fcd84a","first_seen":"2025-08-29T16:27:52.84407Z","last_seen":"2025-09-05T06:29:02.268737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/08/IMG_20250820_103728.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/IMG_20250820_103728.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21964\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Wed, 20 Aug 2025 03:54:32 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xkuTQvzLUmTlrS8m3DYgChT8r9Z3BjDcnZJp37wSki%2FQPDpgZEi1lWA1CJwS2ab4CVPFIuL1MIZgqCuYzYUc53%2Bv8E2pxv3Lq%2FzXxyYW\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f1eb8568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21964,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1203x902, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"da815318cd96d9145ca21760be55dbed","sha1":"bdbd0f1948baa9640f384988238365539b24f9e5","sha256":"0f6fda9ca85086b1a47b8ad9890507883a584a419a8b5b4b65446447bd6df131","sha512":"e2bfc8215a1b70405e42e6b617efd3a60b69e4a4e97eb98d15f6f28787877277895bd23f059d01130f8eee11e0e99f4267bf32719fba7a1e9b50e4fe824209f0","ssdeep":"384:TiNa+6ealX5e3FuDf3GQR7wnLPLFmPPQQG7OYmZYB98dnMWaAnmouLQQ1zDbDpER:Ticawesb3hwnFmPIpnmZ28dsBP13ZSV","tlshash":"b9a2d1471fb97b9bc825e1b901ee842c4045d40f3b2c73c52e97a0956f1e2bd50b93ac","first_seen":"2025-08-29T16:27:52.845595Z","last_seen":"2025-08-29T16:27:52.845595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/06/IMG_20250611_085835.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/IMG_20250611_085835.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14440\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 29 Aug 2026 16:27:18 GMT\r\nlast-modified: Wed, 11 Jun 2025 02:01:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g9QW5c08czn2JjBBznr0SBvqVyZp1qXH9oTNcLkK6Z%2BsXar7XJafk%2FO%2FGaj0a7NfuEd1kXSRPRIUHKWzlUJvTOZXBh13XDumwrcuzaMg\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f1eba568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14440,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 996x747, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c1e714388704dd0aa518773f42e2ea7c","sha1":"fa5e728a2c2259d7f4d1249894351e2bd21ffeea","sha256":"18e3a948389613acdcbeb6f5943f13b45bfa81d090f163d9771e5b67ceb27dc4","sha512":"2363b9da5a94babf471dda7ba44c06fb5f61ba3eeea7f40a72d77f4616ba8f95f811635cf6f22141d159664602edeb11bf4311f6144a34f96beaf4d5b84fa99b","ssdeep":"384:Ie1lr5GiyQO+ZNL/u/3Vjta759GVIJtF49o:IeMQRO/3VBYvrYo","tlshash":"a352d0b9953c1551a1cd70fb7f9ec446b933119aa02a9f3c2784c0074ae1ece390ef68","first_seen":"2025-08-29T16:27:52.847378Z","last_seen":"2025-08-29T16:27:52.847378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":685,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/css/embed.css","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 22:05:00 GMT","end":"Mon, 29 Sep 2025 23:04:57 GMT"},"fingerprint":{"sha1":"26:61:CA:6E:DD:B0:60:E8:C4:A8:7B:C3:6C:83:89:43:D1:E2:C5:D7","sha256":"29:56:1F:AB:6E:79:B9:DA:69:1B:5C:D5:4B:31:EB:43:FD:16:0E:33:DE:21:C1:27:6B:BF:B2:B8:45:6E:13:6E"}}},"request":{"raw":"GET /css/embed.css HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 05 Mar 2025 20:32:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67c8b4d2-13811\"\r\nexpires: Sun, 28 Sep 2025 01:13:44 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 41705\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AiDdwKKHRXfrk7J3chhet6ktXqqua2G41p7bG0bNOXeqdQWlaRFaDPIKNAtLApU7Uw3ZMGLPlxxDyrl87nRBuDxMmDq2cgLfyw%3D%3D\"}]}\r\ncf-ray: 976d6a4088e80b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79889,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (40048)","md5":"c4907b4a84bd80e4ccec940bf9d7f1ec","sha1":"d36c11083cb2f86b99e2380d8c22cf13e74dbb29","sha256":"f9535c07a6c50f5094b5a0caf5475823b3b32e9998a72cf6ad6d811dc7985d3d","sha512":"1c4f394681b1d51f65c9453fb28a8dbbc79306205b19d7374b4f1667d5a54c4c2cd698d04c221aae5406b3b5e9eb2234272470daff8804ebb1ffb030a45e1ea2","ssdeep":"1536:fVjjsZkKbfYr0AzRbb5cVqo1Q8V5VezTxCyF:BjsZtYr0AzRbb5cVqom6ZE","tlshash":"4573d8c1f059cbfd027e8686eec0e726932cf561d8a258d9f2273e7c8dda146216f194","first_seen":"2025-04-07T00:12:33.700856Z","last_seen":"2026-04-01T22:14:46.380219Z","times_seen":1104,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":128,"dns":23,"connect":2,"send":0,"wait":16,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/cache/speedycache/vitaminkuofc.com/assets/d1b0c20c3094a986-style.css","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/cache/speedycache/vitaminkuofc.com/assets/d1b0c20c3094a986-style.css HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: text/css\r\ncontent-length: 10554\r\ncache-control: public, max-age=172800\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Wed, 27 Aug 2025 16:06:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TpPbZhnvSlYwkwpnz8qSZmVpovsKE9Lw0SrMN67goNpKZwu8PTcHzEnVLRJZdfZNxmypKWxBPW5%2BZWF1f2nuhKeGwT4nSdeBFgggpNm5\"}]}\r\ncf-ray: 976d6a3b8e81568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52424,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52424), with no line terminators","md5":"97c95b935eb02854ec08e08c6ad682a3","sha1":"53452709211ac18c097124cca85e2c2748fb2ccb","sha256":"7c2c6d95c7e15f2e70ca1b0117d161aefad66765abd8bf24f5dd024b48893a65","sha512":"b856ad57339f00d32d06bd72216d3ede1460b786c93272a38742bd9197898fa8cc8a70e15370884448a4d6c7eb7b9a0665040f0998fa05f9fc21a95c3fe04ded","ssdeep":"1536:qWoEmtSP6kcFcbQvIepN07+pQ75c7Z16wOt16wOM:Ms5","tlshash":"2b33a861e564241ca333c736ffd1b7943138a122da435aeef4aae325cac75550373b89","first_seen":"2025-04-19T11:49:45.919128Z","last_seen":"2026-03-14T06:42:29.0889Z","times_seen":26,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 29744\r\ncache-control: public, max-age=172800\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Mon, 28 Aug 2023 09:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jgVa8TjWiHjKaN67vZBocszOTYTnsKBrM9l3YL4%2BT7k0OW5TkBoxBOHbtemC4YGx%2BHJmbfrpuEegoM%2BnROT7Gcbvha7Nrc%2FKoSc2a0gZ\"}]}\r\ncf-ray: 976d6a3b8e83568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T13:49:26.298459Z","times_seen":685383,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Wed, 25 Jun 2025 06:25:45 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pNvKr96OhEpgpRApL2fvNtw%2FPbN6Ri3nRKz8Z103XQd019e6SP3NGDgkQ0Txte%2FVwa8nU1iM8r1534Zta9TOA%2FOu5ZaRxOBkhP8gVOz1\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3d2e9e568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-04T13:47:07.150669Z","times_seen":410533,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/05/Telegram-Logo-PNG-Free-Download.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:19.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/Telegram-Logo-PNG-Free-Download.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nCookie: cf_clearance=VtbIKjj5egbk8oacuSdzQXG8CrjLy5lLHIs5GQbJrFw-1756484838-1.2.1.1-5ScnAZLxqgq1.tQtIUg4VTUJKI3Yo08sFZxL03Ci00gwCt5fcPqNBSLrqPHGc6U68xXfUA4Cmy8drTTDfMJJS2Llq6xW07WT6M.NuFf9v1HJjm3bImy9VS1tU.u6AQcyOD24laLsyQkEm9Z77_YDUU8YA9NiBJzf87M8MrtLI_rxHJet7o_lWqyTigErhKYUYQ55iQbl7183u9nRyE0ibKw4MKI5eulN.1hZnNxIgGw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29252\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 28 Aug 2026 00:26:26 GMT\r\nlast-modified: Fri, 02 May 2025 14:07:35 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144052\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HdZ0d28ew%2B%2F5%2Fc3LLSakU2jjT7UNUcFAkTIMWYgPu1lyDYdSwtguwkJxZkLy7XHKK7xVB8EqD9NOgCCQLSZyNJ4p5oo2%2Fdx3vDmi%2Brvf\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a44cf1c568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 728x724, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2686f3eccc9789a67d64ff859db80474","sha1":"c0ea383877e31ee2107c8da2abb0ff147df6ff0e","sha256":"9c15cbf4cb0f56e9e88fc15a0003fe1a0d7972652d281986dae7422bc62652c5","sha512":"ab600920e0946b28b7b7656abd132d32c27d032e77e7a9af16783f00920c84d8ab1017629897275b8b316920857e87130e6f1defcb15370f570be689d7fa77f3","ssdeep":"768:JZgjzvK9yQ89LH1Wxxs26FpdiiN3GQBWbVvZ:JGvi9yQ6z1Wxupfbi9Z","tlshash":"c4d2e1619813d3bdb4d6bd5a5bd0fd00ee66dedd11cac14a38022146273c1ad1d2ca3f","first_seen":"2025-07-26T10:47:38.811636Z","last_seen":"2026-01-17T13:02:46.932794Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/solid.gif?z=1941940\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.578\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=VRNa-f\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=gG65KV0aHR0cHM6Ly92aXRhbWlua3VvZmMuY29tLw\u0026ix=0\u0026x=896\u0026y=504\u0026md=0\u0026psu=a9OxEe7aHR0cHM6Ly9kLXMuaW8vZS9iZnlmbmc2cmUwaTY\u0026afid=5463137547957760\u0026eclog=0\u0026seu=XTBZ7QfaHR0cHM6Ly92aXRhbWlua3VvZmMuY29tLw\u0026snc=0\u0026ssc=0\u0026vp=1\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Fri, 15 Aug 2025 23:04:44 GMT","end":"Wed, 11 Feb 2026 22:59:00 GMT"},"fingerprint":{"sha1":"E1:AB:8F:47:06:32:4C:5C:7E:36:C8:FD:F4:40:EB:00:5D:EA:74:72","sha256":"6A:F2:F4:F6:59:8D:BE:DA:D5:DF:35:86:A4:7F:81:AE:3B:3B:2E:D7:26:C5:FD:71:F7:77:84:BA:0D:BC:F7:BF"}}},"request":{"raw":"POST /solid.gif?z=1941940\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.578\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=VRNa-f\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=gG65KV0aHR0cHM6Ly92aXRhbWlua3VvZmMuY29tLw\u0026ix=0\u0026x=896\u0026y=504\u0026md=0\u0026psu=a9OxEe7aHR0cHM6Ly9kLXMuaW8vZS9iZnlmbmc2cmUwaTY\u0026afid=5463137547957760\u0026eclog=0\u0026seu=XTBZ7QfaHR0cHM6Ly92aXRhbWlua3VvZmMuY29tLw\u0026snc=0\u0026ssc=0\u0026vp=1\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://d-s.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: UID=2508291127d7230d78b1c94fcebdf821dce6; Path=/; Expires=Fri, 02 Oct 2026 16:27:19 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Fri, 02 Oct 2026 16:27:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Fri, 02 Oct 2026 16:27:19 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-04T13:22:08.46737Z","times_seen":20446,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=AdBytiMxbwhQI712putWVaVxPXw0RF4mJjRn_DH11AsNtevO_Zhkz1QK93WaAC5zlXYg-I7nB2lFrg","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:23:22 GMT","end":"Mon, 03 Nov 2025 19:23:21 GMT"},"fingerprint":{"sha1":"3E:26:D2:5A:C7:91:21:F0:A5:DF:2D:B3:FE:CC:22:E5:04:72:BA:E1","sha256":"C1:32:E8:39:F2:87:CE:BF:D8:BA:88:F4:CC:52:83:E2:53:F6:B7:5A:C4:81:03:72:91:C2:45:BB:4A:27:24:CA"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=AdBytiMxbwhQI712putWVaVxPXw0RF4mJjRn_DH11AsNtevO_Zhkz1QK93WaAC5zlXYg-I7nB2lFrg HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d-s.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:_j3ZuoVjUPk_ycT_jm_0iGDS3nIT_Q:f-J5Wt3ntrRoyte8;Path=/;Expires=Sun, 29-Aug-2027 16:27:19 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AdBytiP4-3cC9hH5VE5X2dWNBxfqorLIqEgQTYV6TVLqHxbCNfuzdxLs5dodRuW4bV7FVraMh9EhyQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1661000514%3A1756484839782765\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: script-src 'nonce-lVlBhheMlhogG2M1rKznxg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 414\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/05/IMG_20250522_120958.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/IMG_20250522_120958.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14240\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 29 Aug 2026 16:27:18 GMT\r\nlast-modified: Thu, 22 May 2025 05:11:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ElOFNKI9HduoLAegc%2F5Y0Ex0MqT5%2FqiW9nsKZMjeHsbNnPEgZxaocLJI4JsNW3xqQK08Re%2BA%2Fdicd8GSpKLKe%2BBXXbdYz%2FtXgx7edmcY\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f1eb9568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14240,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1091x818, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aefb692b5cf0c08767d4c0410eb5ac88","sha1":"89a6c0f896e0aa29f17f0eb091c45230091b1f95","sha256":"9b3bbad55f182a55679c3950f441cfe9a7850611babe4ca67d871bf7cbe010cc","sha512":"002e490270307e825e673c7febfb2b58979d9606a0a7b89bce010e08c6059c66445a2df1c33e98dab1127f7d969f8e2d15163ecd198b5b05d460b20efcb6e5ec","ssdeep":"384:hQD8VgPRSdy+Ty65KrP8OccFgGvc0/Y3bSJLREAqfJE:hQa6Sdy+e6WP8OZnc0/ISJLRmJE","tlshash":"5b52c0b7dbb4772d9a15a789de6c0ec8818e973c9069d192323a12c392b12fc17b7413","first_seen":"2025-08-29T16:27:52.854801Z","last_seen":"2026-01-17T13:02:46.883849Z","times_seen":2,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/videojs-hotkeys/0.2.28/videojs.hotkeys.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1571\r\ncf-ray: 976d6a402a1f568e-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"630ad3e5-623\"\r\nlast-modified: Sun, 28 Aug 2022 02:33:09 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 50643\r\nexpires: Wed, 19 Aug 2026 16:27:18 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OVzR4gYUcYPWO3KkT7pXO8s2dco%2Bic9w6idorVSYdgbJUDSOjYsLUQ1qfEtglOhB9i3UpgpU88iEHaUFxmZT6ObuiIg09F6gNUoVx4TSl1%2FnpJ2FaoVgjcHbylZhtrq4Y2Lb0iq1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4580,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4505)","md5":"f2ecb2bd8a424c8e8cf507ce8bd933c2","sha1":"3cbc08ca052ea25c3b0834b9291a3ca1e9122e26","sha256":"4c0745052abbb26087a707bb0a043b43c393674055ba2d4452ac89e6923eb099","sha512":"5c5cb01b30e7dad3dcfad17845b399768970d755c1743dce82602f9c2fb2a220f5a8148656c8593d912ae9dd576330ab66936b557a4f72e60f771de4d1066473","ssdeep":"96:GGArczM0HsUJKjS0kCofLMdAb71JUbhCYRE6eVK5HtkX5ugRrqaTd:rAIzM0MWKjJkvId4YbbRLp5SX57nd","tlshash":"c291a6d87043b47241f99ae564bb948b13722da76c0c007a251debfc3dbd79b43038aa","first_seen":"2023-03-09T00:26:57Z","last_seen":"2026-04-01T22:14:46.056212Z","times_seen":2026,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":60,"dns":4,"connect":1,"send":0,"wait":46,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.doodcdn.io/js/embed3.js","fqdn":"static.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 22:05:00 GMT","end":"Mon, 29 Sep 2025 23:04:57 GMT"},"fingerprint":{"sha1":"26:61:CA:6E:DD:B0:60:E8:C4:A8:7B:C3:6C:83:89:43:D1:E2:C5:D7","sha256":"29:56:1F:AB:6E:79:B9:DA:69:1B:5C:D5:4B:31:EB:43:FD:16:0E:33:DE:21:C1:27:6B:BF:B2:B8:45:6E:13:6E"}}},"request":{"raw":"GET /js/embed3.js HTTP/1.1\r\nHost: static.