{"report_id":"eedfefee-fc6f-40d5-bcd6-ed240b8daceb","version":6,"status":"done","tags":[],"date":"2025-12-12T01:42:54Z","url":{"schema":"http","addr":"subf2m.co/subtitles/odessa-2025/arabic/3594276","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"172.67.168.13","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"subf2m.co/subtitles/odessa-2025/arabic/3594276","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"title":"O'Dessa Arabic subtitle","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"subf2m.co/subtitles/odessa-2025/arabic/3594276","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"172.67.168.13","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-16T01:42:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"subf2m.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"subf2m.co","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-06-14","domain_rank":169605,"first_seen":"2025-08-27T16:40:27.592614Z","last_seen":"2025-11-19T04:13:20.912971Z","alert_count":12,"request_count":12,"received_data":258916,"sent_data":5693,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:3.2.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"isubcdn.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-28","domain_rank":543274,"first_seen":"2024-05-30T04:52:02Z","last_seen":"2025-12-04T02:21:01.304451Z","alert_count":0,"request_count":1,"received_data":203440,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-07T22:16:37.28363Z","alert_count":0,"request_count":1,"received_data":293,"sent_data":430,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"subf2m.co/subtitles/odessa-2025/arabic/3594276","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9036505156b7062182f6bbbc7c4a697","sha1":"a4725536d63f58cfb395bf961fc5ecc9f6878e6e","sha256":"f7ee58685fdf769e12eb4f5c8946f8e28ccb8411db299f778e81078d22905ad1","sha512":"982f03f5866dc082c861647f82ec487ac4302e5b08a3147bf7c6ccb4bedbf1a1e35c81a98fbe0f78c16af01db17baeca616165e7c6886601cea78980005de751","ssdeep":"","tlshash":"9db09228f1bca4e504fb311cfdb7672c7423b5067a4848c6421c7ab0395a7395a06849","size":120,"data":"","first_seen":"2025-10-26T23:49:46.941928Z","last_seen":"2026-06-05T05:53:42.383921Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/public/assets/js/tog.js","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81013151f9648e97a74852a9e464b930","sha1":"cce8e66a2ee49ab3f86d82fd67b959becbd03105","sha256":"4851eeab3850edd13e9ccf8c846d28ea8c69d09a0fa22bf5fb59af4c9d6760ff","sha512":"be27e87c6534758bbec60d1e6a393941102bf8e543ba025b7c02e0979587734a468de4a6afa655ee469b24cdbe119d9753baedd8519c1b07cbf3cf9ec58348a4","ssdeep":"","tlshash":"384192eff09f800cce9e6138283f470a78369c670954c668793c5ce4b8b5d282955a9f","size":1970,"data":"","first_seen":"2025-10-26T23:49:46.936165Z","last_seen":"2026-06-05T05:53:42.374376Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/public/assets/js/jquery-3.2.0.min.js","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4162c9d7e520a5de05001be6e741899","sha1":"0baf29230047c9cd896f14c59618c9948ea79451","sha256":"2405bdf4c255a4904671bcc4b97938033d39b3f5f20dd068985a8d94cde273e2","sha512":"b2e52d48f92a62615de4bb37d0dcfa6e30d7f9309c7c4ce115faa38a37dd820b1a159a3296f4e3fb6a1d073b21b344c2c18ad866141e0a01e024492771bd9855","ssdeep":"1536:+NhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4cAj2ll/ckaXEy6n15HZ+FhFcQDs:Axc2yjxAj2QA/kcQDU8Cuu","tlshash":"f883e6d9b2c670629b7730b850bf410bb17a98dab44c8c60f158d9d47db8a8d907bf2c","size":86596,"data":"","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-06-11T23:08:14.281965Z","times_seen":2523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/subtitles/odessa-2025/arabic/3594276","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e452ae04c69e72d9600e1f7a605527f1","sha1":"126478d5bae138bb50d2db1300d9456e3784cb1a","sha256":"2b162d15a7cedbd732