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 112942\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 05 Mar 2025 20:27:01 GMT\r\netag: \"67c8b395-1b92e\"\r\nexpires: Sat, 27 Sep 2025 19:15:53 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 39938\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FO%2Bs8RQsihbmzUua3I5EFZjx9L7LJFaR5eBu5Qqt9lew%2FIHyY4I3YDhK62EnB9CLAF8mBdYPEbEyGyo0O9%2F%2FerjVqpHJJKG6XBhudV%2Bu\"}]}\r\ncf-ray: 976d6a4098f30b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112942,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27236)","md5":"2cdc3aa1ffb8ca7b629675d83b2862dc","sha1":"be0a9072b9559c544d1c852c4559f5a64833c888","sha256":"f23168d2b1910ff6e49bab3debce5786f7859e9e65ceda07a5554b66fd60f876","sha512":"70c907c7e85489a51b60cea2064bfc9a6283863687552188ecaa05dc49ea87af6dde390b56dafd955b4d01aca5fc66d319edf7b7abb98c1f707e59d868468761","ssdeep":"1536:mSwx/jSB9d9mPZUao/oj1jxtFzkYZo2nopAMiu4aMVn3rRRk7U5oAAT5Smka7azH:5wxo9mPZUazNNSAMi3E+G7gp","tlshash":"0bb32bc87392b0a257e37079113f610bf23a5d69b80c8458b159d9e97cf8d8a8237f79","first_seen":"2025-03-05T21:16:40.807889Z","last_seen":"2026-04-01T22:14:45.950605Z","times_seen":1163,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":35,"connect":17,"send":0,"wait":19,"receive":4,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/cache/speedycache/vitaminkuofc.com/assets/eca10535dd65f497-navigation.js","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/cache/speedycache/vitaminkuofc.com/assets/eca10535dd65f497-navigation.js HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1034\r\ncache-control: public, max-age=172800\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Thu, 28 Aug 2025 00:26:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzw6RC16PlzS64B2UPla2vSlp7cvvvmgcqeURwHbCDYAOwVSXMdCKyghfAJBDeoG6aLXcMO4hlfAzHm0ovShfKUvA%2BpdWnHBoH2Qf14W\"}]}\r\ncf-ray: 976d6a3b9e86568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"29137269129644ed4e17ac1fdea84d0f","sha1":"0e9281cbcdf3a46eaaeb5fb5a4e52bb0a6df3037","sha256":"a0d27c820524ceac803627fcbd790415bf8178142cc7733ea1ad773a52e74324","sha512":"df21033ef64b4112e5e424944d21b09e8774944b88c3991af098f7baa4bfc2ad8be22a8852914644e3c6e7b1ec9a61373fd9253c0650da98ea8b9222a3da6b3a","ssdeep":"","tlshash":"5261625e3d401a7e64ff26db30eb53bd3f21091ada0d1811f1f8c0a15e7809129abe9d","first_seen":"2025-08-15T08:46:17.118814Z","last_seen":"2025-09-05T06:29:02.209353Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/05/Perfect-padu.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/Perfect-padu.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16246\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 29 Aug 2026 16:27:18 GMT\r\nlast-modified: Sun, 04 May 2025 07:20:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sekevv7lXMMPaPydLq2DaERlR%2Fp%2FqhP8FWciJDL25dnhIwt7%2BR3N31k7Xhw445QXAIrOd3%2FukQ3bBv3GVKbZtMMftOn7YkuLxMgv6ZGC\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f0eaf568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc8a68b4efb4be25b88f0f85840a6511","sha1":"d4e711df014a6c408c7299e6d82436ec7309dcdb","sha256":"823c758d11456c3110957515822dc10329bdc875656eb0738aed2d88b865c5c9","sha512":"054eed2a63afb0a948219a35134250fec8939ac2720cce7bc21e21a25f4b63fff1b292e6e0b54b982cf601054a447b3f47b302265c4f33e2431e257e42f9b731","ssdeep":"384:uwcvcwbc8vD+MBtTT2F7cbX4DM5Y1el44nJbWU:XiPQ8vDr5C+Ez1elF0","tlshash":"19729c32532ab126f94caff017419b43a72148421221bb1702ea4f7f6ad4983fd58cef","first_seen":"2025-08-29T16:27:52.866243Z","last_seen":"2025-08-29T16:27:52.866243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/08/IMG_20250820_103919.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/IMG_20250820_103919.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25222\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 29 Aug 2026 16:27:18 GMT\r\nlast-modified: Thu, 21 Aug 2025 06:16:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FPGH0me%2FartR3ipdnSRvLaJnnYdg4mNE5WLT3AO6kBGjOw1r4UwZOOA1xk5izBvXkVA%2Fwtq%2FavOnhMGWBX1cCrtSip6FkGRqnHKPwaNE\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f0eb4568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":25222,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1304x978, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6f97fc457a07038cd7850af317d252f7","sha1":"8bc82d9055f9467646d73f0cdfe44d3b8881f3ff","sha256":"d2eb9a2f650c61aab62656859750abce1bb892ad04adb694733cfdee1705f753","sha512":"27a56cb12863a1b882c77fd7f13b23ba1cc7a85289186ac953ce3e77e1f8808750c3fba317249a3e89649f80486869243408e35d3e178f8f654cc52c05de9979","ssdeep":"768:5dH8cYPhBanyFuHmg61Y9Z06vJqSqdtR6XL3:DH8j+2wC2lqdtg7","tlshash":"09b2c09f29f04d2032e9bc706183e70eaa75d539175321712253af69ef44396ac2ef36","first_seen":"2025-08-29T16:27:52.869098Z","last_seen":"2026-01-17T13:02:46.916934Z","times_seen":2,"resource_available":false,"data":null}},"time_used":887,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":880,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/get_slides/2196/gnvr4m3d00q8hkly.jpg","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 22:05:00 GMT","end":"Mon, 29 Sep 2025 23:04:57 GMT"},"fingerprint":{"sha1":"26:61:CA:6E:DD:B0:60:E8:C4:A8:7B:C3:6C:83:89:43:D1:E2:C5:D7","sha256":"29:56:1F:AB:6E:79:B9:DA:69:1B:5C:D5:4B:31:EB:43:FD:16:0E:33:DE:21:C1:27:6B:BF:B2:B8:45:6E:13:6E"}}},"request":{"raw":"GET /get_slides/2196/gnvr4m3d00q8hkly.jpg HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://d-s.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: text/vtt\r\nvary: accept-encoding\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Aug 2025 02:37:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzQKTKWhZXby4cbKcjYgi6dbzC0y5J8GXrqEli0JloikOTgeaTurfhPi7yQ81tgyLVwyjTDVdQJrk4OkZqeWwNzqAbaaTSdY8w%3D%3D\"}]}\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 976d6a46cbb556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3158,"size_decoded":0,"mime_type":"text/vtt","magic":"ASCII text","md5":"1db605bae8b5c6b7392a347970cf58a8","sha1":"f7e184f39b274a91c5cc5a208543fbbb31dc6cf5","sha256":"a9e690ce4be1090785dbed325667fedd859eb5ddcda75d073f883613ca1112cf","sha512":"5080314eae966dc765d3c8610dd5922096c04a4cd9be95dfe48ef37659d3002e3edc4f5cdc037671459a6e05edd706b0522ac5328191d33671d7b277401a783a","ssdeep":"","tlshash":"285181f0d3686c41eae01b0193bdb56570a6739f7dc085c168f470467e9fa89f0d539a","first_seen":"2025-08-29T16:27:52.8713Z","last_seen":"2025-08-29T16:27:52.8713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-includes/css/dist/block-library/style.min.css?ver=6.8.2","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.2 HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: text/css\r\ncontent-length: 14360\r\ncache-control: public, max-age=172800\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Wed, 16 Jul 2025 08:47:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tgxrhk88Na63VcMgPUhZXRHrb1FkdNeP1ok3%2Bh8%2FMFyYUS%2BQ%2Fkzg5Q0gd9TRF1dXauWzR1cZNHV8mOb8%2FLSvAG1yhyZfdgj9CmtnxqIZ\"}]}\r\ncf-ray: 976d6a3b8e7f568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-04-04T13:47:48.523889Z","times_seen":164222,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d-s.io/pass_md5/210748063-91-90-1756484838-d52ec7168e87b77c7c7f4e95fbc3f637/txhlbeg8btgs9bmjcp7a0vn6","fqdn":"d-s.io","domain":"d-s.io","tld":"io"},"ip":{"addr":"104.26.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d-s.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 17:31:26 GMT","end":"Sun, 26 Oct 2025 18:31:21 GMT"},"fingerprint":{"sha1":"A5:9E:DD:39:BC:D0:D3:1C:5E:0F:69:58:0D:36:54:CB:A5:E3:E6:F9","sha256":"74:2B:9E:A8:87:1C:98:DA:61:BF:3B:46:A9:98:6B:CA:C3:3E:03:0C:40:B8:5E:77:ED:50:9C:BA:76:DA:D8:B4"}}},"request":{"raw":"GET /pass_md5/210748063-91-90-1756484838-d52ec7168e87b77c7c7f4e95fbc3f637/txhlbeg8btgs9bmjcp7a0vn6 HTTP/1.1\r\nHost: d-s.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/e/bfyfng6re0i6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9DQrMVGnAaTVKIobvXzC7tSAc7UqoDNFGblPQoRTdo07oBpboKaRpWLGAUvY4nghbobZjfY%2B03%2FfRzMaP4varRMO0A%3D%3D\"}]}\r\ncf-ray: 976d6a437dae5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"a79c59f64d083bd6a2177a7f70afc2fe","sha1":"fb22568244e9e91b5ca44ea3f769571fc1965433","sha256":"0de0700085a356d544aa39697a1c68b2cc5411a9037545f4f263739628596533","sha512":"d119c70a77616d3beff2bcb5ec4380bd3121f7a4d8b0966e5cc927ed747186965176f8d9a6f1b23f2c95e4ef448224f52cb0e75032ee7933027365548a188068","ssdeep":"","tlshash":"81b0121213908b970dc1a0dc9428925d4c45154c097fc281462d3c564f0a8d3204a221","first_seen":"2025-08-29T16:27:52.874315Z","last_seen":"2025-08-29T16:27:52.874315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ingajoytowork.org/Q3JsdkQiEA8beyJPDlAxMR5RU3YFV14wIHAXGRR2JkBdEid1GlxYJy8dGRIiMR0CAmotFxhTdgUQOjASABMWL3cMGxs4BxAzVDwoGjo2MRJxJRswKiAIJSwROTgDPC8ZNAkcMzcmOgEqDBsbFAc0Mxs6AHIYJSINNTMENyMPCzYhBi07WT8zFSANLgktMDogNBk1PT0RKSgDEi9yMSYyKzMkACcwDws5NxY5NxQ/FRojJSIWZkAqNCgoBzw1cAskXzAqATRYLx4LMBshPHcYPDUzEyU/OykZQwcxCyo0AiEVGR42ITwhN14VHBlDBzENOQUfLhUJCjYRaQE9LjEVNxYqThAZCggYExIrAT92JysIRBIuFgcjAyUqLgETcjcUOC0oNylEHRcRKgUMGTU6DBM0FhQsdwo8NA8dNDgtJAsgJQ8zEyQkCxN3CTw9RCgoVAYFKy0CUSIhLSQ5AyMuGw","fqdn":"ingajoytowork.org","domain":"ingajoytowork.org","tld":"org"},"ip":{"addr":"52.85.49.55","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingajoytowork.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Tue, 12 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:20:A2:52:47:63:26:D3:51:40:E7:4F:D5:E6:3A:98:31:CA:0C:9D","sha256":"2A:D9:DB:EE:37:D7:A4:B0:E8:1F:6B:B7:D6:34:20:9F:D3:21:3E:DF:0F:94:88:FE:83:51:DE:D3:DB:15:D6:5B"}}},"request":{"raw":"GET /Q3JsdkQiEA8beyJPDlAxMR5RU3YFV14wIHAXGRR2JkBdEid1GlxYJy8dGRIiMR0CAmotFxhTdgUQOjASABMWL3cMGxs4BxAzVDwoGjo2MRJxJRswKiAIJSwROTgDPC8ZNAkcMzcmOgEqDBsbFAc0Mxs6AHIYJSINNTMENyMPCzYhBi07WT8zFSANLgktMDogNBk1PT0RKSgDEi9yMSYyKzMkACcwDws5NxY5NxQ/FRojJSIWZkAqNCgoBzw1cAskXzAqATRYLx4LMBshPHcYPDUzEyU/OykZQwcxCyo0AiEVGR42ITwhN14VHBlDBzENOQUfLhUJCjYRaQE9LjEVNxYqThAZCggYExIrAT92JysIRBIuFgcjAyUqLgETcjcUOC0oNylEHRcRKgUMGTU6DBM0FhQsdwo8NA8dNDgtJAsgJQ8zEyQkCxN3CTw9RCgoVAYFKy0CUSIhLSQ5AyMuGw HTTP/1.1\r\nHost: ingajoytowork.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1198\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\naccept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List\r\nset-cookie: AWSALB=RiXBSjT9qeVFtQkTkk9dzchIey5mSH7bwwXzagQXtbguaAPpxn0p4Q/2ztD6AzumPz77fsfBOMZKcnOiWXTly/N3pK2/bIwk80dxoq58K8QyxiSDTUFnWHommvqm; Expires=Fri, 05 Sep 2025 16:27:19 GMT; Path=/\nAWSALBCORS=RiXBSjT9qeVFtQkTkk9dzchIey5mSH7bwwXzagQXtbguaAPpxn0p4Q/2ztD6AzumPz77fsfBOMZKcnOiWXTly/N3pK2/bIwk80dxoq58K8QyxiSDTUFnWHommvqm; Expires=Fri, 05 Sep 2025 16:27:19 GMT; Path=/; SameSite=None\r\nserver: openresty/1.17.8.2\r\ncache-control: no-store, no-cache, must-revalidate, no-transform\r\npragma: no-cache\r\np3p: CP=\"NID DSP ALL COR\"\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 8250617d32eb5ab8f209b802320fccba.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL50-C2\r\nx-amz-cf-id: 41wbzRN8Ilj2H0avmI1Vkc95wvoTZN3WcfgRoxlEJkhDIxe4A0jBvw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.17.8.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":3052,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3052), with no line terminators","md5":"8aecece47eaf409508ee9e32f061785d","sha1":"34abf3c0de8d7cf4eb04941a8b85ab3fc3d2c958","sha256":"71fb64fa4319624569468fb5b290fdd335cdc70478d7180052d5cca981035c49","sha512":"02302d04d3c1ad90aab7fc76b5438f2073788232e3783e25efad99fd8e8d3d4958fe3a511599f989e27cf7f66feb6ce15849dbf959e4825e9bb7bcba9860aa11","ssdeep":"","tlshash":"2d51f08e34f3a082c2b66065053bb59afa285a90834cca18867d96bcbd305e96317f4c","first_seen":"2025-08-29T16:27:52.8762Z","last_seen":"2025-08-29T16:27:52.8762Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":91,"dns":35,"connect":15,"send":0,"wait":122,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/?ebued=1004073","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?ebued=1004073 HTTP/1.1\r\nHost: d3eub2e21dc6h0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 79231\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: ceb3X2_jaZXnLQKuzYGQC6VzRekJMNR9CyxjPIzSu3EMfMFh6JidLg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":232493,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)","md5":"34eec0f452627454f163b5414559b5c8","sha1":"86fe834882578cd65fca921262ffaf5d308a7625","sha256":"19d203d8417787024e207bcf9ac9c5d48f98ab7b14cdbc25534a071e7f19bc75","sha512":"5899e2b25ed6a1949c0f6977b8f62905e19b0fa164b90fd000f18c0204fd53545eeaa73165d3b35fc8c2d08f3c3e4c1ba9137fc68980d4a9e66b6c9c43d9418d","ssdeep":"3072:XBUNPgDYzi07L02raYDbe+Y5UKS+7L0x2i++Zc53+Zc0M8EJ:XuN4DUi07w2rnXFZU3+iAm","tlshash":"33345cc9ba923469836374f540bf124ab23f5a69b8084dd4f496d4d07db8d0a437bfac","first_seen":"2025-08-29T16:27:52.878163Z","last_seen":"2025-08-29T16:27:52.878163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":48,"connect":11,"send":0,"wait":177,"receive":21,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://d-s.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 976d6a4098f1b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T13:49:37.592963Z","times_seen":330185,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":30,"connect":20,"send":0,"wait":38,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"utysolomonaut.com/TEE1cDRjflYDCQEVeyNlJyZzMgYWNlMHbQAYfT4Rfgd3MWIiJX1AEjgoUU0FfHEBQAN/Z0UZUHFwEwNALTVAAwl9Z1weUiN8EwYJfW8GRBp/dxtGEjl8BFZAPCBSTQVqMUEEWHFwAkUCeHkBSAd0eAJJ","fqdn":"utysolomonaut.com","domain":"utysolomonaut.com","tld":"com"},"ip":{"addr":"104.21.70.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utysolomonaut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 06:52:48 GMT","end":"Fri, 07 Nov 2025 07:51:04 GMT"},"fingerprint":{"sha1":"DA:75:DE:6A:F2:F5:E7:32:D2:34:D4:CB:72:F4:BE:17:12:66:C1:6E","sha256":"AC:C9:C2:C8:62:F0:68:4D:7E:4C:CD:26:EE:72:03:F9:24:CC:8E:FC:04:6E:BB:1A:50:70:09:9C:6F:16:21:8B"}}},"request":{"raw":"GET /TEE1cDRjflYDCQEVeyNlJyZzMgYWNlMHbQAYfT4Rfgd3MWIiJX1AEjgoUU0FfHEBQAN/Z0UZUHFwEwNALTVAAwl9Z1weUiN8EwYJfW8GRBp/dxtGEjl8BFZAPCBSTQVqMUEEWHFwAkUCeHkBSAd0eAJJ HTTP/1.1\r\nHost: utysolomonaut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IbkzuW3EBGKi4akAKpDGognkER5HFC%2Fd9TsW9rJkrRIThAAGyPziuTtq37tJGr3RUKSUNXoAgOwJEGpKFuv2ekbEOhpBlJMJ3NtNa3%2BbCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 976d6a447aec0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":84,"dns":11,"connect":1,"send":0,"wait":120,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wrathypenitis.help/cuid/?f=https%3A%2F%2Fd-s.io","fqdn":"wrathypenitis.help","domain":"wrathypenitis.help","tld":"help"},"ip":{"addr":"23.109.170.61","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wrathypenitis.help","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 21 Jul 2025 00:00:00 GMT","end":"Sun, 19 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"57:1C:3C:D5:C1:F2:62:8A:E4:97:AB:47:08:1D:6D:20:A7:31:0F:F1","sha256":"D5:34:58:63:74:58:D1:71:8E:01:AA:80:04:67:17:F5:C4:2B:DD:52:20:24:6B:9C:67:2B:D8:E4:7B:18:74:22"}}},"request":{"raw":"OPTIONS /cuid/?f=https%3A%2F%2Fd-s.io HTTP/1.1\r\nHost: wrathypenitis.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://d-s.io/\r\nOrigin: https://d-s.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:27:19 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://d-s.io\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":262,"dns":7,"connect":32,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3eub2e21dc6h0.cloudfront.net/bVFVCazY3OiwNCSA8JlYHZGV2WwFnczIZUzJoJkZFejwtTVwnOiwbCwAwLD1jITIvAhAgLyZWBnI5IwVRaXMnBVVpZGQKUjZodk1CJDopVlQtLyUARzExIQYQITR/BlkuPC4HV3FnBF4YZHBwWx4jPCwPWSMmZ1kGOiFnWQZlZWxbE2cXZ1kGIzwsXQJxZg-BOBGQtdF8TZxdnWQYmI2dYd2VmdkUGfXBwW1ExNikEE2YTcFsHZGVzWwdxZ3INXyYwJAROcWcEWgVge3JNQ2lk","fqdn":"d3eub2e21dc6h0.cloudfront.net","domain":"d3eub2e21dc6h0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ingajoytowork.org/Q3JsdkQiEA8beyJPDlAxMR5RU3YFV14wIHAXGRR2JkBdEid1GlxYJy8dGRIiMR0CAmotFxhTdgUQOjASABMWL3cMGxs4BxAzVDwoGjo2MRJxJRswKiAIJSwROTgDPC8ZNAkcMzcmOgEqDBsbFAc0Mxs6AHIYJSINNTMENyMPCzYhBi07WT8zFSANLgktMDogNBk1PT0RKSgDEi9yMSYyKzMkACcwDws5NxY5NxQ/FRojJSIWZkAqNCgoBzw1cAskXzAqATRYLx4LMBshPHcYPDUzEyU/OykZQwcxCyo0AiEVGR42ITwhN14VHBlDBzENOQUfLhUJCjYRaQE9LjEVNxYqThAZCggYExIrAT92JysIRBIuFgcjAyUqLgETcjcUOC0oNylEHRcRKgUMGTU6DBM0FhQsdwo8NA8dNDgtJAsgJQ8zEyQkCxN3CTw9RCgoVAYFKy0CUSIhLSQ5AyMuGw","date":"2025-08-29T16:27:19.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /bVFVCazY3OiwNCSA8JlYHZGV2WwFnczIZUzJoJkZFejwtTVwnOiwbCwAwLD1jITIvAhAgLyZWBnI5IwVRaXMnBVVpZGQKUjZodk1CJDopVlQtLyUARzExIQYQITR/BlkuPC4HV3FnBF4YZHBwWx4jPCwPWSMmZ1kGOiFnWQZlZWxbE2cXZ1kGIzwsXQJxZg-BOBGQtdF8TZxdnWQYmI2dYd2VmdkUGfXBwW1ExNikEE2YTcFsHZGVzWwdxZ3INXyYwJAROcWcEWgVge3JNQ2lk HTTP/1.1\r\nHost: d3eub2e21dc6h0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ingajoytowork.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 593\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: kC0D1vHtOL4HqjzlSxxmrIjoP61y686psKoevgFzmQP47N9PF87Kkg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":845,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (845), with no line terminators","md5":"8eab70d5a469bd5cdc181c7afe5f7dfc","sha1":"a5896d02251ebd27a6551fba686dd3e1b5d448d3","sha256":"115de1dd8b8658903d732ab4f4b11e286d0040acac4a1c241b385db2c1b22c15","sha512":"6091b78d719fc4bed375a3f6ac0055687bdd2cf6382b96680552863156e62cdfc6af55d697d2aede8aee3f23a53adc5ba7964f0f45f2e78b9d583d093ec104c9","ssdeep":"","tlshash":"06018abee6500c967423625647f1f8ee4ec725ca14e31b153e030773f789517c28061c","first_seen":"2025-08-29T16:27:52.88117Z","last_seen":"2025-08-29T16:27:52.88117Z","times_seen":1,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/08/IMG_20250820_103814.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/IMG_20250820_103814.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16468\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 28 Aug 2026 00:26:25 GMT\r\nlast-modified: Wed, 20 Aug 2025 04:00:51 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144052\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2B7bsuoO1YSam8dFSrdNNFUXfGblt6IinVZyouWslSeyQVNiDxcUQz96z1ppNoio25koNMEyO7%2FiSkmmnPis3wWyR02Ff%2FHNO9utfQsM\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f1eb7568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 997x748, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cc9f3981e6426892558da0e93287c93f","sha1":"0c6da1249a7caf1e30ac8fa31d6db987a2baf33e","sha256":"bf72a93c5186b792312d359740d8a1bbf71498271b07c6979066aceae6204417","sha512":"293ce90e79a9c9ec7d854fd8ff3550127ad489d088ada33626d1c22a8d8159b73a2627c7233ff3f2bb56ec20ef8d37332b277df15742adde46d5bbd9d4136f51","ssdeep":"384:g1oQdBoQluDEUj12vopbucbwhpV159fHUfJfA9Hv:idGQlu3UApbuc0V1+NA9Hv","tlshash":"5572c1511223917f58bc40f4324aab86259cee9177a205734ebf8e25e34668cbe19cf5","first_seen":"2025-08-29T16:27:52.883295Z","last_seen":"2025-08-29T16:27:52.883295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/05/IMG_20250509_144033.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/IMG_20250509_144033.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41310\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 29 Aug 2026 16:27:18 GMT\r\nlast-modified: Fri, 09 May 2025 07:47:27 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ywO9edk0FQNCgMqpzBUJf70Hq7%2BY7t8cvz%2FHh3KYpgv73spXwZ8UWfINSIGHL6GQ3PCCRWNtlzb4vg82ZWBLgHinbKgcdszAsPY5dPIR\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f2ebe568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":41310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8fc6d372698e058012f25e4c7b5a3fb","sha1":"cc4efd3a4e8b92aa8cde33cbaf3193539491eefd","sha256":"d0cfa2a21d2de88ea0b48bfec59e282ce7b01f1c1aa6a293ec6e9baa475f26cc","sha512":"1d3121b55862b66c064f7b94749f86c255205bd117c90f523a95d78944491246218e8e5ae7cc8c9afdc8690c7e12278c64e3b7563f2061109c1cd294b796bd5e","ssdeep":"768:kbc+8U7qHzzzqaAh8rFrJGzqlTBQeZZfdIfQsHiwLS3wEJ7aTyNbRXVch7:7UtgFNflWeLdIIsCwLSgMlNbbch7","tlshash":"6803f1a10b38b929c4818ab01568c38cd944e5ac5709c7c6b2ec9442eb62bf2771fbd9","first_seen":"2025-08-29T16:27:52.885637Z","last_seen":"2025-08-29T16:27:52.885637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:23:22 GMT","end":"Mon, 03 Nov 2025 19:23:21 GMT"},"fingerprint":{"sha1":"3E:26:D2:5A:C7:91:21:F0:A5:DF:2D:B3:FE:CC:22:E5:04:72:BA:E1","sha256":"C1:32:E8:39:F2:87:CE:BF:D8:BA:88:F4:CC:52:83:E2:53:F6:B7:5A:C4:81:03:72:91:C2:45:BB:4A:27:24:CA"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:N7m6deAU59oCjeStYum7Rw4OsZCGnA:Ise1WamrhcrH1p1f; Expires=Sun, 29-Aug-2027 16:27:19 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026ifkv=AdBytiMxbwhQI712putWVaVxPXw0RF4mJjRn_DH11AsNtevO_Zhkz1QK93WaAC5zlXYg-I7nB2lFrg\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: script-src 'nonce-xQsJ3jAK4RcfIQiYt2rtmw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: unsafe-none\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":87,"dns":0,"connect":16,"send":0,"wait":25,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:23:22 GMT","end":"Mon, 03 Nov 2025 19:23:21 GMT"},"fingerprint":{"sha1":"3E:26:D2:5A:C7:91:21:F0:A5:DF:2D:B3:FE:CC:22:E5:04:72:BA:E1","sha256":"C1:32:E8:39:F2:87:CE:BF:D8:BA:88:F4:CC:52:83:E2:53:F6:B7:5A:C4:81:03:72:91:C2:45:BB:4A:27:24:CA"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:EPzSMSGwihlfEwj4hc_1bTunS_kNPw:00BTW3rtkmUSptka; Expires=Sun, 29-Aug-2027 16:27:19 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AdBytiPT3zAGyEOzEOvsGHFsrSRNsKcG9lZxDo02MGB1c16CjEI-njF5w4fzAdjEwtove4Z6K3hcQQ\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: script-src 'nonce-1cabyEIsvyGNHlXqEm3MxA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-opener-policy: unsafe-none\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":89,"dns":0,"connect":28,"send":0,"wait":22,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y9.afcdn.net/library/91387/facdb468f33040b04ad72a06eaf0ffd090c8e3c2.mp4","fqdn":"s3t3d2y9.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:20.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 13:12:21 GMT","end":"Sun, 28 Sep 2025 13:12:20 GMT"},"fingerprint":{"sha1":"86:FB:BA:4A:B6:BF:EC:BB:C9:E5:96:9C:6A:B2:8C:F6:67:7D:11:18","sha256":"0E:D1:2C:2E:A2:B0:0A:42:25:63:5F:7A:DA:F6:F6:CE:73:D9:D9:DF:0A:BB:A5:1C:F9:F0:9E:16:D9:B4:C5:43"}}},"request":{"raw":"GET /library/91387/facdb468f33040b04ad72a06eaf0ffd090c8e3c2.mp4 HTTP/1.1\r\nHost: s3t3d2y9.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 29 Aug 2025 16:27:20 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 40851\r\nlast-modified: Mon, 14 Jul 2025 10:05:07 GMT\r\netag: \"6874d653-9f93\"\r\nexpires: Thu, 27 Aug 2026 09:25:14 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBuUwJGwH33wQDAAwBuUwKEwH3DwEAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: fdb541233701a459e8d4b168bf32b911\r\nx-77-cache: HIT\r\nx-77-age: 197855\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 0-40850/40851\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":40851,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"ca5e4ea562796c228abb9d6e76a24c2c","sha1":"facdb468f33040b04ad72a06eaf0ffd090c8e3c2","sha256":"4d36f5e76ea0c6aa8a9397570cd932834d6581ab2511892bc93bbe914f8cc944","sha512":"116a235049b34b77befa210c3dfd0a71d71be5f82f9cfc10b279a3c48d06982e946016f2b18b2bb82399271eff16dd186f23f4674ddb92100e73873a1550ee6d","ssdeep":"768:2cXXgKMIJH5j93ePZpdjUc/em9/c6d2yeE:2Z6D3wpVP/emxEE","tlshash":"7e03f1747f1862fff2d96e31a7b51347674a96922ec6d34bf8422d8126e34800d71d8d","first_seen":"2025-07-19T04:58:50.918779Z","last_seen":"2025-10-02T05:47:50.954835Z","times_seen":27,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":104,"dns":38,"connect":7,"send":0,"wait":23,"receive":11,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/fonts/avertastd-regular-webfont.woff2","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 22:05:00 GMT","end":"Mon, 29 Sep 2025 23:04:57 GMT"},"fingerprint":{"sha1":"26:61:CA:6E:DD:B0:60:E8:C4:A8:7B:C3:6C:83:89:43:D1:E2:C5:D7","sha256":"29:56:1F:AB:6E:79:B9:DA:69:1B:5C:D5:4B:31:EB:43:FD:16:0E:33:DE:21:C1:27:6B:BF:B2:B8:45:6E:13:6E"}}},"request":{"raw":"GET /fonts/avertastd-regular-webfont.woff2 HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://d-s.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i.doodcdn.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23812\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sat, 27 Sep 2025 19:07:00 GMT\r\nvary: User-Agent,Accept-Encoding\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QRWySU0ij9qvbW3yVkKF2bM5aba9yK%2F0mv%2Fo7PtOuZjHM2AzyhfMVTyUKEA4yafRq64rjMsWW8s67NqHyQzZYseZOIRaNa7yGQ%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 50791\r\naccept-ranges: bytes\r\ncf-ray: 976d6a42db1056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23812,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23812, version 1.524","md5":"eb586e5a1b86dbf1c866e3ed80f9d18e","sha1":"280ee78d19c017ab9335f769595e5157d3c4a343","sha256":"714e70103deac0d67f52a6285c5fabee6088ce4d710ce7e74353503837038baf","sha512":"18b5a9996a6d0fd263f778b1ce4b7a84c42febf2dfcd5187bdc74192c156571823e973d6720f45536ef1048a355313169a4f1de1ebc30bdb0989065a1ff9ffea","ssdeep":"384:bdPI9PvaAAoKG+zf3bAVYGlg96u6Z+tUF7ZrzSkorNYlVFLhfkZv9wPXcqEbJtuE:bdPIdCA7+jVhvUFtrzSkMNOp9k99h7dr","tlshash":"c2b2e17ad02cde72f5b6f3a59b2486e2d136d235232333e2151b89ba826170e1d16bd0","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-04-04T11:35:27.07653Z","times_seen":4001,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":6,"dns":10,"connect":0,"send":0,"wait":21,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AdBytiPT3zAGyEOzEOvsGHFsrSRNsKcG9lZxDo02MGB1c16CjEI-njF5w4fzAdjEwtove4Z6K3hcQQ","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:23:22 GMT","end":"Mon, 03 Nov 2025 19:23:21 GMT"},"fingerprint":{"sha1":"3E:26:D2:5A:C7:91:21:F0:A5:DF:2D:B3:FE:CC:22:E5:04:72:BA:E1","sha256":"C1:32:E8:39:F2:87:CE:BF:D8:BA:88:F4:CC:52:83:E2:53:F6:B7:5A:C4:81:03:72:91:C2:45:BB:4A:27:24:CA"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AdBytiPT3zAGyEOzEOvsGHFsrSRNsKcG9lZxDo02MGB1c16CjEI-njF5w4fzAdjEwtove4Z6K3hcQQ HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d-s.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:NCDxgx-xvNEy_VsLwefX4_pLqfVa7Q:Nv7cifDe2DVwm59X;Path=/;Expires=Sun, 29-Aug-2027 16:27:19 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AdBytiMyjxJr0JXb7-i0Zt6l38EknntPvaBgGsO4yCGL6FSMTDClaqBqZG_xIQBB5t57h8_0F8F5Vw\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1642317698%3A1756484839779809\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-R8yWQvfhkkFI5VeWfIe6Ow' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 421\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA2VPQU4DMQz8Ch/YyHbsOOmZM0ggHpBkN6hC20osVEXy48kutCDIKDlkZjxjApIB4kDpBmlHusNoCV0Cx+RQ2O7uH4zRTvu3PO8PL+/HVl09zl3koxpHIUFDCJS6UwJGkmBJTTXEFMCQQDUmJmMwb3CBA0BTsKfH2+3iiq4AOJN02xZsBMYrQRHOCMTd6SfQRmMrxGlMOdYiLYaskqKUsdQuh/91L6kYMXQF/RSxYTV4ZE/M1g/Y9p2Xj0M1+yVcIdcdVtdf9puh9LUhXh/Z5GCLm/Pz8nraOuGW5lB7HWReR1pA9V4n76dSoWlLIBxwKhlU8iT1E7PM7UCwAQAA\u0026cb=e2e_68b1d4e6751b25.30245048\u0026scr_info=YXN5bmN8fDM%3D","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:20.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA2VPQU4DMQz8Ch/YyHbsOOmZM0ggHpBkN6hC20osVEXy48kutCDIKDlkZjxjApIB4kDpBmlHusNoCV0Cx+RQ2O7uH4zRTvu3PO8PL+/HVl09zl3koxpHIUFDCJS6UwJGkmBJTTXEFMCQQDUmJmMwb3CBA0BTsKfH2+3iiq4AOJN02xZsBMYrQRHOCMTd6SfQRmMrxGlMOdYiLYaskqKUsdQuh/91L6kYMXQF/RSxYTV4ZE/M1g/Y9p2Xj0M1+yVcIdcdVtdf9puh9LUhXh/Z5GCLm/Pz8nraOuGW5lB7HWReR1pA9V4n76dSoWlLIBxwKhlU8iT1E7PM7UCwAQAA\u0026cb=e2e_68b1d4e6751b25.30245048\u0026scr_info=YXN5bmN8fDM%3D HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vitaminkuofc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nCookie: __uvt=s%3A32%3A%22bdcaf5c599103a1d9d5f1221c291f415%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:27:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vitaminkuofc.