415b5d85c82ebfce6ff9f8fadb9b6a1b500e7705a2abff","sha512":"b56f53d3019e20dc842504ed61d57205c6e2ca84af313f1b1a143977013afc5115db2a3bbd79546af6af6f921d41b220d1a2a0b99f7ea39a51b564a2ac8566be","ssdeep":"","tlshash":"4bc09bcd321a6c7155ff27408b7fb604b442336494d5ae31495963445e30e17e7d5954","size":153,"data":"","first_seen":"2025-10-26T23:49:46.943058Z","last_seen":"2026-06-05T05:53:42.384652Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/public/assets/js/jquery.scrollbar.min.js","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b958f1ebea7191578ea94a98825aa46b","sha1":"b3438c5297865851f6e05eed07fd3ccb4f3a2e2f","sha256":"8aa68371f310d31bd036986bb97b2ca278339eeb86972c0c191f36f434eafd99","sha512":"e4071a05451453f97148478472bb8e22086a0019d717c4d6a9d2035c167648d12dad31af0f8d3c5bf4a1b4a65fd093634147ce8910493fec8793a01bd9e170dd","ssdeep":"192:r8IV0ypsCdkWxdvuyineRMeNcsPNpvL4ibi0PRCP/b6UkiFiMNB:hVfpsCdkkmlWlZ4ibi0PAkiF7B","tlshash":"0342a65d6224747661ff30add11f074e1139a537b30b84d0a46fcdf86a28fb9625ae2c","size":13026,"data":"","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-06-11T23:35:36.939556Z","times_seen":977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"subf2m.co/public/assets/js/jquery-3.2.0.min.js","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://subf2m.co/subtitles/odessa-2025/arabic/3594276","date":"2025-12-12T01:42:32.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"subf2m.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 02:27:40 GMT","end":"Fri, 06 Feb 2026 03:25:01 GMT"},"fingerprint":{"sha1":"63:3A:5C:AD:2E:9D:AA:AA:4A:DF:DE:4D:CA:D3:05:1B:B8:B2:6B:96","sha256":"D4:F6:10:A1:EE:CE:64:24:C2:B9:39:7D:07:DC:01:3B:52:A0:CC:BA:C8:79:F7:18:8F:77:98:B0:EE:FF:79:43"}}},"request":{"raw":"GET /public/assets/js/jquery-3.2.0.min.js HTTP/1.1\r\nHost: subf2m.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://subf2m.co/subtitles/odessa-2025/arabic/3594276\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 12 Dec 2025 01:42:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 15 May 2024 10:20:29 GMT\r\nx-cache: unreachable\r\nx-ratelimit-limit: 300\r\nx-ratelimit-remaining: 294\r\nx-ratelimit-reset: 30\r\nage: 4757\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ebatVM3GYKwO%2BpWgQXfEUTr02jmzR%2B45pNq5%2BD9YQnQhcbCdxv26WgXnpTbu0ZhnEo9odKQ08b3BpAlf3ZCPRbvtFZEGxwU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ac986963d7eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86596,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"d4162c9d7e520a5de05001be6e741899","sha1":"0baf29230047c9cd896f14c59618c9948ea79451","sha256":"2405bdf4c255a4904671bcc4b97938033d39b3f5f20dd068985a8d94cde273e2","sha512":"b2e52d48f92a62615de4bb37d0dcfa6e30d7f9309c7c4ce115faa38a37dd820b1a159a3296f4e3fb6a1d073b21b344c2c18ad866141e0a01e024492771bd9855","ssdeep":"1536:+NhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4cAj2ll/ckaXEy6n15HZ+FhFcQDs:Axc2yjxAj2QA/kcQDU8Cuu","tlshash":"f883e6d9b2c670629b7730b850bf410bb17a98dab44c8c60f158d9d47db8a8d907bf2c","first_seen":"2023-03-07T12:01:55Z","last_seen":"2026-06-11T23:08:14.281965Z","times_seen":2523,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"subf2m.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/public/assets/js/tog.js","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://subf2m.co/subtitles/odessa-2025/arabic/3594276","date":"2025-12-12T01:42:32.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"subf2m.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 02:27:40 GMT","end":"Fri, 06 Feb 2026 03:25:01 GMT"},"fingerprint":{"sha1":"63:3A:5C:AD:2E:9D:AA:AA:4A:DF:DE:4D:CA:D3:05:1B:B8:B2:6B:96","sha256":"D4:F6:10:A1:EE:CE:64:24:C2:B9:39:7D:07:DC:01:3B:52:A0:CC:BA:C8:79:F7:18:8F:77:98:B0:EE:FF:79:43"}}},"request":{"raw":"GET /public/assets/js/tog.js HTTP/1.1\r\nHost: subf2m.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://subf2m.co/subtitles/odessa-2025/arabic/3594276\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 12 Dec 2025 01:42:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 15 May 2024 10:20:29 GMT\r\nx-cache: unreachable\r\nx-ratelimit-limit: 300\r\nx-ratelimit-remaining: 298\r\nx-ratelimit-reset: 31\r\nage: 4757\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZAxWTN0FcRTR6RdJZmmqGFQyQhMfRvhtI0WYwhCXUJfn9AztnBoziIRX9tXd3r16qSm1xPtQQz7SOlicz56lb7%2FtWvI4nI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ac986963d80b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1970,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"81013151f9648e97a74852a9e464b930","sha1":"cce8e66a2ee49ab3f86d82fd67b959becbd03105","sha256":"4851eeab3850edd13e9ccf8c846d28ea8c69d09a0fa22bf5fb59af4c9d6760ff","sha512":"be27e87c6534758bbec60d1e6a393941102bf8e543ba025b7c02e0979587734a468de4a6afa655ee469b24cdbe119d9753baedd8519c1b07cbf3cf9ec58348a4","ssdeep":"","tlshash":"384192eff09f800cce9e6138283f470a78369c670954c668793c5ce4b8b5d282955a9f","first_seen":"2025-10-26T23:49:46.936165Z","last_seen":"2026-06-05T05:53:42.374376Z","times_seen":18,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"subf2m.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"isubcdn.com/public/2025/79/11/3e0b2061-4758-4019-933a-ef46173d279d.jpg","fqdn":"isubcdn.com","domain":"isubcdn.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://subf2m.co/subtitles/odessa-2025/arabic/3594276","date":"2025-12-12T01:42:32.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"isubcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 18:59:10 GMT","end":"Mon, 09 Feb 2026 19:57:53 GMT"},"fingerprint":{"sha1":"4F:EB:78:15:BF:82:A0:8C:F4:30:10:52:44:89:7B:03:74:69:DA:B3","sha256":"13:AD:A4:08:F2:EE:8A:50:29:30:3C:B8:15:04:97:4C:84:6E:EE:61:E0:BE:A9:67:85:DB:44:59:37:19:3B:1C"}}},"request":{"raw":"GET /public/2025/79/11/3e0b2061-4758-4019-933a-ef46173d279d.jpg HTTP/1.1\r\nHost: isubcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://subf2m.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 12 Dec 2025 01:42:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 202414\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"d68dc8309dc2cc6ca28156c8b70bee18\"\r\nlast-modified: Thu, 20 Mar 2025 07:39:07 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-id-2: 7987905dee74cdeb212432486a178e511309594cee7cb75f892cd53e35f09ea4\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: 1880544F243962DC\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-amz-version-id: aafe05ca-e8de-4c1f-8932-641092d441b2\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2FQp%2BqCiMGDHKXm%2FXCZfPikMIwj%2BwExP2COjhseT8EUacVFbuLFIVdnTSj5qL4v3rd6j5xat4XbNvvZ8KSk4P5jsDBxXqfJN2ZYE\"}]}\r\ncf-ray: 9ac986968f764e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":202414,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x900, components 3","md5":"d68dc8309dc2cc6ca28156c8b70bee18","sha1":"4e991375700dc3e981a66dc50b0c64d6b4c4a9fc","sha256":"3369c83355c84c3b6fb037b18e62ad5e60c882e2d6bd42b33eea153bcfb88bdb","sha512":"48ac29ab5a18b9157be62d228a1efdd8b5785ae1cc39dbae55bfb1a8451971d8b594a6cdd1365762c75e62773f8134bd7b9b5f74cf87d71e5cbe99fe93670b81","ssdeep":"3072:bCgwMVfSa/6MVNDTw+PkTqzFZwBUwFyR3w2sUFN3O0wfIwLEQBZytyP8ptj:egwMVfdSgTw+sezjML2sUwxLEaZyEQh","tlshash":"301412f1e98c6a542e7e591780b48cbe3041d9621cb137396ff394e2900fe1ad25a7bd","first_seen":"2025-12-12T01:42:56.194983Z","last_seen":"2026-06-03T06:35:33.178603Z","times_seen":3,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":35,"dns":21,"connect":1,"send":0,"wait":125,"receive":174,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/public/assets/fonts/IRANSansWeb_Light.woff2","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://subf2m.co/subtitles/odessa-2025/arabic/3594276","date":"2025-12-12T01:42:32.