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/cache/speedycache/vitaminkuofc.com/assets/75abd4cd8807b312-skip-link-focus-fix.js","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/cache/speedycache/vitaminkuofc.com/assets/75abd4cd8807b312-skip-link-focus-fix.js HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 212\r\ncache-control: public, max-age=172800\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Thu, 28 Aug 2025 00:26:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Wxb8gEV2ZiFsxUNeS%2B07gf1DK%2Bw6kOY6FKHckSeU097U5UPHfWHu3oiw9wGLLS9rp3qbUo4LgDtaXuroQYK%2BHSp2vPt%2FsAGo0xll1vg\"}]}\r\ncf-ray: 976d6a3b9e8c568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a52707172307940579ef331c4374afc7","sha1":"f30a6f6955c5f14402c2ee5977f35291076c6680","sha256":"5ec0efba518cc669854021eece017468e4e8383498b2fabfc14d210379f9e248","sha512":"c764230b577cdac042f8677b9dc7a77d1a67c7bea3024438b692fcfbabe1aaddd084eb837685399890222b27585ff625b87837e0ea86caea82c7b464fe9f1124","ssdeep":"","tlshash":"2cf0a3bab8458c7b00fb7567bd8f278d3ebe4592a8166d00885cc840ba30cd57036df4","first_seen":"2025-06-25T14:48:55.4096Z","last_seen":"2026-03-15T12:32:48.747457Z","times_seen":9,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6f282b42123bc56b657be14f83f\"\r\nexpires: Tue, 26 Aug 2025 13:20:45 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJCgH3awEAAAwBuUwKDAH3CQAAAAwBWd59LgG3AQAAAA\r\nx-77-nzt-ray: e2f75420608525e4e6d4b16863abf501\r\nx-77-cache: HIT\r\nx-77-age: 363\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":184613,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39230)","md5":"fa661caff825db74efa9f9db5fd0a638","sha1":"6f282b42123bc56b657be14f83f00515670ee53c","sha256":"b393a8a6770fb253edcb30c80131c280de39fb5ae1ae5f9b3b26387e2eac9659","sha512":"07af6b65b6ead8f8ff2eb4784260dd09c3fdd3fd57c41c6470480c1f856cc34f1b277b8febc254a51deb7aa9d2a3e5779de4647210af2e30d96e6968a91d46cb","ssdeep":"3072:Nms/jp28VOkqDG2Cjym8pw8GWqI9ggxIisGEolY4o/CXMDpo:Hp28VOkq6208pw8GMggXs7Vpo","tlshash":"0a045c982792303441d3e12d6aff53093371506ab90f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-08-05T17:03:18.278781Z","last_seen":"2025-10-03T12:03:07.883626Z","times_seen":539,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/05/Awek-Budak-Melayu.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/Awek-Budak-Melayu.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 68464\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 29 Aug 2026 16:27:18 GMT\r\nlast-modified: Tue, 06 May 2025 12:36:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSMZnU2bGESL02RXBqrU3DQ7rYbN0j1mYmmvtnXtUUlwqDBY3eYUV3%2Fiy9XV1ppVqb5tpmnXx%2BftrCBHoko7%2BY%2BxQjp23ddI%2FkyUj4eC\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f0eb1568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 991x743, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1407c78a732108b937211b538c644891","sha1":"2c8f3f2a03016ad037a0b1a6ef66da623f3a679a","sha256":"6162138ef1def553706ec8d21bbb53b4979f71fc8c5cfea820252c79d4bb104b","sha512":"5c8c565320507679ba0bd0e9a98d0bd520c319496a099107276aac0c89cd277d92097e3da36fd89d9a2952e20a49c2a48f9121372fa8b3cef531b8c45c5b8f71","ssdeep":"1536:B9zLQNRigFBrkYiRYDacEuznSh9MYlFnYMeIOwKw2c3ys/aF:LzLQpBrkYiWDyYnSAv/3wz3yP","tlshash":"3d6312c22eae91c4fe00e92ffc370f515e616ce52613c9d2947e75d925687a2cab3c10","first_seen":"2025-08-15T08:46:17.115057Z","last_seen":"2025-08-29T16:27:52.893238Z","times_seen":2,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/cache/speedycache/vitaminkuofc.com/assets/6dcca58db348f35d-lazyload.js","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/cache/speedycache/vitaminkuofc.com/assets/6dcca58db348f35d-lazyload.js HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2036\r\ncache-control: public, max-age=172800\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Thu, 28 Aug 2025 00:26:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ifqwF%2FQYNQljxfv%2FlaWkU93F4MVViwCI3ZhtmyvZEW5FrpajJaQkzYe5RysaDXKITjo7T9H911YUBdw%2FeMio8nWoDUect60onJSOU1jQ\"}]}\r\ncf-ray: 976d6a3b9e8a568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5755,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5710)","md5":"6dcca58db348f35d6eee39aadb7cd280","sha1":"0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec","sha256":"2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4","sha512":"ee897cdc326f80eb18c74b3c42fe1b97b3b16c0be8f048a763cb33db134fa47dc2eb07bc1ba6cd8feb91385d791aa89a28816fd49217a57763dc54df1ef3693e","ssdeep":"96:IncwFK9HqOq0tioGJULBx7PYuyrr5VrcAeS1h3osyTaZ+1KZZ/p5k1QDSYRV9uR5:M9YH9qfJ2x7PYf5BcVSPfq+DkGDjP9u/","tlshash":"5fc15308b065b43f65777032523f130bb23a606778884494f6b4eae99ebc81e5923f7d","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-04-04T12:49:15.191175Z","times_seen":3554,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/cache/speedycache/vitaminkuofc.com/assets/783fecdc0e20f9cb-main.js","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/cache/speedycache/vitaminkuofc.com/assets/783fecdc0e20f9cb-main.js HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7304\r\ncache-control: public, max-age=172800\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Thu, 28 Aug 2025 00:26:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2Fy7ykanRBNdSIhn2Bvm2BgPDFHX3rVaCpudN6tgqXt%2BOudeHnoulhZVbJ8lX9vhCxnBiDxfnulL4S5HiN569%2BS%2BLzffYzI017Wct6Uf\"}]}\r\ncf-ray: 976d6a3b9e8b568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29415,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4c0925c2ac4820751c4accd4e462515b","sha1":"5f39ed365589e3b9ec2b02b8e84f8786f640f5d6","sha256":"01b6f204b28744499e2f2511b4c827ed441a939fe7cec2dbf26d00e06dbd8b2f","sha512":"aba8f65b7aea63e0a9a7d6c9664ec7a104a27da1bf895107b49fcf89f33225d3de2746f1b65e205f82a04b45641bc2062d7e792515b8eb5ba39a8722b7d58a1c","ssdeep":"768:nfJql8Oej4eqc9teSqLIcOP/rK3FnNRy3f8lviJIsqyDtlE8KGgu29w:nffsGLqry2iJjUuN","tlshash":"20d2d4187a34265986ff24faacaf171c7d3e2a20604a904cf87dcad59f718287153d7e","first_seen":"2025-08-15T08:46:17.105597Z","last_seen":"2025-09-05T06:29:02.272195Z","times_seen":3,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/4710d66e8fda/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\nserver: cloudflare\r\ncf-ray: 976d6a3eeead568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9994,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/img/logo-s.png","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 22:05:00 GMT","end":"Mon, 29 Sep 2025 23:04:57 GMT"},"fingerprint":{"sha1":"26:61:CA:6E:DD:B0:60:E8:C4:A8:7B:C3:6C:83:89:43:D1:E2:C5:D7","sha256":"29:56:1F:AB:6E:79:B9:DA:69:1B:5C:D5:4B:31:EB:43:FD:16:0E:33:DE:21:C1:27:6B:BF:B2:B8:45:6E:13:6E"}}},"request":{"raw":"GET /img/logo-s.png HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 2611\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, no-transform\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=6212\r\netag: \"61d3187c-1844\"\r\nexpires: Sat, 27 Sep 2025 23:00:36 GMT\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHJpdM5AJbB7QWVJm4de6e7RIvTJkYUs4t31wBlSqP1tFUto%2BWBxuL55R46GNvFDraDqFFEtPZEA%2BGCD2Gb8I3i1PfFVRmvE9w%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 42095\r\naccept-ranges: bytes\r\ncf-ray: 976d6a46cdda56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 64, 8-bit/color RGBA, non-interlaced","md5":"9896254cb617ab536613c1173f8970d2","sha1":"058722b3ee5d1dd9a039a5718346373c02596070","sha256":"1511864c796fade0b4af04ac8e087ec47b14e97ca785d889775e1b81d63da220","sha512":"ed7c8b1b2c40a663185e3b7e3f47d7b67b7f37107b661ab7a6dbc5163780fac193ff658b1e69efe7e20413a0b4f043fb5c7170e49a90f11cd9be7e97a9f32ab9","ssdeep":"","tlshash":"87514d53e7bf061cdb2e116c60b7ec11167d11150b875680bb8260b80570bcda5be569","first_seen":"2025-07-01T21:16:56.952437Z","last_seen":"2025-11-21T14:44:02.924129Z","times_seen":547,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA2VP0U4EIQz8FX9gSVtaKPfssyYaP4Bld83F7F1yq5cz6ccL6KlRJpRAZ5gpAckAOlC6QdpR3KFaQpfAMTkUtrv7B2O08/41r/vDy9txKa4c10ryGo1VSNAQAqWqlIBKEixFizFoCmBIEKMmAmMwb3CFA2Bli2BPj7d9Y0PlAFxIqrBbWxO2BilcEIir1s8QF5qWkThNKWsZZdGQoySVcRpLpcP/wFdfBJ8qg36i2NAEHtkTs9UF1p/z9n4oZr+IDfI9RVP97X6Cv0ZsE9YDW5HOB9vcmp+307mHwm7nqOVB5vanhSzKuVDwMCUmqTf14llLmWeY8AMPLguyswEAAA==\u0026cb=e2e_68b1d4e6750874.10411944\u0026scr_info=YXN5bmN8fDM%3D","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:20.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA2VP0U4EIQz8FX9gSVtaKPfssyYaP4Bld83F7F1yq5cz6ccL6KlRJpRAZ5gpAckAOlC6QdpR3KFaQpfAMTkUtrv7B2O08/41r/vDy9txKa4c10ryGo1VSNAQAqWqlIBKEixFizFoCmBIEKMmAmMwb3CFA2Bli2BPj7d9Y0PlAFxIqrBbWxO2BilcEIir1s8QF5qWkThNKWsZZdGQoySVcRpLpcP/wFdfBJ8qg36i2NAEHtkTs9UF1p/z9n4oZr+IDfI9RVP97X6Cv0ZsE9YDW5HOB9vcmp+307mHwm7nqOVB5vanhSzKuVDwMCUmqTf14llLmWeY8AMPLguyswEAAA==\u0026cb=e2e_68b1d4e6750874.10411944\u0026scr_info=YXN5bmN8fDM%3D HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vitaminkuofc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nCookie: __uvt=s%3A32%3A%22bdcaf5c599103a1d9d5f1221c291f415%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:27:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vitaminkuofc.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":91,"dns":1,"connect":23,"send":0,"wait":33,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js?ver=1.2.4","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 10:31:15 GMT","end":"Sun, 23 Nov 2025 11:31:12 GMT"},"fingerprint":{"sha1":"77:EF:87:8D:9A:D6:8C:EF:F9:8F:05:89:BF:F2:6B:C2:CF:78:19:EF","sha256":"3C:23:A9:CF:90:2C:6B:74:27:D0:FC:3B:92:A8:A9:AD:66:5F:B0:D4:DE:28:80:4D:49:D0:4C:22:AE:D2:F3:90"}}},"request":{"raw":"GET /@silvermine/videojs-quality-selector@1.2.4/dist/js/silvermine-videojs-quality-selector.min.js?ver=1.2.4 HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 976d6a3bbff0712b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 118485\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 29 Aug 2026 16:27:17 GMT\r\nlast-modified: Tue, 22 Jul 2025 10:21:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncontent-digest: sha256=:ZVFsZ38xs9x6RrJVgHUtQH5M87nJ9+2qIbeMPcV0AmY=:\r\ncross-origin-resource-policy: cross-origin\r\nfly-request-id: 01K0RTEQAAF8K3Y4JRQ4S1ZB7R-ord\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23244,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23113)","md5":"f923d2667324506e72f42ca781ccb6f9","sha1":"ab63ce25316c340764513b00d48855dc85265cfd","sha256":"65516c677f31b3dc7a46b25580752d407e4cf3b9c9f7edaa21b78c3dc5740266","sha512":"aae70276713a366df68a64db03a47448af2ddf575aaa18677dd494c93209ed6d017c3781510ec05098495ea1e0b513596fc3ba6b898f19acdc954b38e3325e73","ssdeep":"384:MorGS+wgUI1O0E852/nLWLqqndIA+TIuHsspbVsfQKZCc:MiGS+wgUp0f52/nSGqdx+TIurbuKc","tlshash":"3fa282dc39d2f06983b370f5003f608bf23b295968ada4a4e255e0e87cb954d8177e6d","first_seen":"2023-03-07T01:18:47Z","last_seen":"2026-04-04T11:43:31.537622Z","times_seen":2575,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":47,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/theme_2/img/loader.svg","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 22:05:00 GMT","end":"Mon, 29 Sep 2025 23:04:57 GMT"},"fingerprint":{"sha1":"26:61:CA:6E:DD:B0:60:E8:C4:A8:7B:C3:6C:83:89:43:D1:E2:C5:D7","sha256":"29:56:1F:AB:6E:79:B9:DA:69:1B:5C:D5:4B:31:EB:43:FD:16:0E:33:DE:21:C1:27:6B:BF:B2:B8:45:6E:13:6E"}}},"request":{"raw":"GET /theme_2/img/loader.svg HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://i.doodcdn.io/css/embed.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nlast-modified: Mon, 03 Jan 2022 15:43:40 GMT\r\ncache-control: max-age=2592000\r\nexpires: Sat, 27 Sep 2025 20:38:45 GMT\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fz3%2FxEejJ7juccvH8LlOFQToSYW37e1vOFfJc2UIipiXjuiGJVmHPEvP5H5y947NVJEY2i93VYRjcABUydaYMTtgABMOmCuw%2BQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 152\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 976d6a438da656c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":694,"size_decoded":0,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text","md5":"be00fc4a29d03016e78b28c9943e3f51","sha1":"10f2025f5aa96706cc81e050eadfcaa9bcc55af5","sha256":"eec2c40d8b1bb98306990239204d8b90ca030f0def0e00dfe3117ae42991e126","sha512":"ea5b50ec59873392642e6cdd1e7fbd84137d8db13906b4e435ec04160dc5412bafdea1a5324efb2a5a08fe12e9af89f4e1c99c18f5b97c987709c55568efd75a","ssdeep":"","tlshash":"6701c0645cfb4548006c8539d3e93850396c50a3954c0194fa9c1c326f008af2c6f38e","first_seen":"2023-04-30T18:25:34Z","last_seen":"2026-04-04T11:39:00.484244Z","times_seen":2269,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"utysolomonaut.com/cFdPZHlfaCwXRCI9CTcbHg01JhQUNR4sPDQOfggpFBYnDy4bFmkQEBRqflRJRGd4UF8APitZSEhxPBAYBCI8WUhWPiECFk1xOVlIXmdhVldFcTpZSFYjPwUeTWZpFA0EO3JVTkVhe1xNSGR3XUBG","fqdn":"utysolomonaut.com","domain":"utysolomonaut.com","tld":"com"},"ip":{"addr":"104.21.70.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utysolomonaut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 06:52:48 GMT","end":"Fri, 07 Nov 2025 07:51:04 GMT"},"fingerprint":{"sha1":"DA:75:DE:6A:F2:F5:E7:32:D2:34:D4:CB:72:F4:BE:17:12:66:C1:6E","sha256":"AC:C9:C2:C8:62:F0:68:4D:7E:4C:CD:26:EE:72:03:F9:24:CC:8E:FC:04:6E:BB:1A:50:70:09:9C:6F:16:21:8B"}}},"request":{"raw":"GET /cFdPZHlfaCwXRCI9CTcbHg01JhQUNR4sPDQOfggpFBYnDy4bFmkQEBRqflRJRGd4UF8APitZSEhxPBAYBCI8WUhWPiECFk1xOVlIXmdhVldFcTpZSFYjPwUeTWZpFA0EO3JVTkVhe1xNSGR3XUBG HTTP/1.1\r\nHost: utysolomonaut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mtVNKaS5SZ%2ByWYTb1ABl4thPcBgUrHDch2g7EjGWfkaSeFiQuVeObBXxyjV7fjh5K%2FtX9v%2BzE6lb9WQ6osm7Nl97Th6ebwrCfM408FuAKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 976d6a447ae50afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":69,"dns":0,"connect":1,"send":0,"wait":125,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6f282b42123bc56b657be14f83f\"\r\nexpires: Tue, 26 Aug 2025 13:20:45 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJCgH3awEAAAwBuUwKDAH3CQAAAAwBWd59LgG3AQAAAA\r\nx-77-nzt-ray: e2f75420608525e4e6d4b1687a25f203\r\nx-77-cache: HIT\r\nx-77-age: 363\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":184613,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39230)","md5":"fa661caff825db74efa9f9db5fd0a638","sha1":"6f282b42123bc56b657be14f83f00515670ee53c","sha256":"b393a8a6770fb253edcb30c80131c280de39fb5ae1ae5f9b3b26387e2eac9659","sha512":"07af6b65b6ead8f8ff2eb4784260dd09c3fdd3fd57c41c6470480c1f856cc34f1b277b8febc254a51deb7aa9d2a3e5779de4647210af2e30d96e6968a91d46cb","ssdeep":"3072:Nms/jp28VOkqDG2Cjym8pw8GWqI9ggxIisGEolY4o/CXMDpo:Hp28VOkq6208pw8GMggXs7Vpo","tlshash":"0a045c982792303441d3e12d6aff53093371506ab90f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-08-05T17:03:18.278781Z","last_seen":"2025-10-03T12:03:07.883626Z","times_seen":539,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA2VP7UoEMQx8FV9gS5ImTXu//a2g+ABt91YO2Tu41UMhD2/bww+0Q1NIZjoTApIJ4kTpBmlHusNoCV0Cx+RQ2O7uH4zRLofXvB6OL2+npbp6WhvJRzWOQoKGECg1pQTUoGBJTTXE5MGQQFVjAmMwb/AFB8CBrZGfHm/HxY7GAXhHaMJhbdSEfUCxt4mb1u9BF5qXQpzmlGMtssSQVVKUMpfa6PA/8LcvBW0M+oliUxd4ZE/M1g7YaOft41jNfhE7ZGyBPUiX/R1fQXL16iu2B3uRwQfb3Jqft/NlpMLh5zC0QMjc/7SimfKy934OXH2oKZclomaBAojz/hP9YFnUtAEAAA==\u0026cb=e2e_68b1d4e674f527.62125579\u0026scr_info=YXN5bmN8fDM%3D","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:20.