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"subf2m.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 02:27:40 GMT","end":"Fri, 06 Feb 2026 03:25:01 GMT"},"fingerprint":{"sha1":"63:3A:5C:AD:2E:9D:AA:AA:4A:DF:DE:4D:CA:D3:05:1B:B8:B2:6B:96","sha256":"D4:F6:10:A1:EE:CE:64:24:C2:B9:39:7D:07:DC:01:3B:52:A0:CC:BA:C8:79:F7:18:8F:77:98:B0:EE:FF:79:43"}}},"request":{"raw":"GET /public/assets/fonts/IRANSansWeb_Light.woff2 HTTP/1.1\r\nHost: subf2m.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://subf2m.co/public/assets/css/abc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 12 Dec 2025 01:42:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32496\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 15 May 2024 10:20:29 GMT\r\nx-cache: unreachable\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYc8p%2Ff9Q00PSz9PvJeCc%2FBQsJllF6kIX%2BMCCrkBhaWQGWnCkQ6uccijQ%2FMeJU2f6JpQUDkllBa1csc68BRhhvNJugBvwu0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ac986973dcdb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32496, version 4.0","md5":"3ed3f94e5f485aef5592b69517774655","sha1":"7ac5fcde08d451c2315f9d64a698d62bdf8df490","sha256":"6a856ac58fc2da1724b7c3223a4d64e2f597b9a02b893797c2ec5ecba5ff30fa","sha512":"dc669f401e1a9d8422b7063220d3bc1511ee9572d63c566467c64e3f833c98b0f7702411a598c75a5584fac67547c480de4cdc347b3f24a7c890000e574d8fe0","ssdeep":"768:TfDLe1MKjX6Hqj2GV3QBu2jyu46qI95bSWwrASy73ZA+Orx+:ze1Hlj2GVAmOBzxwrAbhQx+","tlshash":"fce2f13d00ee627fc04d29ea25d6a020094c9a4138aa85b878cfa6d5f96465b7d81f7f","first_seen":"2023-05-23T02:55:37Z","last_seen":"2026-06-05T05:53:42.373369Z","times_seen":31,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"subf2m.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/favicon.ico","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://subf2m.co/subtitles/odessa-2025/arabic/3594276","date":"2025-12-12T01:42:33.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"subf2m.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 02:27:40 GMT","end":"Fri, 06 Feb 2026 03:25:01 GMT"},"fingerprint":{"sha1":"63:3A:5C:AD:2E:9D:AA:AA:4A:DF:DE:4D:CA:D3:05:1B:B8:B2:6B:96","sha256":"D4:F6:10:A1:EE:CE:64:24:C2:B9:39:7D:07:DC:01:3B:52:A0:CC:BA:C8:79:F7:18:8F:77:98:B0:EE:FF:79:43"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: subf2m.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://subf2m.co/subtitles/odessa-2025/arabic/3594276\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 12 Dec 2025 01:42:33 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 23 May 2024 14:08:44 GMT\r\nx-cache: unreachable\r\nx-ratelimit-limit: 300\r\nx-ratelimit-remaining: 299\r\nx-ratelimit-reset: 30\r\nage: 4757\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fZQ5hUJ1WBS%2Ft3nXffI4KXxDtflp1Vm0eP%2BIO4jU1MG2JAGOPwbrkH6f80Nrxq%2BZyNLkCePYIWuj964IN%2BgQi9lSMXMBbd4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ac986988e3cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2462,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 24x24, 32 bits/pixel","md5":"bb53b83877ef7a70bdc4c32498313340","sha1":"09ee67aa8fa022ba0ae76f7069a41d9dc57c5f3e","sha256":"23c890a76a97cd145d4f42e64d57d45aabeaf42a7b9204f8a734267d37158f28","sha512":"f6b874f065170370d9096226c32d59a54ec8c359498a33ffbf2a64d0184e0a5461be7b6046bbbe498fc8036de736589900ffc30b560297d0a80d1f036c338c6a","ssdeep":"","tlshash":"0b51baa19a1126ebd15b043040359bad8eb26659d01cc04dfbc6ae137db66c3303cea7","first_seen":"2025-10-26T23:49:46.932646Z","last_seen":"2026-06-05T05:53:42.3666Z","times_seen":18,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"subf2m.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/public/assets/css/jquery.scrollbar.css","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://subf2m.co/subtitles/odessa-2025/arabic/3594276","date":"2025-12-12T01:42:32.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"subf2m.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 02:27:40 GMT","end":"Fri, 06 Feb 2026 03:25:01 GMT"},"fingerprint":{"sha1":"63:3A:5C:AD:2E:9D:AA:AA:4A:DF:DE:4D:CA:D3:05:1B:B8:B2:6B:96","sha256":"D4:F6:10:A1:EE:CE:64:24:C2:B9:39:7D:07:DC:01:3B:52:A0:CC:BA:C8:79:F7:18:8F:77:98:B0:EE:FF:79:43"}}},"request":{"raw":"GET /public/assets/css/jquery.scrollbar.css HTTP/1.1\r\nHost: subf2m.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://subf2m.co/subtitles/odessa-2025/arabic/3594276\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 12 Dec 2025 01:42:32 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 15 May 2024 10:20:29 GMT\r\nx-cache: unreachable\r\nx-ratelimit-limit: 300\r\nx-ratelimit-remaining: 299\r\nx-ratelimit-reset: 30\r\nage: 4757\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zE7wxWa1AgeOOJLJA7ci6y7zY0cTyuLlN6ORhC8xFL60%2FSDeWesIsFcrHZzB6Uh%2FCPJkIEtKUSI55fEHnQt91upDKlEAg9o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ac986963d7cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22152,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (680)","md5":"f72b188c4c48c383a98b66425ac29ac6","sha1":"e1af299a9394cbdc82b431100572c6833cc88e7d","sha256":"d472b920bc1ca19b4d5fc2733fdda81e5ae59c3ea7b2e9be332bf14ebc69835f","sha512":"ca0de8957039683b7df2a236c4594987cc135adc47f60fcfd6c484934debd18e778a18dc3469adfed8109a5e8d263afa88127686e727eba04f62bb502efa723c","ssdeep":"192:7Mry5l2CJypW8hZITARRSE76RSB31OpY6o5tnh5QbdiFZFodBSaRDtgtA8tnnJow:7MUZJ6ImRSvRSyzjdiFZFaRDtGR","tlshash":"77a2989626f41a1430efd057e993b3ae72192543b30ec8d4d6e47d78792dfb8319ae80","first_seen":"2023-05-22T01:05:19Z","last_seen":"2026-06-06T05:23:52.996667Z","times_seen":122,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"subf2m.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/public/assets/css/abc.css","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://subf2m.co/subtitles/odessa-2025/arabic/3594276","date":"2025-12-12T01:42:32.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"subf2m.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 02:27:40 GMT","end":"Fri, 06 Feb 2026 03:25:01 GMT"},"fingerprint":{"sha1":"63:3A:5C:AD:2E:9D:AA:AA:4A:DF:DE:4D:CA:D3:05:1B:B8:B2:6B:96","sha256":"D4:F6:10:A1:EE:CE:64:24:C2:B9:39:7D:07:DC:01:3B:52:A0:CC:BA:C8:79:F7:18:8F:77:98:B0:EE:FF:79:43"}}},"request":{"raw":"GET /public/assets/css/abc.css HTTP/1.1\r\nHost: subf2m.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://subf2m.co/subtitles/odessa-2025/arabic/3594276\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 12 Dec 2025 01:42:32 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 15 May 2024 10:20:29 GMT\r\nx-cache: unreachable\r\nx-ratelimit-limit: 300\r\nx-ratelimit-remaining: 299\r\nx-ratelimit-reset: 30\r\nage: 4757\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e6nCYT9RDGvF3lCL%2BgA9RIAJvKZ6D0AB%2FcrhyWf%2FxbbtSLzQlxH%2FYcWpWVvrb%2BcKTIiiF9WS1KA%2BPq7ufAZxSi9QHmnDZPo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ac986963d7bb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57167,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2323), with CRLF line terminators","md5":"4ad78f57b22167fb903e1215f845b7f1","sha1":"2aca71aea0821ac1e399f9d1c640bfa8f253e14e","sha256":"d581ffb5dbd51b01b7324133409144d607a2603fca0cc5b0f4575b1350c9f494","sha512":"8af2a306515ae4d1e4bfb23a404731f8479875065f87329907d6923390993fbfe05849de5970b0bac3e32abe656732c66d5ef720b36ae1f6983df635c3e4ff2d","ssdeep":"1536:FCUOpq99HhhDqdAXxxxcTpRloitCOBJC8H:tOpq99HrhAoitCOBJC8H","tlshash":"91439425eea1314cb326aaeaf7f05f909f1d40e29e4f49bdf4a4397ca34385834612d5","first_seen":"2025-10-26T23:49:46.933566Z","last_seen":"2026-06-05T05:53:42.380856Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"subf2m.