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA2VP7UoEMQx8FV9gS5ImTXu//a2g+ABt91YO2Tu41UMhD2/bww+0Q1NIZjoTApIJ4kTpBmlHusNoCV0Cx+RQ2O7uH4zRLofXvB6OL2+npbp6WhvJRzWOQoKGECg1pQTUoGBJTTXE5MGQQFVjAmMwb/AFB8CBrZGfHm/HxY7GAXhHaMJhbdSEfUCxt4mb1u9BF5qXQpzmlGMtssSQVVKUMpfa6PA/8LcvBW0M+oliUxd4ZE/M1g7YaOft41jNfhE7ZGyBPUiX/R1fQXL16iu2B3uRwQfb3Jqft/NlpMLh5zC0QMjc/7SimfKy934OXH2oKZclomaBAojz/hP9YFnUtAEAAA==\u0026cb=e2e_68b1d4e674f527.62125579\u0026scr_info=YXN5bmN8fDM%3D HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vitaminkuofc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nCookie: __uvt=s%3A32%3A%22bdcaf5c599103a1d9d5f1221c291f415%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:27:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vitaminkuofc.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA2VPW07EMAy8ChdoZLt2HvvNN0ggDpAmLVqh7kpbWC2SD49TtYAgVpTHzNgzBCQdxI7SHdKBwgGjJnQJHJNDYX14fFJGvR7f83w8vX2cp+LKeTYSY/TKUUhQETwlk4rHSOI1BQ0BOAApYpQglFgZtFfYywHYbA2gL8/368ZWxgG4kYA92my1rrEBFOGGQGzafoQwUZ0G4lRTjmWQKfocJEUZ6lCMDv8d73NJmmGlHyvaNUGP3BOz2gJdv/PyeSqqv4it5DtFU/1FNyTJltEi2oH7HVd4cXN+XS7X1ReuEx1tLbX3oeaRahUqYjmHUZBbVJJSK8IXHCbdWrMBAAA=\u0026cb=e2e_68b1d4e6752a31.37448672\u0026scr_info=YXN5bmN8fDM%3D","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:20.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA2VPW07EMAy8ChdoZLt2HvvNN0ggDpAmLVqh7kpbWC2SD49TtYAgVpTHzNgzBCQdxI7SHdKBwgGjJnQJHJNDYX14fFJGvR7f83w8vX2cp+LKeTYSY/TKUUhQETwlk4rHSOI1BQ0BOAApYpQglFgZtFfYywHYbA2gL8/368ZWxgG4kYA92my1rrEBFOGGQGzafoQwUZ0G4lRTjmWQKfocJEUZ6lCMDv8d73NJmmGlHyvaNUGP3BOz2gJdv/PyeSqqv4it5DtFU/1FNyTJltEi2oH7HVd4cXN+XS7X1ReuEx1tLbX3oeaRahUqYjmHUZBbVJJSK8IXHCbdWrMBAAA=\u0026cb=e2e_68b1d4e6752a31.37448672\u0026scr_info=YXN5bmN8fDM%3D HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vitaminkuofc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nCookie: __uvt=s%3A32%3A%22bdcaf5c599103a1d9d5f1221c291f415%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:27:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vitaminkuofc.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":102,"dns":1,"connect":26,"send":0,"wait":30,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4678\r\ncache-control: public, max-age=172800\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Thu, 08 Jun 2023 21:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wcOukOK3FLngwWhQT4DLdYCW%2Bp7Y%2FdtmIiQ7WAqmV71vES1gGIB70t8KV%2FcUjZCl8Mfxd8WbCg0q3cFE2ALJvPC5sjClMWrwUmbBmiy0\"}]}\r\ncf-ray: 976d6a3b8e84568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T13:49:26.30716Z","times_seen":638763,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"do7go.com/e/bfyfng6re0i6","fqdn":"do7go.com","domain":"do7go.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"do7go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 17:19:27 GMT","end":"Tue, 14 Oct 2025 18:18:08 GMT"},"fingerprint":{"sha1":"B2:C8:5A:CA:42:FC:55:D4:3B:43:6A:A9:DC:B4:2B:72:FC:33:6D:D9","sha256":"19:6D:64:6D:07:06:80:62:EE:70:81:18:2C:F2:D7:A2:54:B6:5D:6E:0E:E4:C3:C0:EC:6C:BA:19:C1:16:82:04"}}},"request":{"raw":"GET /e/bfyfng6re0i6 HTTP/1.1\r\nHost: do7go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\nlocation: https://d-s.io/e/bfyfng6re0i6\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Xy1%2FqJ55XUPLzrDWmayB0tVtdoArwOP8D7g7yHEl6mdml3KtIQBLZO3xDpwQPSuaQjE3iSlROF04Y1aWytajrCSVh4N5kE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 976d6a3c18e70afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38309,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":55,"dns":37,"connect":10,"send":0,"wait":9,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/05/IMG_20250501_102544.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/IMG_20250501_102544.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32518\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 29 Aug 2026 16:27:18 GMT\r\nlast-modified: Thu, 01 May 2025 03:26:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GITDfr2M0n0KJqMXzJdwXqHNEHT6CoTM29c8hJOKLHHqKGrWcYiRZfALbhazveoqsOGyd9et9GbCWhiuegsUqL7MzL%2FKuCtQV642BWYu\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f0eae568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1277x958, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"967d980426444f19180520b44831182e","sha1":"fcc38079e20fe4001e2f0833121b692bf635ceee","sha256":"1b1d398cf4155a23ae6b7153f23053a1f50d45d385afa11d861dbccf1139ee9b","sha512":"09a155f313b7b77ddd8b5e8e6e61d69279e045d340e034488785ca977ec869cdf547eff8eb646f88886643fe87f8b6147e3f7a8fdfc9f21571c2a4be1304d0c2","ssdeep":"768:DIc2d1ktiWraGP9hxp7l2CKKANo2903nXnM/K:DI1WiW2q9rp7l7BAC2O33MS","tlshash":"9ce2f1458e5283c2f8fc3ef1dfdc1416c1ad19bc10ac8ec08a1b6fa75f16ea69952890","first_seen":"2025-08-29T16:27:52.901543Z","last_seen":"2025-08-29T16:27:52.901543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":905,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bunkersparring.shop/gd/70849?md=eyJhIjo1NTY2LCJzIjoiMTI4MHgxMDI0IiwiYiI6Ijg5Nng1MDQiLCJyIjoiaHR0cHM6Ly92aXRhbWlua3VvZmMuY29tLyIsInEiOiJodHRwczovL2Qtcy5pby9lL2JmeWZuZzZyZTBpNiIsImgiOjE3ODAsImwiOiJlbi1VUyIsInQiOjAsInoiOjUyMCwiayI6MCwidSI6IiIsImYiOnRydWUsIndoIjoiODk2eDUwNCIsImloIjoiMTI4MHgxMDI0IiwiZSI6ImtxNmMwdXg5NXd6OGwycyIsIm8iOnRydWUsIm0iOjE3NTY0ODQ4MzkxMDQsInciOiIlN0IlMjJ0aXRsZSUyMiUzQSUyMk1vbm90aXJvdSUyMC0lMjBEb29kU3RyZWFtJTIyJTJDJTIya2V5d29yZHMlMjIlM0ElNUIlNUQlMkMlMjJ0b3B3b3JkcyUyMiUzQSU1QiUyMndpbmRvdyUzQTUlMjIlMkMlMjJsaXZlJTNBNCUyMiUyQyUyMnlvdSUzQTQlMjIlNUQlN0QiLCJ0cyI6MCwicHIiOjEsImhjIjo0OCwiYmwiOi0xLCJiYyI6MywidnYiOiJNZXNhIiwidnIiOiJsbHZtcGlwZSIsImFjIjowLCJjdCI6InVua25vd24iLCJjZXQiOiJ1bmtub3duIiwiY2RsbSI6LTEsImNkbCI6LTEsImNydHQiOi0xLCJ0bXMiOjEyMCwiY2UiOnRydWUsImNkIjoyNCwib3IiOiJsYW5kc2NhcGUtcHJpbWFyeSIsImZzIjpudWxsLCJmc28iOm51bGwsImltIjp0cnVlfQ\u0026fc=h7q5T8idLKWMMrmW6iTG0g\u0026pr=1YB8DBYXc1mTRxnxJxgO3A","fqdn":"bunkersparring.shop","domain":"bunkersparring.shop","tld":"shop"},"ip":{"addr":"188.42.247.188","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bunkersparring.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 00:36:37 GMT","end":"Sat, 18 Oct 2025 00:36:36 GMT"},"fingerprint":{"sha1":"A0:A8:A1:59:BB:4D:3B:D9:F2:A5:2C:9B:49:CC:C8:58:CD:A2:B6:95","sha256":"2C:77:30:EB:06:22:B8:8E:43:8B:D9:36:7E:45:B4:2A:A6:8C:CA:03:1C:25:42:8B:99:E9:B0:9E:63:56:68:E0"}}},"request":{"raw":"POST /gd/70849?md=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\u0026fc=h7q5T8idLKWMMrmW6iTG0g\u0026pr=1YB8DBYXc1mTRxnxJxgO3A HTTP/1.1\r\nHost: bunkersparring.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d-s.io/\r\nContent-Type: application/json\r\nContent-Length: 82\r\nOrigin: https://d-s.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:27:19 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://d-s.io\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nSet-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWdcFnYQDeASKQHj1xSv4SAr9g3Wh3ZQKensbE32bTH6T8TwvKB7g78kZ4Sdv8MRY13Z1U3VlPXa8GoaubZtyaLqSVc00NbiTW2%2F5sJCNcNpWbmxv9wiXmRQZOfajFpTh0am%2F5qr0oSLEg%2BFKZIhXJ5YM6WD0sZEpQkSKr4T0VRqa9JcT%2FEMbhOy5dlkql%2F0Sgd6KMD8jfZNKuGV%2BQcDKPE883N8Wbidt1l6KxEc8Gy4I%2FgtOI7c0a%2FONVNB2tfoG6EX0%2F%2F73ODxYiUTQLkdCrO07mR%2B4dk3m; expires=Sat, 30-Aug-2025 16:27:19 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjA9l6BadnCbbYMXXgFZhEDwxyZGfu5%2B2zxLp5XKcVpAjYTkrrM6yKvDnl5qkBPcNuBRwfdin8PX5AHF0ewd9h0wUrWyOzi8kes%2FgYZbM%2FWfLJe7ByNuABeWjfDzT72l%2F4KmjSBo2gGh3uqQC%2B9%2BwFe7x3U; expires=Sat, 30-Aug-2025 16:27:19 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":735,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dab30654a6213248933c1f823020ac44","sha1":"24312b7ce10b529e35682326d9e17b06b8f44e0e","sha256":"1bfd0a0f2c51fce34b8bdac98fdb9197059b8dd7e31b212145b8464df5187522","sha512":"b433d389a9474840990704ef8fd5db50e261a8d49aa637163107f744e2199094822c22c8b0fe21a49eb138f33b424a2ffc9df7e2f56e185a1b494d3bb7682d4c","ssdeep":"","tlshash":"3f0160e4b86e734d1ab044d52b0b286671a4be9387b2ce0a2799316a20c1c2c6658879","first_seen":"2025-08-29T16:27:52.903437Z","last_seen":"2025-08-29T16:27:52.903437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":16,"connect":18,"send":0,"wait":37,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"co600dp.cloudatacdn.com/favicon.ico?i","fqdn":"co600dp.cloudatacdn.com","domain":"cloudatacdn.com","tld":"com"},"ip":{"addr":"148.113.152.30","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"moz-nullprincipal:{0fe1d0f3-7748-4af8-8d8f-b87ee4eefd2e}?https://d-s.io","date":"2025-08-29T16:27:19.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudatacdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Sat, 01 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:AE:FF:F1:E0:44:E1:40:62:32:5B:A3:5F:92:CC:F4:85:2C:C2:35","sha256":"0D:4C:BD:B4:13:D4:4A:13:9B:B0:2E:DA:E4:AC:66:D5:E8:53:91:FD:49:51:9A:E1:20:15:11:9B:45:CE:0E:C8"}}},"request":{"raw":"GET /favicon.ico?i HTTP/1.1\r\nHost: co600dp.cloudatacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:27:19 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 15406\r\nConnection: keep-alive\r\nLast-Modified: Sat, 29 Feb 2020 09:26:04 GMT\r\nETag: \"3c2e-59fb38b06e300\"\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"30d3656f43c817e38c3e7d70b2bfbdad","sha1":"1aa43b43755e7cba5e145d0978517f7bedad7da6","sha256":"a558a4796f60f07743027eec96b538b2e7758cca8c544ed796ff745837478555","sha512":"75b17478d6d98ab14fd4d37d58c9484df68bc3ccc6d26897527eb565d4071c4b7128feb0f65449ce369c99bf12da97959426c5b03256e9782ee472cea81bbef5","ssdeep":"24:nG2q35msJnnnnnnnnnnslLD4zgxgJ0Oqr5646dUlZIJ/KuJmy81DwlJ8SAFf9tam:NBOzgxgJ0Z44Pi1Yy8+fVGfyfqxtb/","tlshash":"14623db4790b1355da125df9dca9ce66834cbe9b1a38029fb154febc306b4c74e18831","first_seen":"2023-04-05T18:53:41Z","last_seen":"2026-04-04T11:35:27.072347Z","times_seen":3466,"resource_available":false,"data":null}},"time_used":894,"timings":{"blocked":394,"dns":63,"connect":105,"send":0,"wait":104,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AdBytiP4-3cC9hH5VE5X2dWNBxfqorLIqEgQTYV6TVLqHxbCNfuzdxLs5dodRuW4bV7FVraMh9EhyQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1661000514%3A1756484839782765","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:23:22 GMT","end":"Mon, 03 Nov 2025 19:23:21 GMT"},"fingerprint":{"sha1":"3E:26:D2:5A:C7:91:21:F0:A5:DF:2D:B3:FE:CC:22:E5:04:72:BA:E1","sha256":"C1:32:E8:39:F2:87:CE:BF:D8:BA:88:F4:CC:52:83:E2:53:F6:B7:5A:C4:81:03:72:91:C2:45:BB:4A:27:24:CA"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AdBytiP4-3cC9hH5VE5X2dWNBxfqorLIqEgQTYV6TVLqHxbCNfuzdxLs5dodRuW4bV7FVraMh9EhyQ\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S1661000514%3A1756484839782765 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d-s.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-rGN90pWfFAIHP2lMRwKIXQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.Dg5wdk2tYyk.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA2VPW04DMQy8ChdoZDt27PSbb5BAHCCb3UUVait1oSqSD0+yUECQUZSHZzxjApIN2IbyDdKWdIvmGUOGwBRQ2O/uH5zRz7vXst8dXt6Ocw31uG8kRkvOJiToCIlyk0pCI0me1VWBFcgRTVRI2Rk8OlwRAJq3K/jT4+26saNxAC4k0B7d21tX6wUyuCAQN22cQGca54E4j7lYHWS2VFSyyTAOtdHhf+Krb4wsjUE/UXzTBRE5ErO3Bb5+l+X9UN1/ETvke4qu+lv9RFxz9hnbiO3A6x3X8hL25Xk5nddcuDoG1K+entimYaKKzLFiSaOUqjblrDnDWOQDf3rUDbQBAAA=\u0026cb=e2e_68b1d4e6753b49.99389774\u0026scr_info=YXN5bmN8fDM%3D","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:20.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA2VPW04DMQy8ChdoZDt27PSbb5BAHCCb3UUVait1oSqSD0+yUECQUZSHZzxjApIN2IbyDdKWdIvmGUOGwBRQ2O/uH5zRz7vXst8dXt6Ocw31uG8kRkvOJiToCIlyk0pCI0me1VWBFcgRTVRI2Rk8OlwRAJq3K/jT4+26saNxAC4k0B7d21tX6wUyuCAQN22cQGca54E4j7lYHWS2VFSyyTAOtdHhf+Krb4wsjUE/UXzTBRE5ErO3Bb5+l+X9UN1/ETvke4qu+lv9RFxz9hnbiO3A6x3X8hL25Xk5nddcuDoG1K+entimYaKKzLFiSaOUqjblrDnDWOQDf3rUDbQBAAA=\u0026cb=e2e_68b1d4e6753b49.99389774\u0026scr_info=YXN5bmN8fDM%3D HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vitaminkuofc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nCookie: __uvt=s%3A32%3A%22bdcaf5c599103a1d9d5f1221c291f415%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:27:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vitaminkuofc.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":103,"dns":1,"connect":29,"send":0,"wait":31,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/monotirou/","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T16:27:16.