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/public/assets/js/jquery.scrollbar.min.js","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://subf2m.co/subtitles/odessa-2025/arabic/3594276","date":"2025-12-12T01:42:32.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"subf2m.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 02:27:40 GMT","end":"Fri, 06 Feb 2026 03:25:01 GMT"},"fingerprint":{"sha1":"63:3A:5C:AD:2E:9D:AA:AA:4A:DF:DE:4D:CA:D3:05:1B:B8:B2:6B:96","sha256":"D4:F6:10:A1:EE:CE:64:24:C2:B9:39:7D:07:DC:01:3B:52:A0:CC:BA:C8:79:F7:18:8F:77:98:B0:EE:FF:79:43"}}},"request":{"raw":"GET /public/assets/js/jquery.scrollbar.min.js HTTP/1.1\r\nHost: subf2m.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://subf2m.co/subtitles/odessa-2025/arabic/3594276\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 12 Dec 2025 01:42:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 15 May 2024 10:20:29 GMT\r\nx-cache: unreachable\r\nage: 4757\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=llrhH4q4puK0YvysOS5DKV7o4nYezMZGWqphUHojM9CboTRHD29Kx6c9c3grVXzHMqok9Ij0auabT5fBiBkE2%2FkT7m1Qm2E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ac986963d7fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13026,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12657)","md5":"b958f1ebea7191578ea94a98825aa46b","sha1":"b3438c5297865851f6e05eed07fd3ccb4f3a2e2f","sha256":"8aa68371f310d31bd036986bb97b2ca278339eeb86972c0c191f36f434eafd99","sha512":"e4071a05451453f97148478472bb8e22086a0019d717c4d6a9d2035c167648d12dad31af0f8d3c5bf4a1b4a65fd093634147ce8910493fec8793a01bd9e170dd","ssdeep":"192:r8IV0ypsCdkWxdvuyineRMeNcsPNpvL4ibi0PRCP/b6UkiFiMNB:hVfpsCdkkmlWlZ4ibi0PAkiF7B","tlshash":"0342a65d6224747661ff30add11f074e1139a537b30b84d0a46fcdf86a28fb9625ae2c","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-06-11T23:35:36.939556Z","times_seen":977,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"subf2m.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/public/assets/app.js?ver=3","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://subf2m.co/subtitles/odessa-2025/arabic/3594276","date":"2025-12-12T01:42:32.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"subf2m.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 02:27:40 GMT","end":"Fri, 06 Feb 2026 03:25:01 GMT"},"fingerprint":{"sha1":"63:3A:5C:AD:2E:9D:AA:AA:4A:DF:DE:4D:CA:D3:05:1B:B8:B2:6B:96","sha256":"D4:F6:10:A1:EE:CE:64:24:C2:B9:39:7D:07:DC:01:3B:52:A0:CC:BA:C8:79:F7:18:8F:77:98:B0:EE:FF:79:43"}}},"request":{"raw":"GET /public/assets/app.js?ver=3 HTTP/1.1\r\nHost: subf2m.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://subf2m.co/subtitles/odessa-2025/arabic/3594276\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 12 Dec 2025 01:42:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 10 Jun 2024 04:08:53 GMT\r\nx-cache: unreachable\r\nage: 4757\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uj90qR2PwZLhPLzcbe7TuR6Mzoq1SfBDBHc6HLydkjBFMOVmehewX41UJ1hSpNVW0OJsQ1vfw2QvumUB98jcIDmfNYoah18%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ac986963d81b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"subf2m.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XQB0QGX65V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://subf2m.co/subtitles/odessa-2025/arabic/3594276","date":"2025-12-12T01:42:32.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-XQB0QGX65V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://subf2m.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 12 Dec 2025 01:42:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Google Tag Manager\r\ncontent-length: 1584\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T01:48:45.160697Z","times_seen":16340841,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":59,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/public/assets/img/back.jpg","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://subf2m.co/subtitles/odessa-2025/arabic/3594276","date":"2025-12-12T01:42:32.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"subf2m.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 02:27:40 GMT","end":"Fri, 06 Feb 2026 03:25:01 GMT"},"fingerprint":{"sha1":"63:3A:5C:AD:2E:9D:AA:AA:4A:DF:DE:4D:CA:D3:05:1B:B8:B2:6B:96","sha256":"D4:F6:10:A1:EE:CE:64:24:C2:B9:39:7D:07:DC:01:3B:52:A0:CC:BA:C8:79:F7:18:8F:77:98:B0:EE:FF:79:43"}}},"request":{"raw":"GET /public/assets/img/back.jpg HTTP/1.1\r\nHost: subf2m.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://subf2m.co/public/assets/css/abc.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 12 Dec 2025 01:42:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18999\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 15 May 2024 10:20:29 GMT\r\nx-cache: unreachable\r\nage: 4757\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZgSn%2B2h9P5Fqot%2FcVYiP2ZlXXFb77NVAqdZFfbhzO%2FByrjktxcqSh72ko0SZgJ4l1QjM%2ByGtaWhP0qX2LwwMydqrnllr2g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ac98696bda8b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18999,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 420x326, components 3","md5":"ad34f82448a7a5fe37571afee7fda0a5","sha1":"1a1f8fba99fdf2d2bae9ecc2d4a0ce140e22cc92","sha256":"1517a9b9d5476d484df7bb748b946f0c02ea7f9daae526e6ef3d0d9b7b27ae67","sha512":"eb03bbea59cc5d1601ffdfaff08670677144bee295798893c283748f8941c1b5c146111aec3b6453b529bbbac829e3762d4d12c647647479536256d27c354027","ssdeep":"384:EF2iKb4rr9gfK8DVv09N6IYSIYjXaD+wulllPl9RbnVh:EFUbFfKCh0n6I3IMQ+rllltvbVh","tlshash":"2082ae8ce9d0bbdcf360c0bca8d4fd9739d2541642615ba538dec958ec487e2087be66","first_seen":"2025-10-26T23:49:46.938268Z","last_seen":"2026-06-05T05:53:42.372027Z","times_seen":18,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"subf2m.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/public/assets/img/logo.png","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://subf2m.co/subtitles/odessa-2025/arabic/3594276","date":"2025-12-12T01:42:32.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"subf2m.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 02:27:40 GMT","end":"Fri, 06 Feb 2026 03:25:01 GMT"},"fingerprint":{"sha1":"63:3A:5C:AD:2E:9D:AA:AA:4A:DF:DE:4D:CA:D3:05:1B:B8:B2:6B:96","sha256":"D4:F6:10:A1:EE:CE:64:24:C2:B9:39:7D:07:DC:01:3B:52:A0:CC:BA:C8:79:F7:18:8F:77:98:B0:EE:FF:79:43"}}},"request":{"raw":"GET /public/assets/img/logo.png HTTP/1.1\r\nHost: subf2m.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://subf2m.co/public/assets/css/abc.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 12 Dec 2025 01:42:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 4149\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 15 May 2024 10:20:29 GMT\r\nx-cache: unreachable\r\nage: 4757\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8nOjv1ecWRgbpYQyZtLJxHurDkvxMVOBsQ2uoY%2FaMuC1MJnKnliHDncnTxdOVs7UvTUUHZB1FMiE8klHC1wf%2FY4mLyNtohk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ac986973dcab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 151 x 87, 8-bit/color RGBA, non-interlaced","md5":"dab9093cba0ae6e0cb40ac1c348948e9","sha1":"0311f208d12c48bd7ff58c5911ddce561c3e44a5","sha256":"726b7be377189af5055ff450274196f0d151ce21bee6601ab9cc6ae99a433207","sha512":"658501b4980f83c64b998c7b05c19e0a21729e9d6d28134da5fbdd3cd1fae7dfbf3d5e5969f89ae32cc132dff50f23a293be381f39287fe19e6d7dd295657eff","ssdeep":"96:b26oNjdcoqDe7//8+rx93aBNzmGKSJSFUGe4qpPwpg4vuDIGoa6Q:pej/VF938QG4FPW6ptvdGZx","tlshash":"9b814b1dfc40b1b0161e36812dfbb0161b2a46a8ded4f1e539cec87119300abaad56db","first_seen":"2025-10-26T23:49:46.92886Z","last_seen":"2026-06-05T05:53:42.370838Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"subf2m.