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /monotirou/ HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: text/html\r\ncache-control: public, max-age=172800\r\nexpires: Fri, 29 Aug 2025 16:27:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IwXIJN65Dzt9NjysmJsJzWFu0PaHXy5E0gV3zj73WgX8US6%2FU%2F0EMegsm%2BGjfD69%2BYb4Hc7Xz0sYYqmH1xK9qfnGUuGFUqi2psZaG50h\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-speedycache-source: Server\r\nx-turbo-charged-by: LiteSpeed\r\ncdn-cache-control: max-age=1296000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-encoding: br\r\ncf-ray: 976d6a34bc7556a2-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Modern Image Formats:2.5.1","description":"Performance plugin from the WordPress Performance Team, which adds support for outputting images in WebP or AVIF format and supports the `picture` element to enable format fallbacks.","website":"https://wordpress.org/plugins/webp-uploads/","common_platform_enumeration":"","icon":"modern-image-formats.svg","categories":["WordPress plugins","Performance"]},{"name":"Performance Lab:3.9.0","description":"Performance plugin from the WordPress Performance Team, which is a collection of standalone performance modules.","website":"https://wordpress.org/plugins/performance-lab/","common_platform_enumeration":"","icon":"Performance Lab.svg","categories":["WordPress plugins","Performance"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"SpeedyCache","description":"SpeedyCache is a WordPress plugin for optimizing page load times and caching efficiency.","website":"https://speedycache.com","common_platform_enumeration":"","icon":"SpeedyCache.svg","categories":["WordPress plugins","Caching"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"bxSlider:4.2.15","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":77009,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (9091)","md5":"210846f2565d8908ef50ca5a5e5db7f4","sha1":"a602c8a0b6233d4c5eb00ab25a66014ad9f689c5","sha256":"7b2b127accf0bdee8f7da45b09b531c5d161ac676e098760a3d0e0e45690dfc1","sha512":"2f4e01a2185aaf163d0264fd35815770d42696992f66951d1d9f689558f8f73bc06c05931b94452a63fc5bd8f9d28f69dce7b66cf5c662d68c43ed983558c40c","ssdeep":"1536:MzkG1oRc1ncGAAJxH1pDm3Un7dUcoKx3d+8NbLAeyia7L3ICsjDC3eNeNeNeNF5h:MvGRc1n/LvC3eNeNeNeNvNeNSRC1OFas","tlshash":"f4730af2b01455373b2b96dd8581b30cf9b3d11ecd4688c6fae861d896c2de3a4db248","first_seen":"2025-08-29T16:27:52.906608Z","last_seen":"2025-08-29T16:27:52.906608Z","times_seen":1,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":30,"dns":9,"connect":1,"send":0,"wait":895,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: text/css\r\ncontent-length: 6658\r\ncache-control: public, max-age=172800\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Wed, 25 Jun 2025 06:25:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2HW1a87viaS95qKLYCyj3aVnChkfFnXHyTnNrQ%2B%2FfimEd2T1VJiZdtG7eXV1imlliG4yvOeX7SbDvuUfZaf%2B95M4s4G3MfOMhiRrBvmt\"}]}\r\ncf-ray: 976d6a3b8e80568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-04T13:45:15.144372Z","times_seen":236715,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-includes/js/comment-reply.min.js?ver=6.8.2","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=6.8.2 HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1247\r\ncache-control: public, max-age=172800\r\nexpires: Sat, 29 Aug 2026 16:27:18 GMT\r\nlast-modified: Thu, 06 Feb 2025 09:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FWUhMHd6Z0BUQqhunpxQrLzrl273j1PFaGnyhBpVDq7tM1Jz9ERmfjn8Wh4B%2Fr8G3d81Zs4A3YmPG53at31taRGBddFBZjcH8hF5WrPB\"}]}\r\ncf-ray: 976d6a3b9e8d568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3026,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2991)","md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-04T13:49:26.309387Z","times_seen":56989,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/cdn-cgi/challenge-platform/h/b/jsd/r/0.7361790779012045:1756481792:AlcxmuRXNe03TcSoBfqr317ET9nz3kcPVeZfDC6zsPg/976d6a34bc7556a2","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.7361790779012045:1756481792:AlcxmuRXNe03TcSoBfqr317ET9nz3kcPVeZfDC6zsPg/976d6a34bc7556a2 HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12092\r\nOrigin: https://vitaminkuofc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-length: 0\r\nset-cookie: cf_clearance=VtbIKjj5egbk8oacuSdzQXG8CrjLy5lLHIs5GQbJrFw-1756484838-1.2.1.1-5ScnAZLxqgq1.tQtIUg4VTUJKI3Yo08sFZxL03Ci00gwCt5fcPqNBSLrqPHGc6U68xXfUA4Cmy8drTTDfMJJS2Llq6xW07WT6M.NuFf9v1HJjm3bImy9VS1tU.u6AQcyOD24laLsyQkEm9Z77_YDUU8YA9NiBJzf87M8MrtLI_rxHJet7o_lWqyTigErhKYUYQ55iQbl7183u9nRyE0ibKw4MKI5eulN.1hZnNxIgGw; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=vitaminkuofc.com; Expires=Sat, 29 Aug 2026 16:27:18 GMT\r\nserver: cloudflare\r\ncf-ray: 976d6a429ef1568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/check.html","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Fri, 15 Aug 2025 23:04:44 GMT","end":"Wed, 11 Feb 2026 22:59:00 GMT"},"fingerprint":{"sha1":"E1:AB:8F:47:06:32:4C:5C:7E:36:C8:FD:F4:40:EB:00:5D:EA:74:72","sha256":"6A:F2:F4:F6:59:8D:BE:DA:D5:DF:35:86:A4:7F:81:AE:3B:3B:2E:D7:26:C5:FD:71:F7:77:84:BA:0D:BC:F7:BF"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 21 Aug 2025 06:34:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a6be00-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6f282b42123bc56b657be14f83f\"\r\nexpires: Tue, 26 Aug 2025 13:20:45 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJCgH3awEAAAwBuUwKDAH3CQAAAAwBWd59LgG3AQAAAA\r\nx-77-nzt-ray: e2f75420608525e4e6d4b16821260702\r\nx-77-cache: HIT\r\nx-77-age: 363\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":184613,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39230)","md5":"fa661caff825db74efa9f9db5fd0a638","sha1":"6f282b42123bc56b657be14f83f00515670ee53c","sha256":"b393a8a6770fb253edcb30c80131c280de39fb5ae1ae5f9b3b26387e2eac9659","sha512":"07af6b65b6ead8f8ff2eb4784260dd09c3fdd3fd57c41c6470480c1f856cc34f1b277b8febc254a51deb7aa9d2a3e5779de4647210af2e30d96e6968a91d46cb","ssdeep":"3072:Nms/jp28VOkqDG2Cjym8pw8GWqI9ggxIisGEolY4o/CXMDpo:Hp28VOkq6208pw8GMggXs7Vpo","tlshash":"0a045c982792303441d3e12d6aff53093371506ab90f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-08-05T17:03:18.278781Z","last_seen":"2025-10-03T12:03:07.883626Z","times_seen":539,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 774\r\nOrigin: https://vitaminkuofc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:27:18 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vitaminkuofc.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22bdcaf5c599103a1d9d5f1221c291f415%22%3B; expires=Sun, 29 Aug 2027 16:27:18 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8597,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"11935d8b0c28c85b3aa411414666e515","sha1":"3de0919de6c2dc9b635a9a114eb80786d899fbd3","sha256":"529c31dc2ad3002156044646c1a845c1544c63d52fa8064085d1cf5633d3d0b8","sha512":"aaa447f8ca5fb411ff77bd29aa26e32bd2b0040f1260ea9d69d59883817f5342f273231bc0da91ac66fca789b37260a8dfa1912dbd61b5097cc420799b78a4ff","ssdeep":"192:z+5X/cV0RkWif8DoWZFifgaVXyV0o2SDnl69Cd:wHi08CioeCV0ojg9Cd","tlshash":"ef024cb2b78494f9c9a147c67caa3c7c5d32742fbb8a98c8024fe6647a7c5241306751","first_seen":"2025-08-29T16:27:52.911771Z","last_seen":"2025-08-29T16:27:52.911771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":51,"dns":1,"connect":26,"send":0,"wait":219,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/07/IMG_20250713_154514.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/IMG_20250713_154514.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20498\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 28 Aug 2026 02:23:43 GMT\r\nlast-modified: Sun, 13 Jul 2025 10:55:35 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 137014\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hosh3DMeUFOyFCtKHQ%2BpaJQqAeV2v8NAsazmp79chuyZgquMrWpc5YrrQ7j7CCGacZj3fbDI%2BL%2F2isHRq7e3TU6jyRIlijJ7TBKRvAJe\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f1ebb568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20498,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 891x668, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"484092f32271a55de4055d2be5ef680c","sha1":"db5bd87e560633ce9526e3702628e5fe95a204e0","sha256":"795a98fb6b7812bbb3523fa622dcb35b1f00ff030fa387d3c066317e8fdbf564","sha512":"3df3b14b5edeb86b6ce122c32532994a56caca697ced94418381c38ccc246e0fa44d6aca13e521871cd9ee5385a34c3f6b79451a7e72e93029300eb4ca304efc","ssdeep":"384:pAbBtHrEZ0MqLlkLcEsDaEF8/Q2c6sIBUMkXeU0iEoXPMNc2yHYYV5Amyr:pAb/oZ0M4EsDaEFlnI2MkumE4kNc2GHZ","tlshash":"8c92d0b532fd1dc0e68d307a7a2e7e55402930e0c59bdced84a7d891b483cd1e5a9463","first_seen":"2025-08-29T16:27:52.913661Z","last_seen":"2025-08-29T16:27:52.913661Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.2","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.2 HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4769\r\ncache-control: public, max-age=172800\r\nexpires: Sat, 29 Aug 2026 16:27:18 GMT\r\nlast-modified: Wed, 16 Jul 2025 08:47:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=chiNQojSJMohMKOzAeP0YC3LuYe%2FmWirnmjo%2B6%2BryPT%2B%2Fmp8tYePiPK1ygvPq7Q%2FAKFMmECNUgbMO%2Fl%2B1G3sAOtRjJj3uFeVyo4wO9b3\"}]}\r\ncf-ray: 976d6a3fbec9568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T13:47:46.943916Z","times_seen":195806,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wrathypenitis.help/cuid/?f=https%3A%2F%2Fd-s.io","fqdn":"wrathypenitis.help","domain":"wrathypenitis.help","tld":"help"},"ip":{"addr":"23.109.170.61","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wrathypenitis.help","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 21 Jul 2025 00:00:00 GMT","end":"Sun, 19 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"57:1C:3C:D5:C1:F2:62:8A:E4:97:AB:47:08:1D:6D:20:A7:31:0F:F1","sha256":"D5:34:58:63:74:58:D1:71:8E:01:AA:80:04:67:17:F5:C4:2B:DD:52:20:24:6B:9C:67:2B:D8:E4:7B:18:74:22"}}},"request":{"raw":"POST /cuid/?f=https%3A%2F%2Fd-s.io HTTP/1.1\r\nHost: wrathypenitis.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d-s.io/\r\nContent-Type: application/json\r\nContent-Length: 10\r\nOrigin: https://d-s.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:27:19 GMT\r\nContent-Type: application/json\r\nContent-Length: 32\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://d-s.io\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nSet-Cookie: a97fa794a0f9=6756e91660249cff81b2b9; expires=Mon, 13 Jan 2053 15:17:43 GMT; domain=wrathypenitis.help; path=/; secure; SameSite=None\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0e60e4f97c378245a8f13623476c2ad8","sha1":"807dc19939470905a7d63206e05c50dfca513791","sha256":"1866238bac58832be3e443bb8e96bd6bc702e0149f6c7d52029b1410befc6375","sha512":"81a9c494813d5eccd63f8a3a557390b171caa77ec262f82f76b191787ac8cee829e1355564b04f6244076b8a9cdf951d0e3c7181d287264cce5ff2f75556deed","ssdeep":"","tlshash":"0a800038b2ec32322000fb8aca00022302e8b0eac0ea082a8000c380a822c8002a8882","first_seen":"2025-08-29T16:27:52.916857Z","last_seen":"2025-08-29T16:27:52.916857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":27,"connect":32,"send":0,"wait":18,"receive":0,"ssl":231},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"wrathypenitis.help","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vjs.zencdn.net/7.8.4/video-js.css?ver=7.8.4","fqdn":"vjs.zencdn.net","domain":"zencdn.net","tld":"net"},"ip":{"addr":"151.101.66.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vjs.zencdn.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2024 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 07 Jan 2025 21:56:05 GMT","end":"Sun, 08 Feb 2026 21:56:04 GMT"},"fingerprint":{"sha1":"22:88:1F:07:1F:92:14:54:4B:E7:66:41:59:BF:5D:37:AF:C0:31:C7","sha256":"D8:1B:9B:E3:C9:29:CD:95:A8:5F:41:02:B8:20:F7:4E:F9:81:86:30:1D:9D:00:5B:98:B8:5F:02:07:B5:0F:7A"}}},"request":{"raw":"GET /7.8.4/video-js.css?ver=7.8.4 HTTP/1.1\r\nHost: vjs.zencdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 08 Jul 2020 20:29:36 GMT\r\netag: \"397a94bb87dfd0a64ba4d3d502912e4a\"\r\ncache-control: public, max-age=31536000\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 13879\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncontent-length: 10738\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45317,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (5844)","md5":"397a94bb87dfd0a64ba4d3d502912e4a","sha1":"c43be470c7ff54d4bf6d4f5256502d68fc2221bc","sha256":"5ead814b213a977667a2d801ed60313d28ad913178384faf945b4b9859a6cccc","sha512":"f9b98894135f2d72c5905f1bce072c043b64879e440e2b74e61b2db7304f3769507eb345294eb354fa38f646a2ba5a605bae654c913bbb59648c60a4e0b73188","ssdeep":"384:hBN3kQxNYkRYosKdw5FftJLm3ewEvhhc5R3okqY8uFt8v:hBN32yaKm5FjL/wEvhhc5R3okqY8uF6v","tlshash":"1c1362c0b4a98fe4116e8480fdc2db22572df854c989ecad97e3396c8ee925575723cc","first_seen":"2023-04-07T05:57:39Z","last_seen":"2026-04-04T11:43:31.553699Z","times_seen":3260,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":87,"dns":16,"connect":26,"send":0,"wait":25,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.doodcdn.io/img/no_video_3.svg","fqdn":"i.doodcdn.io","domain":"doodcdn.io","tld":"io"},"ip":{"addr":"104.26.15.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doodcdn.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 22:05:00 GMT","end":"Mon, 29 Sep 2025 23:04:57 GMT"},"fingerprint":{"sha1":"26:61:CA:6E:DD:B0:60:E8:C4:A8:7B:C3:6C:83:89:43:D1:E2:C5:D7","sha256":"29:56:1F:AB:6E:79:B9:DA:69:1B:5C:D5:4B:31:EB:43:FD:16:0E:33:DE:21:C1:27:6B:BF:B2:B8:45:6E:13:6E"}}},"request":{"raw":"GET /img/no_video_3.svg HTTP/1.1\r\nHost: i.doodcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2812\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 03 Jan 2022 15:38:36 GMT\r\netag: \"61d3187c-afc\"\r\nexpires: Sat, 27 Sep 2025 10:32:11 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 24299\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MghmMYDsscxjMxQAkptuQh2gIfb2mRXPJgSnb7fXrPzzT6yvQCg7IggZVgohnjE1c9ha5UuSLlWlSDUmU5KbIkLH9%2BnUSBiZbQ%3D%3D\"}]}\r\ncf-ray: 976d6a4078be0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2812,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"077bfdaa49ae4877a42611b739ec4752","sha1":"a2f9e1222b7af9abc05122411ab8902efcc08ead","sha256":"70d6a17097a8c27edfaad6740e11359d9363f3f04bff1b93483e29c25609fa6c","sha512":"9eac1eaf362f200f037ae6c0c9d5c257bb57708de9955816c69d67689293430bdf39cdcd91522a993c48b823971cb984956e1ebe44516a323da03ebcd2cbefe3","ssdeep":"","tlshash":"c95164dcb81c45bd890aa7f85a687e61366f91cd40734c8d78bd0ee223d0eadb114a9c","first_seen":"2023-04-05T18:52:02Z","last_seen":"2026-04-02T19:45:08.484058Z","times_seen":2677,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wr.amigojimbang.com/r0xouqn9Q2C5n0esZ/MQmjG","fqdn":"wr.amigojimbang.com","domain":"amigojimbang.com","tld":"com"},"ip":{"addr":"23.109.170.241","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wr.amigojimbang.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Jun 2025 06:40:36 GMT","end":"Thu, 25 Sep 2025 06:40:35 GMT"},"fingerprint":{"sha1":"9A:7C:9F:74:53:58:9D:52:7B:18:AC:82:F0:A5:4F:6A:1F:6B:CF:9A","sha256":"0F:51:88:4D:DC:76:02:62:83:33:A5:BA:E2:86:78:5A:B3:9F:4A:46:4F:27:D5:9B:7B:2D:11:81:74:64:26:63"}}},"request":{"raw":"GET /r0xouqn9Q2C5n0esZ/MQmjG HTTP/1.1\r\nHost: wr.amigojimbang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:27:18 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://d-s.io\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nSet-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWdcFnYQDeASKQHj1xSv4SAr9g3Wh3ZQKensbE32bTH6T8TwvKB7g78kZ4Sdv8MRY13Z1U3VlPXa8GoaubZtyaLqSVc00NbiTW2%2F5sJCNcNpWbmxv9wiXmRQZOfajFpTh0am%2F5qr0oSLEg%2BFKZIhXJ5YM6WD0sZEpQkSKr4T0VRqa9JcT%2FEMbhOy5dlkql%2F0Sgd6KMD8jfZNKuGV%2BQcDKPE883N8Wbidt1l6KxEc8Gy4I%2FgtOI7c0a%2FONVNB2tfoG6EX0%2F%2F73ODxYiUTQLkdCrO07mR%2B4dk3m; expires=Sat, 30-Aug-2025 16:27:18 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIJPjA9l6BadnCbbYMXXgFZhEDwxyZGfu5%2B2zxLp5XKcVpAjYTkrrM6yKvDnl5qkBPcNuBRwfdin8PX5AHF0ewd9h0wUrWyOzi8kes%2FgYZbM%2FWfLJe7ByNuABeWjfDzT72l%2F4KmjSBo2gGh3uqQC%2B9%2BwFe7x3U; expires=Sat, 30-Aug-2025 16:27:18 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86335,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"7b58e78fe240cfe1304258c6ebbb8259","sha1":"9344b5fa70d8604f616f845ee0f056c8515e93b5","sha256":"1774f7ca145784b08797be738d716ae4d8eb97e6d983396444a47fac20f73f2d","sha512":"c0f712541bd61439c82363e494b66b2031a1b7da0f05304fa44dd0b5f1dbee00c9c58115d06ed3739f1af97b48c8671093143a2b60fcda840490584de36346b4","ssdeep":"1536:bAKkyPNvHNRBliItL7ikPj7rgMP9Y6IHuXFM+7Fv79tcidSkQsusEcPxV:bAKkuHiItLxIO6okidSfqPL","tlshash":"6e831aa173b370b9c68e50d6b533e122e22e5e443c8c98b4f16e5e107f5254ee27d6e8","first_seen":"2025-08-29T16:27:52.920647Z","last_seen":"2025-08-29T16:27:52.920647Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":133,"connect":19,"send":0,"wait":41,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"wr.amigojimbang.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/aas/r45d/vki/1941940/4d81a660.js","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Fri, 15 Aug 2025 23:04:44 GMT","end":"Wed, 11 Feb 2026 22:59:00 GMT"},"fingerprint":{"sha1":"E1:AB:8F:47:06:32:4C:5C:7E:36:C8:FD:F4:40:EB:00:5D:EA:74:72","sha256":"6A:F2:F4:F6:59:8D:BE:DA:D5:DF:35:86:A4:7F:81:AE:3B:3B:2E:D7:26:C5:FD:71:F7:77:84:BA:0D:BC:F7:BF"}}},"request":{"raw":"GET /aas/r45d/vki/1941940/4d81a660.js HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Aug 2025 11:23:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b03c3c-240ce\"\r\nx-js-ab2: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147498,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fd17bb90a83c359053808f1e15907e83","sha1":"fc71751a67a2b4343538ad91e593813431732a5b","sha256":"16251cfccc2418f92420c0eb2aead9eb26d44f5623054c825db8b280ab9cbc4a","sha512":"13f43564217cbd390fa67a0a91ed675b8cb120611c60de5a39c1ec50f1dbecc9e57bb1a3831639eb2ac1fd17f47e5458cf2e86072c2b16b0c9d04ddd01f70741","ssdeep":"1536:/7qvKuBtIHvgs8KSq+014rqvfd7b0u0KeGJBq7Sg42GEDkIna7jW/1DR/iewDmX8:/7qv/IPzS7Sm474aESgjHxvjt+gt0","tlshash":"69e3b69cfe8124b54a4ad1ad2c3fa5869675ecd3969d20309db3d1c8ff6cc0b8135ab4","first_seen":"2025-08-29T03:43:07.516331Z","last_seen":"2025-08-31T21:09:41.795339Z","times_seen":7,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":49,"connect":50,"send":0,"wait":35,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/venor.php","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:26:30 GMT","end":"Sun, 09 Nov 2025 10:26:29 GMT"},"fingerprint":{"sha1":"5F:47:25:B6:96:C0:63:5C:07:7B:C4:6F:89:5C:87:0B:49:94:70:EA","sha256":"B5:77:8A:78:DA:8C:29:56:B2:2E:AD:B2:BC:02:75:DB:93:32:DF:FD:CA:6F:97:04:2E:34:4F:41:C4:5E:7B:09"}}},"request":{"raw":"GET /venor.php HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vitaminkuofc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:27:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-04-04T12:46:31.723609Z","times_seen":103549,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":78,"dns":1,"connect":25,"send":0,"wait":27,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsimgcdn.com/splash/gnvr4m3d00q8hkly.jpg","fqdn":"dsimgcdn.com","domain":"dsimgcdn.com","tld":"com"},"ip":{"addr":"104.26.2.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsimgcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:01:54 GMT","end":"Wed, 19 Nov 2025 19:01:49 GMT"},"fingerprint":{"sha1":"02:7F:9D:0E:1E:8A:EC:DF:11:88:7E:36:DB:EE:41:3D:BA:30:7B:05","sha256":"85:F5:1C:74:F9:04:91:A4:78:F3:43:49:AD:C5:1D:51:F6:21:95:1E:2E:55:3E:FC:A2:3B:89:49:EF:AA:BA:F5"}}},"request":{"raw":"GET /splash/gnvr4m3d00q8hkly.jpg HTTP/1.1\r\nHost: dsimgcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://d-s.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 116020\r\nserver: cloudflare\r\ncf-ray: 976d6a43797db51b-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1\r\ncache-control: public, max-age=604800\r\netag: \"68b05c76-1c534\"\r\nexpires: Fri, 12 Sep 2025 16:27:18 GMT\r\nlast-modified: Thu, 28 Aug 2025 13:41:10 GMT\r\naccess-control-allow-methods: GET, OPTIONS\r\nx-cache: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YxHtpkgAtXkcCeKlzSJQ2x3k2llLXoZxbtlEZ9WqNySRdhtI8t0vjuv1IISMBVqRm9O3qAEL45T4WAi3ed0s0FlwU%2FUgQpAEW4FIfO09nbNyzE9H7%2BMxdGAayzZ9EA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=731\u0026min_rtt=461\u0026rtt_var=396\u0026sent=32\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=35249\u0026recv_bytes=1332\u0026delivery_rate=35461224\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=a0a1921ec0327755\u0026ts=787\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116020,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1264x715, components 3","md5":"5f4c36c889c94386f342dacbe30624b5","sha1":"353552f298ae81c7e27bf8b70bae478a2ae22106","sha256":"c442508fc5b5ee2b084ee6848f00c23b71b9bc5f0dcb2984e5c8a04b1afe0138","sha512":"9f691148400757228cb12e2340629c2051d34c93254e0f255602352f7a149c91c26f40aff16a655cff1ea41d8e30cf598271d46928df87fbb7e13dde9c2dad34","ssdeep":"1536:3BX31Ui2/IIgVDf/RyhEITAsRvgdZvc56Yf4dVKp0ewzbnb6fr8lLLU:R1z2/XEDfZyhrNR+cVp0HUrmU","tlshash":"75b31219c36aaa7ff4ccbcb194dae39184b2cb8c6f1c24915e21e1c7f675e7101b119a","first_seen":"2025-08-29T16:27:52.927124Z","last_seen":"2025-08-29T16:27:52.927124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"dsimgcdn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"undefined/VWVWVTU0BzU4CjRYNHNAJwlrcAcTQGQTUWYAIzcHMFdnMVZjDWZ7VjkKIzFTJwo4IRs7ACJwBxM2AgFvLQY8BEACN24Adi8JMBNgbSMwBG8TNDEbABAkExRgBhYaE2NsLQ9kDTAzEGEQZycBBw0WJgUPTwQdOiZ/OQ0TBVI2PwMEbwA0EjFmASAfBnwDBjATZDkXAy0NByYOImQQJwwCVhQvDhcEAxIBLQEcPQUTVBAjNRJ2IiswBF0TQGQTdzkOEA1mGzYeMmMdBBcHdx0gFDp3ECMSF3IYIgAQc2cEFwd3FzNmP3QQMw4XQm0xB2V/GAAhH2AEPQw6dxBIExRkOAIQGHAYLTMHXRcyLhMQZyMUPWwNMy8PbwMgFCxTIj8XBFIHXRQ+dw0nOGRkEiQUB35kDhwDQgwpFGV/EiI4ZWQXIG4TEz8WOTtFaA4TZ14NDjhgeWYxMSI","fqdn":"undefined","domain":"undefined","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.039Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /VWVWVTU0BzU4CjRYNHNAJwlrcAcTQGQTUWYAIzcHMFdnMVZjDWZ7VjkKIzFTJwo4IRs7ACJwBxM2AgFvLQY8BEACN24Adi8JMBNgbSMwBG8TNDEbABAkExRgBhYaE2NsLQ9kDTAzEGEQZycBBw0WJgUPTwQdOiZ/OQ0TBVI2PwMEbwA0EjFmASAfBnwDBjATZDkXAy0NByYOImQQJwwCVhQvDhcEAxIBLQEcPQUTVBAjNRJ2IiswBF0TQGQTdzkOEA1mGzYeMmMdBBcHdx0gFDp3ECMSF3IYIgAQc2cEFwd3FzNmP3QQMw4XQm0xB2V/GAAhH2AEPQw6dxBIExRkOAIQGHAYLTMHXRcyLhMQZyMUPWwNMy8PbwMgFCxTIj8XBFIHXRQ+dw0nOGRkEiQUB35kDhwDQgwpFGV/EiI4ZWQXIG4TEz8WOTtFaA4TZ14NDjhgeWYxMSI HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"undefined","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6f282b42123bc56b657be14f83f\"\r\nexpires: Tue, 26 Aug 2025 13:20:45 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJCgH3agEAAAwBuUwKDAH3CQAAAAwBWd59LgG3AQAAAA\r\nx-77-nzt-ray: e2f75420608525e4e5d4b168c3130d2e\r\nx-77-cache: HIT\r\nx-77-age: 362\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":184613,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39230)","md5":"fa661caff825db74efa9f9db5fd0a638","sha1":"6f282b42123bc56b657be14f83f00515670ee53c","sha256":"b393a8a6770fb253edcb30c80131c280de39fb5ae1ae5f9b3b26387e2eac9659","sha512":"07af6b65b6ead8f8ff2eb4784260dd09c3fdd3fd57c41c6470480c1f856cc34f1b277b8febc254a51deb7aa9d2a3e5779de4647210af2e30d96e6968a91d46cb","ssdeep":"3072:Nms/jp28VOkqDG2Cjym8pw8GWqI9ggxIisGEolY4o/CXMDpo:Hp28VOkq6208pw8GMggXs7Vpo","tlshash":"0a045c982792303441d3e12d6aff53093371506ab90f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-08-05T17:03:18.278781Z","last_seen":"2025-10-03T12:03:07.883626Z","times_seen":539,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":54,"dns":32,"connect":11,"send":0,"wait":13,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/05/IMG_20250505_095338.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/IMG_20250505_095338.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22304\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 29 Aug 2026 16:27:18 GMT\r\nlast-modified: Mon, 05 May 2025 02:56:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UzG8%2Bxpm%2Fjgi0yY8sgexTSrsLfSv03WXbISE0rk6MZTGOy7PptZ50TRI%2FmsDjHGh4qY2Xo%2Fv57OZX2ngjtKSHG1GfU%2BVtjbRT2WAfizu\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f2ebc568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22304,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1038x778, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7e1c8fa4f3381b25b2057b5405da6c4b","sha1":"03d5253339aac145ade2222028a073e00fb22d86","sha256":"4a606f858e2fbcb93b4a3db133561ee75747aadb0cca26e502a2900199bdbd18","sha512":"10ac283e864d68a406305176f12a1c08626a7daa7a0bcfbb86375cc5329d19d7e99be634a1eae76872595c4e14b003856cfffbe4d6698ba15c28d6b260760909","ssdeep":"384:YAiwZpmq+rYKTFnTJ4ykJc4j2FPyPpvcaj5x42YxL3IpL59EliLeeW9EXH:Y2wherc82Fi95u2YxLWm0LTWS3","tlshash":"49a2e11a96e1044a679cfea8a10af0505ef4314df45dadf13e812ff02eb6076ca794f4","first_seen":"2025-08-29T16:27:52.93061Z","last_seen":"2025-08-29T16:27:52.93061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":885,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsimgcdn.com/splash/gnvr4m3d00q8hkly.jpg","fqdn":"dsimgcdn.com","domain":"dsimgcdn.com","tld":"com"},"ip":{"addr":"104.26.2.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsimgcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 18:01:54 GMT","end":"Wed, 19 Nov 2025 19:01:49 GMT"},"fingerprint":{"sha1":"02:7F:9D:0E:1E:8A:EC:DF:11:88:7E:36:DB:EE:41:3D:BA:30:7B:05","sha256":"85:F5:1C:74:F9:04:91:A4:78:F3:43:49:AD:C5:1D:51:F6:21:95:1E:2E:55:3E:FC:A2:3B:89:49:EF:AA:BA:F5"}}},"request":{"raw":"GET /splash/gnvr4m3d00q8hkly.jpg HTTP/1.1\r\nHost: dsimgcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 116020\r\nserver: cloudflare\r\ncf-ray: 976d6a40adb3b51b-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800\r\netag: \"68b05c76-1c534\"\r\nexpires: Fri, 12 Sep 2025 16:27:18 GMT\r\nlast-modified: Thu, 28 Aug 2025 13:41:10 GMT\r\naccess-control-allow-methods: GET, OPTIONS\r\nx-cache: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LzQHEQExbtSlO0CkmZD7bWglf4h8adEqXlj%2FOw5IY%2F4cHYVe3Mz3NC%2BCX5W9gknNUZnc0BssE1y6hPA1n5gMaa%2Bq2dtIsxGj4xd3xvF%2BXcdWkW5n%2BWm%2BzDrVg931lA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=735\u0026min_rtt=467\u0026rtt_var=547\u0026sent=8\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3262\u0026recv_bytes=1332\u0026delivery_rate=7528596\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=a0a1921ec0327755\u0026ts=773\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116020,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1264x715, components 3","md5":"5f4c36c889c94386f342dacbe30624b5","sha1":"353552f298ae81c7e27bf8b70bae478a2ae22106","sha256":"c442508fc5b5ee2b084ee6848f00c23b71b9bc5f0dcb2984e5c8a04b1afe0138","sha512":"9f691148400757228cb12e2340629c2051d34c93254e0f255602352f7a149c91c26f40aff16a655cff1ea41d8e30cf598271d46928df87fbb7e13dde9c2dad34","ssdeep":"1536:3BX31Ui2/IIgVDf/RyhEITAsRvgdZvc56Yf4dVKp0ewzbnb6fr8lLLU:R1z2/XEDfZyhrNR+cVp0HUrmU","tlshash":"75b31219c36aaa7ff4ccbcb194dae39184b2cb8c6f1c24915e21e1c7f675e7101b119a","first_seen":"2025-08-29T16:27:52.927124Z","last_seen":"2025-08-29T16:27:52.927124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1081,"timings":{"blocked":135,"dns":29,"connect":13,"send":0,"wait":665,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"dsimgcdn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bunkersparring.shop/gd/70849?md=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\u0026fc=h7q5T8idLKWMMrmW6iTG0g\u0026pr=1YB8DBYXc1mTRxnxJxgO3A","fqdn":"bunkersparring.shop","domain":"bunkersparring.shop","tld":"shop"},"ip":{"addr":"188.42.247.188","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bunkersparring.shop","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 00:36:37 GMT","end":"Sat, 18 Oct 2025 00:36:36 GMT"},"fingerprint":{"sha1":"A0:A8:A1:59:BB:4D:3B:D9:F2:A5:2C:9B:49:CC:C8:58:CD:A2:B6:95","sha256":"2C:77:30:EB:06:22:B8:8E:43:8B:D9:36:7E:45:B4:2A:A6:8C:CA:03:1C:25:42:8B:99:E9:B0:9E:63:56:68:E0"}}},"request":{"raw":"OPTIONS /gd/70849?md=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\u0026fc=h7q5T8idLKWMMrmW6iTG0g\u0026pr=1YB8DBYXc1mTRxnxJxgO3A HTTP/1.1\r\nHost: bunkersparring.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://d-s.io/\r\nOrigin: https://d-s.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:27:19 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://d-s.io\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"0d7a61a5ae2424f444691dfa38e694ae","sha1":"dfb2f770cb7740844d94d2a2517af244b34c56ae","sha256":"e3c083d0e62029a9fc90700e7effced43eb213718ad4e7517e5b05a5a0ad9e49","sha512":"dc4531ceee0347383f28990bd01470ce323b0338a83b5b51e2640e3a9d1509346e23fe490ebfaeb4d7a86fd8ef22d2d6465990e6cb6583468d47174b97d25d03","ssdeep":"","tlshash":"8a30000000000000000000c0000000000000000000000000000300000c0c000c000000","first_seen":"2025-06-10T16:02:54.181066Z","last_seen":"2026-04-02T19:45:08.476061Z","times_seen":1524,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":76,"dns":2,"connect":21,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"bunkersparring.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"divisiondrearilyunfiled.com/get/1941940?zoneid=1941940\u0026jp=_cljymyievhmhltbrhmdekg\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.578\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=VRNa-f\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=gG65KV0aHR0cHM6Ly92aXRhbWlua3VvZmMuY29tLw\u0026ix=0\u0026x=896\u0026y=504\u0026md=0\u0026psu=a9OxEe7aHR0cHM6Ly9kLXMuaW8vZS9iZnlmbmc2cmUwaTY\u0026afid=5463137547957760\u0026eclog=0\u0026seu=XTBZ7QfaHR0cHM6Ly92aXRhbWlua3VvZmMuY29tLw\u0026snc=0\u0026ssc=0\u0026vp=1\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"divisiondrearilyunfiled.com","domain":"divisiondrearilyunfiled.com","tld":"com"},"ip":{"addr":"94.242.247.24","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:19.