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/public/assets/img/icon-hearing-impaired-white.png","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://subf2m.co/subtitles/odessa-2025/arabic/3594276","date":"2025-12-12T01:42:32.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"subf2m.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 02:27:40 GMT","end":"Fri, 06 Feb 2026 03:25:01 GMT"},"fingerprint":{"sha1":"63:3A:5C:AD:2E:9D:AA:AA:4A:DF:DE:4D:CA:D3:05:1B:B8:B2:6B:96","sha256":"D4:F6:10:A1:EE:CE:64:24:C2:B9:39:7D:07:DC:01:3B:52:A0:CC:BA:C8:79:F7:18:8F:77:98:B0:EE:FF:79:43"}}},"request":{"raw":"GET /public/assets/img/icon-hearing-impaired-white.png HTTP/1.1\r\nHost: subf2m.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://subf2m.co/public/assets/css/abc.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 12 Dec 2025 01:42:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 1169\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 15 May 2024 10:20:29 GMT\r\nx-cache: unreachable\r\nage: 4715\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPHAEPHpBgulODtR0EsD6W6WIZntBYKHm3D2Pder0WaXpA5KHOrAqRvsmCJMrkDPhDX71jHkkc0VRo0e%2FkQsNZRd%2F0gQ4xs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ac986973dccb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 13, 8-bit/color RGBA, non-interlaced","md5":"d2ddca2e3360da9761878146ec23b62b","sha1":"6eea4ab8dca55420c176786aa246f6851bbb0d60","sha256":"63bf6c9d1932de06de222c0d962df661a04fe7a49dc099087e88d5697f7eba62","sha512":"a43333adea8be21ee2dcf511d0c13810b39f1f286849403bff6487dd25668c278a88e9dd9d95ee5758aa5a779b777adc1e37c1443250bb7036b9f35ae86b2ad8","ssdeep":"","tlshash":"ec21418cbb415d8082add95049eb5113ac368a90aaf0f4fb7bcbe50348985f589999cb","first_seen":"2025-11-19T04:13:21.879638Z","last_seen":"2026-06-03T06:35:33.187848Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"subf2m.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"subf2m.co/subtitles/odessa-2025/arabic/3594276","fqdn":"subf2m.co","domain":"subf2m.co","tld":"co"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-12T01:42:32.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"subf2m.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 02:27:40 GMT","end":"Fri, 06 Feb 2026 03:25:01 GMT"},"fingerprint":{"sha1":"63:3A:5C:AD:2E:9D:AA:AA:4A:DF:DE:4D:CA:D3:05:1B:B8:B2:6B:96","sha256":"D4:F6:10:A1:EE:CE:64:24:C2:B9:39:7D:07:DC:01:3B:52:A0:CC:BA:C8:79:F7:18:8F:77:98:B0:EE:FF:79:43"}}},"request":{"raw":"GET /subtitles/odessa-2025/arabic/3594276 HTTP/1.1\r\nHost: subf2m.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 12 Dec 2025 01:42:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=348\r\nx-cache: hit\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9aH4AnWCZ9IR2YofCQE173SzXH%2BqGIxkqJtE7zK8wceekBalf5GNDgLc8ToZRiZUeoNrWTP3DDBwJig2UUrWHAxr87qkSAs%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ac986944b4a7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.2.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":10233,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"553991f3b54e568dce257bca70de01bd","sha1":"4a15b0cf24a8d3bfdf333df0c1aac96647191048","sha256":"6e124e36730f47b07179f6025caea90c07d254cf23ccdbbbfc5ffff67c181623","sha512":"17f9c77bfba0afeecd910a2d45101082a3cc599aa4b7e5c4718434e25a23710449b0b7dcb15accf7f7f52005e31426205ec720493f13abe40d2b64b15cdd7d94","ssdeep":"192:oaEyNn2cqNeBk+RASkIh3MuX2OOjCOsYXxyzIuDVFiJCsgRMncO2u:oaMIG++1enX2OOjCOsYXUUrJCsgM2u","tlshash":"d422630049a82e7a015152e21865675fd04fde3bea77cc60b2bf46316fc3e81ec2a3b5","first_seen":"2025-12-12T01:42:56.204658Z","last_seen":"2025-12-12T01:42:56.204658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":28,"dns":8,"connect":1,"send":0,"wait":93,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-12","alert":"Sinkholed","trigger":"subf2m.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}