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Fri, 15 Aug 2025 23:04:44 GMT","end":"Wed, 11 Feb 2026 22:59:00 GMT"},"fingerprint":{"sha1":"E1:AB:8F:47:06:32:4C:5C:7E:36:C8:FD:F4:40:EB:00:5D:EA:74:72","sha256":"6A:F2:F4:F6:59:8D:BE:DA:D5:DF:35:86:A4:7F:81:AE:3B:3B:2E:D7:26:C5:FD:71:F7:77:84:BA:0D:BC:F7:BF"}}},"request":{"raw":"GET /get/1941940?zoneid=1941940\u0026jp=_cljymyievhmhltbrhmdekg\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.578\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=VRNa-f\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=gG65KV0aHR0cHM6Ly92aXRhbWlua3VvZmMuY29tLw\u0026ix=0\u0026x=896\u0026y=504\u0026md=0\u0026psu=a9OxEe7aHR0cHM6Ly9kLXMuaW8vZS9iZnlmbmc2cmUwaTY\u0026afid=5463137547957760\u0026eclog=0\u0026seu=XTBZ7QfaHR0cHM6Ly92aXRhbWlua3VvZmMuY29tLw\u0026snc=0\u0026ssc=0\u0026vp=1\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: divisiondrearilyunfiled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Fri, 02 Oct 2026 16:27:19 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Fri, 02 Oct 2026 16:27:19 GMT; Secure; SameSite=None\nUID=2508291127f33f74521ba044efb2a93de16e; Path=/; Expires=Fri, 02 Oct 2026 16:27:19 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3428,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3428), with no line terminators","md5":"9139c85f849646e45097be9bd749ad3a","sha1":"7a96c63a5fe48a7ae2eac0fb15a0647c70c432e4","sha256":"62b36abef837d154e5d5360e01e649a37d8b9fbf0f2221328f78f5cb03a2ccae","sha512":"27bdfe8649c4ce10044f5ae5f0c9eb55fcb7ebf76528d6fa35dae4928096553eb85e2b02d01275d76a823d124fe3b880b384250437b496dad43141a1f8bdec36","ssdeep":"","tlshash":"8461b6aac4cef15ef4418c0c1e97dca439c33de94aa74501aef18852e259177caaed33","first_seen":"2025-08-29T16:27:52.93431Z","last_seen":"2025-08-29T16:27:52.93431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d-s.io/cdn-cgi/rum?","fqdn":"d-s.io","domain":"d-s.io","tld":"io"},"ip":{"addr":"104.26.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:20.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d-s.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 17:31:26 GMT","end":"Sun, 26 Oct 2025 18:31:21 GMT"},"fingerprint":{"sha1":"A5:9E:DD:39:BC:D0:D3:1C:5E:0F:69:58:0D:36:54:CB:A5:E3:E6:F9","sha256":"74:2B:9E:A8:87:1C:98:DA:61:BF:3B:46:A9:98:6B:CA:C3:3E:03:0C:40:B8:5E:77:ED:50:9C:BA:76:DA:D8:B4"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: d-s.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1031\r\nOrigin: https://d-s.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/e/bfyfng6re0i6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://d-s.io\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXxBBayrSl771ipeyoTPbYuQ62ImrvRd8V0ExUOdAn%2F6XDTHobaSsiZ77eFtjSIjwia57xuw2Mg8TVNFaHqFy%2Fz%2Fkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 29 Aug 2025 16:27:20 GMT\r\nserver: cloudflare\r\ncf-ray: 976d6a4a9e1d5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15 HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6043\r\ncache-control: public, max-age=172800\r\nexpires: Fri, 28 Aug 2026 00:26:24 GMT\r\nlast-modified: Wed, 25 Jun 2025 06:25:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 144053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D02Q%2FEZK%2ByWUFXprgn5KoXyE%2FXNMx0IJL6M%2BfzNXrdtgtfjTu3DDxo4MkiTcFusdm9MybrZYy4VjVPuuvseZMz8YyYsJ47bv0BxXtY0o\"}]}\r\ncf-ray: 976d6a3b9e87568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24063)","md5":"c675495748ef0df6858b93dd9e623c46","sha1":"e1be723e4e25d37282821c50b7e12796d3df5f8d","sha256":"9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271","sha512":"1775ad0e5bc7d3cc9ebdd032b94e440a0872f616f983ff867511984daba748ed52e1de5c67f0e4648947bef65b499b3a6197ff7726cf1f481b7d4253b6711127","ssdeep":"384:nudkTa6bYaGQZKbZi1X5U59g+rzyPSS1SMVu8r2WiWQK7XYANWck6QDhC2k+0CMu:uv9gPSSbs8PwhCK0CMl+ArJwz","tlshash":"e6b2b609b13939be05f632baf25ecb0550f6448d9827f0f4a8b5c94ddad88d4102fbe6","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-04-04T12:49:15.189095Z","times_seen":3792,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d-s.io/e/bfyfng6re0i6","fqdn":"d-s.io","domain":"d-s.io","tld":"io"},"ip":{"addr":"104.26.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:17.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d-s.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 17:31:26 GMT","end":"Sun, 26 Oct 2025 18:31:21 GMT"},"fingerprint":{"sha1":"A5:9E:DD:39:BC:D0:D3:1C:5E:0F:69:58:0D:36:54:CB:A5:E3:E6:F9","sha256":"74:2B:9E:A8:87:1C:98:DA:61:BF:3B:46:A9:98:6B:CA:C3:3E:03:0C:40:B8:5E:77:ED:50:9C:BA:76:DA:D8:B4"}}},"request":{"raw":"GET /e/bfyfng6re0i6 HTTP/1.1\r\nHost: d-s.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vitaminkuofc.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nexpires: Thu, 28 Aug 2025 16:27:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2AsQOo4RtMdYKVvPGpp%2BUL7BpONPCm89j3%2F5cp5k%2BNgr0F%2BGaun%2FgEgfWBbGz9MyYpe8TBiiAvXUxL1SJDA8CeZfzw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=8,cfOrigin;dur=76\r\ncontent-encoding: br\r\nset-cookie: lang=1; HttpOnly; Path=/; Domain=d-s.io\r\ncf-ray: 976d6a3d59f1b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38309,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (38294)","md5":"24839a5f97c2ba0f5863965082e1fa28","sha1":"e3df8659b85031520db3d9204a351225aae1bfcf","sha256":"e4a7ecea993f0adf0a2dbc6ed05a1fbc8fc4c23e102085e14bcb335a4f895b46","sha512":"5b6b1d59ae900065913f1dc7946a1d290f3cc68eecf1a91efd6222d7f7ef81932fd6fb692de3976d43a66dc7d83872f1194d3cdec35a1751af087561240a10d4","ssdeep":"768:gsjVJT5ZGtGHW/9uzmZrennD2Thki88fZTq8KzsbU3+tIKbTw51iZwYy24OWkpRW:guVJTOrT2x+AdW3YVOW","tlshash":"f3034a913c50c3ba83f220cbb66fe755f0369149e745c884f25a7988bed9e8790376b4","first_seen":"2025-08-29T16:27:52.937315Z","last_seen":"2025-08-29T16:27:52.937315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":43,"dns":21,"connect":1,"send":0,"wait":90,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/4710d66e8fda/main.js?","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/4710d66e8fda/main.js? HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\nserver: cloudflare\r\ncf-ray: 976d6a400ece568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9994,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9994), with no line terminators","md5":"82d32f8d72c3a1640aa1ef00909b0003","sha1":"1338a6f396b9c3d9ff5249ba504cf219acc61cfb","sha256":"15442f52e99fdc64b6b90064f01825f7e476c0c3ab1fd1d879055aeb2b51f7f0","sha512":"a1adb6f5ebcbef9a95b1cb35be7fb0c1652c16a035fe4a3f7f451cde008fccd586346194dcc0c61e5c28e8368dd19ff64a57caf028d575d836bb686b46e8ae3d","ssdeep":"192:zfkIZJv+GrBMxat4wi84pWhd0LhDWUhYcxmgxDc+:oIWGdMxat4wi84ohd0LJWZgJBj","tlshash":"7d229ac7af096a28c33514e7201778d3310dbe9a50a4ac558524dfe8be7c374767be8a","first_seen":"2025-08-29T16:07:52.600216Z","last_seen":"2025-08-29T16:27:52.939831Z","times_seen":2,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 591\r\ncf-ray: 976d6a3fc99c568e-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec1-514\"\r\nlast-modified: Mon, 04 May 2020 16:11:45 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 33846\r\nexpires: Wed, 19 Aug 2026 16:27:18 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gkmlpDNdMsONZE0EqYDxtqBIwGWBy2ZqCnfGXd%2B%2BUfKvzpnJmXjmHjXZ0wgb5Tw7chBVFlmiwm8whJGtvc5VT7CWB1sMg9vL4VV0sDVqW2plF6bcGmjIRzp0wROuauVTNxIPuQTJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1266)","md5":"4412bf8023109ee9eb1f1f226d391329","sha1":"c273960aa874a87dd022b5e597887142f1b8e34f","sha256":"d40efcac911d8964f3728eaa767de281306ff55ba9377435a3364d4d1e1613f6","sha512":"de3dd553a582e6b3d00782ddd639cb57b29de71afe72af5abef870ab36c7fed68244d511a1e129a0f04af690f27ae9304b1c113c9f1f0e0bd85dde9291a6764c","ssdeep":"","tlshash":"212120987089b815521b9a35677f109bb078ab55d09c40a9c391e4e03f708820d72ef9","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-04T13:39:30.70796Z","times_seen":17748,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":4,"dns":5,"connect":1,"send":0,"wait":40,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y9.afcdn.net/library/91387/c04b347c00f66279bb6840c2002c369399740462.mp4","fqdn":"s3t3d2y9.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:20.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 13:12:21 GMT","end":"Sun, 28 Sep 2025 13:12:20 GMT"},"fingerprint":{"sha1":"86:FB:BA:4A:B6:BF:EC:BB:C9:E5:96:9C:6A:B2:8C:F6:67:7D:11:18","sha256":"0E:D1:2C:2E:A2:B0:0A:42:25:63:5F:7A:DA:F6:F6:CE:73:D9:D9:DF:0A:BB:A5:1C:F9:F0:9E:16:D9:B4:C5:43"}}},"request":{"raw":"GET /library/91387/c04b347c00f66279bb6840c2002c369399740462.mp4 HTTP/1.1\r\nHost: s3t3d2y9.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 29 Aug 2025 16:27:20 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 25921\r\nlast-modified: Mon, 14 Jul 2025 10:05:12 GMT\r\netag: \"6874d658-6541\"\r\nexpires: Tue, 25 Aug 2026 08:37:59 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBuUwJGwH3mLEFAAwBuUwKAQH3aQIAAAwBJRPCMQG3AAAAAA\r\nx-77-nzt-ray: fdb541233701a459e8d4b1684e3e8912\r\nx-77-cache: HIT\r\nx-77-age: 373144\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 0-25920/25921\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":25921,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"cd2d6519ecd1940e2a3a03b0768e08fa","sha1":"c04b347c00f66279bb6840c2002c369399740462","sha256":"2e70f737959e8654dc048220f6b376385494b18b9d5a89a73fbf05ef3a25ccb5","sha512":"df39e996e658d15ad2784b9d2b48cc61c394ba30b0ebd0e398efe330ef60edb6066f3ac0d61da1f329c69dfc5891000b30683ed1e817658d236ecacac0ddeb96","ssdeep":"384:6Bi4jkKs9bIixPzNsvZv1EzcO4w2p4EIsnsfjLGh0wqYzqsAP+iHIjJqf5:mtjC9UKSTEzpOpzIOejLSqsC+xj+5","tlshash":"46c2e1d27f56f1b9c10041378676678877410cc85876124bd21fa72829e758abfabd8d","first_seen":"2025-07-16T01:21:42.106234Z","last_seen":"2025-08-31T14:08:01.791795Z","times_seen":9,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":14,"receive":15,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6f282b42123bc56b657be14f83f\"\r\nexpires: Tue, 26 Aug 2025 13:20:45 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJCgH3awEAAAwBuUwKDAH3CQAAAAwBWd59LgG3AQAAAA\r\nx-77-nzt-ray: e2f75420608525e4e6d4b1680e3ce501\r\nx-77-cache: HIT\r\nx-77-age: 363\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":184613,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39230)","md5":"fa661caff825db74efa9f9db5fd0a638","sha1":"6f282b42123bc56b657be14f83f00515670ee53c","sha256":"b393a8a6770fb253edcb30c80131c280de39fb5ae1ae5f9b3b26387e2eac9659","sha512":"07af6b65b6ead8f8ff2eb4784260dd09c3fdd3fd57c41c6470480c1f856cc34f1b277b8febc254a51deb7aa9d2a3e5779de4647210af2e30d96e6968a91d46cb","ssdeep":"3072:Nms/jp28VOkqDG2Cjym8pw8GWqI9ggxIisGEolY4o/CXMDpo:Hp28VOkq6208pw8GMggXs7Vpo","tlshash":"0a045c982792303441d3e12d6aff53093371506ab90f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-08-05T17:03:18.278781Z","last_seen":"2025-10-03T12:03:07.883626Z","times_seen":539,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vitaminkuofc.com/wp-content/uploads/2025/08/IMG_20250820_104005.webp","fqdn":"vitaminkuofc.com","domain":"vitaminkuofc.com","tld":"com"},"ip":{"addr":"172.67.155.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vitaminkuofc.com/monotirou/","date":"2025-08-29T16:27:18.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vitaminkuofc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 09:53:56 GMT","end":"Wed, 15 Oct 2025 10:53:41 GMT"},"fingerprint":{"sha1":"2C:55:1E:8D:E1:10:76:8F:60:89:34:AD:C3:30:51:47:8D:0E:8F:E5","sha256":"C1:8C:66:17:0C:50:E2:DF:77:27:54:17:A0:4D:FC:3F:95:3F:86:DF:9A:6B:C0:BA:BD:8C:5D:7D:3D:64:39:6E"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/IMG_20250820_104005.webp HTTP/1.1\r\nHost: vitaminkuofc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vitaminkuofc.com/monotirou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22822\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 29 Aug 2026 16:27:18 GMT\r\nlast-modified: Thu, 21 Aug 2025 06:12:31 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BbYGinU8XrDro%2BPBCJ8u%2Bnmm19acKcDq5XO1opprAPZsEWF22Ny1HYQOASvtyjew3NQY5zmCejNXlmp7971GcTU2mJ2LSx%2BuhkqLYei5\"}]}\r\nvary: accept-encoding\r\ncf-ray: 976d6a3f0eb3568e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22822,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1240x930, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e80ee23ca53b2068dd500ab0ec985d65","sha1":"a238112969ab64c4d0be7a138527e893c05d91af","sha256":"20f9ea734e8beb8a535a9792c65cea6dda635cab912cbf6360b95aa134a0a1ed","sha512":"055875a79a2a3b34b9580c432c844451635eca257d0703a38e16fa422d6d6a732742a36b8e4c0398a093837c7903866437d6f17ba2f6750334b26b65b8a25ca7","ssdeep":"384:tFhuHiJsL4D5ZB2acMs/9o4HCX6HJuaA/yVgXj1fjmh1Pl19FzmBNc:tFgusLSf2aXM9o4iX6Hkzoa81Pl30Nc","tlshash":"97a2cf54a9760e87b60e7a3ed1927211f028c055378afdf3646bc03796974e22f243af","first_seen":"2025-08-29T16:27:52.945381Z","last_seen":"2025-08-29T16:27:52.945381Z","times_seen":1,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://d-s.io/e/bfyfng6re0i6","date":"2025-08-29T16:27:18.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d-s.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:27:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27958\r\ncf-ray: 976d6a3fd9b7568e-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb09ed3-15d84\"\r\nlast-modified: Mon, 04 May 2020 23:01:39 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 153324\r\nexpires: Wed, 19 Aug 2026 16:27:18 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=htvzyfCijwg401HUmQmTM6GMRFI0cjQRvOAzCNpnDyFnpcu2z2I%2Bes0muk3gIdo9yn58yWAKP8wOvH%2B%2F1QvncYxO6TXqPp4hgGksFjm8N32wCByhdli%2B1W8CYuCS3B44YoLXliNC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-04T13:46:00.042103Z","times_seen":217618,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":31,"receive":3,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}